[OpenSIPS-Devel] eyeBeam NAT ping packets

Saúl Ibarra Corretgé saul at ag-projects.com
Fri Oct 18 17:20:39 CEST 2013


On Oct 16, 2013, at 12:22 PM, Ovidiu Sas <osas at voipembedded.com> wrote:

> eyeBeam (release 1105z stamp 59030) is sending small packets to keep
> the NAP pinhole open.
> Those packets are short (4 bytes) with the following content: 0d0a0d0a.
> In the logs, we have:
> INFO:core:parse_first_line: empty  or bad first line
> INFO:core:parse_first_line: bad message
> ERROR:core:parse_msg: message=<>
> ERROR:core:receive_msg: parse_msg failed
> 
> We should add some parameters to the config that will allow to
> silently drop these kind of packets.
> We should be able to configure several patterns with length and hex content.
> Comments?
> 

That looks like the double CRLF technique used in SIP outbound (http://tools.ietf.org/html/rfc5626#section-3.5.1), so I guess the right thing to do here would be to reply with CRLF.


Regards,

--
Saúl Ibarra Corretgé
AG Projects






More information about the Devel mailing list