[asterisk-bugs] [Asterisk 0012631]: Asterisk replies with VNAK (and wrong destination call) to AUTHREQ to its NEW (sometimes) when call bounced back.

noreply at bugs.digium.com noreply at bugs.digium.com
Tue May 13 13:16:19 CDT 2008


A NOTE has been added to this issue. 
====================================================================== 
http://bugs.digium.com/view.php?id=12631 
====================================================================== 
Reported By:                lmamane
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   12631
Category:                   Channels/chan_iax2
Reproducibility:            random
Severity:                   major
Priority:                   normal
Status:                     new
Asterisk Version:           1.4.19 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!):  
Disclaimer on File?:        N/A 
Request Review:              
====================================================================== 
Date Submitted:             05-12-2008 17:19 CDT
Last Modified:              05-13-2008 13:16 CDT
====================================================================== 
Summary:                    Asterisk replies with VNAK (and wrong destination
call) to AUTHREQ to its NEW (sometimes) when call bounced back.
Description: 
Two asterisk boxes, A and T. T is 82.95.233.223 and A is 193.202.115.224.
Both machines run Asterisk 1.4.19.1.
T makes an IAX2 call to A (through a peer/user association and RSA
authentication or through DUNDi, the problem happens in both cases), which
ends up executing this in the dialplan of A:

Dial(Local/1010 at lemfat-lookup&Local/1012 at lemfat-lookup&SIP/lionel&IAX2/lionel)

Local/1010 at lemfat-lookup itself through a DUNDi lookup is an IAX2 call
back to T, of the form:
 dundi:SECRET at 82.95.233.223/1010 at incoming-lemfat
thus _not_ using the same peer/user association, but the DUNDi user with
its rotating secret system.

Sometimes, that call works fine, and sometimes it doesn't. When it doesn't
work, A's console says:

    -- Executing [1001 at incoming-lemfat:1] Dial("IAX2/dundi-11958",
"Local/1010 at lemfat-lookup&Local/1012 at lemfat-lookup&SIP/lionel&IAX2/lionel")
in new stack
    -- Called 1010 at lemfat-lookup
    -- Called 1012 at lemfat-lookup
    -- Called dundi:SECRET at 88.207.241.223/1012 at incoming-lemfat
    -- Called dundi:SECRET at 82.95.233.223/1010 at incoming-lemfat
    -- Hungup 'IAX2/82.95.233.223:4569-6823'
  == Everyone is busy/congested at this time (1:0/0/1)

and T's console does not register the call at all.

Running a wireshark on T shows the following sequence of IAX2 packets:

