[asterisk-bugs] [Asterisk 0015470]: OPTIONS Messages Flood - Memory Crash

[Asterisk Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://issues.asterisk.org/view.php?id=15470 
====================================================================== 
Reported By:                maxgo
Assigned To:                
====================================================================== 
Project:                    Asterisk
Issue ID:                   15470
Category:                   Channels/chan_sip/General
Reproducibility:            sometimes
Severity:                   major
Priority:                   normal
Status:                     new
Asterisk Version:           Older 1.4 
Regression:                 No 
SVN Branch (only for SVN checkouts, not tarball releases): N/A 
SVN Revision (number only!): 198665 
Request Review:              
====================================================================== 
Date Submitted:             2009-07-08 14:09 CDT
Last Modified:              2009-07-08 14:10 CDT
====================================================================== 
Summary:                    OPTIONS Messages Flood - Memory Crash
Description: 
Exact revision of Asterisk: Asterisk SVN-branch-1.4-r198665

Checked out from svn using version 1.4:
svn co http://svn.digium.com/svn/asterisk/branches/1.4 asterisk-1.4

Problem: Thousands of OPTIONS messages are sent per minute to particular
devices.

This has happened with a Cisco 7940 with the NAT IP wrongly configured
having an internal IP address that didn't belong to the phone. after it was
corrected to have the router's external IP, the OPTIONS messages stopped.

Asterisk gets to a point where it can't receive any calls because there's
not enough memory left.

It also happened with a Linksys PAP2 that has a public IP, so the
correction above can't be reproduced.


====================================================================== 

---------------------------------------------------------------------- 
 (0107490) maxgo (reporter) - 2009-07-08 14:10
 https://issues.asterisk.org/view.php?id=15470#c107490 
---------------------------------------------------------------------- 
This is to show an example of what happens, but it happens continuously
without stopping:

Reliably Transmitting (NAT) to a.b.c.d:5062:
OPTIONS sip:1021012 at a.b.c.d:49155 SIP/2.0
Via: SIP/2.0/UDP w.x.y.z:5060;branch=z9hG4bK057f2272;rport
From: "asterisk" <sip:asterisk at w.x.y.z>;tag=as3a56b084
To: <sip:1021012 at a.b.c.d:49155>
Contact: <sip:asterisk at w.x.y.z>
Call-ID: 1756365265860042395ffb7711aaf9f0 at w.x.y.z
CSeq: 102 OPTIONS
User-Agent: ComtelPBX
Max-Forwards: 70
Date: Wed, 08 Jul 2009 18:48:24 GMT
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
Content-Length: 0


---
Reliably Transmitting (NAT) to a.b.c.d:5062:
OPTIONS sip:1021012 at a.b.c.d:49155 SIP/2.0
Via: SIP/2.0/UDP w.x.y.z:5060;branch=z9hG4bK3c1b6069;rport
From: "asterisk" <sip:asterisk at w.x.y.z>;tag=as05a9953f
To: <sip:1021012 at a.b.c.d:49155>
Contact: <sip:asterisk at w.x.y.z>
Call-ID: 4067580232c2d62833e049af4b357a1c at w.x.y.z
CSeq: 102 OPTIONS
User-Agent: ComtelPBX
Max-Forwards: 70
Date: Wed, 08 Jul 2009 18:48:24 GMT
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Supported: replaces
Content-Length: 0


---
Really destroying SIP dialog '04d130497072819a35d2b64038dd5d82 at w.x.y.z'
Method: OPTIONS
Really destroying SIP dialog '5b2a49815c038df87ea44a0158af8692 at w.x.y.z'
Method: OPTIONS
Really destroying SIP dialog '53a86bc348e2d99940778c310d7decef at w.x.y.z'
Method: OPTIONS
Really destroying SIP dialog '4984cbf5589d19d125151bbf7d415af5 at w.x.y.z'
Method: OPTIONS
Really destroying SIP dialog '7255e5b40e2ca7d91fa398a35ca9c408 at w.x.y.z'
Method: OPTIONS
Really destroying SIP dialog '34cb125673b69c31797dff5b054229ff at w.x.y.z'
Method: OPTIONS
Really destroying SIP dialog '4216cada6ac42d5e6a6320c629ed6ae6 at w.x.y.z'
Method: OPTIONS
Really destroying SIP dialog '715c2ed30b8610db229e0e1a06f64dad at w.x.y.z'
Method: OPTIONS
Really destroying SIP dialog '556e193e05cbc1816c89d133592e1feb at w.x.y.z'
Method: OPTIONS
Really destroying SIP dialog '756b66693fd064e45c5b77fd08db74cd at w.x.y.z'
Method: OPTIONS
Really destroying SIP dialog '5ed6bab0049a5c285074ff83356e7a05 at w.x.y.z'
Method: OPTIONS
Really destroying SIP dialog '093fdd990161868421ccc1aa23b7f840 at w.x.y.z'
Method: OPTIONS
Really destroying SIP dialog '029adb457364b0331a2655eb727bfc25 at w.x.y.z'
Method: OPTIONS
Really destroying SIP dialog '6c86f5296c33c72f793f5edf724270c1 at w.x.y.z'
Method: OPTIONS
Really destroying SIP dialog '0c202a5225e511e171b723a5308e9b5e at w.x.y.z'
Method: OPTIONS
Really destroying SIP dialog '41ab2e6f0fa1274f636b34f41c94706d at w.x.y.z'
Method: OPTIONS
Really destroying SIP dialog '2102dc1d0ecab9e02f76cb3f104b496d at w.x.y.z'
Method: OPTIONS
Really destroying SIP dialog '67b5ed106990ea854e601d760696077f at w.x.y.z'
Method: OPTIONS
Really destroying SIP dialog '15251e996a7ba1847dd6f4b72b3aa62a at w.x.y.z'
Method: OPTIONS
Really destroying SIP dialog '1577553c72a720be0e6cb2c431aae4e9 at w.x.y.z'
Method: OPTIONS
Really destroying SIP dialog '2b1af9e00c9c9f2d68961a5d17a48541 at w.x.y.z'
Method: OPTIONS
Really destroying SIP dialog '4210cec140ac0fa613a406b549255bc9 at w.x.y.z'
Method: OPTIONS
Really destroying SIP dialog '0d9c1d4a7fe56c6e08f7d39f1c89ef0e at w.x.y.z'
Method: OPTIONS
Really destroying SIP dialog '61558f39295aee1874e66f312ebc3fe2 at w.x.y.z'
Method: OPTIONS 

Issue History 
Date Modified    Username       Field                    Change               
====================================================================== 
2009-07-08 14:10 maxgo          Note Added: 0107490                          
======================================================================