LoginSign Up
← Back to all sparks
H

HOMER

MEETINGS
Velocity5.0

Open source VoIP and RTC packet capture and monitoring

sipcapture.org ↗

HOMER 11 closes a SQL injection, extends OTLP coverage, and ships MCP auth — 2+ releases per week.

voipsip-captureobservabilitysecurityotlpopen-source
◆Current state
HOMER is an open-source VoIP packet capture and analysis platform running a high-frequency patch cadence: roughly 2–3 point releases per week in the 11.0.x series. Recent work covers three areas simultaneously — security hardening (SQL injection patch in /exec, dependency bumps across Hono, gRPC, and Go), data-tiering reliability (OTLP table coverage in compaction and retention pipelines), and QoS observability (RTCP Receiver Report charting in the UI). Two new contributors appeared in the last 10 releases, suggesting the community is growing modestly.
◆Where it's heading
HOMER is evolving toward a unified telemetry store for VoIP and OTLP data — not just SIP capture. The OTLP table fixes bring OpenTelemetry traces into the same tiering and retention pipeline as SIP traffic, which is a structural move. MCP authentication support hints at an agentic access layer being built on top of the capture engine. The pace of security-focused releases also suggests the team is hardening for production deployments at scale.
◆Prediction
The most likely next step is deeper OTLP integration — schema alignment between SIP and OTLP trace data, or a unified query surface. If the MCP auth work continues, a documented agent API for HOMER could emerge within a few cycles.

◆Recent moves

  1. 1d ago

    HOMER 11.0.348: RTCP QoS charting added to the UI

    Adds RTCP Receiver Report charting to the QoS panel, giving operators a visual breakdown of packet loss, jitter, and delay directly in the UI rather than in raw packet data. First external contributor in this release cycle, which closes the gap between capture and quality analysis.

    View source ↗
  2. 1d ago

    HOMER 11.0.347: MCP static auth token + dashboard deep-link search

    Adds static Auth-Token secret support for the MCP integration, making it possible to authenticate agents against HOMER programmatically without dynamic credential flows. The deep-link search fix is a usability improvement for shared dashboard workflows.

    View source ↗
  3. 3d ago

    HOMER 11.0.346: Hot partition protected during incomplete cold copy

    Guards against deleting a hot (live) partition before the cold-tier copy finishes — a data-safety fix that prevents data loss during tiering under slow storage or interrupted transfers. Directly relevant to anyone running HOMER's cold-storage tiering in production.

    View source ↗
  4. 3d ago

    HOMER 11.0.345: Release CI + Azure IMDS cleanup

    Fixes release-asset uploads broken by Node 24's HttpError change, and cleans up Azure managed-identity orphan entries that were triggering IMDS 429 errors. Both are infrastructure-level fixes invisible to end users.

    View source ↗
  5. 4d ago

    HOMER 11.0.344: DuckDB temp directory pinned for tiering

    Pins the DuckDB temporary directory for the tiering DuckDB instance — a configuration fix that prevents path collisions in environments with restricted tmp access. Internal plumbing with no user-visible effect.

    View source ↗
  6. 8d ago

    HOMER 11.0.343: Admin shared-dashboard editing restored

    Restores the ability for admin users to update shared dashboards — a permissions regression that would have blocked collaborative dashboard editing. README update alongside. Maintenance-level fix.

    View source ↗