<div dir="ltr"><div>All,</div><div><br></div>A little update on this interesting rabbit-hole case - the following was the result of a CSI:Style intercontinental investigation with the help of Daniel Grotti from sip:wise.<div>
<br><div>The issue Theo was experiencing was surely caused by MTU fragmentation. The MTU fragmentation was caused by the messages being oversize, but the messages were really oversize because still carrying a few SPCE internal headers, not removed due to a previous customization of the sems config in fact disabling is header filtering completely - just to allow Refer messages to pass. </div>
<div>Quite a backlog story for this case! Now the solution to both old and new issues here is clearly to correct SEMS crippled configuration by defining a "header_filter" mode (whitelist) and extending the "header_list" parameter list with the whole Refer family of headers (or whatever else needed within reason) and let the B2BUA remove all the remaining internal-only headers from the peering sessions. This should bring the situation back to normal as of packet size without impacting any additional functionality.</div>
<div><div><br></div></div></div><div>Theo, let us know if this resolved your case,</div><div class="gmail_extra"><div><span style="font-family:arial,sans-serif;background-color:rgb(255,255,255)"><span style="font-family:Arial"><div style="font-size:13px;color:rgb(119,119,119)">
<font><span style="font-family:Arial;color:rgb(119,119,119)"><br></span></font></div><div style="font-size:13px;color:rgb(119,119,119)"><font><span style="font-family:Arial;color:rgb(119,119,119)">Best,</span></font></div>
<div style="font-size:13px;color:rgb(119,119,119)"><font><span style="font-family:Arial;color:rgb(119,119,119)"><br></span></font></div><div style="font-size:13px"><font color="#666666"><span style="font-family:Arial">Lorenzo Mangani</span></font></div>
<div style="font-size:13px"><font color="#666666"><div style="font-size:x-small"><br></div><div style="font-size:x-small">HOMER DEV TEAM</div></font></div><div style="font-size:x-small"><font size="1" color="#666666"><span style="font-family:Arial">QXIP - Capture Engineering</span></font></div>
<div style="font-size:x-small"><br></div></span></span></div>
<br><br><div class="gmail_quote">On Tue, Sep 17, 2013 at 8:13 AM, Theo <span dir="ltr"><<a href="mailto:axessofficetheo@gmail.com" target="_blank">axessofficetheo@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">Hi<div><br></div><div>I have no solution for my problem. Part of this is kept in private with Andreas because of the info in the log files. The issue is bizarre as far as I can judge this. We have 3 providers. In this case each of those transit calls from a number of carriers which go through to this one customer. All works fine. EXCEPT for the transit from carrier 1, through provider A, who also transit for other carriers, through the same trunk without issues. The same carrier also sends calls through another provider without issues. However, calls from carrier 1 through provider A cut after 5 seconds, about 80% of the time.</div>
<div><br></div><div>ngrep-sip complains about "SIP/2.0 400 missing CSeq header field'" - but The carrier, nor the provider, nor me see anything missing. Ngrep-sip from the point of the invite. I have decided not to worry about the sensitive details at this point as I have to get this resolved urgently. I see nothing missing in the invite. What I do see is, the second last line, that doesn't make sense. That should be a full domain, but where does that come from???</div>
<div><br></div><div>Is this an issue on our box? if so, why only with this particular upstream carrier through this particular provider. If not, how do I get the other party to fix it?</div><div><br></div>
<div>Thanks for any input</div><div><br></div><div><br></div><div><br></div><div><div>U 2013/09/17 08:07:20.226723 <a href="http://127.0.0.1:5060" target="_blank">127.0.0.1:5060</a> -> <a href="http://127.0.0.1:5062" target="_blank">127.0.0.1:5062</a></div>
<div>INVITE sip:<a href="http://127.0.0.1:5080" target="_blank">127.0.0.1:5080</a> SIP/2.0'</div><div>Record-Route: <sip:127.0.0.1;r2=on;lr=on;ftag=KmsqOjkyLjI0MC4wLjEyOjUwODM;ngcplb=yes;socket=udp:<a href="http://196.41.123.113:5060" target="_blank">196.41.123.113:5060</a>>'</div>
<div>Record-Route: <sip:196.41.123.113;r2=on;lr=on;ftag=KmsqOjkyLjI0MC4wLjEyOjUwODM;ngcplb=yes;socket=udp:<a href="http://196.41.123.113:5060" target="_blank">196.41.123.113:5060</a>>'</div><div>Route: <sip:ngcp-lb@127.0.0.1:5062;lr=on;ftag=KmsqOjkyLjI0MC4wLjEyOjUwODM;did=3f2.531;mpd=ii;ice_caller=strip;ice_callee=strip;rtpprx=yes;vsf=V3V3Z0VMeGFUOU1OZkthYTonJjQKayohWlMrByZQLi8IKhkEHQdJAThbDQY->'</div>
<div>Via: SIP/2.0/UDP 127.0.0.1;branch=z9hG4bK7239.6843b44cb370e058f995c996d166891a.0'</div><div>Via: SIP/2.0/UDP 92.240.1.12;rport=5060;branch=z9hG4bK7239.908cd0b7.0'</div><div>Via: SIP/2.0/UDP 92.240.0.12:5083;branch=z9hG4bK685c.a3419e67.0'</div>
<div>From: <<a href="mailto:sip%3A27214482133@92.240.1.12" target="_blank">sip:27214482133@92.240.1.12</a>;user=phone>;tag=KmsqOjkyLjI0MC4wLjEyOjUwODM'</div><div>To: <<a href="mailto:sip%3A27110254990@196.41.123.113" target="_blank">sip:27110254990@196.41.123.113</a>;user=phone>;tag=62DF6E4A-5237F1970000DBD6-69F4A700'</div>
<div>Call-ID: hs4_bhs6_bSDg3ivb01-4893e0c5872c548cdb6488e80b76e5db-ctvvfv3'</div><div>CSeq: 2 INVITE'</div><div>Accept: application/sdp,application/isup,multipart/mixed,application/vnd.siemens.key-event,application/vnd.siemens.surpass,application/dtmf-relay'</div>
<div>Contact: <sip:27214482133@92.240.0.12:5083;transport=udp>'</div><div>MIME-Version: 1.0'</div><div>Supported: timer,100rel'</div><div>Max-Forwards: 63'</div><div>Session-Expires: 1800;refresher=uac'</div>
<div>Allow: ACK, INFO, BYE, CANCEL, INVITE, OPTIONS, NOTIFY, PRACK, UPDATE'</div><div>Content-Type: application/sdp'</div><div>Content-Length: 234'</div><div>P-NGCP-Src-Ip: 92.240.1.12'</div><div>P-NGCP-Src-Port: 5060'</div>
<div>P-NGCP-Src-Proto: udp'</div><div>P-NGCP-Src-Af: 4'</div><div>P-Sock-Info: udp:<a href="http://196.41.123.113:5060" target="_blank">196.41.123.113:5060</a>'</div><div>'</div><div>v=0'</div><div>o=- 2445083187 307757073 IN IP4 92.240.0.61'</div>
<div>s=-'</div><div>c=IN IP4 92.240.0.61'</div><div>t=0 0'</div><div>m=audio 52438 RTP/AVP 18 101'</div><div>a=rtpmap:18 G729/8000'</div><div>a=fmtp:18 annexb=no'</div><div>a=rtpmap:101 telephone-event/8000'</div>
<div>a=fmtp:101 0-15'</div><div>a=sendrecv'</div><div>a=ptime:60'</div><div><br></div><div>#</div><div>U 2013/09/17 08:07:20.226832 <a href="http://127.0.0.1:5062" target="_blank">127.0.0.1:5062</a> -> <a href="http://127.0.0.1:5060" target="_blank">127.0.0.1:5060</a></div>
<div>SIP/2.0 100 Trying'</div><div>Via: SIP/2.0/UDP 127.0.0.1;branch=z9hG4bK7239.6843b44cb370e058f995c996d166891a.0'</div><div>Via: SIP/2.0/UDP 92.240.1.12;rport=5060;branch=z9hG4bK7239.908cd0b7.0'</div><div>
Via: SIP/2.0/UDP 92.240.0.12:5083;branch=z9hG4bK685c.a3419e67.0'</div>
<div>From: <<a href="mailto:sip%3A27214482133@92.240.1.12" target="_blank">sip:27214482133@92.240.1.12</a>;user=phone>;tag=KmsqOjkyLjI0MC4wLjEyOjUwODM'</div><div>To: <<a href="mailto:sip%3A27110254990@196.41.123.113" target="_blank">sip:27110254990@196.41.123.113</a>;user=phone>;tag=62DF6E4A-5237F1970000DBD6-69F4A700'</div>
<div>Call-ID: hs4_bhs6_bSDg3ivb01-4893e0c5872c548cdb6488e80b76e5db-ctvvfv3'</div><div>CSeq: 2 INVITE'</div><div>P-Out-Socket: udp:<a href="http://196.41.123.113:5060" target="_blank">196.41.123.113:5060</a>'</div>
<div>Server: Sipwise NGCP Proxy 2.X'</div>
<div>Content-Length: 0'</div><div>'</div><div><br></div><div>#</div><div>U 2013/09/17 08:07:20.227036 <a href="http://196.41.123.113:5060" target="_blank">196.41.123.113:5060</a> -> <a href="http://92.240.1.12:5060" target="_blank">92.240.1.12:5060</a></div>
<div>SIP/2.0 100 Trying'</div><div>Via: SIP/2.0/UDP 92.240.1.12;rport=5060;branch=z9hG4bK7239.908cd0b7.0'</div><div>Via: SIP/2.0/UDP 92.240.0.12:5083;branch=z9hG4bK685c.a3419e67.0'</div><div>From: <<a href="mailto:sip%3A27214482133@92.240.1.12" target="_blank">sip:27214482133@92.240.1.12</a>;user=phone>;tag=KmsqOjkyLjI0MC4wLjEyOjUwODM'</div>