Internet Protocol, Src: 82.95.233.223 (82.95.233.223), Dst:
193.202.115.224 (193.202.115.224)
User Datagram Protocol, Src Port: iax (4569), Dst Port: iax (4569)
Inter-Asterisk eXchange v2
    Packet type: Full packet (1)
        .011 0011 0001 0101 = Source call: 13077
        .000 0000 0000 0000 = Destination call: 0
        0... .... .... .... = Retransmission: False
        [Call identifier: 39]
        Timestamp: 10
        [Absolute Time: May 12, 2008 22:53:20.159322000]
        [Lateness: -0.009000000 seconds]
        Outbound seq.no.: 0
        Inbound seq.no.: 0
        Type: IAX (6)
            IAX subclass: NEW (1)
Internet Protocol, Src: 193.202.115.224 (193.202.115.224), Dst:
82.95.233.223 (82.95.233.223)
User Datagram Protocol, Src Port: iax (4569), Dst Port: iax (4569)
Inter-Asterisk eXchange v2
    Packet type: Full packet (1)
        .010 1110 1011 0110 = Source call: 11958
        .011 0011 0001 0101 = Destination call: 13077
        0... .... .... .... = Retransmission: False
        [Call identifier: 39]
        Timestamp: 11
        [Absolute Time: May 12, 2008 22:53:20.160322000]
        [Lateness: 0.004056000 seconds]
        Outbound seq.no.: 0
        Inbound seq.no.: 1
        Type: IAX (6)
            IAX subclass: AUTHREQ (8)
Internet Protocol, Src: 82.95.233.223 (82.95.233.223), Dst:
193.202.115.224 (193.202.115.224)
User Datagram Protocol, Src Port: iax (4569), Dst Port: iax (4569)
Inter-Asterisk eXchange v2
    Packet type: Full packet (1)
        .011 0011 0001 0101 = Source call: 13077
        .010 1110 1011 0110 = Destination call: 11958
        0... .... .... .... = Retransmission: False
        [Call identifier: 39]
        Timestamp: 26
        [Absolute Time: May 12, 2008 22:53:20.175322000]
        [Lateness: -0.008908000 seconds]
        Outbound seq.no.: 1
        Inbound seq.no.: 1
        Type: IAX (6)
            IAX subclass: AUTHREP (9)
Internet Protocol, Src: 193.202.115.224 (193.202.115.224), Dst:
82.95.233.223 (82.95.233.223)
User Datagram Protocol, Src Port: iax (4569), Dst Port: iax (4569)
Inter-Asterisk eXchange v2
    Packet type: Full packet (1)
        .010 1110 1011 0110 = Source call: 11958
        .011 0011 0001 0101 = Destination call: 13077
        0... .... .... .... = Retransmission: False
        [Call identifier: 39]
        Timestamp: 26
        [Absolute Time: May 12, 2008 22:53:20.175322000]
        [Lateness: 0.004305000 seconds]
        Outbound seq.no.: 1
        Inbound seq.no.: 2
        Type: IAX (6)
            IAX subclass: ACCEPT (7)
Internet Protocol, Src: 82.95.233.223 (82.95.233.223), Dst:
193.202.115.224 (193.202.115.224)
User Datagram Protocol, Src Port: iax (4569), Dst Port: iax (4569)
Inter-Asterisk eXchange v2
    Packet type: Full packet (1)
        .011 0011 0001 0101 = Source call: 13077
        .010 1110 1011 0110 = Destination call: 11958
        0... .... .... .... = Retransmission: False
        [Call identifier: 39]
        Timestamp: 26
        [Absolute Time: May 12, 2008 22:53:20.175322000]
        [Lateness: 0.006499000 seconds]
        Outbound seq.no.: 2
        Inbound seq.no.: 2
        Type: IAX (6)
            IAX subclass: ACK (4)

That is, the call from T to A goes correctly. Now, the call from A to T:

Internet Protocol, Src: 193.202.115.224 (193.202.115.224), Dst:
82.95.233.223 (82.95.233.223)
User Datagram Protocol, Src Port: iax (4569), Dst Port: iax (4569)
Inter-Asterisk eXchange v2
    Packet type: Full packet (1)
        .001 1010 1010 0111 = Source call: 6823
        .000 0000 0000 0000 = Destination call: 0
        0... .... .... .... = Retransmission: False
        [Call identifier: 41]
        Timestamp: 7
        [Absolute Time: May 12, 2008 22:53:20.265737000]
        [Lateness: -0.006000000 seconds]
        Outbound seq.no.: 0
        Inbound seq.no.: 0
        Type: IAX (6)
            IAX subclass: NEW (1)
Internet Protocol, Src: 82.95.233.223 (82.95.233.223), Dst:
193.202.115.224 (193.202.115.224)
User Datagram Protocol, Src Port: iax (4569), Dst Port: iax (4569)
Inter-Asterisk eXchange v2
    Packet type: Full packet (1)
        .011 0010 1101 0000 = Source call: 13008
        .001 1010 1010 0111 = Destination call: 6823
        0... .... .... .... = Retransmission: False
        [Call identifier: 41]
        Timestamp: 1
        [Absolute Time: May 12, 2008 22:53:20.259737000]
        [Lateness: 0.002017000 seconds]
        Outbound seq.no.: 0
        Inbound seq.no.: 1
        Type: IAX (6)
            IAX subclass: AUTHREQ (8)
Internet Protocol, Src: 193.202.115.224 (193.202.115.224), Dst:
82.95.233.223 (82.95.233.223)
User Datagram Protocol, Src Port: iax (4569), Dst Port: iax (4569)
Inter-Asterisk eXchange v2
    Packet type: Full packet (1)
        .001 1010 1010 0111 = Source call: 6823
        .011 0011 0001 0101 = Destination call: 13077
        0... .... .... .... = Retransmission: False
        Timestamp: 10
        Outbound seq.no.: 0
        Inbound seq.no.: 0
        Type: IAX (6)
            IAX subclass: VNAK (18)

Note that the VNAK comes with the wrong destination call number! It is the
destination call of the T->A call, but it is sent in answer to the AUTHREQ
of the A->T call! T used to be Asterisk 1.4.18.1 and replied by resending
the AUTHREQ, which triggered an INVAL and VNAK from A (Asterisk 1.4.19.1)
and again an INVAL from T and thus ended the call, but I upgraded T to
Asterisk 1.4.19.1 and now it replies with an INVAL directly:

Internet Protocol, Src: 82.95.233.223 (82.95.233.223), Dst:
193.202.115.224 (193.202.115.224)
User Datagram Protocol, Src Port: iax (4569), Dst Port: iax (4569)
Inter-Asterisk eXchange v2
    Packet type: Full packet (1)
        .011 0011 0001 0101 = Source call: 13077
        .001 1010 1010 0111 = Destination call: 6823
        0... .... .... .... = Retransmission: False
        Timestamp: 0
        Outbound seq.no.: 0
        Inbound seq.no.: 0
        Type: IAX (6)
            IAX subclass: INVAL (10)
Internet Protocol, Src: 193.202.115.224 (193.202.115.224), Dst:
82.95.233.223 (82.95.233.223)
User Datagram Protocol, Src Port: iax (4569), Dst Port: iax (4569)
Inter-Asterisk eXchange v2
    Packet type: Full packet (1)
        .001 1010 1010 0111 = Source call: 6823
        .011 0010 1101 0000 = Destination call: 13008
        0... .... .... .... = Retransmission: False
        [Call identifier: 41]
        Timestamp: 0
        [Absolute Time: May 12, 2008 22:53:20.258737000]
        [Lateness: 0.016007000 seconds]
        Outbound seq.no.: 0
        Inbound seq.no.: 0
        Type: IAX (6)
            IAX subclass: INVAL (10)


Here is the chan_iax debug output on A (from another instance of the
problem, so the call numbers will not match with the wireshark-captured
packets, sorry):

