With UDP for sure, packet capturing tools usually grab the traffic before kernel filter, closer to the network layer. For example, if you have firewall rules to drop traffic on port 5060, you can see it with ngrep, but the application does not get it.
Now, for TCP, I expect that the connection is not established if the lower layers forbid it, so there should be no real data traffic on it. If you list tcp connections with rpc command, do you see the one you noticed traffic for using ngrep but Kamailio does not get it?
Cheers, Daniel
On 04.08.21 14:38, Juha Heinanen wrote:
Is it somehow possible that ngrep shows incoming INVITE arriving over TCP to Kamailio's listening address and port, but there is no debug trace of the request (e.g. receive_msg(): --- received sip message ...) in syslog?
-- Juha
Kamailio - Users Mailing List - Non Commercial Discussions
- sr-users@lists.kamailio.org
Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe: