README.md

August 21, 2026 · View on GitHub

Awesome HEP Awesome

A curated list of HEP/EEP enabled projects and products — the Homer Encapsulation Protocol (also called Extensible Encapsulation Protocol) used by SIPCAPTURE / HOMER and QXIP.

Contribution Guidelines

  • Add entries alphabetically, under the appropriate category.
  • To add, remove, or change things on the list: Submit a pull request.
  • Description should contain a link with the name of the package/project

HEP Protocol Specs

  • HEP/EEP - Specification and technical documentation for HEPv3 (chunk-based encapsulation of SIP, RTCP, logs, JSON and vendor extensions). Vendor IDs include FreeSWITCH (0x0001), Kamailio (0x0002), OpenSIPS (0x0003), Asterisk (0x0004), HOMER (0x0005), sipXecs (0x0006), Yeti Switch (0x0007) and Genesys (0x0008).

Full-Stack Applications

  • HEPIC - Commercial HEP/EEP-centric VoIP and RTC observability platform from QXIP, with real-time session tracking, media QoS, clustering, partitioning and 3rd-party integrations, fully compatible with the open-source HEP agent stack.
  • HOMER - 100% open-source SIP, VoIP and RTC capture system. Homer 11 is an all-in-one HEP ingest, DuckLake/Parquet storage, FlightSQL and REST API monolith, backwards compatible with HEPv3 agents on UDP/9060, TCP/9061 and HTTP.

HEP Server Applications

  • HEPlify-server - Stand-alone HOMER capture server in Go. Ingests TCP/TLS/UDP HEP from heplify and other agents, indexes H5/H7 tables, and emits SIP/RTCP metrics for Prometheus and Grafana.
  • HEPop - High-performance HEP capture server (Bun + DuckDB + Apache Parquet) for mass-scale ingest, compaction and OLAP query over local disk or object storage.
  • Kamailio - sipcapture module turns Kamailio into a HEP capture node (HEPv1/v2/v3, IPIP and raw mirroring) for HOMER.
  • OpenSIPS - proto_hep + sipcapture provide a HEP server, HEP switch/proxy (hep_relay) and client to forge, inspect and load-balance HEP toward HOMER or HEPIC.
  • VoIPmonitor - Commercial sniffer that listens for Homer Encapsulation Protocol on UDP/TCP 9060 (hep=yes, hep_bind_port=9060) from Kamailio, OpenSIPS, FreeSWITCH and other HEP sources.

Native Client Applications

Open-source platforms that emit HEP themselves (no extra probe required).

  • Asterisk - res_hep / res_hep_pjsip / res_hep_rtcp (Asterisk 12+) mirror SIP and RTCP to a HEP collector such as HOMER (hep.conf, default :9060).
  • Drachtio - High-performance SIP server with native HOMER capture (<capture-server port="9060" hep-version="3"> or --homer host:9060).
  • FreeSWITCH - Sofia capture agent (capture-server=udp:host:9060;hep=3;capture_id=…) ships SIP to HOMER; ESL events can be added via hepipe.js.
  • Kamailio - siptrace duplicates SIP as HEPv3 toward a capture server (hep_mode_on, hep_version=3).
  • OpenSIPS - Tracer/siptrace HEP client plus HEP switching on the same stack.
  • reConServer - reSIProcate SBC / B2BUA with integrated HEP support.
  • repro - reSIProcate SIP proxy with integrated HEP support.
  • RTP:Engine - Sipwise media proxy; sends RTCP / RTP stats to HOMER via HEP. See also speech-to-text spooler with HEP output.
  • sipXecs - sipXecs / sipXhomer integration (HEP vendor ID 0x0006); sipXecs 4.6+ replaced Sipviewer with HOMER SIP Capture.
  • Yate - Native HEP capture (listed by QXIP alongside Kamailio, OpenSIPS, FreeSWITCH, Asterisk, RTP:Engine and Drachtio).
  • Yeti Switch - Class 4 softswitch with native HEPv3 sensors (target IP/port and HEP_CAPTURE_ID) for signaling and media mirroring to a HOMER capture node (vendor ID 0x0007).

Commercial Platforms & SBCs

Native HEP unless noted. Syslog/IPFIX paths are adapters, not on-box HEP.