<div>To: <<a href="mailto:sip%3A27110254990@196.41.123.113" target="_blank">sip:27110254990@196.41.123.113</a>;user=phone>;tag=62DF6E4A-5237F1970000DBD6-69F4A700'</div><div>Call-ID: hs4_bhs6_bSDg3ivb01-4893e0c5872c548cdb6488e80b76e5db-ctvvfv3'</div>
<div>CSeq: 2 INVITE'</div><div>Server: Sipwise NGCP Proxy 2.X'</div><div>Content-Length: 0'</div><div>'</div><div><br></div><div>#</div><div>U 2013/09/17 08:07:20.227510 <a href="http://127.0.0.1:5062" target="_blank">127.0.0.1:5062</a> -> <a href="http://127.0.0.1:5060" target="_blank">127.0.0.1:5060</a></div>
<div>SIP/2.0 400 missing CSeq header field'</div><div>Record-Route: <sip:127.0.0.1:5062;lr=on;ftag=KmsqOjkyLjI0MC4wLjEyOjUwODM;rtpprx=yes;ice_callee=strip;ice_caller=strip;mpd=ii>'</div><div>Record-Route: <sip:127.0.0.1;r2=on;lr=on;ftag=KmsqOjkyLjI0MC4wLjEyOjUwODM;ngcplb=yes;socket=udp:<a href="http://196.41.123.113:5060" target="_blank">196.41.123.113:5060</a>>'</div>
<div>Record-Route: <sip:196.41.123.113;r2=on;lr=on;ftag=KmsqOjkyLjI0MC4wLjEyOjUwODM;ngcplb=yes;socket=udp:<a href="http://196.41.123.113:5060" target="_blank">196.41.123.113:5060</a>>'</div><div>Via: SIP/2.0/UDP 127.0.0.1;branch=z9hG4bK7239.6843b44cb370e058f995c996d166891a.0'</div>
<div>Via: SIP/2.0/UDP 92.240.1.12;rport=5060;branch=z9hG4bK7239.908cd0b7.0'</div><div>Via: SIP/2.0/UDP 92.240.0.12:5083;branch=z9hG4bK685c.a3419e67.0'</div><div>From: <sip:27214482133@maodi.sw1.a]''''S'''</div>
<div>Content-Length: 0'</div><div>'</div><div><br></div></div><div><br></div><div><br></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, Sep 13, 2013 at 4:28 PM, Theo <span dir="ltr"><<a href="mailto:axessofficetheo@gmail.com" target="_blank">axessofficetheo@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">I starting to think this is a problem on my box. However, it ONLY does it with this client and ONLY from one upstream provider who route calls to us from various carriers. It only happens with calls from one carrier. From the sems log I have made the line below in BOLD. that should read @<a href="http://maodi.sw1.africanaxess.co.za" target="_blank">maodi.sw1.africanaxess.co.za</a>. It does on the first invite. Where does this change into the mangled part??? And why only on calls through one provider from one carrier specifically.<div>
<br></div><div><br></div><div><br></div><div><div>Sep 13 16:01:18 sipwise sems[2424]: [#7ffb69f4a700] [parse_sip_uri, parse_uri.cpp:332] DEBUG: Converted URI port (5080) to int (5080)</div><div>Sep 13 16:01:18 sipwise sems[2424]: [#7ffb69f4a700] [parse_headers, parse_header.cpp:391] DEBUG: Illegal CR or LF in header name</div>
<div>Sep 13 16:01:18 sipwise sems[2424]: [#7ffb69f4a700] [received_msg, trans_layer.cpp:1093] DEBUG: parse_sip_msg returned -5</div><div>Sep 13 16:01:18 sipwise sems[2424]: [#7ffb69f4a700] [received_msg, trans_layer.cpp:1099] DEBUG: parsing error: missing CSeq header field</div>
<div>Sep 13 16:01:18 sipwise sems[2424]: [#7ffb69f4a700] [received_msg, trans_layer.cpp:1101] DEBUG: Message was: "INVITE sip:<a href="http://127.0.0.1:5080" target="_blank">127.0.0.1:5080</a> SIP/2.0#015#012Record-Route: <sip:127.0.0.1:5062;lr=on;ftag=KmsqOjkyLjI0MC4wLjEyOjUwODE;rtpprx=yes;ice_callee=strip;ice_caller=strip;mpd=ii>#015#012Record-Route: <sip:127.0.0.1;r2=on;lr=on;ftag=KmsqOjkyLjI0MC4wLjEyOjUwODE;ngcplb=yes;socket=udp:<a href="http://196.41.123.113:5060" target="_blank">196.41.123.113:5060</a>>#015#012Record-Route: <sip:196.41.123.113;r2=on;lr=on;ftag=KmsqOjkyLjI0MC4wLjEyOjUwODE;ngcplb=yes;socket=udp:<a href="http://196.41.123.113:5060" target="_blank">196.41.123.113:5060</a>>#015#012Via: SIP/2.0/UDP 127.0.0.1:5062;branch=z9hG4bKdf2f.16949b1e10816e7aeabf87354bed5bba.0#015#012Via: SIP/2.0/UDP 127.0.0.1;branch=z9hG4bKdf2f.7bc23c3315f2e5d9705a33335a27931e.0#015#012<b>Via: SIP/2.0/UDP 92.240.1.13;rport=5060;branch=z9hG4bKdf2f.584bf716.0#015#012Via: SIP/2.0/UDP 92.240.0.12:5081;branch=z9hG4bKbb6b.792a931.0#015#012From: <sip:27214482133@maodi.sw1.a]#007#032#006#023S#021#020#012#035#<a href="http://026.co.za" target="_blank">026.co.za</a></b>>;tag=KmsqOjkyLjI0MC4wLjEyOjUwODE#015#012To: <<a href="mailto:sip%3A27110254990@196.41.123.113" target="_blank">sip:27110254990@196.41.123.113</a>;user=phone>;tag=580524BE-52331AAE00079EFB-69F4A700#015#012Call-ID: hs4_bhs6_bSDdbf7b01-fb9203bf7ff514193081e8be537bc659-ctvvfv3#015#012CSeq: 2 INVITE#015#012Accept: application/sdp,application/isup,multipart/mixed,application/vnd.siemens.key-event,application/vnd.siemens.surpass,application/dtmf-relay#015#012Contact: <sip:27214482133@92.240.0.12:5081;transport=udp>#015#012MIME-Version: 1.0#015#012Supported: timer,100rel#015#012Max-Forwards: 62#015#012Session-Expires: 1800;refresher=uac#015#012Allow: ACK, INFO, BYE, CANCEL, INVITE, OPTIONS, NOTIFY, PRACK, UPDATE#015#012Content-Type: application/sdp#015#012Content-Length: 254#015#012#015#012v=0#015#012o=- 4048552998 309592175 IN IP4 196.41.123.113#015#012s=-#015#012c=IN IP4 196.41.123.113#015#012t=0 0#015#012m=audio 31636 RTP/AVP 18 101#015#012a=rtpmap:18 G729/8000#015#012a=fmtp:18 annexb=no#015#012a=rtpmap:101 telephone-event/8000#015#012a=fmtp:101 0-15#015#012a=sendrecv#015#012a=ptime:60#015#012a=rtcp:31637#015#012"</div>
<div>Sep 13 16:01:18 sipwise sems[2424]: [#7ffb69f4a700] [send, transport.cpp:98] DEBUG: send msg#012--++--#012SIP/2.0 400 missing CSeq header field#015#012Record-Route: <sip:127.0.0.1:5062;lr=on;ftag=KmsqOjkyLjI0MC4wLjEyOjUwODE;rtpprx=yes;ice_callee=strip;ice_caller=strip;mpd=ii>#015#012Record-Route: <sip:127.0.0.1;r2=on;lr=on;ftag=KmsqOjkyLjI0MC4wLjEyOjUwODE;ngcplb=yes;socket=udp:<a href="http://196.41.123.113:5060" target="_blank">196.41.123.113:5060</a>>#015#012Record-Route: <sip:196.41.123.113;r2=on;lr=on;ftag=KmsqOjkyLjI0MC4wLjEyOjUwODE;ngcplb=yes;socket=udp:<a href="http://196.41.123.113:5060" target="_blank">196.41.123.113:5060</a>>#015#012Via: SIP/2.0/UDP 127.0.0.1:5062;branch=z9hG4bKdf2f.16949b1e10816e7aeabf87354bed5bba.0#015#012Via: SIP/2.0/UDP 127.0.0.1;branch=z9hG4bKdf2f.7bc23c3315f2e5d9705a33335a27931e.0#015#012Via: SIP/2.0/UDP 92.240.1.13;rport=5060;branch=z9hG4bKdf2f.584bf716.0#015#012Via: SIP/2.0/UDP 92.240.0.12:5081;branch=z9hG4bKbb6b.792a931.0#015#012From: <sip:27214482133@maodi.sw1.a]#007#032#006#023S#021#020#015#012Content-Length: 0#015#012#015#012--++--</div>
<div>Sep 13 16:01:19 sipwise sems[2424]: [#7ffb69e49700] [run, udp_trsp.cpp:213] DEBUG: vv M [|] u recvd msg via UDP vv#012--++--#012INVITE sip:<a href="http://127.0.0.1:5080" target="_blank">127.0.0.1:5080</a> SIP/2.0#015#012Record-Route: <sip:127.0.0.1:5062;lr=on;ftag=KmsqOjkyLjI0MC4wLjEyOjUwODE;rtpprx=yes;ice_callee=strip;ice_caller=strip;mpd=ii>#015#012Record-Route: <sip:127.0.0.1;r2=on;lr=on;ftag=KmsqOjkyLjI0MC4wLjEyOjUwODE;ngcplb=yes;socket=udp:<a href="http://196.41.123.113:5060" target="_blank">196.41.123.113:5060</a>>#015#012Record-Route: <sip:196.41.123.113;r2=on;lr=on;ftag=KmsqOjkyLjI0MC4wLjEyOjUwODE;ngcplb=yes;socket=udp:<a href="http://196.41.123.113:5060" target="_blank">196.41.123.113:5060</a>>#015#012Via: SIP/2.0/UDP 127.0.0.1:5062;branch=z9hG4bKdf2f.16949b1e10816e7aeabf87354bed5bba.0#015#012Via: SIP/2.0/UDP 127.0.0.1;branch=z9hG4bKdf2f.7bc23c3315f2e5d9705a33335a27931e.0#015#012Via: SIP/2.0/UDP 92.240.1.13;rport=5060;branch=z9hG4bKdf2f.584bf716.0#015#012Via: SIP/2.0/UDP 92.240.0.12:5081;branch=z9hG4bKbb6b.792a931.0#015#012From: <sip:27214482133@maodi.sw1.a]#007#032#006#023S#021#020#012#035#<a href="http://026.co.za" target="_blank">026.co.za</a>>;tag=KmsqOjkyLjI0MC4wLjEyOjUwODE#015#012To: <<a href="mailto:sip%3A27110254990@196.41.123.113" target="_blank">sip:27110254990@196.41.123.113</a>;user=phone>;tag=580524BE-52331AAE00079EFB-69F4A700#015#012Call-ID: hs4_bhs6_bSDdbf7b01-fb9203bf7ff514193081e8be537bc659-ctvvfv3#015#012CSeq: 2 INVITE#015#012Accept: application/sdp,application/isup,multipart/mixed,application/vnd.siemens.key-event,application/vnd.siemens.surpass,application/dtmf-relay#015#012Contact: <sip:27214482133@92.240.0.12:5081;transport=udp>#015#012MIME-Version: 1.0#015#012Supported: timer,100rel#015#012Max-Forwards: 62#015#012Session-Expires: 1800;refresher=uac#015#012Allow: ACK, INFO, BYE, CANCEL, INVITE, OPTIONS, NOTIFY, PRACK, UPDATE#015#012Content-Type: application/sdp#015#012Content-Length: 254#015#012#015#012v=0#015#012o=- 4048552998 309592175 IN IP4 196.41.123.113#015#012s=-#015#012c=IN IP4 196.41.123.113#015#012t=0 0#015#012m=audio 31636 RTP/AVP 18 101#015#012a=rtpmap:18 G729/8000#015#012a=fmtp:18 annexb=no#015#012a=rtpmap:101 telephone-event/8000#015#012a=fmtp:101 0-15#015#012a=sendrecv#015#012a=ptime:60#015#012a=rtcp:31637#015#012--++--</div>
