This wiki has been migrated to and is now deprecated. Please use that site instead.
Differences between revisions 15 and 16
Revision 15 as of 2005-07-02 07:40:42
Size: 2689
Editor: RanShenhar
Comment: sip "register" screenshot
Revision 16 as of 2005-07-16 18:25:03
Size: 2542
Editor: GuyHarris
Comment: Link to the sample capture uploaded (I moved it to SampleCaptures).
Deletions are marked like this. Additions are marked like this.
Line 35: Line 35:
XXX - Add a simple example capture file to the SampleCaptures page and link from here. Keep it short, it's also a good idea to gzip it to make it even smaller, as Ethereal can open gzipped files automatically. attachment:SampleCaptures/aaa.pcap Sample SIP and RTP traffic.

Session Initiation Protocol (SIP)

The Session Initiation Protocol (SIP) is an application-layer control (signaling) protocol for sessions.

These sessions include Internet telephone calls, multimedia distribution, and multimedia conferences. SIP can create, modify, and terminate sessions with one or more participants.

The SIP protocol is a member of the ["VOIPProtocolFamily"].


XXX - add a brief description of SIP history

Protocol dependencies

Example traffic



The SIP dissector is (fully functional, partially functional, not existing, ... whatever the current state is). Also add info of additional Ethereal features where appropriate, like special statistics of this protocol.

Preference Settings

(XXX add links to preference settings affecting how SIP is dissected).

Example capture file

attachment:SampleCaptures/aaa.pcap Sample SIP and RTP traffic.

Display Filter

A complete list of SIP display filter fields can be found in the [ display filter reference]

  • Show only the SIP based traffic:


Capture Filter

You cannot directly filter SIP protocols while capturing. However, if you know the ["TCP"] port used (see above), you can filter on that one.

["IETF"] Charters:




SIP (last edited 2008-08-14 18:52:55 by GeraldCombs)