Re: Best way to descrypt/inspect SIP TLSv1.3 traffic

You can export SSLKEYLOGFILE variable. Save encryptions keys, record pcap.
Then inject encryption keys into pcap using editcap utility.
That is all.

More details at
https://github.com/openssl/openssl/issues/22660
https://www.youtube.com/watch?v=CMbehohHj7c

Also related.
https://github.com/kamailio/kamailio/pull/4339
dss

On Tue, Feb 10, 2026 at 8:44 PM Ovidiu Sas via sr-users <
[email protected]> wrote:

> For easy troubleshooting you can use sngrep:
>
> https://voipembedded.wordpress.com/2021/03/22/troubleshooting-kamailio-encrypted-sip-traffic/
>
> Note: you don’t really need to setup the .sngrephep2rc file anymore.
>
> -ovidiu
>
> On Tue, Feb 10, 2026 at 12:44 Benedito Marques via sr-users <
> [email protected]> wrote:
>
>> Thanks.
>>
>> On Tue, Feb 10, 2026 at 1:51 PM Daniel-Constantin Mierla <
>> [email protected]> wrote:
>>
>>> Hello,
>>> On 10.02.26 13:56, Benedito Marques via sr-users wrote:
>>>
>>> Hello everyone!
>>>
>>> Currently, what is the best way/approach to generate pcap files with
>>> decrypted SIP TLS traffic when using Kamailio (besides HEP or plain text
>>> files generated by sipdump)?
>>>
>>> the sipdump can generate pcap files as well, if you set mode value 4.
>>> Just that in the pcap the sip message look like being received over UDP,
>>> however the sip headers can indicate the real protocol (and with mode value
>>> 8 you get a meta-info header making it clear what was the transport
>>> protocol). You can view the pcap in the wireshark or sngrep just fine.
>>>
>>> Cheers,
>>> Daniel
>>>
>>> --
>>> Daniel-Constantin Mierla (@ asipto.com)twitter.com/miconda -- linkedin.com/in/miconda
>>> Kamailio Consultancy, Training and Development Services -- asipto.com
>>> Kamailio World Conference, May 7-8, 2026 - Berlin, Germany -- kamailioworld.com
>>>
>>>
>>
>> --
>>
>> Att,
>> Benedito Marques
>> __________________________________________________________
>> Kamailio - Users Mailing List - Non Commercial Discussions --
>> [email protected]
>> To unsubscribe send an email to [email protected]
>> Important: keep the mailing list in the recipients, do not reply only to
>> the sender!
>>
> __________________________________________________________
> Kamailio - Users Mailing List - Non Commercial Discussions --
> [email protected]
> To unsubscribe send an email to [email protected]
> Important: keep the mailing list in the recipients, do not reply only to
> the sender!
>

__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions -- [email protected]
To unsubscribe send an email to [email protected]
Important: keep the mailing list in the recipients, do not reply only to the sender!