[asterisk-users] INVAL Messages

Adrian Marsh Adrian.Marsh at ubiquisys.com
Tue Oct 24 08:14:06 MST 2006


Hi Marian,

I think we worked it out... (time will tell now)..

Our gateway people were able to put IAX2 debug on, and then filter the
trace (manually!) so that we could compare call-flow.

Heres what they saw:


lon-pbx-backup-1*CLI> 
Tx-Frame Retry[001] -- OSeqno: 000 ISeqno: 000 Type: IAX     Subclass:
NEW    
   Timestamp: 00006ms  SCall: 00074  DCall: 00000 [xx.xx.xx.xx:4569]

lon-pbx-backup-1*CLI> 
Rx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 001 Type: IAX     Subclass:
ACK    
   Timestamp: 00006ms  SCall: 00001  DCall: 00074 [xx.xx.xx.xx:49308]

lon-pbx-backup-1*CLI> 
Rx-Frame Retry[Yes] -- OSeqno: 000 ISeqno: 001 Type: IAX     Subclass:
AUTHREQ
   Timestamp: 00009ms  SCall: 00001  DCall: 00074 [xx.xx.xx.xx:49308]
   AUTHMETHODS     : 3
   CHALLENGE       : 552508132
   USERNAME        : ubigradin

lon-pbx-backup-1*CLI> 
Tx-Frame Retry[000] -- OSeqno: 001 ISeqno: 000 Type: IAX     Subclass:
HANGUP 
   Timestamp: 08017ms  SCall: 00074  DCall: 00000 [xx.xx.xx.xx:4569]
   CAUSE CODE      : 0

lon-pbx-backup-1*CLI> 
Rx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 000 Type: IAX     Subclass:
INVAL  
   Timestamp: 00000ms  SCall: 00000  DCall: 00074 [xx.xx.xx.xx:49308]


We don't quite understand is the HANGUP.. but we did note the 49308
port.. So the NAT router was changing to different ports.

We believe that a Draytek router uses two definitions for NATing... Port
Forwarding  and "Open Ports".  We've switched to "Open Ports" (which
really seems like its intended for a RANGE of ports, but we've specified
only one.  Now when we ethereal our WAN connection, we see 4569 in both
directions..

Hopefully solved...

Thanks!



Adrian Marsh
 
 
Tel: +44 (0) 20 71833427
Fax: +44 (0) 1793 441594
 
http://www.ubiquisys.com

-----Original Message-----
From: asterisk-users-bounces at lists.digium.com
[mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of Marian
Rychtecky
Sent: 24 October 2006 11:23
To: Asterisk Users Mailing List - Non-Commercial Discussion
Subject: Re: [asterisk-users] INVAL Messages

Hi Adrian,
	yes this problem has happen only sometime, but i dont know
exactly 
when.... i has discover this - plase read my comments:

A)Calling directly via public IP's (port 4569 is forwarded on ADSL modem

to asterisk1) - not working

Tx-Frame Retry[000] -- OSeqno: 000 ISeqno: 000 Type: IAX     Subclass:
NEW
    Timestamp: 00013ms  SCall: 00004  DCall: 00000
[213.160.177.186:4569]

---------> here is source port of transmiting packet 4569 (my site) ....

    VERSION         : 2
    CALLED NUMBER   : 1299
    CODEC_PREFS     : ()
    CALLING NUMBER  : 1199
    CALLING PRESNTN : 0
    CALLING TYPEOFN : 0
    CALLING TRANSIT : 0
    CALLING NAME    : Marian_Rychtecky
    LANGUAGE        : en
    USERNAME        : <some_username>
    FORMAT          : 2
    CAPABILITY      : 2097151
    ADSICPE         : 2
    DATE TIME       : 2006-10-18  10:16:14

Rx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 001 Type: IAX     Subclass: 
AUTHREQ
    Timestamp: 00006ms  SCall: 00003  DCall: 00004
[213.160.177.186:9785]

----------> but here i got response from port 9785 (other site, because 
of NAT translation on other site)

    AUTHMETHODS     : 3
    CHALLENGE       : 585590037
    USERNAME        : VALSABBIA-SLOVENSKO

Tx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 000 Type: IAX     Subclass:
INVAL
    Timestamp: 00000ms  SCall: 00004  DCall: 00003
[213.160.177.186:9785]


B) calling thru openvpn - working

Tx-Frame Retry[000] -- OSeqno: 000 ISeqno: 000 Type: IAX     Subclass:
NEW
    Timestamp: 00004ms  SCall: 00001  DCall: 00000 [192.168.255.2:4569]

----------> here im sending the same packet to port 4569...

    VERSION         : 2
    CALLED NUMBER   : 1299
    CODEC_PREFS     : ()
    CALLING NUMBER  : 1199
    CALLING PRESNTN : 0
    CALLING TYPEOFN : 0
    CALLING TRANSIT : 0
    CALLING NAME    : Marian_Rychtecky
    LANGUAGE        : en
    USERNAME        : <user_name>
    FORMAT          : 2
    CAPABILITY      : 2097151
    ADSICPE         : 2
    DATE TIME       : 2006-10-18  10:14:16

     -- Called VALSABBIA-SLOVENSKO:1234 at 192.168.255.2/1299
Rx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 001 Type: IAX     Subclass: 
AUTHREQ
    Timestamp: 00012ms  SCall: 00001  DCall: 00001 [192.168.255.2:4569]

-----------> here i got reply from port 4569 (and this port is excepted)

    AUTHMETHODS     : 3
    CHALLENGE       : 186694617
    USERNAME        : VALSABBIA-SLOVENSKO

Tx-Frame Retry[000] -- OSeqno: 001 ISeqno: 001 Type: IAX     Subclass: 
AUTHREP
    Timestamp: 00034ms  SCall: 00001  DCall: 00001 [192.168.255.2:4569]
    MD5 RESULT      : b0674601456416db7e474de9a858c742


Rx-Frame Retry[ No] -- OSeqno: 001 ISeqno: 002 Type: IAX     Subclass: 
ACCEPT

------------> so get ACCEPT and evething is working

    Timestamp: 00041ms  SCall: 00001  DCall: 00001 [192.168.255.2:4569]
    FORMAT          : 2


So i suppose that is the problem with comparing of source and 
destination port of IAX2 packets....

Look at your tcpdump and write me plase if you have the same troubles.



Good luck, Marian


Adrian Marsh napsal(a):
> Hi Marian,
> 
> Thanks for the info, something I'll check into... we have recently
> swapped the router over..
> 
> We receive a NEW message:
> 
> THEM   >   US    (new)
> 
> So the port forward (inbound) works ok..
> 
> We send them a reply:
> 
> THEM   <  US    (AUTHREQ)
> 
> And then they send us the INVAL...
> 
> THEM   >  US    (INVAL)
> 
> Now if any of the SRC ports got changed incorrectly, then wouldn't the
> call stop completely?
> 
> This only happens some of the time, intermittently - is yours
constant?
> 
> I've a Draytek 2910G router..
> 
> 
> Adrian Marsh
>  
>  
> Tel: +44 (0) 20 71833427
> Fax: +44 (0) 1793 441594
>  
> http://www.ubiquisys.com
> 
> -----Original Message-----
> From: asterisk-users-bounces at lists.digium.com
> [mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of Marian
> Rychtecky
> Sent: 23 October 2006 20:07
> To: Asterisk Users Mailing List - Non-Commercial Discussion
> Subject: Re: [asterisk-users] INVAL Messages
> 
> Hi Adrian,
> 	are you using this IAX thru NAT? I have this problem when i try
> call 
> with IAX2 and this Asterisk server is behind the NAT...
> 
> I think its here problem with UDP source port which is changed in NAT 
> router, but im not sure 100%....
> 
> Marian
> 
> Adrian Marsh napsal(a):
>> All,
>>
>>  
>>
>> Has anyone seen INVAL messages on an IAX link before?
>>
>>  
>>
>> I'm occasionally getting them from my Gateway provider, and I need to

>> narrow down the potential cause.
>>
>>  
>>
>> Symptoms are:  Incoming calls fail,  I see NEW, AUTHREQ then INVAL 
>> messages between the two A*k boxes... then for no reason at all it'll

>> start working ok again..
>>
>>  
>>
>>  
>>
>> My Asterisik:  1.2.10,   Gateway A*k :  1.2.0    - Any known issues
> with 
>> IAX on either?
>>
>>  
>>
>>  
>>
>> My best guess so far is that the packets are getting corrupted 
>> on-route..  and I've asked the gateway folks to capture the traffic
> when 
>> it happens again to confirm...
>>
>>  
>>
>> Thanks,
>>
>>  
>>
>> Adrian
>>
>>
>>
>
------------------------------------------------------------------------
>> _______________________________________________
>> --Bandwidth and Colocation provided by Easynews.com --
>>
>> asterisk-users mailing list
>> To UNSUBSCRIBE or update options visit:
>>    http://lists.digium.com/mailman/listinfo/asterisk-users
> 

-- 
Marian Rychtecky
marian at mari.cz

Tel. +420 724 397 441
ICQ 76582857
_______________________________________________
--Bandwidth and Colocation provided by Easynews.com --

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


More information about the asterisk-users mailing list