<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'><font color="#2672EC">Hi </font><font color="#2672ec">Răzvan</font><div><font color="#2672ec"><br></font></div><div><font color="#2672ec">Thank you, I have already set the TCP chunk size to 8 but it was still showing "4 read attempts".</font></div><div><font face="Courier New, sans-serif"><br></font></div><div><div><font face="Courier New, sans-serif">#### Protocol TCP</font></div><div><font face="Courier New, sans-serif">loadmodule "proto_tcp.so"</font></div><div><font face="Courier New, sans-serif">modparam("proto_tcp", "tcp_send_timeout", 200)</font></div><div><font face="Courier New, sans-serif">modparam("proto_tcp", "tcp_max_msg_chunks", 8)</font></div><div style="color: rgb(38, 114, 236);"><br></div><div style="color: rgb(38, 114, 236);">but from your reply I thought that may there be an potion for TLS too :-p by increasing chunk size for TLS. </div></div><div><font face="Courier New, sans-serif"><br></font></div><div><div><font face="Courier New, sans-serif">#### Protocol TLS</font></div><div><font face="Courier New, sans-serif">loadmodule "proto_tls.so"</font></div><div><font face="Courier New, sans-serif"><br></font></div><div><font face="Courier New, sans-serif">modparam("proto_tls","verify_cert", "1")</font></div><div><font face="Courier New, sans-serif">modparam("proto_tls","require_cert", "1")</font></div><div><font face="Courier New, sans-serif">modparam("proto_tls","tls_method", "TLSv1")</font></div><div><font face="Courier New, sans-serif">modparam("proto_tls","certificate", "/path/to/certificate.pem")</font></div><div><font face="Courier New, sans-serif">modparam("proto_tls","private_key", "/path/to/private_key.key")</font></div><div><font face="Courier New, sans-serif">modparam("proto_tls","ca_list", "/path/to/ca_list.pem")</font></div><div><font face="Courier New, sans-serif"><b>modparam("proto_tls", "tls_max_msg_chunks", 8)</b></font></div><div><font face="Courier New, sans-serif"><b>modparam("proto_tls", "tls_handshake_timeout", 119)</b></font></div><div><font face="Courier New, sans-serif"><b>modparam("proto_tls", "tls_send_timeout", 121)</b></font></div></div><div style="color: rgb(38, 114, 236);"><br></div><div style="color: rgb(38, 114, 236);">It worked. :-)</div><div><font color="#2672ec"> </font></div><div><font color="#2672ec">Cheers</font></div><div><font color="#2672ec"><br></font><b><font color="#5133ab" face="Times New Roman" size="3"><i>Hamid R. Hashmi</i></font></b><div><font size="2">Software Engineer - VoIP</font></div><div><font color="#008a17" size="2" style="font-size:10pt;">Vopium A/S</font></div><br><br><div><hr id="stopSpelling">To: users@lists.opensips.org<br>From: razvan@opensips.org<br>Date: Fri, 19 Feb 2016 10:23:28 +0200<br>Subject: Re: [OpenSIPS-Users] What cause TCP connection reset ?<br><br>
This situation appears when a SIP message is sent in more than 4
"chunks" (this is tuneable). If the SIP message is too fragmented,
OpenSIPS closes the connection to prevent packets fragmentation
attacks.<br>
<br>
Best regards,<br>
Răzvan<br>
<br>
<div class="ecxmoz-cite-prefix">On 02/19/2016 07:25 AM, Hamid Hashmi
wrote:<br>
</div>
<blockquote cite="mid:BLU182-W76621DBCD2ED17EB29D81CE0A00@phx.gbl">
<style><!--
.ExternalClass .ecxhmmessage P {
padding:0px;
}
.ExternalClass body.ecxhmmessage {
font-size:12pt;
font-family:Calibri;
}
--></style>
<div dir="ltr"><font color="#2672EC">Why opensips send TCP
connection reset packet ?</font>
<div><font color="#2672EC"><br>
</font></div>
<div><font color="#2672ec">I have been facing an error of </font><br>
<br>
<div><font face="Courier New, sans-serif">ERROR:proto_tls:tcp_handle_req:
Made 4 read attempts but message is not complete yet -
closing connection</font></div>
<div style="color:rgb(38, 114, 236);"><br>
</div>
<div style="color:rgb(38, 114, 236);">while wireshark traces
shows that a TCP connection reset packet was sent back to
UAC by opensips server. </div>
<div style="color:rgb(38, 114, 236);"><br>
</div>
<div id="ecxinlineImage0" style="display:inline-block;">
<span> </span>
<div style="display:inline-block;" unselectable="on" class="ecxinlineImage"><img src="cid:part1.07090504.06090202@opensips.org" height="233" width="497"></div>
<span> </span>
</div>
<font color="#2672EC">
<div> </div>
</font><br>
<b><font color="#5133ab" size="3" face="Times New Roman"><i>Hamid
R. Hashmi</i></font></b>
<div><font size="2">Software Engineer - VoIP</font></div>
<div><font style="font-size:10pt;" color="#008a17" size="2">Vopium
A/S</font></div>
</div>
</div>
<br>
<fieldset class="ecxmimeAttachmentHeader"></fieldset>
<br>
<pre>_______________________________________________
Users mailing list
<a class="ecxmoz-txt-link-abbreviated" href="mailto:Users@lists.opensips.org">Users@lists.opensips.org</a>
<a class="ecxmoz-txt-link-freetext" href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" target="_blank">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a>
</pre>
</blockquote>
<br>
<pre class="ecxmoz-signature">--
Răzvan Crainea
OpenSIPS Core Developer
<a class="ecxmoz-txt-link-freetext" href="http://www.opensips-solutions.com" target="_blank">http://www.opensips-solutions.com</a></pre>
<br>_______________________________________________
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users</div></div> </div></body>
</html>