[May 12 23:52:45] DEBUG[4429] chan_iax2.c: New max nontrunk callno is
13704
[May 12 23:52:45] DEBUG[4429] chan_iax2.c: Creating new call structure
13703
[May 12 23:52:45] DEBUG[4429] chan_iax2.c: Received packet 0, (6, 1)
[May 12 23:52:45] DEBUG[4429] chan_iax2.c: IAX subclass 1 received
[May 12 23:52:45] DEBUG[4429] chan_iax2.c: For call=13703, set last=8
[May 12 23:52:45] DEBUG[4437] chan_iax2.c: Sending 10 on 13703/5011 to
82.95.233.223:4569
[May 12 23:52:45] DEBUG[4427] chan_iax2.c: Received packet 1, (6, 9)
[May 12 23:52:45] DEBUG[4427] chan_iax2.c: Cancelling transmission of
packet 0
[May 12 23:52:45] DEBUG[4427] chan_iax2.c: IAX subclass 9 received
[May 12 23:52:45] DEBUG[4427] chan_iax2.c: For call=13703, set last=24
[May 12 23:52:45] DEBUG[4427] chan_iax2.c: We don't do requested format
alaw, falling back to peer capability 60030
[May 12 23:52:45] DEBUG[4437] chan_iax2.c: Sending 26 on 13703/5011 to
82.95.233.223:4569
[May 12 23:52:45] DEBUG[4435] chan_iax2.c: Received packet 2, (6, 4)
[May 12 23:52:45] DEBUG[4435] chan_iax2.c: Cancelling transmission of
packet 1
[May 12 23:52:45] DEBUG[4435] chan_iax2.c: IAX subclass 4 received
[May 12 23:52:45] DEBUG[4432] chan_iax2.c: Received packet 2, (2, 4)
[May 12 23:52:45] DEBUG[4432] chan_iax2.c: Ooh, voice format changed to 4
[May 12 23:52:45] DEBUG[4432] chan_iax2.c: Sending 60 on 13703/5011 to
82.95.233.223:4569
[May 12 23:52:45] DEBUG[4432] chan_iax2.c: For call=13703, set last=60
[May 12 23:52:45] DEBUG[4428] chan_iax2.c: For call=13703, set last=80
[May 12 23:52:46] DEBUG[4433] chan_iax2.c: For call=13703, set last=100
[May 12 23:52:46] DEBUG[17095] chan_iax2.c: New max nontrunk callno is
13704
[May 12 23:52:46] DEBUG[17095] chan_iax2.c: Creating new call structure
845
[May 12 23:52:46] DEBUG[4437] chan_iax2.c: Sending 3 on 845/0 to
82.95.233.223:4569
[May 12 23:52:46] DEBUG[4420] chan_iax2.c: Checking device state for
device 82.95.233.223
[May 12 23:52:46] DEBUG[4420] chan_iax2.c: Checking device state for
device 82.95.233.223
[May 12 23:52:46] DEBUG[4431] chan_iax2.c: Received mini frame before
first full voice frame
[May 12 23:52:46] DEBUG[4431] chan_iax2.c: Sending 10 on 845/5011 to
82.95.233.223:4569
[May 12 23:52:46] DEBUG[4434] chan_iax2.c: Raw Hangup 82.95.233.223:4569,
src=845, dst=10037
[May 12 23:52:46] DEBUG[4429] chan_iax2.c: Received packet 0, (6, 10)
[May 12 23:52:46] DEBUG[4429] chan_iax2.c: IAX subclass 10 received
[May 12 23:52:46] DEBUG[4429] chan_iax2.c: Immediately destroying 845,
having received INVAL
[May 12 23:52:46] DEBUG[4429] chan_iax2.c: Destroying call 845
[May 12 23:52:46] DEBUG[4430] chan_iax2.c: Received mini frame before
first full voice frame
[May 12 23:52:46] DEBUG[4427] chan_iax2.c: Received mini frame before
first full voice frame
[May 12 23:52:46] DEBUG[17095] chan_iax2.c: We're hanging up
IAX2/82.95.233.223:4569-845 with cause 0 now...
[May 12 23:52:46] DEBUG[17095] chan_iax2.c: Really destroying
IAX2/82.95.233.223:4569-845 now...
[May 12 23:52:46] DEBUG[17096] chan_iax2.c: New max nontrunk callno is
13704
[May 12 23:52:46] DEBUG[17096] chan_iax2.c: Creating new call structure
8460
[May 12 23:52:46] DEBUG[4420] chan_iax2.c: Checking device state for
device 82.95.233.223
[May 12 23:52:46] DEBUG[4420] chan_iax2.c: Checking device state for
device 82.95.233.223
[May 12 23:52:46] DEBUG[4420] chan_iax2.c: Checking device state for
device 88.207.241.223
[May 12 23:52:46] DEBUG[4420] chan_iax2.c: Checking device state for
device 88.207.241.223
[May 12 23:52:46] DEBUG[4437] chan_iax2.c: Sending 4 on 8460/0 to
88.207.241.223:4569
[May 12 23:52:46] DEBUG[4435] chan_iax2.c: For call=13703, set last=180
[May 12 23:52:46] DEBUG[4432] chan_iax2.c: For call=13703, set last=200
[May 12 23:52:46] DEBUG[4426] chan_iax2.c: Received packet 0, (6, 8)
[May 12 23:52:46] DEBUG[4426] chan_iax2.c: Cancelling transmission of
packet 0
[May 12 23:52:46] DEBUG[4426] chan_iax2.c: IAX subclass 8 received
[May 12 23:52:46] DEBUG[4426] chan_iax2.c: For call=8460, set last=4
[May 12 23:52:46] DEBUG[4437] chan_iax2.c: Sending 39 on 8460/3 to
88.207.241.223:4569
[May 12 23:52:46] DEBUG[4428] chan_iax2.c: For call=13703, set last=220
[May 12 23:52:46] DEBUG[4433] chan_iax2.c: For call=13703, set last=240
[May 12 23:52:46] DEBUG[4431] chan_iax2.c: Received packet 1, (6, 7)
[May 12 23:52:46] DEBUG[4431] chan_iax2.c: Cancelling transmission of
packet 1
[May 12 23:52:46] DEBUG[4431] chan_iax2.c: IAX subclass 7 received
[May 12 23:52:46] DEBUG[4431] chan_iax2.c: For call=8460, set last=38
[May 12 23:52:46] DEBUG[4431] chan_iax2.c: Sending 38 on 8460/3 to
88.207.241.223:4569
[May 12 23:52:46] DEBUG[4434] chan_iax2.c: For call=13703, set last=260
[May 12 23:52:46] DEBUG[4429] chan_iax2.c: Received packet 2, (4, 3)
[May 12 23:52:46] DEBUG[4429] chan_iax2.c: Sending 41 on 8460/3 to
88.207.241.223:4569
[May 12 23:52:46] DEBUG[4429] chan_iax2.c: For call=8460, set last=41
[May 12 23:52:46] DEBUG[17094] chan_iax2.c: Indicating condition 3
[May 12 23:52:46] DEBUG[4437] chan_iax2.c: Sending 268 on 13703/5011 to
82.95.233.223:4569
[May 12 23:52:46] DEBUG[4430] chan_iax2.c: For call=13703, set last=280
[May 12 23:52:46] DEBUG[4427] chan_iax2.c: Received packet 3, (6, 4)
[May 12 23:52:46] DEBUG[4427] chan_iax2.c: Cancelling transmission of
packet 2
[May 12 23:52:46] DEBUG[4427] chan_iax2.c: IAX subclass 4 received
[May 12 23:52:46] DEBUG[4435] chan_iax2.c: For call=13703, set last=300
[May 12 23:52:46] DEBUG[4432] chan_iax2.c: For call=13703, set last=320
[May 12 23:52:46] DEBUG[4426] chan_iax2.c: For call=13703, set last=340
[May 12 23:52:46] DEBUG[4428] chan_iax2.c: For call=13703, set last=360
[May 12 23:52:46] DEBUG[4433] chan_iax2.c: For call=13703, set last=380
[May 12 23:52:46] DEBUG[4431] chan_iax2.c: For call=13703, set last=400
[May 12 23:52:46] DEBUG[4434] chan_iax2.c: For call=13703, set last=420
[May 12 23:52:46] DEBUG[4429] chan_iax2.c: For call=13703, set last=440
[May 12 23:52:46] DEBUG[4430] chan_iax2.c: For call=13703, set last=460
[May 12 23:52:46] DEBUG[4427] chan_iax2.c: For call=13703, set last=480
[May 12 23:52:46] DEBUG[4435] chan_iax2.c: For call=13703, set last=500

====================================================================== 

---------------------------------------------------------------------- 
 russell - 05-13-08 13:16  
---------------------------------------------------------------------- 
The changes I did in 1.4.19.1 for the security issue destroyed IAX2
performance.  :(  However, 1.4.19.2 is now available which addresses those
issues.  Please give it a try to see if your issue goes away.  It's
possible that it was a side effect ... 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
05-13-08 13:16  russell        Note Added: 0086797                          
======================================================================




More information about the asterisk-bugs mailing list