Hello all,
I am using the siptrace module on Kamailio 5.3.5 and I am trying to monitor the SIP over websockets traffic with Homer 7.8.1 (heplify-server).
I notice a strange behavior, some packets are not presented on Homer. I checked heplify-server and i notice the next warning: heplify-server: 2020/07/22 18:41:09.425513 decoder.go:103: WARN HEP packet length is 8192 but should be 11663
So I think the packets are truncated by 8192 (packet size), so they are ignored by heplify-server.
I have done a tcpdump on the Homer machine and have the next output, where I can see some packets with size greater than 8192.
19:58:29.788927 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, bad length 11658 > 1472 19:58:29.793539 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, length 626 19:58:29.810733 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, length 579 19:58:29.811121 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, length 579 19:58:29.838824 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, bad length 11953 > 1472 19:58:29.852286 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, length 473 19:58:29.865388 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, bad length 3521 > 1472 19:58:29.875311 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, length 562
Can you guide me to identify where the packets are truncated?
Os melhores cumprimentos / Best regards,
*José Lopes* Research and Development Technician
Phone: +351 256 370 980 Email: jose.lopes@itcenter.com
Hello all,
I figured it out.
The heplify-server truncates the packets above 8192 bytes, I changed the code of heplify-server and it is working. This question is not related to kamailio, so I will open an issue on heplify-server.
Thanks.
On Wed, Jul 22, 2020 at 8:06 PM José Lopes jose.lopes@itcenter.com wrote:
Hello all,
I am using the siptrace module on Kamailio 5.3.5 and I am trying to monitor the SIP over websockets traffic with Homer 7.8.1 (heplify-server).
I notice a strange behavior, some packets are not presented on Homer. I checked heplify-server and i notice the next warning: heplify-server: 2020/07/22 18:41:09.425513 decoder.go:103: WARN HEP packet length is 8192 but should be 11663
So I think the packets are truncated by 8192 (packet size), so they are ignored by heplify-server.
I have done a tcpdump on the Homer machine and have the next output, where I can see some packets with size greater than 8192.
19:58:29.788927 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, bad length 11658 > 1472 19:58:29.793539 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, length 626 19:58:29.810733 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, length 579 19:58:29.811121 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, length 579 19:58:29.838824 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, bad length 11953 > 1472 19:58:29.852286 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, length 473 19:58:29.865388 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, bad length 3521 > 1472 19:58:29.875311 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, length 562
Can you guide me to identify where the packets are truncated?
Os melhores cumprimentos / Best regards,
*José Lopes* Research and Development Technician
Phone: +351 256 370 980 Email: jose.lopes@itcenter.com
Hello,
thanks for updating here, good to know large packets were truncated by heplify.
Cheers, Daniel
On 23.07.20 16:18, José Lopes wrote:
Hello all,
I figured it out.
The heplify-server truncates the packets above 8192 bytes, I changed the code of heplify-server and it is working. This question is not related to kamailio, so I will open an issue on heplify-server.
Thanks.
On Wed, Jul 22, 2020 at 8:06 PM José Lopes <jose.lopes@itcenter.com mailto:jose.lopes@itcenter.com> wrote:
Hello all, I am using the siptrace module on Kamailio 5.3.5 and I am trying to monitor the SIP over websockets traffic with Homer 7.8.1 (heplify-server). I notice a strange behavior, some packets are not presented on Homer. I checked heplify-server and i notice the next warning: heplify-server: 2020/07/22 18:41:09.425513 decoder.go:103: WARN HEP packet length is 8192 but should be 11663 So I think the packets are truncated by 8192 (packet size), so they are ignored by heplify-server. I have done a tcpdump on the Homer machine and have the next output, where I can see some packets with size greater than 8192. 19:58:29.788927 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, bad length 11658 > 1472 19:58:29.793539 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, length 626 19:58:29.810733 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, length 579 19:58:29.811121 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, length 579 19:58:29.838824 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, bad length 11953 > 1472 19:58:29.852286 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, length 473 19:58:29.865388 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, bad length 3521 > 1472 19:58:29.875311 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, length 562 Can you guide me to identify where the packets are truncated? Os melhores cumprimentos / Best regards, *José Lopes* Research and Development Technician Phone: +351 256 370 980 Email: jose.lopes@itcenter.com <mailto:jose.lopes@itcenter.com>
Kamailio (SER) - Users Mailing List sr-users@lists.kamailio.org https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users