# SIP Analyzer

**URL:** <https://community.zeek.org/t/sip-analyzer/1441>\
**Category:** Zeek\
**Created:** [November 7, 2008, 4:13pm UTC](https://community.zeek.org/t/sip-analyzer/1441 "2008-11-07T16:13:55Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Andy\_Pyles](https://avatars.discourse-cdn.com/v4/letter/a/67e7ee/32.png) [@Andy\_Pyles](https://community.zeek.org/u/Andy_Pyles)\
**Post date:** [November 7, 2008, 4:13pm UTC](https://community.zeek.org/t/sip-analyzer/1441/1 "2008-11-07T16:13:55Z")

</div>

Hello, I understand there is a SIP analyzer available for BRO,  
as described here: [www.bro-ids.org/bro-workshop-2007/slides/BroNews.pdf](http://www.bro-ids.org/bro-workshop-2007/slides/BroNews.pdf)

Is this publicly available? If so, where?

thanks,  
Andy

---

<div class="post-metadata">

**Author:** ![Gregor\_Maier3](https://avatars.discourse-cdn.com/v4/letter/g/5f8ce5/32.png) [@Gregor\_Maier3](https://community.zeek.org/u/Gregor_Maier3)\
**Post date:** [November 7, 2008, 7:30pm UTC](https://community.zeek.org/t/sip-analyzer/1441/2 "2008-11-07T19:30:09Z")

</div>

Andy Pyles wrote:

> Hello, I understand there is a SIP analyzer available for BRO,  
> as described here: www.bro-ids.org/bro-workshop-2007/slides/BroNews.pdf
> 
> Is this publicly available? If so, where?

Yes there is one, BUT: It's in not solidly tested and not performances tuned. (I.e., it's alpha). That's why it's not in the official release. If you're interested I can send you the code, but be warned that it might not (yet) be fit for use in a production environment.

hth  
Gregor

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:38pm UTC](https://community.zeek.org/t/sip-analyzer/1441/3 "2022-05-06T15:38:46Z")

</div>