[Spce-user] Under what scenario could sipwise silently drop an invite?

[Abel Alejandro]

Hey Serg,

The sniffer is running on the sipwise server itself, its just a physical
box (not running vmware or anything) with sipwise on it, so yes I am pretty
sure the endpoint sent it to the sipwise.



On Sat, May 28, 2016 at 8:23 AM, Serge S. Yuriev <me at nevian.org> wrote:

> Hi Abel,
>
> Are you sure that your endpoint SENT something toward spce? Have you tried
> capture on user end?
>
> --
> Wbr, Serge via mobile
>
> 28.05.2016, 15:18, "Abel Alejandro" <
> aalejandro at alliedtechnologygrouppr.com>:
>
>
> Hey Marco,
>
>
> I do not mean the server iptables, I do not run anything other than
> sipwise + sniffer, I mean the anti DDoS of the sipwise itself.
>
>
>
>
>
>
> On Sat, May 28, 2016 at 8:04 AM, Marco Teixeira <admin at marcoteixeira.com>
> wrote:
>
>
> Hi Abel,
> Carefull with your assumptions. As an example, if i run sip-ngrep on the
> server, it will see all the traffic even before iptables drops it...
> Em 27/05/2016 20:12, "Abel Alejandro" <
> aalejandro at alliedtechnologygrouppr.com> escreveu:
>
>
> Well, the network capture is a network application that runs on the same
> sipwise server, its from the voipmonitor.org guys, I dont see how the
> network sniffer could capture the data and at the same time the server not
> deliver it to the kamalio process.
>
>
> I sent you the pcap capture privately, but yes the domain looks correct.
> Is there no chance the endpoint was banned during this time? Would that
> skip the logs?
>
>
>
>
> On Fri, May 27, 2016 at 2:59 PM, Daniel Grotti <dgrotti at sipwise.com>
> wrote:
>
>
> Hi,
> Well if no request are on Kamailio-lb, then invites never reached the
> server.
> Are you sure the invite was heading to the right sip domain?
> Daniel
> On May 27, 2016 8:51 PM, Abel Alejandro <
> aalejandro at alliedtechnologygrouppr.com> wrote:
>
>
> Hello,
>
>
> I am testing a voipmonitor and just saw an interesting call where an
> endpoint sent to sipwise 3 invites and it never got answered. Mind you I am
> doing the voipmonitor capture at the sipwise server itself so there is no
> chance of network packet loss here.
>
>
> When I take a look at the logs I dont even see the request
> in kamailio-lb.log or kamailio-proxy.log , is there any other place I could
> check?
>
>
>
>
>
>
> --
>
> Abel Alejandro
> 787 586 8313   787 705 0555
>
>
> 400 Calle Calaf 477
> San Juan, PR 00918
> aalejandro at alliedtechnologygrouppr.com
>
>
>
>
>
>
>
>
> --
>
> Abel Alejandro
> 787 586 8313   787 705 0555
>
>
> 400 Calle Calaf 477
> San Juan, PR 00918
> aalejandro at alliedtechnologygrouppr.com
>
>
> _______________________________________________
> Spce-user mailing list
> Spce-user at lists.sipwise.com
> https://lists.sipwise.com/listinfo/spce-user
>
>
>
>
>
>
>
>
> --
>
> Abel Alejandro
> 787 586 8313   787 705 0555
>
>
> 400 Calle Calaf 477
> San Juan, PR 00918
> aalejandro at alliedtechnologygrouppr.com
>
>
> _______________________________________________
> Spce-user mailing list
> Spce-user at lists.sipwise.com
> https://lists.sipwise.com/listinfo/spce-user
>
>
> _______________________________________________
> Spce-user mailing list
> Spce-user at lists.sipwise.com
> https://lists.sipwise.com/listinfo/spce-user
>
>


-- 
*Abel Alejandro*

787 586 8313 | 787 705 0555
<joquendo at alliedtechnologygrouppr.com>

400 Calle Calaf 477
San Juan, PR 00918
aalejandro at alliedtechnologygrouppr.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/attachments/20160528/68ca381e/attachment-0001.html>