[asterisk-users] INVAL Messages
Adrian Marsh
Adrian.Marsh at ubiquisys.com
Tue Oct 24 08:14:06 MST 2006
Hi Marian,
I think we worked it out... (time will tell now)..
Our gateway people were able to put IAX2 debug on, and then filter the
trace (manually!) so that we could compare call-flow.
Heres what they saw:
lon-pbx-backup-1*CLI>
Tx-Frame Retry[001] -- OSeqno: 000 ISeqno: 000 Type: IAX Subclass:
NEW
Timestamp: 00006ms SCall: 00074 DCall: 00000 [xx.xx.xx.xx:4569]
lon-pbx-backup-1*CLI>
Rx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 001 Type: IAX Subclass:
ACK
Timestamp: 00006ms SCall: 00001 DCall: 00074 [xx.xx.xx.xx:49308]
lon-pbx-backup-1*CLI>
Rx-Frame Retry[Yes] -- OSeqno: 000 ISeqno: 001 Type: IAX Subclass:
AUTHREQ
Timestamp: 00009ms SCall: 00001 DCall: 00074 [xx.xx.xx.xx:49308]
AUTHMETHODS : 3
CHALLENGE : 552508132
USERNAME : ubigradin
lon-pbx-backup-1*CLI>
Tx-Frame Retry[000] -- OSeqno: 001 ISeqno: 000 Type: IAX Subclass:
HANGUP
Timestamp: 08017ms SCall: 00074 DCall: 00000 [xx.xx.xx.xx:4569]
CAUSE CODE : 0
lon-pbx-backup-1*CLI>
Rx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 000 Type: IAX Subclass:
INVAL
Timestamp: 00000ms SCall: 00000 DCall: 00074 [xx.xx.xx.xx:49308]
We don't quite understand is the HANGUP.. but we did note the 49308
port.. So the NAT router was changing to different ports.
We believe that a Draytek router uses two definitions for NATing... Port
Forwarding and "Open Ports". We've switched to "Open Ports" (which
really seems like its intended for a RANGE of ports, but we've specified
only one. Now when we ethereal our WAN connection, we see 4569 in both
directions..
Hopefully solved...
Thanks!
Adrian Marsh
Tel: +44 (0) 20 71833427
Fax: +44 (0) 1793 441594
http://www.ubiquisys.com
-----Original Message-----
From: asterisk-users-bounces at lists.digium.com
[mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of Marian
Rychtecky
Sent: 24 October 2006 11:23
To: Asterisk Users Mailing List - Non-Commercial Discussion
Subject: Re: [asterisk-users] INVAL Messages
Hi Adrian,
yes this problem has happen only sometime, but i dont know
exactly
when.... i has discover this - plase read my comments:
A)Calling directly via public IP's (port 4569 is forwarded on ADSL modem
to asterisk1) - not working
Tx-Frame Retry[000] -- OSeqno: 000 ISeqno: 000 Type: IAX Subclass:
NEW
Timestamp: 00013ms SCall: 00004 DCall: 00000
[213.160.177.186:4569]
---------> here is source port of transmiting packet 4569 (my site) ....
VERSION : 2
CALLED NUMBER : 1299
CODEC_PREFS : ()
CALLING NUMBER : 1199
CALLING PRESNTN : 0
CALLING TYPEOFN : 0
CALLING TRANSIT : 0
CALLING NAME : Marian_Rychtecky
LANGUAGE : en
USERNAME : <some_username>
FORMAT : 2
CAPABILITY : 2097151
ADSICPE : 2
DATE TIME : 2006-10-18 10:16:14
Rx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 001 Type: IAX Subclass:
AUTHREQ
Timestamp: 00006ms SCall: 00003 DCall: 00004
[213.160.177.186:9785]
----------> but here i got response from port 9785 (other site, because
of NAT translation on other site)
AUTHMETHODS : 3
CHALLENGE : 585590037
USERNAME : VALSABBIA-SLOVENSKO
Tx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 000 Type: IAX Subclass:
INVAL
Timestamp: 00000ms SCall: 00004 DCall: 00003
[213.160.177.186:9785]
B) calling thru openvpn - working
Tx-Frame Retry[000] -- OSeqno: 000 ISeqno: 000 Type: IAX Subclass:
NEW
Timestamp: 00004ms SCall: 00001 DCall: 00000 [192.168.255.2:4569]
----------> here im sending the same packet to port 4569...
VERSION : 2
CALLED NUMBER : 1299
CODEC_PREFS : ()
CALLING NUMBER : 1199
CALLING PRESNTN : 0
CALLING TYPEOFN : 0
CALLING TRANSIT : 0
CALLING NAME : Marian_Rychtecky
LANGUAGE : en
USERNAME : <user_name>
FORMAT : 2
CAPABILITY : 2097151
ADSICPE : 2
DATE TIME : 2006-10-18 10:14:16
-- Called VALSABBIA-SLOVENSKO:1234 at 192.168.255.2/1299
Rx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 001 Type: IAX Subclass:
AUTHREQ
Timestamp: 00012ms SCall: 00001 DCall: 00001 [192.168.255.2:4569]
-----------> here i got reply from port 4569 (and this port is excepted)
AUTHMETHODS : 3
CHALLENGE : 186694617
USERNAME : VALSABBIA-SLOVENSKO
Tx-Frame Retry[000] -- OSeqno: 001 ISeqno: 001 Type: IAX Subclass:
AUTHREP
Timestamp: 00034ms SCall: 00001 DCall: 00001 [192.168.255.2:4569]
MD5 RESULT : b0674601456416db7e474de9a858c742
Rx-Frame Retry[ No] -- OSeqno: 001 ISeqno: 002 Type: IAX Subclass:
ACCEPT
------------> so get ACCEPT and evething is working
Timestamp: 00041ms SCall: 00001 DCall: 00001 [192.168.255.2:4569]
FORMAT : 2
So i suppose that is the problem with comparing of source and
destination port of IAX2 packets....
Look at your tcpdump and write me plase if you have the same troubles.
Good luck, Marian
Adrian Marsh napsal(a):
> Hi Marian,
>
> Thanks for the info, something I'll check into... we have recently
> swapped the router over..
>
> We receive a NEW message:
>
> THEM > US (new)
>
> So the port forward (inbound) works ok..
>
> We send them a reply:
>
> THEM < US (AUTHREQ)
>
> And then they send us the INVAL...
>
> THEM > US (INVAL)
>
> Now if any of the SRC ports got changed incorrectly, then wouldn't the
> call stop completely?
>
> This only happens some of the time, intermittently - is yours
constant?
>
> I've a Draytek 2910G router..
>
>
> Adrian Marsh
>
>
> Tel: +44 (0) 20 71833427
> Fax: +44 (0) 1793 441594
>
> http://www.ubiquisys.com
>
> -----Original Message-----
> From: asterisk-users-bounces at lists.digium.com
> [mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of Marian
> Rychtecky
> Sent: 23 October 2006 20:07
> To: Asterisk Users Mailing List - Non-Commercial Discussion
> Subject: Re: [asterisk-users] INVAL Messages
>
> Hi Adrian,
> are you using this IAX thru NAT? I have this problem when i try
> call
> with IAX2 and this Asterisk server is behind the NAT...
>
> I think its here problem with UDP source port which is changed in NAT
> router, but im not sure 100%....
>
> Marian
>
> Adrian Marsh napsal(a):
>> All,
>>
>>
>>
>> Has anyone seen INVAL messages on an IAX link before?
>>
>>
>>
>> I'm occasionally getting them from my Gateway provider, and I need to
>> narrow down the potential cause.
>>
>>
>>
>> Symptoms are: Incoming calls fail, I see NEW, AUTHREQ then INVAL
>> messages between the two A*k boxes... then for no reason at all it'll
>> start working ok again..
>>
>>
>>
>>
>>
>> My Asterisik: 1.2.10, Gateway A*k : 1.2.0 - Any known issues
> with
>> IAX on either?
>>
>>
>>
>>
>>
>> My best guess so far is that the packets are getting corrupted
>> on-route.. and I've asked the gateway folks to capture the traffic
> when
>> it happens again to confirm...
>>
>>
>>
>> Thanks,
>>
>>
>>
>> Adrian
>>
>>
>>
>
------------------------------------------------------------------------
>> _______________________________________________
>> --Bandwidth and Colocation provided by Easynews.com --
>>
>> asterisk-users mailing list
>> To UNSUBSCRIBE or update options visit:
>> http://lists.digium.com/mailman/listinfo/asterisk-users
>
--
Marian Rychtecky
marian at mari.cz
Tel. +420 724 397 441
ICQ 76582857
_______________________________________________
--Bandwidth and Colocation provided by Easynews.com --
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users
More information about the asterisk-users
mailing list