Bonjour, The email was addressed to me, I made the test with Oussama. And it was to late for redaction. 1) First tests, discovering of the empty packet
So, first the test with Astrad, as you know, router close the port
and no incomming call are possible. |
mysql> select name,ipaddr,port,FROM_UNIXTIME(regseconds) from sippeers2 where name=41215500327; +-------------+---------------+-------+---------------------------+ | name | ipaddr | port | FROM_UNIXTIME(regseconds) | +-------------+---------------+-------+---------------------------+ | 41215500327 | 62.202.88.127 | 49699 | 2011-06-22 19:59:39 | +-------------+---------------+-------+---------------------------+ 1 row in set (0.00 sec) mysql> select name,ipaddr,port,FROM_UNIXTIME(regseconds) from sippeers2 where name=41215500327; +-------------+---------------+-------+---------------------------+ | name | ipaddr | port | FROM_UNIXTIME(regseconds) | +-------------+---------------+-------+---------------------------+ | 41215500327 | 62.202.88.127 | 51364 | 2011-06-22 20:50:11 | +-------------+---------------+-------+---------------------------+ 1 row in set (0.00 sec) |
# ngrep -x host 62.202.88.127 and port 51368 interface: sis0 (91.121.101.0/255.255.255.0) filter: (ip or ip6) and ( host 62.202.88.127 and port 51368 ) # U 91.121.101.126:5060 -> 62.202.88.127:51368 00 00 00 00 .... # U 91.121.101.126:5060 -> 62.202.88.127:51368 00 00 00 00 .... # U 91.121.101.126:5060 -> 62.202.88.127:51368 00 00 00 00 .... # U 91.121.101.126:5060 -> 62.202.88.127:51368 00 00 00 00 .... # U 91.121.101.126:5060 -> 62.202.88.127:51368 00 00 00 00 .... # U 91.121.101.126:5060 -> 62.202.88.127:51368 00 00 00 00 .... # U 91.121.101.126:5060 -> 62.202.88.127:51368 00 00 00 00 .... # U 91.121.101.126:5060 -> 62.202.88.127:51368 00 00 00 00 .... # |
# ngrep -xT host 62.202.88.127 and port
59954 interface: sis0 (91.121.101.0/255.255.255.0) filter: (ip or ip6) and ( host 62.202.88.127 and port 59954 ) # U +8.828961 91.121.101.126:5060 -> 62.202.88.127:59954 00 00 00 00 .... # U +15.010139 91.121.101.126:5060 -> 62.202.88.127:59954 00 00 00 00 .... # U +15.010191 91.121.101.126:5060 -> 62.202.88.127:59954 00 00 00 00 .... # U +15.010419 91.121.101.126:5060 -> 62.202.88.127:59954 00 00 00 00 .... # U +15.010895 91.121.101.126:5060 -> 62.202.88.127:59954 00 00 00 00 .... # U +15.010522 91.121.101.126:5060 -> 62.202.88.127:59954 00 00 00 00 .... |
fr3# ngrep -xt host 62.202.88.127 and
port 59954 and less 64 interface: sis0 (91.121.101.0/255.255.255.0) filter: (ip or ip6) and ( host 62.202.88.127 and port 59954 and less 64 ) # U 2011/06/23 11:31:25.672320 91.121.101.126:5060 -> 62.202.88.127:59954 00 00 00 00 .... # U 2011/06/23 11:31:40.682476 91.121.101.126:5060 -> 62.202.88.127:59954 00 00 00 00 .... # U 2011/06/23 11:31:55.692646 91.121.101.126:5060 -> 62.202.88.127:59954 00 00 00 00 .... # U 2011/06/23 11:32:10.702807 91.121.101.126:5060 -> 62.202.88.127:59954 00 00 00 00 .... # U 2011/06/23 11:32:25.712976 91.121.101.126:5060 -> 62.202.88.127:59954 00 00 00 00 .... # U 2011/06/23 11:32:40.723157 91.121.101.126:5060 -> 62.202.88.127:59954 00 00 00 00 .... # U 2011/06/23 11:32:55.781549 91.121.101.126:5060 -> 62.202.88.127:59954 00 00 00 00 .... # U 2011/06/23 11:33:10.791462 91.121.101.126:5060 -> 62.202.88.127:59954 00 00 00 00 .... # U 2011/06/23 11:33:25.801646 91.121.101.126:5060 -> 62.202.88.127:59954 00 00 00 00 .... # U 2011/06/23 11:33:40.874484 91.121.101.126:5060 -> 62.202.88.127:59954 00 00 00 00 .... # U 2011/06/23 11:33:55.884952 91.121.101.126:5060 -> 62.202.88.127:59954 00 00 00 00 .... # U 2011/06/23 11:34:10.895114 91.121.101.126:5060 -> 62.202.88.127:59954 00 00 00 00 .... # U 2011/06/23 11:34:25.905274 91.121.101.126:5060 -> 62.202.88.127:59954 00 00 00 00 .... # U 2011/06/23 11:34:40.915442 91.121.101.126:5060 -> 62.202.88.127:59954 00 00 00 00 .... # U 2011/06/23 11:34:55.925596 91.121.101.126:5060 -> 62.202.88.127:59954 00 00 00 00 .... # U 2011/06/23 11:35:10.935767 91.121.101.126:5060 -> 62.202.88.127:59954 00 00 00 00 .... |
fr3# ngrep -pqlt -W byline host
91.121.101.126 and port 59954 | grep -B1 -i 'SIP/2.0[ \.]' POINT 1 U 2011/06/23 11:31:37.625159 91.121.101.126:5060 -> 62.202.88.127:59954 INVITE sip:41215500336@62.202.88.127:59954 SIP/2.0. -- POINT 2 U 2011/06/23 11:31:37.678867 62.202.88.127:59954 -> 91.121.101.126:5060 SIP/2.0 100 Trying. -- U 2011/06/23 11:31:37.712628 62.202.88.127:59954 -> 91.121.101.126:5060 SIP/2.0 180 Ringing. -- U 2011/06/23 11:31:46.227591 91.121.101.126:5060 -> 62.202.88.127:59954 CANCEL sip:41215500336@62.202.88.127:59954 SIP/2.0. -- U 2011/06/23 11:31:46.283354 62.202.88.127:59954 -> 91.121.101.126:5060 SIP/2.0 487 Request Terminated. -- U 2011/06/23 11:31:46.283727 91.121.101.126:5060 -> 62.202.88.127:59954 ACK sip:41215500336@62.202.88.127:59954 SIP/2.0. -- U 2011/06/23 11:31:46.291192 62.202.88.127:59954 -> 91.121.101.126:5060 SIP/2.0 200 OK. -- POINT 3 U 2011/06/23 11:34:57.319269 91.121.101.126:5060 -> 62.202.88.127:59954 INVITE sip:41215500336@62.202.88.127:59954 SIP/2.0. -- POINT 4 U 2011/06/23 11:34:57.376691 62.202.88.127:59954 -> 91.121.101.126:5060 SIP/2.0 100 Trying. -- U 2011/06/23 11:34:57.409191 62.202.88.127:59954 -> 91.121.101.126:5060 SIP/2.0 180 Ringing. -- U 2011/06/23 11:35:05.900778 91.121.101.126:5060 -> 62.202.88.127:59954 CANCEL sip:41215500336@62.202.88.127:59954 SIP/2.0. -- U 2011/06/23 11:35:05.953289 62.202.88.127:59954 -> 91.121.101.126:5060 SIP/2.0 487 Request Terminated. -- U 2011/06/23 11:35:05.953632 91.121.101.126:5060 -> 62.202.88.127:59954 ACK sip:41215500336@62.202.88.127:59954 SIP/2.0. -- U 2011/06/23 11:35:05.961405 62.202.88.127:59954 -> 91.121.101.126:5060 SIP/2.0 200 OK. |
fr3# ngrep -pqlt -W byline host
91.121.101.126 and port 59954 | grep -B1 -i 'SIP/2.0[ \.]' U 2011/06/23 12:14:35.943102 91.121.101.126:5060 -> 62.202.88.127:59954 INVITE sip:41215500336@62.202.88.127:59954 SIP/2.0. -- U 2011/06/23 12:14:36.002660 62.202.88.127:59954 -> 91.121.101.126:5060 SIP/2.0 100 Trying. -- U 2011/06/23 12:14:36.032488 62.202.88.127:59954 -> 91.121.101.126:5060 SIP/2.0 180 Ringing. -- U 2011/06/23 12:14:43.867294 91.121.101.126:5060 -> 62.202.88.127:59954 CANCEL sip:41215500336@62.202.88.127:59954 SIP/2.0. -- U 2011/06/23 12:14:43.918985 62.202.88.127:59954 -> 91.121.101.126:5060 SIP/2.0 487 Request Terminated. -- U 2011/06/23 12:14:43.919365 91.121.101.126:5060 -> 62.202.88.127:59954 ACK sip:41215500336@62.202.88.127:59954 SIP/2.0. -- U 2011/06/23 12:14:43.926842 62.202.88.127:59954 -> 91.121.101.126:5060 SIP/2.0 200 OK. |
And why you do not write what all this mean? The words are missing!
I see that fr3 is sending empty packets (but cannot see at which frequency)
I see that on astrad the port is changing
But I cannot see at all, whether on fr3 the empty packets are helping, or not.
Is there a capture that with fr3 the port is not changing?
Finally, we discussed empty packets fro the server to UA,and you was insisting that such packets are useless. Whatcounts is the packet from UA...
Emin Gabrielyan
# ngrep -x host 62.202.88.127 and port 51368 interface: sis0 (91.121.101.0/255.255.255.0) filter: (ip or ip6) and ( host 62.202.88.127 and port 51368 ) # U 91.121.101.126:5060 -> 62.202.88.127:51368 00 00 00 00 .... # U 91.121.101.126:5060 -> 62.202.88.127:51368 00 00 00 00 .... # U 91.121.101.126:5060 -> 62.202.88.127:51368 00 00 00 00 .... # U 91.121.101.126:5060 -> 62.202.88.127:51368 00 00 00 00 .... # U 91.121.101.126:5060 -> 62.202.88.127:51368 00 00 00 00 .... # U 91.121.101.126:5060 -> 62.202.88.127:51368 00 00 00 00 .... # U 91.121.101.126:5060 -> 62.202.88.127:51368 00 00 00 00 .... # U 91.121.101.126:5060 -> 62.202.88.127:51368 00 00 00 00 .... #
changement de port sur astrad
mysql> select name,ipaddr,port,FROM_UNIXTIME(regseconds) from sippeers2 where name=41215500327; +-------------+---------------+-------+---------------------------+ | name | ipaddr | port | FROM_UNIXTIME(regseconds) | +-------------+---------------+-------+---------------------------+ | 41215500327 | 62.202.88.127 | 49699 | 2011-06-22 19:59:39 | +-------------+---------------+-------+---------------------------+ 1 row in set (0.00 sec) mysql> select name,ipaddr,port,FROM_UNIXTIME(regseconds) from sippeers2 where name=41215500327; +-------------+---------------+-------+---------------------------+ | name | ipaddr | port | FROM_UNIXTIME(regseconds) | +-------------+---------------+-------+---------------------------+ | 41215500327 | 62.202.88.127 | 51364 | 2011-06-22 20:50:11 | +-------------+---------------+-------+---------------------------+ 1 row in set (0.00 sec)
les deux dernieres l'enregistrements sur db2
mysql> select username,domain,last_modified,expires,TIMESTAMPDIFF(SECOND,last_modified,expires) from location where username in (41215500327) order by last_modified desc limit 2; +-------------+----------------+---------------------+---------------------+---------------------------------------------+ | username | domain | last_modified | expires | TIMESTAMPDIFF(SECOND,last_modified,expires) | +-------------+----------------+---------------------+---------------------+---------------------------------------------+ | 41215500327 | 91.121.101.126 | 2011-06-22 19:50:50 | 2011-06-22 20:50:49 | 3599 | | 41215500327 | 94.23.225.212 | 2011-06-22 19:50:12 | 2011-06-22 20:50:11 | 3599 | +-------------+----------------+---------------------+---------------------+---------------------------------------------+ 2 rows in set (0.02 sec)
On 2011-06-22 17:51, Task-By Nicolas Bondier wrote:Prendre un téléphone et l'enregistrer sur astrad avec un intervalle d’enregistrement de 3 minutes.
Voir si portasip garde les ports du routeur ouverts.
- Tester les problèmes de no incoming calls.
- Tester si le phénomène est le même sur portasip.