  • AudioCodes - SBC syslog is reassembled and converted to HEP by paStash (app_audiocodes → UDP/9060) when TLS signaling cannot be tapped off the wire.
  • Cisco ISR / CUBE - Cisco syslog (ccsipDisplayMsg) converted to HEP by paStash (app_cisco → UDP/9060).
  • Genesys - HEP3 vendor ID 0x0008. Genesys Cloud Edge emits HEP with vendor chunks (conversationId, organizationId, siteId, trunkBaseId, edgeId). Application logs can also be shipped via paStash app_genesys.
  • Oracle Communications SBC (Acme Packet) - Built-in comm-monitor exports SIP/QoS as IPFIX (not HEP). Convert to HEP with HEPFIX.js or horaclifix; older packet-trace used IPIP toward HOMER. See also the HOMER wiki.
  • Ribbon / Sonus - TRC syslog and Monitoring Profile (Extended SIP) converted to HEP by paStash (app_sonus / monitoring recipe → 9060/9063) for TLS-opaque SBC traffic.
  • Sangoma SBC - Native HEP v1/v2/v3 SIP capture toward Homer (udp:host:9060;hep=3;capture_id=…). Configuration.
  • Sansay - Native HEP on recent VSXi SBC software (protocol=HEP, signalingPort=9060). Example.

Stand-Alone Client Applications

  • CaptAgent - Modular HEP capture agent/probe for RTC protocols (SIP, RTCP, RTCP-XR, Diameter, TLS, JSON) targeting HOMER.
  • captagent-js - Sample Node.js HEP agent using hep-js.
  • HEPagent.rs - Next-generation HEP capture agent in Rust (pcap/interface → Lua capture plan → HEP UDP/9060).
  • HEPjack - Frida-based agent that sniffs forward-secrecy TLS/SIP at the source and forwards HEP.
  • HEPlify - Portable single-binary HEP agent (Linux/macOS/Windows) for SIP, RTCP, DNS, Diameter and logs; default collector 127.0.0.1:9060; can also relay HEP as a collector.
  • RTCAgent - eBPF HEP agent for HOMER/HEPIC; hooks Kamailio, OpenSIPS, FreeSWITCH and RTPEngine in-process (default HEP port 9060) without decrypting on the wire.
  • RTPAgent - Commercial HEP agent with in-line RTP analyzer and recorder (QXIP / HEPIC).
  • sipgrep - Console SIP troubleshooting tool with native HEP-EEP client and relay.
  • sngrep - Terminal SIP call-flow viewer with native HEP-EEP client and relay (-L udp:host:9060).

Gateway Applications

  • HEPFIX.js - Node.js IPFIX-to-HEP adapter for Oracle / Acme Packet Net-Net SBCs → HOMER/HEPIC.
  • HEPSwitch - Dockerized OpenSIPS HEP/EEP router and switch.
  • HEPipe.js - Pipes logs, FreeSWITCH ESL and Meetecho Janus events into HEP for HOMER.
  • horaclifix - Go IPFIX-to-HEP gateway for Oracle SBC comm-monitor → HOMER.
  • Janus Gateway - WebRTC events (SIP, ICE, JSEP, media) encapsulated as HEP via hepipe.js (and experimental native HOMER logger).
  • paStash - Node.js multi I/O pipeline with HEP output and vendor filters (AudioCodes, Cisco, Genesys, Ribbon/Sonus, and more).

Tools

  • gossipper - Open-source SIP & WebRTC load-testing platform with HEP observability.
  • hammerHEP - HEP server stress tool in Go.
  • HEP Fidelity Proxy (HFP) - Buffered TCP HEP proxy that stores and replays HEP when the collector (HOMER/HEPIC) is unreachable; default listen :9060.
  • hep-lineproto - HEP to GigAPI / Influx line-protocol converter.
  • hep-sidekick - HEP sidecar/sidekick for Kubernetes.
  • HEP Wireshark - Lua dissector for HEPv2/v3 over UDP/TCP 9060/9062/9063 and HTTP application/hep.
  • HEPgen.js - Node.js HEP packet generator for SIP-less devs and unit tests.
  • HEPgen-bash - HEP generator written in bash.
  • HEPipe C - Pipe arbitrary data rows (logs, events, CDRs) to a HEP server (C).
  • hepsim - Simulates phone calls by sending HEP for demos and statistics.

Network Applications

  • Corelatus - E1/T1 extractions using HEP/EEP. Example code.
  • Cubro - Network packet broker (EXA8) packages including HEPlify, HEPAgent, CaptAgent and other HEP/EEP tools. QXIP EXA8 notes.
  • nDPI - ntop deep-packet inspection library with HEP/EEP protocol recognition and tagging.
  • nProbe - ntop nProbe (VoIP plugin) can act as a HEP capture agent toward HOMER (--hep host:port). Example.

HEPSub Integrations

On-demand session enrichment for HOMER 7+ (not packet encapsulators; they subscribe to the HEP/HOMER API).

Libraries and Code Examples