Version 0.6.6 is out. Main thing: Pcaptix now handles WebRTC captures.

If you’ve ever tried to open a WebRTC capture in a classic SIP tool, you know how it goes. Signalling is buried inside WebSocket frames, media is DTLS-encrypted, and the tool either shows you nothing or, worse, decodes ciphertext as audio and gives you a quality score for random noise.

So we fixed both sides.

SIP over WebSocket (RFC 7118) is deframed and parsed now. WebRTC calls show up in the same call list, message view, and call flow as any other SIP call. Same UI, no separate mode.

SRTP: when the keys are visible in the SDP (SDES mode), the stream is decrypted normally. When keys arrive out of band through the DTLS handshake (DTLS-SRTP), the stream is detected as encrypted and reported network-only. No more phantom audio, no more MOS scores on scrambled bytes.

Two other things worth mentioning:

• A Wireshark-style SIP message viewer, with a collapsible protocol tree or raw text if you prefer that.
• TCP reassembly fixes. Trailing messages inside a segment used to get dropped in some edge cases. They don’t now.

If you run WebRTC infrastructure and have captures lying around that you never quite trusted, this is the version to try.