[asterisk-bugs] [JIRA] (ASTERISK-29757) TCP: SIP Packets Being Combined

[Luke Escude (JIRA)]

     [ https://issues.asterisk.org/jira/browse/ASTERISK-29757?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Luke Escude updated ASTERISK-29757:
-----------------------------------

    Attachment: Screen Shot 2021-11-17 at 12.41.00 PM.png

I'm still exploring the memory leak in ASTERISK-29232 and found ASTERISK-26005 - Decided to take a look at the packets and saw that it was happening.

You're sure this is normal? I suppose it just feels weird for that to happen.

I've attached a screenshot (sorry for the redactions, all the VoIP DDOS attacks going on have me a bit tight on security) and one of the lines highlighted shows OPTIONS messages all combined.

> TCP: SIP Packets Being Combined
> -------------------------------
>
>                 Key: ASTERISK-29757
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-29757
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: pjproject/pjsip
>    Affects Versions: 16.22.0
>            Reporter: Luke Escude
>            Assignee: Luke Escude
>            Severity: Major
>         Attachments: Screen Shot 2021-11-17 at 12.41.00 PM.png
>
>
> So on a larger customer system, I'm seeing SIP messages being combined into a single packet, resulting in a large MTU size.
> It kind of reminds me of ASTERISK-26005 actually
> I'll attach a screenshot of wireshark showing this anomaly



--
This message was sent by Atlassian JIRA
(v6.2#6252)