Hi!
I'm getting INVITES from another Cisco server, but my ser isn't catching it. The difference between a "normal message" (from one of our phones) is, that a dump shows us "UDP" like protocol (Cisco)... and SIP from our phones.
Do I have to respect different SIP signallings?? I made a log on "INVITES"... but ser isn't catching it :-(
Thanks!
Sebastian
Most likely Cisco is sending you a malformed request. Try to fix the problem on the Cisco side. Maybe you can send the dump to the list and we can help identify the problem.
Zeus
-----Original Message----- From: serusers-bounces@lists.iptel.org On Behalf Of Sebastian Kühner Sent: Wednesday, 3 August 2005 6:11 AM To: serusers@lists.iptel.org Subject: [Serusers] UDP
Hi!
I'm getting INVITES from another Cisco server, but my ser isn't catching it. The difference between a "normal message" (from one of our phones) is, that a dump shows us "UDP" like protocol (Cisco)... and SIP from our phones.
Do I have to respect different SIP signallings?? I made a log on "INVITES"... but ser isn't catching it :-(
Thanks!
Sebastian
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
Hi!
Well, I don't like to send the dump because of the IP-Addresses. I sent you a picture of my ethereal tracedump and I hope that someone can give me a hint...
Here is my ngrep:
U 2005/08/02 15:43:56.584366 xxx.xxx.xxx.xxx:51403 -> xxx.xxx.xxx.xxx:5060 INVITE sip:10099999999999@xxx.xxx.xxx.xxx:5060 SIP/2.0. Via: SIP/2.0/UDP xxx.xxx.xxx.xxx:5060;x-route-tag="tgrp:OutTrunkGroup". From: "anonymous" sip:54@xxx.xxx.xxx.xxx;tag=CEA94420-184A. To: sip:10099999999999@xxx.xxx.xxx.xxx. Date: Tue, 02 Aug 2005 18:43:56 GMT. Call-ID: 375AFBE2-2BC11DA-B615D293-1A0569D1@xxx.xxx.xxx.xxx. Supported: timer,100rel. Min-SE: 1800. Cisco-Guid: 927669769-45879770-3054686867-436562385. User-Agent: Cisco-SIPGateway/IOS-12.x. Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO. CSeq: 101 INVITE. Max-Forwards: 6. Remote-Party-ID: sip:54@xxx.xxx.xxx.xxx;party=calling;screen=yes;privacy=full. Timestamp: 1123008236. Contact: sip:54@xxx.xxx.xxx.xxx:5060. Expires: 180. Allow-Events: telephone-event. Content-Type: application/sdp. Content-Length: 382.
Many thanks for your help!!
Sebastian
----- Original Message -----
Most likely Cisco is sending you a malformed request. Try to fix the problem on the Cisco side. Maybe you can send the dump to the list and we can help identify the problem.
Strange. There is only 54 bytes of UDP data although the UDP header says there are 1212 bytes of payload.
Is there fragmentation?
Do you use the newest IOS?
Klaus
Sebastian Kühner wrote:
Hi!
Well, I don't like to send the dump because of the IP-Addresses. I sent you a picture of my ethereal tracedump and I hope that someone can give me a hint...
Here is my ngrep:
U 2005/08/02 15:43:56.584366 xxx.xxx.xxx.xxx:51403 -> xxx.xxx.xxx.xxx:5060 INVITE sip:10099999999999@xxx.xxx.xxx.xxx:5060 SIP/2.0. Via: SIP/2.0/UDP xxx.xxx.xxx.xxx:5060;x-route-tag="tgrp:OutTrunkGroup". From: "anonymous" sip:54@xxx.xxx.xxx.xxx;tag=CEA94420-184A. To: sip:10099999999999@xxx.xxx.xxx.xxx. Date: Tue, 02 Aug 2005 18:43:56 GMT. Call-ID: 375AFBE2-2BC11DA-B615D293-1A0569D1@xxx.xxx.xxx.xxx. Supported: timer,100rel. Min-SE: 1800. Cisco-Guid: 927669769-45879770-3054686867-436562385. User-Agent: Cisco-SIPGateway/IOS-12.x. Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO. CSeq: 101 INVITE. Max-Forwards: 6. Remote-Party-ID: sip:54@xxx.xxx.xxx.xxx;party=calling;screen=yes;privacy=full. Timestamp: 1123008236. Contact: sip:54@xxx.xxx.xxx.xxx:5060. Expires: 180. Allow-Events: telephone-event. Content-Type: application/sdp. Content-Length: 382.
Many thanks for your help!!
Sebastian
----- Original Message -----
Most likely Cisco is sending you a malformed request. Try to fix the problem on the Cisco side. Maybe you can send the dump to the list and we can help identify the problem.
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
Hi!
Maybe there is a fragmentation... if I make a dump of "normal" phone calls, the "INVITE" package also has 54 Bytes (but the difference is that there is protocol=SIP in the ethereal).
What is IOS? :-S
Thanks!
----- Original Message ----- From: "Klaus Darilion" klaus.mailinglists@pernau.at To: "Sebastian Kühner" skuehner@veraza.com Cc: serusers@lists.iptel.org Sent: Wednesday, August 03, 2005 12:26 PM Subject: Re: [Serusers] UDP
Strange. There is only 54 bytes of UDP data although the UDP header says there are 1212 bytes of payload.
Is there fragmentation?
Do you use the newest IOS?
Klaus
Sebastian Kühner wrote:
Hi!
Well, I don't like to send the dump because of the IP-Addresses. I sent
you
a picture of my ethereal tracedump and I hope that someone can give me a hint...
Here is my ngrep:
U 2005/08/02 15:43:56.584366 xxx.xxx.xxx.xxx:51403 ->
xxx.xxx.xxx.xxx:5060
INVITE sip:10099999999999@xxx.xxx.xxx.xxx:5060 SIP/2.0. Via: SIP/2.0/UDP xxx.xxx.xxx.xxx:5060;x-route-tag="tgrp:OutTrunkGroup". From: "anonymous" sip:54@xxx.xxx.xxx.xxx;tag=CEA94420-184A. To: sip:10099999999999@xxx.xxx.xxx.xxx. Date: Tue, 02 Aug 2005 18:43:56 GMT. Call-ID: 375AFBE2-2BC11DA-B615D293-1A0569D1@xxx.xxx.xxx.xxx. Supported: timer,100rel. Min-SE: 1800. Cisco-Guid: 927669769-45879770-3054686867-436562385. User-Agent: Cisco-SIPGateway/IOS-12.x. Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER,
SUBSCRIBE,
NOTIFY, INFO. CSeq: 101 INVITE. Max-Forwards: 6. Remote-Party-ID: sip:54@xxx.xxx.xxx.xxx;party=calling;screen=yes;privacy=full. Timestamp: 1123008236. Contact: sip:54@xxx.xxx.xxx.xxx:5060. Expires: 180. Allow-Events: telephone-event. Content-Type: application/sdp. Content-Length: 382.
Many thanks for your help!!
Sebastian
----- Original Message -----
Most likely Cisco is sending you a malformed request. Try to fix the
problem
on the Cisco side. Maybe you can send the dump to the list and we can
help
identify the problem.
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
Hi,
I am having trouble running SER on SuSE Linux. SER crashes when authentication module is used. Whenever a REGISTER arrives to SER, it gives a core dump. If I turn authentication off then everything is fine. I have tried this on different versions of SuSE including: 9.0 (2.4 Kernel) and 9.1 and 9.3 (2.6 Kernel). They all give this core dump:
Core was generated by `ser -E -w .'. Program terminated with signal 11, Segmentation fault.
warning: current_sos: Can't read pathname for load map: Input/output error
Reading symbols from /lib/libdl.so.2...done. Loaded symbols for /lib/libdl.so.2 Reading symbols from /lib/libresolv.so.2...done. Loaded symbols for /lib/libresolv.so.2 Reading symbols from /lib/tls/libc.so.6...done. Loaded symbols for /lib/tls/libc.so.6 Reading symbols from /lib/ld-linux.so.2...done. Loaded symbols for /lib/ld-linux.so.2 Reading symbols from /usr/local/lib/ser/modules/mysql.so...done. Loaded symbols for /usr/local/lib/ser/modules/mysql.so Reading symbols from /usr/lib/libmysqlclient.so.12...done. Loaded symbols for /usr/lib/libmysqlclient.so.12 Reading symbols from /lib/libz.so.1...done. Loaded symbols for /lib/libz.so.1 Reading symbols from /lib/libcrypt.so.1...done. Loaded symbols for /lib/libcrypt.so.1 Reading symbols from /lib/libnsl.so.1...done. Loaded symbols for /lib/libnsl.so.1 Reading symbols from /lib/tls/libm.so.6...done. Loaded symbols for /lib/tls/libm.so.6 Reading symbols from /usr/local/lib/ser/modules/sl.so...done. Loaded symbols for /usr/local/lib/ser/modules/sl.so Reading symbols from /usr/local/lib/ser/modules/tm.so...done. Loaded symbols for /usr/local/lib/ser/modules/tm.so Reading symbols from /usr/local/lib/ser/modules/rr.so...done. Loaded symbols for /usr/local/lib/ser/modules/rr.so Reading symbols from /usr/local/lib/ser/modules/maxfwd.so...done. Loaded symbols for /usr/local/lib/ser/modules/maxfwd.so Reading symbols from /usr/local/lib/ser/modules/usrloc.so...done. Loaded symbols for /usr/local/lib/ser/modules/usrloc.so Reading symbols from /usr/local/lib/ser/modules/registrar.so...done. Loaded symbols for /usr/local/lib/ser/modules/registrar.so Reading symbols from /usr/local/lib/ser/modules/textops.so...done. Loaded symbols for /usr/local/lib/ser/modules/textops.so Reading symbols from /usr/local/lib/ser/modules/auth.so...done. Loaded symbols for /usr/local/lib/ser/modules/auth.so Reading symbols from /usr/local/lib/ser/modules/auth_db.so...done. Loaded symbols for /usr/local/lib/ser/modules/auth_db.so Reading symbols from /lib/libnss_files.so.2...done. Loaded symbols for /lib/libnss_files.so.2 #0 qm_malloc (qm=0x80ffac0, size=20) at q_malloc.c:290 290 q_malloc.c: No such file or directory. in q_malloc.c (gdb) (gdb) (gdb) (gdb) (gdb) bt #0 qm_malloc (qm=0x80ffac0, size=20) at q_malloc.c:290 #1 0x4016322c in new_result () at res.c:199 #2 0x40162035 in store_result (_h=0x8106138, _r=0xbfffee4c) at dbase.c:298 #3 0x080998ec in table_version (dbf=0x4039b320, connection=0x8106138, table=0xbfffeeb0) at db.c:176 #4 0x40398eaf in auth_db_ver (db_url=0x0, name=0x0) at authorize.c:337 #5 0x40397fba in str_fixup (param=0x8106c30, param_no=2) at authdb_mod.c:238 #6 0x0806ec55 in fix_actions (a=<value optimized out>) at route.c:243 #7 0x0806f136 in fix_expr (exp=0x8106c48) at route.c:134 #8 0x0806f17e in fix_expr (exp=0x8106c78) at route.c:99 #9 0x0806ed1b in fix_actions (a=<value optimized out>) at route.c:221 #10 0x0806ed3e in fix_actions (a=<value optimized out>) at route.c:225 #11 0x0806ed3e in fix_actions (a=<value optimized out>) at route.c:225 #12 0x0806f026 in fix_rls () at route.c:726 #13 0x0805df35 in main (argc=4, argv=0xbffff1b4) at main.c:1558 (gdb)
I have to use Redhat playing SER now. I am really appreciate if someone can take a look at the cause. By the way, I tried to install SER from binary package as well as compile from the source code, result is the same.
Regards,
Pat
Hi,
Did you install a precompiled version of SER and modules? I had the exact same problem on FreeBSD but solved it by downloading the source and compile the mysql.so module by hand and then replacing the precompiled module.
Dont know the exact reason for the crash I had, but the above step solved it. Could be woth a try.
Kind regards Roger
-----Ursprungligt meddelande----- Från: serusers-bounces@iptel.org [mailto:serusers-bounces@lists.iptel.org] För Pat wang Skickat: den 3 augusti 2005 17:53 Till: serusers@lists.iptel.org Ämne: [Serusers] SER core dump on SuSE
Hi,
I am having trouble running SER on SuSE Linux. SER crashes when authentication module is used. Whenever a REGISTER arrives to SER, it gives a core dump. If I turn authentication off then everything is fine. I have tried this on different versions of SuSE including: 9.0 (2.4 Kernel) and 9.1 and 9.3 (2.6 Kernel). They all give this core dump:
Core was generated by `ser -E -w .'. Program terminated with signal 11, Segmentation fault.
warning: current_sos: Can't read pathname for load map: Input/output error
Reading symbols from /lib/libdl.so.2...done. Loaded symbols for /lib/libdl.so.2 Reading symbols from /lib/libresolv.so.2...done. Loaded symbols for /lib/libresolv.so.2 Reading symbols from /lib/tls/libc.so.6...done. Loaded symbols for /lib/tls/libc.so.6 Reading symbols from /lib/ld-linux.so.2...done. Loaded symbols for /lib/ld-linux.so.2 Reading symbols from /usr/local/lib/ser/modules/mysql.so...done. Loaded symbols for /usr/local/lib/ser/modules/mysql.so Reading symbols from /usr/lib/libmysqlclient.so.12...done. Loaded symbols for /usr/lib/libmysqlclient.so.12 Reading symbols from /lib/libz.so.1...done. Loaded symbols for /lib/libz.so.1 Reading symbols from /lib/libcrypt.so.1...done. Loaded symbols for /lib/libcrypt.so.1 Reading symbols from /lib/libnsl.so.1...done. Loaded symbols for /lib/libnsl.so.1 Reading symbols from /lib/tls/libm.so.6...done. Loaded symbols for /lib/tls/libm.so.6 Reading symbols from /usr/local/lib/ser/modules/sl.so...done. Loaded symbols for /usr/local/lib/ser/modules/sl.so Reading symbols from /usr/local/lib/ser/modules/tm.so...done. Loaded symbols for /usr/local/lib/ser/modules/tm.so Reading symbols from /usr/local/lib/ser/modules/rr.so...done. Loaded symbols for /usr/local/lib/ser/modules/rr.so Reading symbols from /usr/local/lib/ser/modules/maxfwd.so...done. Loaded symbols for /usr/local/lib/ser/modules/maxfwd.so Reading symbols from /usr/local/lib/ser/modules/usrloc.so...done. Loaded symbols for /usr/local/lib/ser/modules/usrloc.so Reading symbols from /usr/local/lib/ser/modules/registrar.so...done. Loaded symbols for /usr/local/lib/ser/modules/registrar.so Reading symbols from /usr/local/lib/ser/modules/textops.so...done. Loaded symbols for /usr/local/lib/ser/modules/textops.so Reading symbols from /usr/local/lib/ser/modules/auth.so...done. Loaded symbols for /usr/local/lib/ser/modules/auth.so Reading symbols from /usr/local/lib/ser/modules/auth_db.so...done. Loaded symbols for /usr/local/lib/ser/modules/auth_db.so Reading symbols from /lib/libnss_files.so.2...done. Loaded symbols for /lib/libnss_files.so.2 #0 qm_malloc (qm=0x80ffac0, size=20) at q_malloc.c:290 290 q_malloc.c: No such file or directory. in q_malloc.c (gdb) (gdb) (gdb) (gdb) (gdb) bt #0 