<div>Sep 13 16:01:19 sipwise sems[2424]: [#7ffb69e49700] [parse_sip_uri, parse_uri.cpp:332] DEBUG: Converted URI port (5080) to int (5080)</div><div>Sep 13 16:01:19 sipwise sems[2424]: [#7ffb69e49700] [parse_headers, parse_header.cpp:391] DEBUG: Illegal CR or LF in header name</div>
<div>Sep 13 16:01:19 sipwise sems[2424]: [#7ffb69e49700] [received_msg, trans_layer.cpp:1093] DEBUG: parse_sip_msg returned -5</div><div>Sep 13 16:01:19 sipwise sems[2424]: [#7ffb69e49700] [received_msg, trans_layer.cpp:1099] DEBUG: parsing error: missing CSeq header field</div>
<div>Sep 13 16:01:19 sipwise sems[2424]: [#7ffb69e49700] [received_msg, trans_layer.cpp:1101] DEBUG: Message was: "INVITE sip:<a href="http://127.0.0.1:5080" target="_blank">127.0.0.1:5080</a> SIP/2.0#015#012Record-Route: <sip:127.0.0.1:5062;lr=on;ftag=KmsqOjkyLjI0MC4wLjEyOjUwODE;rtpprx=yes;ice_callee=strip;ice_caller=strip;mpd=ii>#015#012Record-Route: <sip:127.0.0.1;r2=on;lr=on;ftag=KmsqOjkyLjI0MC4wLjEyOjUwODE;ngcplb=yes;socket=udp:<a href="http://196.41.123.113:5060" target="_blank">196.41.123.113:5060</a>>#015#012Record-Route: <sip:196.41.123.113;r2=on;lr=on;ftag=KmsqOjkyLjI0MC4wLjEyOjUwODE;ngcplb=yes;socket=udp:<a href="http://196.41.123.113:5060" target="_blank">196.41.123.113:5060</a>>#015#012Via: SIP/2.0/UDP 127.0.0.1:5062;branch=z9hG4bKdf2f.16949b1e10816e7aeabf87354bed5bba.0#015#012Via: SIP/2.0/UDP 127.0.0.1;branch=z9hG4bKdf2f.7bc23c3315f2e5d9705a33335a27931e.0#015#012Via: SIP/2.0/UDP 92.240.1.13;rport=5060;branch=z9hG4bKdf2f.584bf716.0#015#012Via: SIP/2.0/UDP 92.240.0.12:5081;branch=z9hG4bKbb6b.792a931.0#015#012From: <sip:27214482133@maodi.sw1.a]#007#032#006#023S#021#020#012#035#<a href="http://026.co.za" target="_blank">026.co.za</a>>;tag=KmsqOjkyLjI0MC4wLjEyOjUwODE#015#012To: <<a href="mailto:sip%3A27110254990@196.41.123.113" target="_blank">sip:27110254990@196.41.123.113</a>;user=phone>;tag=580524BE-52331AAE00079EFB-69F4A700#015#012Call-ID: hs4_bhs6_bSDdbf7b01-fb9203bf7ff514193081e8be537bc659-ctvvfv3#015#012CSeq: 2 INVITE#015#012Accept: application/sdp,application/isup,multipart/mixed,application/vnd.siemens.key-event,application/vnd.siemens.surpass,application/dtmf-relay#015#012Contact: <sip:27214482133@92.240.0.12:5081;transport=udp>#015#012MIME-Version: 1.0#015#012Supported: timer,100rel#015#012Max-Forwards: 62#015#012Session-Expires: 1800;refresher=uac#015#012Allow: ACK, INFO, BYE, CANCEL, INVITE, OPTIONS, NOTIFY, PRACK, UPDATE#015#012Content-Type: application/sdp#015#012Content-Length: 254#015#012#015#012v=0#015#012o=- 4048552998 309592175 IN IP4 196.41.123.113#015#012s=-#015#012c=IN IP4 196.41.123.113#015#012t=0 0#015#012m=audio 31636 RTP/AVP 18 101#015#012a=rtpmap:18 G729/8000#015#012a=fmtp:18 annexb=no#015#012a=rtpmap:101 telephone-event/8000#015#012a=fmtp:101 0-15#015#012a=sendrecv#015#012a=ptime:60#015#012a=rtcp:31637#015#012"</div>
<div>Sep 13 16:01:19 sipwise sems[2424]: [#7ffb69e49700] [send, transport.cpp:98] DEBUG: send msg#012--++--#012SIP/2</div></div></div><div><div><div class="gmail_extra"><br><br><div class="gmail_quote">
On Fri, Sep 13, 2013 at 1:00 PM, Theo <span dir="ltr"><<a href="mailto:axessofficetheo@gmail.com" target="_blank">axessofficetheo@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi Andreas,<div><br></div><div>Apologies for keeping this off list - once I've figured out the problem and if worth it for other people I will post the correct solution here. I have in the meantime figured out WHY the call is dropping, and you were spot on with the missing CSeq header field. This is a snippet of a dropped call and clearly we are sending back the SIP/2.0 400 missing CSeq header field'. What I just cannot figure out is, WHAT is missing exactly. The upstream guys are saying "nothing is missing". </div>
