search

irontec / sngrep

Ncurses SIP Messages flow viewer
GNU General Public License v3.0
1k stars 189 forks source link

TLS capture using eBpf #447

Open os11k opened 1 year ago

os11k commented 1 year ago

Hi,

This is more a feature request. eBpf allows to capture TLS packets. It would be fantastic if sngrep can use it and capture TLS without need of recompiling and cert. :)

Thank you!

Kaian commented 1 year ago

Hi @os11k

Can you point me to some project or sample code of TLS decrypting using eBPF?

Thanks!!

os11k commented 1 year ago

Hi @Kaian !

I was able to read TLS SIP packets with running pre-compiled code from this package:

https://github.com/gojue/ecapture

Additionally QXIP SIPCAPTURE, has this project, I never tried it though:

https://github.com/sipcapture/rtcagent

Thank you!