HEP-EEP: Extensible Encapsulation Protocol

This repository serves technical documentation for the EEP (formely HEP) Encapsulation Protocol.

Summary:

The Extensible Encapsulation protocol (“EEP”) provides a method to duplicate an IP datagram to a collector by encapsulating the original datagram and its relative header properties (as payload, in form of concatenated chunks) within a new IP datagram transmitted over UDP/TCP/SCTP connections for remote collection. Encapsulation allows for the original content to be transmitted without altering the original IP datagram and header contents and provides flexible allocation of additional chunks containing additional arbitrary data. The method is NOT designed or intended for “tunneling” of IP datagrams over network segments, and best serves as vector for passive duplication of packets intended for remote or centralized collection and long term storage and analysis.

History:

The protocol was originally designed by Alexandr Dubovikov and Roland Hänel for the HOMER SIPCAPTURE project and is currently at its third generation (HEPv3)

Integration:

HEP is natively implemented in many leading SIP platforms:

• Kamailio
• OpenSIPS
• FreeSWTICH
• Asterisk
• RTP:Engine
• ... and more!

HEP is also supported by several capture tools:

• Captagent
• Sipgrep
• HEPipe
• nProbe
• sngrep
• ... and more!

HEP code examples are available for many languages:

• C/C++
• Javascript/Node
• Java
• Erlang
• Go
• Perl
• Python

Support

For any inquiry related to HEP/EEP please contact [email protected]