Skip to content
SPECIFICTION
Get listed

sipmon

github.com

LinuxSelf-hosted
Visit github.com
Spec score 6.9 #18 of 21 in VoIP Monitoring Software

What it is

sipmon is a free, open-source Linux tool for passively monitoring SIP signaling and RTP media quality. It runs as a standalone Rust executable and does not require a running PBX. You can feed it live interface captures, pcap or pcapng files, tcpdump output from standard input, or recorded event logs. Calls and SIP transactions are correlated by Call-ID, with SIP-over-TCP reassembly supported. Reports include RFC3550 jitter and packet loss, RTCP round-trip time, one-way delay estimates, and estimated E-model MOS. More than 20 diagnostic rules address Contact reachability, Record-Route, SDP/RTP consistency, one-way media, and TURN allocation or refresh. sipmon can learn TURN servers and identify client and peer relay legs. Its terminal interface has overview, call, statistics, stream, event, and IP pages. JSONL export and Call-ID queries support scripting. Raw RTP payload is not stored.

Spec sheet

Purpose
sipmon is a passive SIP/RTP signaling and media quality monitor that runs as a standalone Rust executable without depending on a running PBX.Read 8 Oct 2026 · github.com
Deployment
The README describes deployment on a mirrored port or packet-capture box, with live, record, replay, and headless modes.Read 8 Oct 2026 · github.com
Integrations
The README documents piping a live tcpdump capture into sipmon and describes capture setups involving Kamailio and rtpengine.Read 4 Oct 2026 · github.com
Support
The maker's site lists [email protected] as a contact email.Read 8 Oct 2026 · miuda.ai
Maker
The repository links to miuda.ai, whose linked About page says the company was founded by a team of telecommunications and AI experts; it does not state a founding year or headquarters.Read 8 Oct 2026 · miuda.ai
Call analysis
It correlates SIP transactions and calls by Call-ID and supports SIP-over-TCP reassembly.Read 8 Oct 2026 · github.com
Capture caveat
On busy relay hosts capture competes with rtpengine for CPU; the README recommends filtering traffic or using a dedicated mirrored capture box at high packet rates.Read 4 Oct 2026 · github.com
Capture inputs
It can analyze live interfaces, offline pcap/pcapng files, tcpdump streams from stdin, and recorded event logs.Read 8 Oct 2026 · github.com
Diagnostics
The project describes 20+ diagnostic rules covering Contact reachability, Record-Route, SDP/RTP consistency, one-way media, and TURN allocation or refresh.Read 8 Oct 2026 · github.com
Integration
The README documents capturing Kamailio SIP and rtpengine media together, including a topology where SIP is mirrored to the rtpengine host.Read 8 Oct 2026 · github.com
Interface and exports
It provides a terminal UI with Overview, Call Detail, SIP Stats, Streams, Event Log, and IP Stats pages, plus JSONL exports and Call-ID queries.Read 4 Oct 2026 · github.com
Interfaces and exports
It provides a terminal UI, JSONL exports, and a query command that retrieves a Call-ID flow for scripting.Read 8 Oct 2026 · github.com
Linux binaries
Prebuilt static Linux binaries are offered for x86_64 and aarch64, and the README also gives a Cargo installation option.Read 8 Oct 2026 · github.com
Linux downloads
The README says prebuilt static binaries are available for Linux x86_64 and aarch64, with installation from GitHub Releases or Cargo.Read 4 Oct 2026 · github.com
Media metrics
It reports RFC3550 jitter and loss, RTCP receiver-report RTT, estimated one-way delay, and estimated E-model MOS.Read 8 Oct 2026 · github.com
Packet data
The event log stores analysis summaries and truncated raw SIP messages, and the README says raw RTP payload is not stored.Read 8 Oct 2026 · github.com
Privacy and storage
The event log stores analysis summaries and truncated raw SIP messages, and the README states that raw RTP payload is not stored.Read 4 Oct 2026 · github.com
SIP analysis
It correlates SIP calls and transactions by Call-ID and supports SIP-over-TCP reassembly.Read 4 Oct 2026 · github.com
Storage limits
The documented defaults include a 100,000-call memory cap, a 15-minute call TTL, and 50,000-entry caps for RTP streams and diagnostics.Read 8 Oct 2026 · github.com
TURN support
sipmon can automatically learn TURN servers and label turn-client and turn-peer relay legs.Read 8 Oct 2026 · github.com

Strong points and limits

Strong points

  • Free and open source
  • Measures jitter, loss, delay, and MOS
  • Supports live, offline, and stdin captures
  • More than 20 diagnostic rules
  • JSONL export and Call-ID queries

Limits

  • Linux and self-hosted only
  • Capture can compete with rtpengine CPU
  • 100,000-call memory cap
  • No synthetic call tests

Who it suits

It suits Linux operators investigating SIP and RTP behavior from live or recorded captures. Self-hosted deployments, mirrored capture ports, and headless or replay workflows are documented.

Verdict

sipmon combines signaling correlation, media measurements, diagnostics, and terminal reporting in one Linux executable. Its documented capture limits and CPU caveat matter for busy relay hosts.

Where Specifiction places it

Alternatives to sipmonAll alternatives →