Check out voipmonitor.org if you're interested in persistent capture. The sniffer is open source, the GUI is commercial. Depending on your configuration, you might need to LD_PRELOAD their module to capture the keys.
On Wed, Feb 11, 2026, 9:34 AM Benedito Marques via sr-users < [email protected]> wrote: > Thanks Sergey. > > From what I've noticed, SSLKEYLOGFILE works just for clients (chrome > as webrtc client for example), not for kamailio process itself. My kamailio > scenario, it is an sip proxy that connects an Carrier to another pbx, so no > clients like chrome are used. The tip about "mode" param in sipdump module > to generate .pcap files was an good option for that. > > > On Wed, Feb 11, 2026 at 3:03 AM Sergey Safarov via sr-users < > [email protected]> wrote: > >> You can export SSLKEYLOGFILE variable. Save encryptions keys, record pcap. >> Then inject encryption keys into pcap using editcap utility. >> That is all. >> >> More details at >> https://github.com/openssl/openssl/issues/22660 >> https://www.youtube.com/watch?v=CMbehohHj7c >> >> Also related. >> https://github.com/kamailio/kamailio/pull/4339 >> dss >> >> On Tue, Feb 10, 2026 at 8:44 PM Ovidiu Sas via sr-users < >> [email protected]> wrote: >> >>> For easy troubleshooting you can use sngrep: >>> >>> https://voipembedded.wordpress.com/2021/03/22/troubleshooting-kamailio-encrypted-sip-traffic/ >>> >>> Note: you don’t really need to setup the .sngrephep2rc file anymore. >>> >>> -ovidiu >>> >>> On Tue, Feb 10, 2026 at 12:44 Benedito Marques via sr-users < >>> [email protected]> wrote: >>> >>>> Thanks. >>>> >>>> On Tue, Feb 10, 2026 at 1:51 PM Daniel-Constantin Mierla < >>>> [email protected]> wrote: >>>> >>>>> Hello, >>>>> On 10.02.26 13:56, Benedito Marques via sr-users wrote: >>>>> >>>>> Hello everyone! >>>>> >>>>> Currently, what is the best way/approach to generate pcap files with >>>>> decrypted SIP TLS traffic when using Kamailio (besides HEP or plain text >>>>> files generated by sipdump)? >>>>> >>>>> the sipdump can generate pcap files as well, if you set mode value 4. >>>>> Just that in the pcap the sip message look like being received over UDP, >>>>> however the sip headers can indicate the real protocol (and with mode >>>>> value >>>>> 8 you get a meta-info header making it clear what was the transport >>>>> protocol). You can view the pcap in the wireshark or sngrep just fine. >>>>> >>>>> Cheers, >>>>> Daniel >>>>> >>>>> -- >>>>> Daniel-Constantin Mierla (@ asipto.com)twitter.com/miconda -- >>>>> linkedin.com/in/miconda >>>>> Kamailio Consultancy, Training and Development Services -- asipto.com >>>>> Kamailio World Conference, May 7-8, 2026 - Berlin, Germany -- >>>>> kamailioworld.com >>>>> >>>>> >>>> >>>> -- >>>> >>>> Att, >>>> Benedito Marques >>>> __________________________________________________________ >>>> Kamailio - Users Mailing List - Non Commercial Discussions -- >>>> [email protected] >>>> To unsubscribe send an email to [email protected] >>>> Important: keep the mailing list in the recipients, do not reply only >>>> to the sender! >>>> >>> __________________________________________________________ >>> Kamailio - Users Mailing List - Non Commercial Discussions -- >>> [email protected] >>> To unsubscribe send an email to [email protected] >>> Important: keep the mailing list in the recipients, do not reply only to >>> the sender! >>> >> __________________________________________________________ >> Kamailio - Users Mailing List - Non Commercial Discussions -- >> [email protected] >> To unsubscribe send an email to [email protected] >> Important: keep the mailing list in the recipients, do not reply only to >> the sender! >> > > > -- > > Att, > Benedito Marques > __________________________________________________________ > Kamailio - Users Mailing List - Non Commercial Discussions -- > [email protected] > To unsubscribe send an email to [email protected] > Important: keep the mailing list in the recipients, do not reply only to > the sender! >
__________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions -- [email protected] To unsubscribe send an email to [email protected] Important: keep the mailing list in the recipients, do not reply only to the sender!
