fsipd - Fake SIP Daemon
fsipd is a minimal SIP honeypot. It listens on TCP/UDP 5060 (IPv4 as well as IPv6 if available) and logs all incoming SIP requests along with SRC/DST IP Addresses and Port numbers in CSV format.
Incoming packets are logged in CSV format in fsipd.log
. Log format is described below:
epoch timestamp, protocol, src ip, src port, "message"
example:
1445775973,UDP4,127.0.0.1,50751,"INVITE"
This program depends on libpidutil