<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>
> Date: Mon, 19 Mar 2012 10:31:52 -0500<br>
> From: kpfleming@digium.com<br>
<br>
> > 502 10.0.1.103 10.0.1.57 Request: CANCEL sip:104@10.0.1.57:5060<br>
> <br>
> Why did Asterisk CANCEL the call here?<br>
<br>
<font style="" face="Courier New"><br></font><font style="" face="Courier New">I assume it's part of the SLA implementation. </font><font style="" face="Courier New">As I mentioned in my original email, </font><font style="" face="Courier New">I'm
using SendText to send a text
message when the user picks up a line in a SLA setup. In this case, ext
124 is calling 104, and one of the lines on 104 is picking it up.
Asterisk is connecting to that line and cancelling the first request??
(just guessing)<br><br>same => n,SendText(hi)<br>same => n,SLAStation(4*104_line104)</font><font style="" face="Courier New"><br></font><font style="" face="Courier New"><br></font><br>
> <br>
> > *503 (for 493) 10.0.1.57 10.0.1.103 Status: 200 OK*<br>
> > 524 (503) 10.0.1.57 10.0.1.103 Request: ACK<br>
> > sip:8*104_line104@10.0.1.103:5060<br>
> <br>
> This appears to be broken. The listing here claims this ACK is in <br>
> response to the '200 OK' in packet 503, which itself was a final <br>
> response to the MESSAGE request in packet 493. However, MESSAGE requests <br>
> do not use ACK for a three-way handshake like INVITE requests do. In <br>
> addition, this packet is going the wrong direction to be an ACK for <br>
> packet 503, since it's going the same direction as packet 503 did.<br>
<br>
<font style="" face="Courier New"><br></font><font style="" face="Courier New"><br></font><font style="" face="Courier New">I
use Wireshark to capture the packets, and Wireshark is reporting it
that way; i.e. saying that Request Frame for the ACK is the OK (for
MESSAGE). I guess it's incorrect. </font><font style="" face="Courier New">The order and direction of messages I posted in my previous email are taken directly from Wireshark. <br><br>Frame 15 is MESSAGE<br>Frame 19 is OK (for MESSAGE)<br>Frame 20 is ACK (Wireshark is saying the Request Frame is 20 ??)<br><br>I tried to post the full SIP capture here, but it got rejected because of the size of the post (about 280k).<br></font> </div></body>
</html>