<div><br></div><div>I do see From: <sip:27214482133@maodi.sw1.a]''''S''' which is worrying. this should be <a href="http://maodi.sw1.africanaxess.co.za" target="_blank">maodi.sw1.africanaxess.co.za</a> which is the domain associated with this customer.</div>
<div><br></div><div>
<p>U 2013/09/13 11:58:07.520589 <a href="http://92.240.1.12:5060" target="_blank">92.240.1.12:5060</a> -> <a href="http://196.41.123.113:5060" target="_blank">196.41.123.113:5060</a></p>
<p>INVITE <a href="mailto:sip%3Angcp-lb@196.41.123.113" target="_blank">sip:ngcp-lb@196.41.123.113</a>;ngcpct=c2lwOjEyNy4wLjAuMTo1MDgw SIP/2.0'</p>
<p>Route: <<a href="mailto:sip%3Angcp-lb@196.41.123.113" target="_blank">sip:ngcp-lb@196.41.123.113</a>;r2=on;lr=on;ftag=KmsqOjkyLjI0MC4wLjEzOjUwODE;ngcplb=yes;socket=udp:<a href="http://196.41.123.113:5060" target="_blank">196.41.123.113:5060</a>>, <<a href="mailto:sip%3Angcp-lb@127.0.0.1" target="_blank">sip:ngcp-lb@127.0.0.1</a>;r2=on;lr=on;ftag=KmsqOjkyLjI0MC4wLjEzOjUwODE;ngcplb=yes;socket=udp:<a href="http://196.41.123.113:5060" target="_blank">196.41.123.113:5060</a>>, <sip:ngcp-lb@127.0.0.1:5062;lr=on;ftag=KmsqOjkyLjI0MC4wLjEzOjUwODE;did=63b.e412;mpd=ii;ice_caller=strip;ice_callee=strip;rtpprx=yes;vsf=V3V3Z0VMeGFUOU1OZkthYTonJjQKayohWlMrByZQLi8IKhkEHQdJAThbDQY->'</p>
<p>Via: SIP/2.0/UDP 92.240.1.12;branch=z9hG4bKa6b5.0d018653.0'</p>
<p>Via: SIP/2.0/UDP 92.240.0.13:5081;branch=z9hG4bKf784.ce567e76.0'</p>
<p>From: <<a href="mailto:sip%3A27214482133@92.240.1.12" target="_blank">sip:27214482133@92.240.1.12</a>;user=phone>;tag=KmsqOjkyLjI0MC4wLjEzOjUwODE'</p>
<p>To: <<a href="mailto:sip%3A27110254990@196.41.123.113" target="_blank">sip:27110254990@196.41.123.113</a>;user=phone>;tag=3D4A701D-5232E1AF0004AA9D-69F4A700'</p>
<p>Call-ID: hs4_bhs6_bSDtqpbc01-50b38cb585afe88c67431dd52af8b9dd-ctvvfv3'</p>
<p>CSeq: 2 INVITE'</p>
<p>Accept: application/sdp,application/isup,multipart/mixed,application/vnd.siemens.key-event,application/vnd.siemens.surpass,application/dtmf-relay'</p>
<p>Contact: <sip:27214482133@92.240.0.13:5081;transport=udp>'</p>
<p>MIME-Version: 1.0'</p>
<p>Supported: timer,100rel'</p>
<p>Max-Forwards: 64'</p>
<p>Session-Expires: 1800;refresher=uac'</p>
<p>Allow: ACK, INFO, BYE, CANCEL, INVITE, OPTIONS, NOTIFY, PRACK, UPDATE'</p>
<p>Content-Type: application/sdp'</p>
<p>Content-Length: 235'</p>
<p>'</p>
<p>v=0'</p>
<p>o=- <a href="tel:3522956930" value="+13522956930" target="_blank">3522956930</a> 307888210 IN IP4 92.240.0.62'</p>
<p>s=-'</p>
<p>c=IN IP4 92.240.0.62'</p>
<p>t=0 0'</p>
<p>m=audio 51314 RTP/AVP 18 101'</p>
<p>a=rtpmap:18 G729/8000'</p>
<p>a=fmtp:18 ann</p>
<p>#</p>
<p>U 2013/09/13 11:58:07.520787 <a href="http://127.0.0.1:5060" target="_blank">127.0.0.1:5060</a> -> <a href="http://127.0.0.1:5062" target="_blank">127.0.0.1:5062</a></p>
<p>INVITE sip:<a href="http://127.0.0.1:5080" target="_blank">127.0.0.1:5080</a> SIP/2.0'</p>
<p>Record-Route: <sip:127.0.0.1;r2=on;lr=on;ftag=KmsqOjkyLjI0MC4wLjEzOjUwODE;ngcplb=yes;socket=udp:<a href="http://196.41.123.113:5060" target="_blank">196.41.123.113:5060</a>>'</p>
<p>Record-Route: <sip:196.41.123.113;r2=on;lr=on;ftag=KmsqOjkyLjI0MC4wLjEzOjUwODE;ngcplb=yes;socket=udp:<a href="http://196.41.123.113:5060" target="_blank">196.41.123.113:5060</a>>'</p>
<p>Route: <sip:ngcp-lb@127.0.0.1:5062;lr=on;ftag=KmsqOjkyLjI0MC4wLjEzOjUwODE;did=63b.e412;mpd=ii;ice_caller=strip;ice_callee=strip;rtpprx=yes;vsf=V3V3Z0VMeGFUOU1OZkthYTonJjQKayohWlMrByZQLi8IKhkEHQdJAThbDQY->'</p>
<p>Via: SIP/2.0/UDP 127.0.0.1;branch=z9hG4bKa6b5.242fbc2bf219d6f43d00babcdc3c29f3.0'</p>
<p>Via: SIP/2.0/UDP 92.240.1.12;rport=5060;branch=z9hG4bKa6b5.0d018653.0'</p>
<p>Via: SIP/2.0/UDP 92.240.0.13:5081;branch=z9hG4bKf784.ce567e76.0'</p>
<p>From: <<a href="mailto:sip%3A27214482133@92.240.1.12" target="_blank">sip:27214482133@92.240.1.12</a>;user=phone>;tag=KmsqOjkyLjI0MC4wLjEzOjUwODE'</p>
<p>To: <<a href="mailto:sip%3A27110254990@196.41.123.113" target="_blank">sip:27110254990@196.41.123.113</a>;user=phone>;tag=3D4A701D-5232E1AF0004AA9D-69F4A700'</p>
<p>Call-ID: hs4_bhs6_bSDtqpbc01-50b38cb585afe88c67431dd52af8b9dd-ctvvfv3'</p>
<p>CSeq: 2 INVITE'</p>
