Download
Get sipnab running
One binary, one dependency. v0.5.181 · released 2026-09-19 — built and checksummed by CI for every platform below.
Fastest path — the installer picks for you
recommended · start here$curl -fsSL https://sipnab.com/install.sh | sh
Detects your CPU, checks your glibc version, downloads the matching build, verifies its sha256, and installs to /usr/local/bin. Prefer to read it first? Read install.sh on GitHub.
Same chip, different names — these are equivalent. Tarballs and .rpm packages use the x86_64/aarch64 spelling; .deb packages use amd64/arm64. Not sure which you have? Run uname -m.
x86_64=amd64=Intel & AMD — most servers and PCsaarch64=arm64=ARM — Apple Silicon, Graviton, RPi 4/5Homebrew
best on macOS$brew install NormB/tap/sipnab
Debian / Ubuntu package
best on Debian/UbuntuWhich Debian file?
- Debian 12+, Ubuntu 23.04+ → the
.debbelow; apt resolves libpcap for you. - Older releases → the .deb needs glibc ≥ 2.36 and fails with
GLIBC_2.36 not found. Use the static binary on the “Linux” tab — or run the installer above, which checks this for you. - Unsure?
cat /etc/debian_versionorldd --versiontells you where you stand.
$sudo apt install ./sipnab_0.5.181_amd64.deb
Headless server? The -noaudio variants skip the ALSA sound dependency: amd64-noaudio.deb · arm64-noaudio.deb
RHEL / Fedora package
$sudo dnf install ./sipnab-0.5.181-1.x86_64.rpm
Headless server? The -noaudio variants skip the ALSA weak dependency: x86_64-noaudio.rpm · aarch64-noaudio.rpm
Static binary
zero dependenciesmusl-linked and fully self-contained — runs on any distro, any glibc version, Alpine included. Download, extract, run. This is the safe choice when you’re not sure — the two things it leaves out are TUI audio playback and WASM plugin loading, so this binary has no --plugin flag at all.
Build from source
Rust 1.98+$git clone https://github.com/NormB/sipnab.git
$cd sipnab && cargo build --release --features full
The release binary lands at target/release/sipnab. Toolchain, build deps, and feature flags: Build from Source.
$cargo install sipnab --features full
Grabbed a file above? Verify its checksum ↓ before you run it.
Docker & automation
for CI & fleetsNo interactive steps: a container image on every release, version-pinned scripted installs, and raw artifact URLs your tooling can fetch and verify.
latest tracks releases$docker pull ghcr.io/normb/sipnab:0.5.181
$docker run --rm -v "$PWD:/data" ghcr.io/normb/sipnab:0.5.181 -N -I /data/capture.pcap --report
Offline pcap analysis needs nothing extra. Live capture inside the container needs --cap-add NET_RAW --net host.
$curl -fsSL https://sipnab.com/install.sh | SIPNAB_VERSION=0.5.181 sh
Omit SIPNAB_VERSION to track the latest release; SIPNAB_INSTALL_DIR overrides the /usr/local/bin destination. The script picks the CPU and glibc-appropriate build and verifies its sha256 before installing.
$curl -fsSLO https://github.com/NormB/sipnab/releases/download/v0.5.181/sipnab-0.5.181-x86_64-unknown-linux-musl.tar.gz \
-O https://github.com/NormB/sipnab/releases/download/v0.5.181/sipnab-0.5.181-x86_64-unknown-linux-musl.tar.gz.sha256
$sha256sum -c sipnab-0.5.181-x86_64-unknown-linux-musl.tar.gz.sha256
Swap the target triple from the table below. To discover the latest version without scraping HTML:
$curl -fsSL https://api.github.com/repos/NormB/sipnab/releases/latest | jq -r .tag_name
Every file in a release
for the seasonedFour .deb and four .rpm packages, six tarballs each with its own .sha256 sidecar, two CycloneDX SBOMs, and SHA256SUMS.txt — 23 files in all, plus the two source archives GitHub generates from the tag itself. The artifact reference describes what each one is, which CPU it targets, and what it needs to run.
Verify your download
You are about to run a binary you downloaded over the network, and installing it puts it in /usr/local/bin under sudo. A checksum is how you know you got the file CI built and not something substituted in transit or on a mirror. Every artifact is checksummed by CI.
$shasum -a 256 -c SHA256SUMS.txt --ignore-missing
$sha256sum -c SHA256SUMS.txt --ignore-missing
Grab SHA256SUMS.txt into the same folder as your download, then run the check for your OS. An OK line means the file arrived intact — it matches the checksum list. Each tarball also ships an individual .sha256; .deb, .rpm, and SBOM checksums live only in SHA256SUMS.txt.
Then check who built it
A checksum only proves the file matches the list. It says nothing about who produced the list, so anyone serving you both files passes that check. Build provenance is the part that proves origin: a sigstore attestation that this artifact was built by this repository’s CI from a specific commit, which a rehosted or tampered copy cannot forge.
$gh attestation verify sipnab-<file> --repo NormB/sipnab
Replace <file> with the artifact you downloaded. For the container image, verify oci://ghcr.io/normb/sipnab:0.5.181 instead.