Using SNGREP

Main Screen

Idx: Line number column.
Method: Type of SIP message column.
SIP From: SIP message From column.
SIP To: SIP message To column.
Msgs: Numerical amount of messages column.
Source: Source IP and port number column.
Destination: Destination IP and port number column.
Call State: Call identifier column.

ESC Quit: escape and quit sngrep.
Enter: Show more information about the highlighted line item.
Space: After pressing the spacebar, the line is selected. With this you can select multiple lines and can be used with the F2 save option.
F1 Help: Gives a help menu.
F2 Save: Option to save the current capture session dialogs to a .pcap or .txt to a specific path and file name.
F3 Search: Gives the option to search in a more specific and granular way.
F4 Extended: Gives an extended view.
F5 Clear: Clear the screen.
F7 Filter: Like search but with more options to filter the end result.
F8 Settings: Adjust SNGREP settings interface, capture options, call flow options, and EEP/HEP Homer options.
F10: Adjust what columns are displayed on the open sngrep window.

SPAM

User-Agent: Most spam attempts will show an unwanted User-Agent like what is shown in this example.

Registration

Registration Expanded

Call Setup

Invite

200 OK

Call Completed

F3 Search

F7 Filter

F8 Settings

Interface

EEP/HEP HOMER

Call Flow

Capture