[Spce-user] Under what scenario could sipwise silently drop an invite?

[Marco Teixeira]

It was an example.
What i meant was that, usually, sniffers set the NIC to promiscuous,
meaning that they will catch whatever garbage arrives at the IP stack. The
iptables was an example. Others have pointed before, maybe your config is
not binding to the correct port ? maybe you don't have the correct domain
configured in sipwise ?


---
Best regards
Marco
---


On Sat, May 28, 2016 at 1:18 PM, Abel Alejandro <
aalejandro at alliedtechnologygrouppr.com> wrote:

> Hey Marco,
>
> I do not mean the server iptables, I do not run anything other than
> sipwise + sniffer, I mean the anti DDoS of the sipwise itself.
>
>
>
> On Sat, May 28, 2016 at 8:04 AM, Marco Teixeira <admin at marcoteixeira.com>
> wrote:
>
>> Hi Abel,
>> Carefull with your assumptions. As an example, if i run sip-ngrep on the
>> server, it will see all the traffic even before iptables drops it...
>> Em 27/05/2016 20:12, "Abel Alejandro" <
>> aalejandro at alliedtechnologygrouppr.com> escreveu:
>>
>>> Well, the network capture is a network application that runs on the same
>>> sipwise server, its from the voipmonitor.org guys, I dont see how the
>>> network sniffer could capture the data and at the same time the server not
>>> deliver it to the kamalio process.
>>>
>>> I sent you the pcap capture privately, but yes the domain looks correct.
>>> Is there no chance the endpoint was banned during this time? Would that
>>> skip the logs?
>>>
>>>
>>> On Fri, May 27, 2016 at 2:59 PM, Daniel Grotti <dgrotti at sipwise.com>
>>> wrote:
>>>
>>>> Hi,
>>>> Well if no request are on Kamailio-lb, then invites never reached the
>>>> server.
>>>> Are you sure the invite was heading to the right sip domain?
>>>>
>>>> Daniel
>>>> On May 27, 2016 8:51 PM, Abel Alejandro <
>>>> aalejandro at alliedtechnologygrouppr.com> wrote:
>>>>
>>>> Hello,
>>>>
>>>> I am testing a voipmonitor and just saw an interesting call where an
>>>> endpoint sent to sipwise 3 invites and it never got answered. Mind you I am
>>>> doing the voipmonitor capture at the sipwise server itself so there is no
>>>> chance of network packet loss here.
>>>>
>>>> When I take a look at the logs I dont even see the request
>>>> in kamailio-lb.log or kamailio-proxy.log , is there any other place I could
>>>> check?
>>>>
>>>>
>>>>
>>>> --
>>>> *Abel Alejandro*
>>>>
>>>> 787 586 8313 | 787 705 0555
>>>> <joquendo at alliedtechnologygrouppr.com>
>>>>
>>>> 400 Calle Calaf 477
>>>> San Juan, PR 00918
>>>> aalejandro at alliedtechnologygrouppr.com
>>>>
>>>>
>>>
>>>
>>> --
>>> *Abel Alejandro*
>>>
>>> 787 586 8313 | 787 705 0555
>>> <joquendo at alliedtechnologygrouppr.com>
>>>
>>> 400 Calle Calaf 477
>>> San Juan, PR 00918
>>> aalejandro at alliedtechnologygrouppr.com
>>>
>>> _______________________________________________
>>> Spce-user mailing list
>>> Spce-user at lists.sipwise.com
>>> https://lists.sipwise.com/listinfo/spce-user
>>>
>>>
>
>
> --
> *Abel Alejandro*
>
> 787 586 8313 | 787 705 0555
> <joquendo at alliedtechnologygrouppr.com>
>
> 400 Calle Calaf 477
> San Juan, PR 00918
> aalejandro at alliedtechnologygrouppr.com
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/attachments/20160528/12bfa199/attachment-0001.html>