<p>Accept: application/sdp,application/isup,multipart/mixed,application/vnd.siemens.key-event,application/vnd.siemens.surpass,application/dtmf-relay'</p>
<p>Contact: <sip:27214482133@92.240.0.13:5081;transport=udp>'</p>
<p>MIME-Version: 1.0'</p>
<p>Supported: timer,100rel'</p>
<p>Max-Forwards: 63'</p>
<p>Session-Expires: 1800;refresher=uac'</p>
<p>Allow: ACK, INFO, BYE, CANCEL, INVITE, OPTIONS, NOTIFY, PRACK, UPDATE'</p>
<p>Content-Type: application/sdp'</p>
<p>Content-Length: 235'</p>
<p>P-NGCP-Src-Ip: 92.240.1.12'</p>
<p>P-NGCP-Src-Port: 5060'</p>
<p>P-NGCP-Src-Proto: udp'</p>
<p>P-NGCP-Src-Af: 4'</p>
<p>P-Sock-Info: udp:<a href="http://196.41.123.113:5060" target="_blank">196.41.123.113:5060</a>'</p>
<p>'</p>
<p>v=0'</p>
<p>o=- <a href="tel:3522956930" value="+13522956930" target="_blank">3522956930</a> 307888210 IN IP4 92.240.0.62'</p>
<p>s=-'</p>
<p>c=IN IP4 92.240.0.62'</p>
<p>t=0 0'</p>
<p>m=audio 51314 RTP/AVP 18 101'</p>
<p>a=rtpmap:18 G729/8000'</p>
<p>a=fmtp:18 annexb=no'</p>
<p>a=rtpmap:101 telephone-event/8000'</p>
<p>a=fmtp:101 0-15'</p>
<p>a=sendrecv'</p>
<p>a=pmft: T38'</p>
<p><br></p>
<p>#</p>
<p>U 2013/09/13 11:58:07.520906 <a href="http://127.0.0.1:5062" target="_blank">127.0.0.1:5062</a> -> <a href="http://127.0.0.1:5060" target="_blank">127.0.0.1:5060</a></p>
<p>SIP/2.0 100 Trying'</p>
<p>Via: SIP/2.0/UDP 127.0.0.1;branch=z9hG4bKa6b5.242fbc2bf219d6f43d00babcdc3c29f3.0'</p>
<p>Via: SIP/2.0/UDP 92.240.1.12;rport=5060;branch=z9hG4bKa6b5.0d018653.0'</p>
<p>Via: SIP/2.0/UDP 92.240.0.13:5081;branch=z9hG4bKf784.ce567e76.0'</p>
<p>From: <<a href="mailto:sip%3A27214482133@92.240.1.12" target="_blank">sip:27214482133@92.240.1.12</a>;user=phone>;tag=KmsqOjkyLjI0MC4wLjEzOjUwODE'</p>
<p>To: <<a href="mailto:sip%3A27110254990@196.41.123.113" target="_blank">sip:27110254990@196.41.123.113</a>;user=phone>;tag=3D4A701D-5232E1AF0004AA9D-69F4A700'</p>
<p>Call-ID: hs4_bhs6_bSDtqpbc01-50b38cb585afe88c67431dd52af8b9dd-ctvvfv3'</p>
<p>CSeq: 2 INVITE'</p>
<p>P-Out-Socket: udp:<a href="http://196.41.123.113:5060" target="_blank">196.41.123.113:5060</a>'</p>
<p>Server: Sipwise NGCP Proxy 2.X'</p>
<p>Content-Length: 0'</p>
<p>'</p>
<p><br></p>
<p>#</p>
<p>U 2013/09/13 11:58:07.521217 <a href="http://196.41.123.113:5060" target="_blank">196.41.123.113:5060</a> -> <a href="http://92.240.1.12:5060" target="_blank">92.240.1.12:5060</a></p>
<p>SIP/2.0 100 Trying'</p>
<p>Via: SIP/2.0/UDP 92.240.1.12;rport=5060;branch=z9hG4bKa6b5.0d018653.0'</p>
<p>Via: SIP/2.0/UDP 92.240.0.13:5081;branch=z9hG4bKf784.ce567e76.0'</p>
<p>From: <<a href="mailto:sip%3A27214482133@92.240.1.12" target="_blank">sip:27214482133@92.240.1.12</a>;user=phone>;tag=KmsqOjkyLjI0MC4wLjEzOjUwODE'</p>
<p>To: <<a href="mailto:sip%3A27110254990@196.41.123.113" target="_blank">sip:27110254990@196.41.123.113</a>;user=phone>;tag=3D4A701D-5232E1AF0004AA9D-69F4A700'</p>
<p>Call-ID: hs4_bhs6_bSDtqpbc01-50b38cb585afe88c67431dd52af8b9dd-ctvvfv3'</p>
<p>CSeq: 2 INVITE'</p>
<p>Server: Sipwise NGCP Proxy 2.X'</p>
<p>Content-Length: 0'</p>
<p>'</p>
<p><br></p>
<p>#</p>
<p>U 2013/09/13 11:58:07.521712 <a href="http://127.0.0.1:5062" target="_blank">127.0.0.1:5062</a> -> <a href="http://127.0.0.1:5060" target="_blank">127.0.0.1:5060</a></p>
<p>SIP/2.0 400 missing CSeq header field'</p>
<p>Record-Route: <sip:127.0.0.1:5062;lr=on;ftag=KmsqOjkyLjI0MC4wLjEzOjUwODE;rtpprx=yes;ice_callee=strip;ice_caller=strip;mpd=ii>'</p>
<p>Record-Route: <sip:127.0.0.1;r2=on;lr=on;ftag=KmsqOjkyLjI0MC4wLjEzOjUwODE;ngcplb=yes;socket=udp:<a href="http://196.41.123.113:5060" target="_blank">196.41.123.113:5060</a>>'</p>
<p>Record-Route: <sip:196.41.123.113;r2=on;lr=on;ftag=KmsqOjkyLjI0MC4wLjEzOjUwODE;ngcplb=yes;socket=udp:<a href="http://196.41.123.113:5060" target="_blank">196.41.123.113:5060</a>>'</p>
<p>Via: SIP/2.0/UDP 127.0.0.1;branch=z9hG4bKa6b5.242fbc2bf219d6f43d00babcdc3c29f3.0'</p>
<p>Via: SIP/2.0/UDP 92.240.1.12;rport=5060;branch=z9hG4bKa6b5.0d018653.0'</p>
<p>Via: SIP/2.0/UDP 92.240.0.13:5081;branch=z9hG4bKf784.ce567e76.0'</p>
<p>From: <sip:27214482133@maodi.sw1.a]''''S'''</p>
<p>Content-Length: 0'</p>
