Session Initiation Protocol (SIP)
Session Initiation Protocol (SIP), is an application-layer control (signaling) protocol for creating, modifying, and terminating sessions with one or more participants. These sessions include Internet telephone calls, multimedia distribution, and multimedia conferences. IETF Charters related to SIP can be found here: [http://www.ietf.org/html.charters/sip-charter.html SIP] [http://www.ietf.org/html.charters/sipping-charter.html SIPPING]
XXX - add a brief description of SIP history
- PINTs and SPIRITS - Service interworking
Number resolution - TRIP and ENUM ([http://www.ietf.org/html.charters/enum-charter.html IETF Charter for ENUM ])
- Seamless signaling - ["SIGTRAN"]: and ["SIP-T"]
- IMPP - Instant Messaging and Presence
SIMPLE - SIP for Instant Messaging and Presence Leveraging Extensions [http://www.ietf.org/html.charters/simple-charter.html IETF Charter for SIMPLE]
XXX - Add example traffic here (as plain text or Ethereal screenshot).
The SIP dissector is (fully functional, partially functional, not existing, ... whatever the current state is). Also add info of additional Ethereal features where appropriate, like special statistics of this protocol.
(XXX add links to preference settings affecting how SIP is dissected).
Example capture file
XXX - Add a simple example capture file to the SampleCaptures page and link from here. Keep it short, it's also a good idea to gzip it to make it even smaller, as Ethereal can open gzipped files automatically.
A complete list of SIP display filter fields can be found in the [http://www.ethereal.com/docs/dfref/s/sip.html display filter reference]
Show only the SIP based traffic:
You cannot directly filter SIP protocols while capturing. However, if you know the ["TCP"] port used (see above), you can filter on that one.
[http://www.ietf.org/rfc/rfc3261.txt?number=3261 RFC3261] SIP: Session Initiation Protocol
[http://www.ietf.org/rfc/rfc3262.txt?number=3262 RFC3262] Reliability of Provisional Responses in the Session Initiation Protocol (SIP)
[http://www.ietf.org/rfc/rfc3263.txt?number=3263 RFC3263] Session Initiation Protocol (SIP): Locating SIP Servers
[http://www.fsf.org/software/osip/osip.html osip] The GNU oSIP library