--- /dev/null
+================================================================================
+
+ Siplog -- A Simple SIP Logging Plugin for ulogd
+
+ (c) 2008 Martin Mares <mj@ucw.cz>
+
+ You can use and distribute this program under the terms of GPLv2.
+
+================================================================================
+
+
+This program sits at a router over which a SIP box (tested with Linksys PAP2)
+sends its packets. Whenever a phone call is attempted, it sends an e-mail to
+a specified address with the status of the call. I use it for reporting of
+lost calls when I am not at home. Besides that, it's a nice example of passive
+network monitoring.
+
+Siplog is a plugin for the ulogd user-space packet logging daemon. You should
+add the following items to /etc/ulogd.conf:
+
+ [global]
+ plugin="/usr/local/lib/ulogd/siplog.so"
+
+ [SIP]
+ file="/var/log/ulog/sip.log"
+ debuglog="/var/log/ulog/sip.debug"
+ mailto="where-to-send-reports@example.net"
+
+Then it remains to configure iptables to pass the SIP packets to ulogd. Add the
+following rules to the FORWARD chain:
+
+ -s $YOUR_SIP_GW -p udp --sport 5060 -j ULOG --ulog-prefix phone-out
+ -d $YOUR_SIP_GW -p udp --dport 5060 -j ULOG --ulog-prefix phone-in
+
+Have fun.