<p>'</p></div></div><div><div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Sep 10, 2013 at 2:43 PM, Theo <span dir="ltr"><<a href="mailto:axessofficetheo@gmail.com" target="_blank">axessofficetheo@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi<div><br></div><div>Any idea why the tcpdump get mangled when saving to a file?</div><div><br></div><div>
<div>?E???#@??){q)?3???i?SIP/2.0 200 OK</div><div><br></div><div>for example? when watching it in real-time it looks fine</div>
</div></div><div><div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Sep 10, 2013 at 1:33 PM, Theo <span dir="ltr"><<a href="mailto:axessofficetheo@gmail.com" target="_blank">axessofficetheo@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi<div><br></div><div>Homer is on my list of things :-) Lorenzo has been telling how great it is.</div>
<div>
<br></div><div>I didn't see that in the log, but mainly because of ignorance. For example, I have no idea what a CSeq header field is, but straight after this mail i will consult my friend google on that one. I will run the tcpdump and wait for more examples.</div>
<div><br></div><div>And speed up my homer box I guess.</div></div><div><div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Sep 10, 2013 at 1:03 PM, Andreas Granig <span dir="ltr"><<a href="mailto:agranig@sipwise.com" target="_blank">agranig@sipwise.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<br>
Did you recognize the "SIP/2.0 400 missing CSeq header field" in the sems log? Seems like there is quite a lot broken with the clients involved here.<br>
<br>
I think the only way to pin it down exactly is to do something like<br>
<br>
tcpdump -i any -s 0 -w /path/to/trace.pcap host xxx.xxx.xxx.xxx<br>
<br>
where xxx.xxx.xxx.xxx is this asterisk box to get a clear overview of what's going on. Another (better) way to troubleshoot this stuff post mortem is to install Homer, so you're able to analyze call flows which happened in the past.<span><font color="#888888"><br>
<br>
Andreas</font></span><div><div><br>
<br>
On 09/10/2013 12:54 PM, Andreas Granig wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hi,<br>
<br>
On 09/10/2013 12:42 PM, Theo wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Sep 10 11:16:06 sipwise /usr/sbin/kamailio[1971]: INFO: <script>: New<br>
request - M=BYE R=<a href="mailto:sip%3Angcp-lb@196.41.123.113" target="_blank">sip:ngcp-lb@196.41.123.113</a><br>
<mailto:<a href="mailto:sip%253Angcp-lb@196.41.123.113" target="_blank">sip%3Angcp-lb@196.41.<u></u>123.113</a>> F=<a href="mailto:sip%3A27219763939@92.240.1.12" target="_blank">sip:27219763939@92.240.1.12</a><br>
<mailto:<a href="mailto:sip%253A27219763939@92.240.1.12" target="_blank">sip%3A27219763939@92.<u></u>240.1.12</a>> T=<a href="mailto:sip%3A27214235154@196.41.123.113" target="_blank">sip:27214235154@196.41.123.<u></u>113</a><br>
<mailto:<a href="mailto:sip%253A27214235154@196.41.123.113" target="_blank">sip%3A27214235154@196.<u></u>41.123.113</a>> IP=udp:<a href="http://92.240.1.12:5060" target="_blank">92.240.1.12:5060</a><br>
<<a href="http://92.240.1.12:5060" target="_blank">http://92.240.1.12:5060</a>><br>
ID=hs4_bhs6_bSDh3kvb01-<u></u>12c39d503671664b04bbf109d85784<u></u>78-ctvvfv3<br>
<br>
In this case, which party tore the call down?<br>
</blockquote>
<br>
In this case, the IP 92.240.1.12 sent the BYE (look for IP=xxxx) in the<br>
log line.<br>
<br>
I think you're actually running into an end-to-end media negotiation<br>
issue. Caller sends SDP offer, the callee sends the answer, and the<br>
caller is not happy with it and sends the BYE. Just a wild guess, need<br>
to check the logs in detail.<br>
<br>
Andreas<br>
</blockquote>
</div></div></blockquote></div><br></div>
</div></div></blockquote></div><br></div>
</div></div></blockquote></div><br></div>
</div></div></blockquote></div><br></div>
</div></div></blockquote></div><br></div>
<br>_______________________________________________<br>
Spce-user mailing list<br>
<a href="mailto:Spce-user@lists.sipwise.com">Spce-user@lists.sipwise.com</a><br>
<a href="http://lists.sipwise.com/listinfo/spce-user" target="_blank">http://lists.sipwise.com/listinfo/spce-user</a><br>
<br></blockquote></div><br></div></div>