sipnab · in-browser analyzer

Drop a capture file here to analyze

or click to browse

pcap pcapng gzip of either zip or tar of captures

Any filename · up to ~250 MB · parsed locally in your browser

You'll get call list flow ladder raw SIP RTP MOS / jitter / loss

All processing happens in your browser — nothing is uploaded

#	Method	From	To	Source	Dest	State	Msgs	PDD

No SIP dialogs found in this capture. sipnab looks for SIP on any port — if this pcap should contain SIP, it may be encrypted (try the desktop sipnab with --keylog) or fragmented mid-capture.

SSRC	Codec	Source	Dest	Pkts	Jitter	Loss%	MOS	Dur

Call Flow

What am I looking at?

Each column is an endpoint (IP:port); time flows downward. → a SIP message, labeled with its method or response code 2xx success · 1xx progress · 4xx–6xx failure dimmed = retransmission of the message above it

Select a dialog to view its call flow

Raw Message

Click a message in the call flow to view raw SIP

h Help 1/2 Tab j/k Nav e Export f Search o Open q Back Esc Deselect

Navigation
`j` / `↓`	Move down in call list
`k` / `↑`	Move up in call list
`Enter`	Select dialog / open call flow
`Esc`	Step back (deselect message → dialog → blur)
`1`	Switch to Dialogs tab
`2`	Switch to RTP Streams tab
Actions
`h` / `?`	Toggle this help popup
`e`	Open export menu (JSON / CSV / Mermaid)
`f`	Focus search / filter input
`O`	Open a new pcap file
`q`	Clear data and return to drop zone
Search
Type any text to search across all columns (case-insensitive). Use DSL syntax for precise filters: `method == 'INVITE'`

PCAP analysis

Drop a capture file here to analyze