--------------------
.. note:: ``stats.whitelist`` has been renamed to ``stats.score`` in ``eve.json``
+Major changes
+~~~~~~~~~~~~~
+- SIP parser has been updated to inspect traffic carried by TCP as well.
+ SIP keywords can still match on their respective fields in addition
+ to these improvements.
+ Transactions are logged with the same schema regardless of which
+ transport protocol is carrying the payload.
+ Also, SIP protocol is detected using pattern matching and not only
+ probing parser.
+- ``SIP_PORTS`` variable has been introduced in suricata.yaml
+- Application layer's ``sip`` counter has been split into ``sip_tcp`` and ``sip_udp``
+ for the ``stats`` event.
+
Upgrading 6.0 to 7.0
--------------------