
Security News
PodRocket Podcast: Inside the Recent npm Supply Chain Attacks
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
drachtio-siprec-recording-server
Advanced tools
SIPREC recording server built using drachtio and rtpengine
A SIPREC recording server based on dractio and rtpengine.
This node.js application implements a siprec recording server solution, using the dractio SIP server framework to manage signaling and the rtpengine media engine to record the media. Note that the recordings are generated in pcap format, so post-processing of the files may be required to generate final recordings if a different format (e.g flac, wav, etc) is desired.
config/default.json.example
to config/local.json
and edit to provide the IP addresses/ports for your configuration (i.e., location of drachtio and rtpengine servers).npm install
node app
to run.If you haven't built the drachtio server and rtpengine processes (and don't want to), you can run using these docker images:
For guidance, have a look at the test suite, which uses docker-compose to create a test environment, as an example test/docker-compose-testbed.yaml.
npm test
note: docker is required
The application receives the SIPREC INVITE from the SBC (or other SIPREC recording client), which will contain the multipart body with both SDP and XML metadata. The application parses the SDP to retrieve the two media endpoints that will be streaming from the SDP and creates two associated media endpoints on rtpengine (an 'offer' and an 'answer'). The two media endpoints created by rtpengine are stitched back into a 200 OK response to the SBC, such that caller media flows to one endpoint and callee media flows to the other. rtpenine thus generates a recording that includes both media streams.
FAQs
SIPREC recording server built using drachtio and rtpengine
We found that drachtio-siprec-recording-server demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.