qm_malloc (qm=0x80ffac0, size=20) at q_malloc.c:290 #1 0x4016322c in new_result () at res.c:199 #2 0x40162035 in store_result (_h=0x8106138, _r=0xbfffee4c) at dbase.c:298 #3 0x080998ec in table_version (dbf=0x4039b320, connection=0x8106138, table=0xbfffeeb0) at db.c:176 #4 0x40398eaf in auth_db_ver (db_url=0x0, name=0x0) at authorize.c:337 #5 0x40397fba in str_fixup (param=0x8106c30, param_no=2) at authdb_mod.c:238 #6 0x0806ec55 in fix_actions (a=<value optimized out>) at route.c:243 #7 0x0806f136 in fix_expr (exp=0x8106c48) at route.c:134 #8 0x0806f17e in fix_expr (exp=0x8106c78) at route.c:99 #9 0x0806ed1b in fix_actions (a=<value optimized out>) at route.c:221 #10 0x0806ed3e in fix_actions (a=<value optimized out>) at route.c:225 #11 0x0806ed3e in fix_actions (a=<value optimized out>) at route.c:225 #12 0x0806f026 in fix_rls () at route.c:726 #13 0x0805df35 in main (argc=4, argv=0xbffff1b4) at main.c:1558 (gdb)
I have to use Redhat playing SER now. I am really appreciate if someone can take a look at the cause. By the way, I tried to install SER from binary package as well as compile from the source code, result is the same.
Regards,
Pat
_______________________________________________ Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
MAy it be that you make the dump with tcpdump, and display it with ethereal?
tcpdump usually only captures not the whole package. Try to capture the whole packet, e.g tcpdump -s 0 ......
Just because ethereal can't decode the SIP message does not mean that it is not a valid SIP message. But therefore we need a complete dump to analyze the problem.
klaus
Sebastian Kühner wrote:
Hi!
Maybe there is a fragmentation... if I make a dump of "normal" phone calls, the "INVITE" package also has 54 Bytes (but the difference is that there is protocol=SIP in the ethereal).
What is IOS? :-S
Thanks!
----- Original Message ----- From: "Klaus Darilion" klaus.mailinglists@pernau.at To: "Sebastian Kühner" skuehner@veraza.com Cc: serusers@lists.iptel.org Sent: Wednesday, August 03, 2005 12:26 PM Subject: Re: [Serusers] UDP
Strange. There is only 54 bytes of UDP data although the UDP header says there are 1212 bytes of payload.
Is there fragmentation?
Do you use the newest IOS?
Klaus
Sebastian Kühner wrote:
Hi!
Well, I don't like to send the dump because of the IP-Addresses. I sent
you
a picture of my ethereal tracedump and I hope that someone can give me a hint...
Here is my ngrep:
U 2005/08/02 15:43:56.584366 xxx.xxx.xxx.xxx:51403 ->
xxx.xxx.xxx.xxx:5060
INVITE sip:10099999999999@xxx.xxx.xxx.xxx:5060 SIP/2.0. Via: SIP/2.0/UDP xxx.xxx.xxx.xxx:5060;x-route-tag="tgrp:OutTrunkGroup". From: "anonymous" sip:54@xxx.xxx.xxx.xxx;tag=CEA94420-184A. To: sip:10099999999999@xxx.xxx.xxx.xxx. Date: Tue, 02 Aug 2005 18:43:56 GMT. Call-ID: 375AFBE2-2BC11DA-B615D293-1A0569D1@xxx.xxx.xxx.xxx. Supported: timer,100rel. Min-SE: 1800. Cisco-Guid: 927669769-45879770-3054686867-436562385. User-Agent: Cisco-SIPGateway/IOS-12.x. Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER,
SUBSCRIBE,
NOTIFY, INFO. CSeq: 101 INVITE. Max-Forwards: 6. Remote-Party-ID: sip:54@xxx.xxx.xxx.xxx;party=calling;screen=yes;privacy=full. Timestamp: 1123008236. Contact: sip:54@xxx.xxx.xxx.xxx:5060. Expires: 180. Allow-Events: telephone-event. Content-Type: application/sdp. Content-Length: 382.
