sip-exporter
sip-exporter is an open-source Linux eBPF sensor that turns observed SIP signaling and correlated RTP traffic into Prometheus metrics and Grafana dashboards.
What sip-exporter is
sip-exporter is an open-source Linux eBPF sensor that turns observed SIP signaling and correlated RTP traffic into Prometheus metrics and Grafana dashboards. It exposes SIP traffic and session measures, RFC 6076 performance metrics, RTP and RTCP statistics, fraud signals, and diagnostic metrics at `/metrics`. RTP analysis includes jitter, packet loss, packet-delay variation, and E-model MOS; RTCP sender and receiver statistics include loss, jitter, and round-trip time correlated by SSRC. Documented fraud signals include registration scans, INVITE bursts, account takeover after a registration country change, and False Answer Supervision. The repository includes a Grafana dashboard with 11 sections and Prometheus alert-rule examples, with Alertmanager examples for Slack, PagerDuty, and email. Its metrics are documented for Prometheus, VictoriaMetrics, Grafana Cloud, and other compatible scrapers. Deployment is available as a single container, but it must run privileged with host networking. The sensor needs to see both SIP signaling and the related media path on the same call path. Capture is limited to IPv4/UDP; IPv6, fragmented UDP, and SIP over TCP or TLS are unsupported.
Good
- Reports SIP, RTP, and RTCP metrics
- Tracks jitter, packet loss, and MOS
- Includes a Grafana dashboard and alert examples
- Free for personal and educational use
Watch out
- Requires privileged access and host networking
- Does not capture SIP over TCP or TLS
- IPv6 and fragmented UDP are unsupported
- Needs visibility into signaling and media on the same path
Who it suits
sip-exporter suits Linux operators who can place a sensor where it sees both SIP signaling and the correlated RTP/RTCP path. It is aimed at users working with Prometheus-compatible monitoring and Grafana.
Verdict
sip-exporter provides voice-traffic and quality metrics for compatible IPv4/UDP call paths. Its capture limits and privileged deployment requirements are important to assess before adoption.
Plans and prices
From sip-exporter's own pricing page, checked 5 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| AGPL-3.0 open-source | Free | Free for personal and educational use; free for commercial use with conditions under AGPL-3.0 |
The facts
Each one read from sip-exporter's own pages, with the date it was checked.
What it does
- Capture
- It captures IPv4/UDP SIP and correlated RTP/RTCP; SIP over TCP or TLS is not captured.checked 5 Oct 2026
- Capture method
- An eBPF socket filter selects IPv4 SIP packets over UDP for userspace processing; SIP over TCP or TLS is not captured.checked 5 Oct 2026
- Dashboard and alerts
- The repository includes a Grafana dashboard and documented Prometheus alert-rule examples, with Alertmanager examples for Slack, PagerDuty, and email.checked 5 Oct 2026
- Data handling
- The project says it does not store packets or audio; its RTP processing parses the fixed RTP header and does not inspect or persist audio.checked 5 Oct 2026
- Deployment
- The project provides a single-container deployment and says the container must run privileged with host networking to access eBPF and the network interface.checked 5 Oct 2026
- Fraud signals
- Documented fraud signals include registration scans, INVITE bursts, account takeover after a registration country change, and False Answer Supervision.checked 5 Oct 2026
- Grafana dashboard
- The repository includes a Grafana dashboard with 11 sections and documented Prometheus alert-rule examples.checked 5 Oct 2026
- Integrations
- The Prometheus-format metrics are documented as compatible with Prometheus, VictoriaMetrics, Grafana Cloud, and other Prometheus-compatible scrapers.checked 5 Oct 2026
- License
- The project is licensed under AGPL-3.0 and says modified network-accessible versions must offer users the corresponding source under the license terms.checked 5 Oct 2026
- Limits
- The sensor requires a host that sees IPv4/UDP SIP signaling and the correlated RTP/RTCP path; IPv6, fragmented UDP, SIP over TCP/TLS, and mirrored traffic for trustworthy QoE/direction are unsupported.checked 5 Oct 2026
- Metrics
- It exposes SIP traffic, active-session, RFC 6076 performance, RFC 6035 voice-quality, RTP, RTCP, fraud, and diagnostic metrics at `/metrics`.checked 5 Oct 2026
- Network placement
- For full metrics, the sensor must run on a host that sees both SIP signaling and RTP media on the same call path.checked 5 Oct 2026
- Privacy
- The README says the exporter does not store packets or audio and parses only the fixed 12-byte RTP header, while RTP snapshots copied to userspace may include a small payload prefix.checked 5 Oct 2026
- Purpose
- sip-exporter is an open-source eBPF sensor that turns SIP signaling and correlated RTP traffic observed on a Linux host into Prometheus metrics and Grafana dashboards.checked 5 Oct 2026
- RTCP support
- It reports RTCP receiver and sender statistics, including loss, jitter, and round-trip time, correlated by SSRC.checked 5 Oct 2026
- RTP quality
- RTP analysis includes jitter, packet loss, packet-delay variation, and E-model MOS for streams correlated with SIP dialogs.checked 5 Oct 2026
- SIP and RTP metrics
- The exporter reports SIP traffic and session metrics, RFC 6076 performance metrics, and RTP quality metrics including packet loss, jitter, and MOS.checked 5 Oct 2026
- Support
- The project directs users to GitHub Issues for support, bug reports, and feature requests, and to its security policy for private vulnerability reports.checked 5 Oct 2026
- Supported traffic
- Capture support is IPv4/UDP SIP and RTP/RTCP; SIP over TCP/TLS, IPv6 traffic, and fragmented UDP are listed as unsupported.checked 5 Oct 2026
- Telemetry
- Anonymous usage telemetry is enabled by default and can be opted out of by setting SIP_EXPORTER_TELEMETRY to false.checked 5 Oct 2026
The full review of sip-exporter
Overview
sip-exporter is a free, open-source Linux sensor for turning SIP signaling and related voice traffic into monitoring data. It suits teams already using Prometheus-compatible tools that can place a sensor directly on the call path. Its call-quality and fraud metrics are useful, but narrow capture support and privileged deployment make it a specialist choice.
Key features
The exporter exposes SIP traffic and active-session metrics alongside RFC 6076 performance and RFC 6035 voice-quality measures. For SIP-correlated RTP streams, it calculates jitter, packet loss, packet-delay variation and E-model MOS. RTCP sender and receiver statistics add loss, jitter and round-trip time, associated by SSRC. These measures can help operators distinguish signaling trouble from degraded media, provided the sensor sees both.
Security-oriented signals include registration scans, INVITE bursts, account takeover after a registration-country change, and False Answer Supervision. Metrics are available at /metrics. An included Grafana dashboard has 11 sections, with Prometheus alert-rule examples and Alertmanager examples for Slack, PagerDuty and email. The metrics are documented for use with Prometheus, VictoriaMetrics, Grafana Cloud and other Prometheus-compatible scrapers.
Privacy is a relative strength: the project says it does not store packets or audio, and RTP analysis parses the fixed header rather than inspecting audio. However, RTP snapshots copied to userspace may contain a small payload prefix, so organizations should assess that behavior against their own handling requirements. Anonymous usage telemetry is on by default and can be disabled with SIP_EXPORTER_TELEMETRY=false.
Pricing
The AGPL-3.0 open-source plan costs nothing. It is free for personal and educational use, and commercial use is free subject to AGPL-3.0 conditions. There is no free trial because the software itself is free. The trade-off is license responsibility rather than a subscription: modified versions made accessible over a network must offer users the corresponding source under the license terms.
Platforms
sip-exporter runs on Linux and is self-hosted. The project offers a single-container deployment, but the container must run privileged and use host networking to access eBPF and the network interface. That is a material operational and security consideration; it is not a fit for teams unable to grant those permissions.
Capture is limited to IPv4 SIP over UDP and correlated RTP/RTCP. SIP over TCP or TLS, IPv6, and fragmented UDP are unsupported. Full metrics require the sensor host to see signaling and media for the same call path. Mirrored traffic is not supported for trustworthy QoE and direction measurements. These constraints rule it out for mixed-protocol or IPv6-heavy environments where those paths matter.
Who it's for
This is a good fit for Linux-based VoIP operators who control a suitable host on the call path, want SIP and media-quality telemetry, and already have a Prometheus-compatible monitoring stack. The dashboard, alert examples and fraud indicators provide a useful starting point for operational visibility without storing audio.
Look elsewhere if deployment must avoid privileged containers, if calls use SIP over TCP/TLS or IPv6, or if the sensor cannot observe both signaling and media. It is also less suited to teams seeking a managed monitoring service rather than a self-hosted sensor.
Pros and cons
- Pros: Detailed correlated RTP and RTCP measures, including MOS, jitter, loss and round-trip time, support call-quality diagnosis.
- Pros: The included dashboard and alert examples reduce the work of connecting metrics to common monitoring workflows.
- Pros: Free commercial use is possible under AGPL-3.0, and the project says it does not store packets or audio.
- Cons: IPv4/UDP-only capture excludes several common traffic paths, including SIP over TCP/TLS and IPv6.
- Cons: Privileged execution and host networking raise deployment and security considerations.
- Cons: Useful QoE and direction metrics depend on observing the complete signaling and media path; mirrored traffic is unsupported for trustworthy measurements.
Alternatives
VoIP Monitoring Software is the broader category to browse when the sensor's protocol or placement limits do not match your environment.
- Obkio is worth considering for teams that want broader platform coverage and a 14-day premium trial capped at 10 agents, with no credit card required.
- Dotcom-Monitor may suit teams looking for target-based monitoring, with a free tier covering up to 25 targets, five-minute monitoring frequency, two locations and email alerts.
- HOMER is another free, open-source, self-hosted option, with commercial support available by quote.
- Telchemy SQmediator is a paid alternative with a single-server small-provider edition; Web Services API is optional and passive plus active monitoring costs extra.
- MultiDSLA is a paid option built around a controller and one or more node devices, and controls 100+ nodes.
- Bicom Systems SIP Monitoring (sipMON) is another paid, self-hosted Linux option.
- CallMeter offers paid Starter and Professional plans billed monthly or annually, with features, usage limits and service levels varying.
- Exoprise is a paid alternative with a free trial and credits priced at $100 a month; discounts are available for prepaid annual plans and volume purchases.
Verdict
Choose sip-exporter if you need free, self-hosted SIP and voice-quality metrics, operate Linux on a host that sees the full supported call path, and can accept AGPL-3.0 and privileged-container requirements. Its strongest reason to adopt is the combination of correlated RTP/RTCP quality measures and fraud signals; its strongest reason to look elsewhere is that unsupported protocols or incomplete network visibility can leave important calls outside its view.
Alternatives to sip-exporter
- 1

Dotcom-Monitor
Free planAndroidiOSWebAPI8.3From $13.33 a month - 2

Obkio
Free planAndroidiOSWebAPI8.2From $249 a month - 3
Exoprise
WebAPIExtensionLinux6.8From $100 a month - 4

Telchemy SQmediator
AndroidWebAPILinux6.7 - 5
VoIP Spear
WebAPImacOSWindows6.5From $14.95 a month - 6
VoIPmonitor
WebAPILinuxSelf-hosted6.5From $259 a year
