LoginSign Up
← Back to all sparks
H

HOMER

MEETINGS
Velocity5.0

Open source VoIP and RTC packet capture and monitoring

sipcapture.org ↗

HOMER 11 closes an open mTLS listener and stops dropping ISUP from SIP-I calls.

voip monitoringsecuritysip-iduckdbaccess control
◆Current state
HOMER's 11.0 pre-releases keep pairing security fixes with SIP-I decoding. 11.0.384 makes HEP and HTTPS ingest with mutual TLS and no CA refuse to start, where before they accepted any client, and runs all-in-one node reads in the DuckDB sandbox. It also stops the Decode window from dropping the ISUP part of multipart SIP-I INVITEs. 11.0.382 and 11.0.381 had already required tokens for the live SIP stream and admin rights for alert changes.
◆Where it's heading
Three releases in a week closed access gaps, which suggests a security review of the 11.0 line before a stable release. Alongside it, the work on SIP-I and ISUP decoding points at carrier and telco users who bridge SS7 and SIP.
◆Prediction
Expect more fail-closed defaults and sandboxing in the next 11.0 builds, and possibly a published advisory for the mTLS issue.

◆Recent moves

  1. 2d ago

    HOMER 11.0.384 keeps SIP-I ISUP parts and fails closed on bad mTLS

    A misconfigured mutual-TLS listener no longer accepts every client, and all-in-one nodes now get the same DuckDB sandbox as remote ones. It is the third access fix in a week, plus a decode fix telco users will notice.

    View source ↗
  2. 5d ago

    HOMER 11.0.382 requires a token for the live SIP stream

    The node's live stream now needs a token, tokens are masked in logs, validator-bypassing SQL functions are blocked and node queries run sandboxed. It closes access gaps opened by the new DuckDB query layer.

    View source ↗
  3. 6d ago

    HOMER 11.0.381 restricts subscription and alert changes to admins

    Changing agent subscriptions or deleting alerts now needs an admin, fixing a published advisory. Session Info also shows static SDP codecs and the negotiated answer.

    View source ↗
  4. 8d ago

    HOMER 11.0.378 adds B2BUA legs to Session Info and IPv6 search

    Session Info, QoS and Logs now include B2BUA legs, IPv6 addresses match in both forms and the writer shuts down more safely. It consolidates the SIP-I storage and tshark decode changes from 11.0.376-377.

    View source ↗
  5. 8d ago

    HOMER 11.0.377 brings back tshark decoding of captured messages

    Message decode can again pipe through tshark, returning its JSON beside the built-in ISUP summary and accepting HOMER 7 protocol keys. It restores a familiar tool for users coming from HOMER 7.

    View source ↗
  6. 8d ago

    HOMER 11.0.376 keeps SIP-I bodies intact and decodes ITU-T ISUP

    SIP-I binary bodies are no longer damaged on storage, the message view decodes ITU-T ISUP fields, and PCAP export writes the original bytes. It fixes a data-loss bug for SS7 interworking, though older captures cannot be repaired and ANSI ISUP is not covered.

    View source ↗