Many thanks for your help!!
Sebastian
----- Original Message -----
Most likely Cisco is sending you a malformed request. Try to fix the
problem
on the Cisco side. Maybe you can send the dump to the list and we can
help
identify the problem.
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
Hi!
I just made two tcpdumps with the parameter -s (-s 0 and -s 1024) and ethereal showed me the same result.
So I think you have the complete dump. Does anyone know how to setup cisco signalling or something like that? The problem is that the Cisco is of another company (I want to make an inbound)... it would be nice to give them a hint.
Thanks!
Sebastian
----- Original Message ----- From: "Klaus Darilion" klaus.mailinglists@pernau.at To: "Sebastian Kühner" skuehner@veraza.com Cc: serusers@lists.iptel.org Sent: Wednesday, August 03, 2005 1:15 PM Subject: Re: [Serusers] UDP
MAy it be that you make the dump with tcpdump, and display it with
ethereal?
tcpdump usually only captures not the whole package. Try to capture the whole packet, e.g tcpdump -s 0 ......
Just because ethereal can't decode the SIP message does not mean that it is not a valid SIP message. But therefore we need a complete dump to analyze the problem.
klaus
Sebastian Kühner wrote:
Hi!
Maybe there is a fragmentation... if I make a dump of "normal" phone
calls,
the "INVITE" package also has 54 Bytes (but the difference is that there
is
protocol=SIP in the ethereal).
What is IOS? :-S
Thanks!
----- Original Message ----- From: "Klaus Darilion" klaus.mailinglists@pernau.at To: "Sebastian Kühner" skuehner@veraza.com Cc: serusers@lists.iptel.org Sent: Wednesday, August 03, 2005 12:26 PM Subject: Re: [Serusers] UDP
Strange. There is only 54 bytes of UDP data although the UDP header says there are 1212 bytes of payload.
Is there fragmentation?
Do you use the newest IOS?
Klaus
Sebastian Kühner wrote:
Hi!
Well, I don't like to send the dump because of the IP-Addresses. I sent
you
a picture of my ethereal tracedump and I hope that someone can give me
a
hint...
Here is my ngrep:
U 2005/08/02 15:43:56.584366 xxx.xxx.xxx.xxx:51403 ->
xxx.xxx.xxx.xxx:5060
INVITE sip:10099999999999@xxx.xxx.xxx.xxx:5060 SIP/2.0. Via: SIP/2.0/UDP
xxx.xxx.xxx.xxx:5060;x-route-tag="tgrp:OutTrunkGroup".
From: "anonymous" sip:54@xxx.xxx.xxx.xxx;tag=CEA94420-184A. To: sip:10099999999999@xxx.xxx.xxx.xxx. Date: Tue, 02 Aug 2005 18:43:56 GMT. Call-ID: 375AFBE2-2BC11DA-B615D293-1A0569D1@xxx.xxx.xxx.xxx. Supported: timer,100rel. Min-SE: 1800. Cisco-Guid: 927669769-45879770-3054686867-436562385. User-Agent: Cisco-SIPGateway/IOS-12.x. Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER,
SUBSCRIBE,
NOTIFY, INFO. CSeq: 101 INVITE. Max-Forwards: 6. Remote-Party-ID: sip:54@xxx.xxx.xxx.xxx;party=calling;screen=yes;privacy=full. Timestamp: 1123008236. Contact: sip:54@xxx.xxx.xxx.xxx:5060. Expires: 180. Allow-Events: telephone-event. Content-Type: application/sdp. Content-Length: 382.
Many thanks for your help!!
Sebastian
----- Original Message -----
Most likely Cisco is sending you a malformed request. Try to fix the
problem
on the Cisco side. Maybe you can send the dump to the list and we can
help
identify the problem.
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
-
Klaus Darilion -
Pat wang -
Roger Lewau -
Sebastian Kühner -
Zeus Ng