[Spce-user] Under what scenario could sipwise silently drop an invite?

Abel Alejandro aalejandro at alliedtechnologygrouppr.com
Sat May 28 08:18:30 EDT 2016


Hey Marco,

I do not mean the server iptables, I do not run anything other than sipwise
+ sniffer, I mean the anti DDoS of the sipwise itself.



On Sat, May 28, 2016 at 8:04 AM, Marco Teixeira <admin at marcoteixeira.com>
wrote:

> Hi Abel,
> Carefull with your assumptions. As an example, if i run sip-ngrep on the
> server, it will see all the traffic even before iptables drops it...
> Em 27/05/2016 20:12, "Abel Alejandro" <
> aalejandro at alliedtechnologygrouppr.com> escreveu:
>
>> Well, the network capture is a network application that runs on the same
>> sipwise server, its from the voipmonitor.org guys, I dont see how the
>> network sniffer could capture the data and at the same time the server not
>> deliver it to the kamalio process.
>>
>> I sent you the pcap capture privately, but yes the domain looks correct.
>> Is there no chance the endpoint was banned during this time? Would that
>> skip the logs?
>>
>>
>> On Fri, May 27, 2016 at 2:59 PM, Daniel Grotti <dgrotti at sipwise.com>
>> wrote:
>>
>>> Hi,
>>> Well if no request are on Kamailio-lb, then invites never reached the
>>> server.
>>> Are you sure the invite was heading to the right sip domain?
>>>
>>> Daniel
>>> On May 27, 2016 8:51 PM, Abel Alejandro <
>>> aalejandro at alliedtechnologygrouppr.com> wrote:
>>>
>>> Hello,
>>>
>>> I am testing a voipmonitor and just saw an interesting call where an
>>> endpoint sent to sipwise 3 invites and it never got answered. Mind you I am
>>> doing the voipmonitor capture at the sipwise server itself so there is no
>>> chance of network packet loss here.
>>>
>>> When I take a look at the logs I dont even see the request
>>> in kamailio-lb.log or kamailio-proxy.log , is there any other place I could
>>> check?
>>>
>>>
>>>
>>> --
>>> *Abel Alejandro*
>>>
>>> 787 586 8313 | 787 705 0555
>>> <joquendo at alliedtechnologygrouppr.com>
>>>
>>> 400 Calle Calaf 477
>>> San Juan, PR 00918
>>> aalejandro at alliedtechnologygrouppr.com
>>>
>>>
>>
>>
>> --
>> *Abel Alejandro*
>>
>> 787 586 8313 | 787 705 0555
>> <joquendo at alliedtechnologygrouppr.com>
>>
>> 400 Calle Calaf 477
>> San Juan, PR 00918
>> aalejandro at alliedtechnologygrouppr.com
>>
>> _______________________________________________
>> Spce-user mailing list
>> Spce-user at lists.sipwise.com
>> https://lists.sipwise.com/listinfo/spce-user
>>
>>


-- 
*Abel Alejandro*

787 586 8313 | 787 705 0555
<joquendo at alliedtechnologygrouppr.com>

400 Calle Calaf 477
San Juan, PR 00918
aalejandro at alliedtechnologygrouppr.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/attachments/20160528/7016ab84/attachment-0001.html>


More information about the Spce-user mailing list