Strange. There is only 54 bytes of UDP data although the UDP header says there are 1212 bytes of payload.
Is there fragmentation?
Do you use the newest IOS?
Klaus
Sebastian Kühner wrote:
Hi!
Well, I don't like to send the dump because of the IP-Addresses. I sent you a picture of my ethereal tracedump and I hope that someone can give me a hint...
Here is my ngrep:
U 2005/08/02 15:43:56.584366 xxx.xxx.xxx.xxx:51403 -> xxx.xxx.xxx.xxx:5060 INVITE sip:10099999999999@xxx.xxx.xxx.xxx:5060 SIP/2.0. Via: SIP/2.0/UDP xxx.xxx.xxx.xxx:5060;x-route-tag="tgrp:OutTrunkGroup". From: "anonymous" sip:54@xxx.xxx.xxx.xxx;tag=CEA94420-184A. To: sip:10099999999999@xxx.xxx.xxx.xxx. Date: Tue, 02 Aug 2005 18:43:56 GMT. Call-ID: 375AFBE2-2BC11DA-B615D293-1A0569D1@xxx.xxx.xxx.xxx. Supported: timer,100rel. Min-SE: 1800. Cisco-Guid: 927669769-45879770-3054686867-436562385. User-Agent: Cisco-SIPGateway/IOS-12.x. Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO. CSeq: 101 INVITE. Max-Forwards: 6. Remote-Party-ID: sip:54@xxx.xxx.xxx.xxx;party=calling;screen=yes;privacy=full. Timestamp: 1123008236. Contact: sip:54@xxx.xxx.xxx.xxx:5060. Expires: 180. Allow-Events: telephone-event. Content-Type: application/sdp. Content-Length: 382.
Many thanks for your help!!
Sebastian
----- Original Message -----
Most likely Cisco is sending you a malformed request. Try to fix the problem on the Cisco side. Maybe you can send the dump to the list and we can help identify the problem.
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers