<HTML><HEAD></HEAD>
<BODY dir=ltr>
<DIV dir=ltr>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: 'Calibri'; COLOR: #000000">
<DIV>Take a look at the “fingerprint:” line. </DIV>
<DIV
style='FONT-SIZE: small; TEXT-DECORATION: none; FONT-FAMILY: "Calibri"; FONT-WEIGHT: normal; COLOR: #000000; FONT-STYLE: normal; DISPLAY: inline'>
<DIV style="FONT: 10pt tahoma">
<DIV> </DIV>
<DIV style="BACKGROUND: #f5f5f5">
<DIV style="font-color: black"><B>From:</B> <A title=john.nash778@gmail.com
href="mailto:john.nash778@gmail.com">John Nash</A> </DIV>
<DIV><B>Sent:</B> Thursday, June 23, 2016 3:42 PM</DIV>
<DIV><B>To:</B> <A title=users@lists.opensips.org
href="mailto:users@lists.opensips.org">OpenSIPS users mailling list</A> </DIV>
<DIV><B>Subject:</B> Re: [OpenSIPS-Users] Opensips + rtpengine + Sipml5
webrtc</DIV></DIV></DIV>
<DIV> </DIV></DIV>
<DIV
style='FONT-SIZE: small; TEXT-DECORATION: none; FONT-FAMILY: "Calibri"; FONT-WEIGHT: normal; COLOR: #000000; FONT-STYLE: normal; DISPLAY: inline'>
<DIV dir=ltr>Actually the issue is i hear no audio on either side and just after
session progress (I guess when media starts coming from remote media server) i
see error <SPAN style="FONT-SIZE: 12px">"SRTP output wanted, but no crypto suite
was negotiated"</SPAN>
<DIV><SPAN style="FONT-SIZE: 12px"><BR></SPAN></DIV>
<DIV><SPAN style="FONT-SIZE: 12px">I had also checked media logs i could see RTP
packets being sent from freeswitch to RTPengine IP but there was no packet at
all just after that. Ideally after RTP packet from freeswitch to rtpengine,
Rtpengine should send that packet to browser using wss?</SPAN></DIV></DIV>
<DIV class=gmail_extra>
<DIV> </DIV>
<DIV class=gmail_quote>On Fri, Jun 24, 2016 at 1:05 AM, Eric Tamme <SPAN
dir=ltr><<A href="mailto:eric@uphreak.com"
target=_blank>eric@uphreak.com</A>></SPAN> wrote:<BR>
<BLOCKQUOTE class=gmail_quote
style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">
<DIV bgcolor="#FFFFFF" text="#000000">So - i dont see a problem here - Chrome
is getting UDP/TLS/RTP/SAVPF and Freeswitch is getting RTP/AVP.
Freeswitch responded to the offer in the invite with an answer in the 183, and
in the 200. What is the failure you are seeing, and where is it
happening (in freeswitch? in the browser?)<BR><BR>The only thing that looks
bad is that you are retransmitting the ACK which FS either ... doesnt like, or
is never getting, because it keeps retransmitting the 200, which is why
you get a 481 when you send BYE.<SPAN class=HOEnZb><FONT
color=#888888><BR><BR>-Eric</FONT></SPAN>
<DIV>
<DIV class=h5><BR><BR>
<DIV>On 06/23/2016 01:24 PM, John Nash wrote:<BR></DIV>
<BLOCKQUOTE type="cite">
<DIV dir=ltr>OK here is the log <A
href="https://gist.github.com/johnnash13/0d2cb5238f3551cd3a8c6b4e638dd744"
target=_blank>https://gist.github.com/johnnash13/0d2cb5238f3551cd3a8c6b4e638dd744</A>
<DIV> </DIV>
<DIV>Sorry took me a while to convert wireshark trace to text file.</DIV>
<DIV> </DIV>
<DIV>My freeswitch is running on private IP (127.0.0.1) and opensips I run
on both public and private so that for outside world opensips is the only
public IP they see. In proxy log I pasted Opensips ===> Freeswitch logs
and back.</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV></DIV>
<DIV class=gmail_extra>
<DIV> </DIV>
<DIV class=gmail_quote>On Fri, Jun 24, 2016 at 12:43 AM, Eric Tamme <SPAN
dir=ltr><<A href="mailto:eric@uphreak.com"
target=_blank>eric@uphreak.com</A>></SPAN> wrote:<BR>
<BLOCKQUOTE class=gmail_quote
style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">
<DIV bgcolor="#FFFFFF" text="#000000">No - it's annoying to look at a
trace that's had information removed and try and piece together whats
happening. Your paranoid side is wrong, sorry.<SPAN><FONT
color=#888888><BR><BR>-Eric</FONT></SPAN>
<DIV>
<DIV><BR><BR>
<DIV>On 06/23/2016 01:06 PM, Patrick Wakano wrote:<BR></DIV>
<BLOCKQUOTE type="cite">
<DIV dir=ltr>
<DIV>my paranoic side would recommend to hide/change private
informations, specially any authentication line that might appear...
this is certainly a sort of social engineering threat we should
worry...<BR></DIV>
<DIV>better be safe than sorry....<BR></DIV>
<DIV> </DIV></DIV>
<DIV class=gmail_extra>
<DIV> </DIV>
<DIV class=gmail_quote>On Thu, Jun 23, 2016 at 3:31 PM, Eric Tamme <SPAN
dir=ltr><<A href="mailto:eric@uphreak.com"
target=_blank>eric@uphreak.com</A>></SPAN> wrote:<BR>
<BLOCKQUOTE class=gmail_quote
style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">
<DIV bgcolor="#FFFFFF" text="#000000">I mean you can use a private
gist, but you will be publishing the link in a public email
list. In general I personally dont believe revealing ip
addresses etc. is any problem - to put my money where my mouth is here
is a gist link to an unaltered SIP trace on my server :)<BR><BR><A
href="https://gist.github.com/etamme/b864010448a29007b7e0457682e81d52"
target=_blank>https://gist.github.com/etamme/b864010448a29007b7e0457682e81d52</A><SPAN><FONT
color=#888888><BR><BR>-Eric</FONT></SPAN>
<DIV>
<DIV><BR><BR>
<DIV>On 06/23/2016 12:23 PM, John Nash wrote:<BR></DIV>
<BLOCKQUOTE type="cite">
<DIV dir=ltr>Ok i am ready with logs. About gist may I use private
option as traces have our IPs, user</DIV>
<DIV class=gmail_extra>
<DIV> </DIV>
<DIV class=gmail_quote>On Thu, Jun 23, 2016 at 10:32 PM, Eric Tamme
<SPAN dir=ltr><<A href="mailto:eric@uphreak.com"
target=_blank>eric@uphreak.com</A>></SPAN> wrote:<BR>
<BLOCKQUOTE class=gmail_quote
style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">
<DIV bgcolor="#FFFFFF" text="#000000">Hey John,<BR><BR>Please
paste a full UNALTERED sip trace into a gist (<A
href="http://gist.github.com" target=_blank>gist.github.com</A>)
from the proxy servers perspective and provide a link so that we
can see what comes in, and what goes out from both
sides.<BR><BR>EG: ngrep -qtd any -W byline port 5060<BR><BR>This
will show us the traffic that is leaving the proxy destined for
the Freeswitch box, and what the freeswitch box sends
back.<BR><BR>Also - you can look in your browsers console log and
provide the SIP trace from there in a seperate gist, so that we
can see what opensips sends back up to your browser.<SPAN><FONT
color=#888888><BR><BR>-Eric</FONT></SPAN>
<DIV>
<DIV><BR><BR>
<BLOCKQUOTE type="cite">
<DIV dir=ltr>
<DIV><SPAN style="FONT-SIZE: 12px">Am I using correct sip.js
example? I copied it to my server and accessing it using https:
(used letsencrypt)</SPAN></DIV></DIV>
<DIV class=gmail_extra>
<DIV> </DIV>
<DIV class=gmail_quote>On Thu, Jun 23, 2016 at 7:58 PM, Eric
Tamme <SPAN dir=ltr><<A href="mailto:eric@uphreak.com"
target=_blank>eric@uphreak.com</A>></SPAN> wrote:<BR>
<BLOCKQUOTE class=gmail_quote
style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">
<DIV bgcolor="#FFFFFF" text="#000000">1. I would suggest using
SIP.js - <A href="https://github.com/onsip/SIP.js"
target=_blank>https://github.com/onsip/SIP.js</A> it is a much
more active project that sipml5.<BR><BR>2. Im guessing that
you are not properly passing flags to RTPEngine. If you
want to have DTLS-SRTP between the browser, and plain RTP/AVP
between RTPEngine and freeswitch, you need to "offer" rtp/avp
to freeswitch, and "answer" dtls-srtp back up to the
browser.<BR><BR>the offer to freeswitch would be: <BR><PRE> $var(rtpengine_flags) = "RTP/AVP replace-session-connection replace-origin ICE=remove";
</PRE>and the answer back up to the browswer would be:<BR><BR><PRE> $var(rtpengine_flags) = "UDP/TLS/RTP/SAVPF ICE=force";</PRE><BR>-Eric
<DIV>
<DIV><BR><BR><BR>
<DIV>On 06/23/2016 08:20 AM, John Nash
wrote:<BR></DIV></DIV></DIV>
<BLOCKQUOTE type="cite">
<DIV>
<DIV>
<DIV dir=ltr>I am following <A
href="http://www.opensips.org/Documentation/Tutorials-WebSocket-2-2"
target=_blank>http://www.opensips.org/Documentation/Tutorials-WebSocket-2-2</A>
and trying to test a call
<DIV> </DIV>
<DIV>sipml5 ----------->Opensips + rtpengine -------->
SIP end point (Freeswitch)<BR>
<DIV> </DIV>
<DIV>But I do not have any audio on both sides. I see this
error at rtpengine log "SRTP output wanted, but no crypto
suite was negotiated"<BR></DIV></DIV>
<DIV> </DIV>
<DIV>Anyone tested this scenario positive?</DIV></DIV><BR>
<FIELDSET></FIELDSET> <BR></DIV></DIV><PRE>_______________________________________________
Users mailing list
<A href="mailto:Users@lists.opensips.org" target=_blank>Users@lists.opensips.org</A>
<A href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" target=_blank>http://lists.opensips.org/cgi-bin/mailman/listinfo/users</A>
</PRE></BLOCKQUOTE><BR></DIV><BR>_______________________________________________<BR>Users
mailing list<BR><A href="mailto:Users@lists.opensips.org"
target=_blank>Users@lists.opensips.org</A><BR><A
href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users"
target=_blank>http://lists.opensips.org/cgi-bin/mailman/listinfo/users</A><BR><BR></BLOCKQUOTE></DIV>
<DIV> </DIV></DIV><BR>
<FIELDSET></FIELDSET> <BR><PRE>_______________________________________________
Users mailing list
<A href="mailto:Users@lists.opensips.org" target=_blank>Users@lists.opensips.org</A>
<A href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" target=_blank>http://lists.opensips.org/cgi-bin/mailman/listinfo/users</A>
</PRE></BLOCKQUOTE><BR></DIV></DIV></DIV><BR>_______________________________________________<BR>Users
mailing list<BR><A href="mailto:Users@lists.opensips.org"
target=_blank>Users@lists.opensips.org</A><BR><A
href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users"
rel=noreferrer
target=_blank>http://lists.opensips.org/cgi-bin/mailman/listinfo/users</A><BR><BR></BLOCKQUOTE></DIV>
<DIV> </DIV></DIV><BR>
<FIELDSET></FIELDSET> <BR><PRE>_______________________________________________
Users mailing list
<A href="mailto:Users@lists.opensips.org" target=_blank>Users@lists.opensips.org</A>
<A href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" target=_blank>http://lists.opensips.org/cgi-bin/mailman/listinfo/users</A>
</PRE></BLOCKQUOTE><BR></DIV></DIV></DIV><BR>_______________________________________________<BR>Users
mailing list<BR><A href="mailto:Users@lists.opensips.org"
target=_blank>Users@lists.opensips.org</A><BR><A
href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users"
rel=noreferrer
target=_blank>http://lists.opensips.org/cgi-bin/mailman/listinfo/users</A><BR><BR></BLOCKQUOTE></DIV>
<DIV> </DIV></DIV><BR>
<FIELDSET></FIELDSET> <BR><PRE>_______________________________________________
Users mailing list
<A href="mailto:Users@lists.opensips.org" target=_blank>Users@lists.opensips.org</A>
<A href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" target=_blank>http://lists.opensips.org/cgi-bin/mailman/listinfo/users</A>
</PRE></BLOCKQUOTE><BR></DIV></DIV></DIV><BR>_______________________________________________<BR>Users
mailing list<BR><A href="mailto:Users@lists.opensips.org"
target=_blank>Users@lists.opensips.org</A><BR><A
href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users"
rel=noreferrer
target=_blank>http://lists.opensips.org/cgi-bin/mailman/listinfo/users</A><BR><BR></BLOCKQUOTE></DIV>
<DIV> </DIV></DIV><BR>
<FIELDSET></FIELDSET> <BR><PRE>_______________________________________________
Users mailing list
<A href="mailto:Users@lists.opensips.org" target=_blank>Users@lists.opensips.org</A>
<A href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" target=_blank>http://lists.opensips.org/cgi-bin/mailman/listinfo/users</A>
</PRE></BLOCKQUOTE><BR></DIV></DIV></DIV><BR>_______________________________________________<BR>Users
mailing list<BR><A
href="mailto:Users@lists.opensips.org">Users@lists.opensips.org</A><BR><A
href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" rel=noreferrer
target=_blank>http://lists.opensips.org/cgi-bin/mailman/listinfo/users</A><BR><BR></BLOCKQUOTE></DIV>
<DIV> </DIV></DIV>
<P>
<HR>
_______________________________________________<BR>Users mailing
list<BR>Users@lists.opensips.org<BR>http://lists.opensips.org/cgi-bin/mailman/listinfo/users<BR></DIV></DIV></DIV></BODY></HTML>