[asterisk-users] Lost outgoing SIP packets

Thu Mar 31 08:38:34 CDT 2016

On Thu, 31 Mar 2016 15:29:07 +0200
Roel van Meer <roel at 1afa.com> wrote:

> Ethy H. Brito writes:
> 
> > Just guessing: do you have conntrack enabled?
> 
> Yes, I do.
> 
> > If not, "modprobe nf_conntrack_netlink" (you can remove it and its  
> > dependencies
> > later)
> >
> > What are the outputs of
> > 	sysctl net.netfilter.nf_conntrack_count
> > and
> > 	sysctl net.netfilter.nf_conntrack_max
> >
> > when the problem shows up?
> 
> Hm, good one. I'll monitor them. Currently the values are:
> 
> root at communiceer:~# sysctl net.netfilter.nf_conntrack_max
> net.netfilter.nf_conntrack_max = 65536
> 
> root at communiceer:~# sysctl net.netfilter.nf_conntrack_count
> net.netfilter.nf_conntrack_count = 245
> 
> I'll report back if the count comes anywhere near maximum.
> 
> Are there any other limits like these that might play a role here?

I think nf_conntrack_count is the one you should be aware of. 
But you can play with the timeouts in net.ipv4.netfilter.ip_conntrack_* if you experience any problems.

Cheers

Ethy

> 
> Thanks,
> 
> Roel
> 
> 
> > cheers
> >
> > Ethy
> >
> > On Thu, 31 Mar 2016 12:17:12 +0000
> > "Dovid Bender" <dovid at telecurve.com> wrote:
> >
> > > Just guessing I would verify that the out of : iptables -L -nv
> > > Shows no dropped packets, try disabling selinux as well as look at the  
> > limits
> > > of the asterisk pid (cat /proc/<Asterisk PID>/limits). I know the
> > > defualt  
> > for
> > > rhel is 1024 which was never enough for us.
> > >
> > >
> > > Regards,
> > >
> > > Dovid
> > >
> > > -----Original Message-----
> > > From: Roel van Meer <roel at 1afa.com>
> > > Date: Thu, 31 Mar 2016 14:10:48
> > > To: <dovid at telecurve.com>; Asterisk Users Mailing List - Non-Commercial
> > > Discussion<asterisk-users at lists.digium.com> Subject: Re: [asterisk-users]
> > > Lost outgoing SIP packets
> > >
> > > Dovid Bender writes:
> > >
> > > > The tcpdump that you are running is on the Asterisk box or via port
> > > > mirroring?
> > >
> > > It's on the asterisk box itself.
> > >
> > > I've already replaced the network card - no change.
> > >
> > > Thanks,
> > >
> > > Roel
> > >
> > >
> > > > Regards,
> > > >
> > > > Dovid
> > > >
> > > > -----Original Message-----
> > > > From: Roel van Meer <roel at 1afa.com>
> > > > Sender: asterisk-users-bounces at lists.digium.comDate: Thu, 31 Mar 2016
> > > > 13:34:51
> > > > To: <asterisk-users at lists.digium.com>
> > > > Reply-To: Asterisk Users Mailing List - Non-Commercial Discussion
> > > >  <asterisk-users at lists.digium.com>
> > > > Subject: [asterisk-users] Lost outgoing SIP packets
> > > >
> > > > Hi list!
> > > >
> > > > I have a problem where SIP packets sent by Asterisk do not hit the
> > > > wire,  
> > and
> > > > I don't know what could cause this.
> > > >
> > > > I'm running Asterisk 1.8.28_cert5 with full SIP debug. At the same
> > > > time,  
> > I'm
> > > > doing a tcpdump of the traffic on the network interface. I can see in
> > > > the SIP debug log that asterisk is sending packets. Most of the time, I
> > > > can  
> > see
> > > > those packets in the tcpdump, as you would expect.
> > > > However, sometimes Asterisk sends a packet that *does not show up* in
> > > > the tcpdump. Asterisk then does several retransmits (that also don't
> > > > show  
> > up).
> > > > The next packet that is not a retransmit does show up again.
> > > >
> > > > This causes Asterisk to log the peer it was sending packets to  
> > temporarily
> > > > as Lagged or unreachable.
> > > >
> > > > There is no outgoing firewall on this box.
> > > >
> > > > Could anyone give me some pointers where to look?
> > > >
> > > > If Asterisk logs "VERBOSE[13019] chan_sip.c: Reliably Transmitting
> > > > (NAT)  
> > to
> > > > x.x.x.x:" you would expect to see that packet in a tcpdump trace, right?
> > > > What could cause this not to be so? Are there network statistics I could
> > > > look at? Is there a counter in /proc or /sys for problems with sending
> > > > packets? Anything?
> > > >
> > > > If more information is necessary please do let me know.
> > > >
> > > > Thanks a lot in advance,
> > > >
> > > > Roel
> > > >
> > > > --
> > > > _____________________________________________________________________
> > > > -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> > > > New to Asterisk? Join us for a live introductory webinar every Thurs:
> > > >                http://www.asterisk.org/hello
> > > >
> > > > asterisk-users mailing list
> > > > To UNSUBSCRIBE or update options visit:
> > > >    http://lists.digium.com/mailman/listinfo/asterisk-users
> > > > --
> > > > _____________________________________________________________________
> > > > -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> > > > New to Asterisk? Join us for a live introductory webinar every Thurs:
> > > >                http://www.asterisk.org/hello
> > > >
> > > > asterisk-users mailing list
> > > > To UNSUBSCRIBE or update options visit:
> > > >    http://lists.digium.com/mailman/listinfo/asterisk-users
> > > --
> > > _____________________________________________________________________
> > > -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> > > New to Asterisk? Join us for a live introductory webinar every Thurs:
> > >                http://www.asterisk.org/hello
> > >
> > > asterisk-users mailing list
> > > To UNSUBSCRIBE or update options visit:
> > >    http://lists.digium.com/mailman/listinfo/asterisk-users
> >
> > --
> > _____________________________________________________________________
> > -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> > New to Asterisk? Join us for a live introductory webinar every Thurs:
> >                http://www.asterisk.org/hello
> >
> > asterisk-users mailing list
> > To UNSUBSCRIBE or update options visit:
> >    http://lists.digium.com/mailman/listinfo/asterisk-users
> 
> -- 
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>                http://www.asterisk.org/hello
> 
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit: