Hi, Bogdan!<div><br></div><div>I sent pcap to your address directly, in order not to disclose real ip addresses and to throw files to the list.</div><div>I tried to study the code, and yes, it appears that it can not change the port freely...</div>
<div>The strnage thing is, that this problem appeared suddenly, and then suddenly disappeared - without my interaction.</div><div>Unfortunately, only the capture that I sent exists. I noticed that the src port is different only when the problem already went away.</div>
<div>Looks like some kernel/system flaw... </div><div>iptables do not change packets - there is only an ACCEPT input chain for the operator's address...</div><div>Weird...</div><div><br></div><div>--</div><div>Regards, </div>
<div>Alex<br><br><div class="gmail_quote">2010/10/6 Bogdan-Andrei Iancu <span dir="ltr"><<a href="mailto:bogdan@voice-system.ro">bogdan@voice-system.ro</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div class="im">Hi Alexandr,<br>
<br>
Alexandr A. Alexandrov wrote:<br>
</div><div class="im">> Hi Bogdan,<br>
><br>
> Well, this confuses me even more...<br>
> I though that in case opensips can not open socket on the port it<br>
> listens on, it tries to open a socket on a port where it can, and then<br>
> send the packet out...<br>
><br>
</div>all the local ports are open at startup time - there is no local socket<br>
created at runtime (for UDP).<br>
<br>
I'm really sure that opensips is not messing with the ports, this is why<br>
I was asking for the pcap....just to check what happens at network level.<br>
<br>
Regards,<br>
<font color="#888888">Bogdan<br>
</font><div><div></div><div class="h5">> This would not break any standarts, AFAIK (even though firewalls might<br>
> get crazy about this, which is, pitifully, my case).<br>
><br>
> Regards,<br>
> Alex<br>
><br>
><br>
> 06.10.2010 15:26, Bogdan-Andrei Iancu:<br>
><br>
>> Hi Alexandr,<br>
>><br>
>> Alexandr A. Alexandrov wrote:<br>
>><br>
>><br>
>>> Hi!<br>
>>><br>
>>> I ran into a pretty weird situation last day. I'm using opensips-1.6.2<br>
>>> as a load balancer for several * servers.<br>
>>> Everything worked fine for months, but suddenly opensips started to use<br>
>>> ports like 56827 or 51234 (does not matter, just non-default, not the<br>
>>> one it is listening on). And the operator's system does not allow such<br>
>>> replies, it just drops them.<br>
>>> Opensips is listening on port 5070 on my system.<br>
>>><br>
>>> Invite comes like:<br>
>>> User Datagram Protocol, Src Port: sip (5060), Dst Port: vtsas (5070)<br>
>>> INVITE sip:xxxxx@my.ip:5070;user=phone SIP/2.0<br>
>>><br>
>>> Reply goes like:<br>
>>> User Datagram Protocol, Src Port: 52795 (52795), Dst Port: sip (5060)<br>
>>> SIP/2.0 100 Giving a try<br>
>>><br>
>>> Normally src port is always 5070.<br>
>>><br>
>>> So, the questions are:<br>
>>> - under what conditions does opensips decide to invent a new port?<br>
>>><br>
>>><br>
>> under no conditions - it will use only the defined interfaces from cfg...<br>
>><br>
>> Are you sure about that port changing ? could you provide a pcap showing<br>
>> this ?<br>
>><br>
>> Regards,<br>
>> Bogdan<br>
>><br>
>><br>
>><br>
>><br>
><br>
><br>
</div></div><div><div></div><div class="h5">> _______________________________________________<br>
> Users mailing list<br>
> <a href="mailto:Users@lists.opensips.org">Users@lists.opensips.org</a><br>
> <a href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" target="_blank">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><br>
><br>
><br>
<br>
<br>
--<br>
Bogdan-Andrei Iancu<br>
OpenSIPS Bootcamp<br>
15 - 19 November 2010, Edison, New Jersey, USA<br>
<a href="http://www.voice-system.ro" target="_blank">www.voice-system.ro</a><br>
<br>
<br>
_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opensips.org">Users@lists.opensips.org</a><br>
<a href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" target="_blank">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>С уважением, ААА.<br>
</div>