<div dir="ltr"><div dir="ltr">Ciao Ovidiu!<div><br></div><div>We're often in parallel :)</div><div><br></div><div>I found that if you create the transaction before creating (if any) the dialog, then the ACK is traced even from HEP.</div><div><br></div><div>What I would add to the super nice recipe is:</div><div><br></div><div>- let's give a portrange to sngrep, so it will not analyze all traffic on all ports, and will not trace the RTP packets too</div><div>- let's give a limit on how many dialogs will keep in memory, default is 2000</div><div>- let's do a rotation of dialogs, FIFO, so will keep the latest and discard the older</div><div>- let's try to understand fragmented udp too</div><div>- let's use aliases for having names for our servers</div><div>- let's not listen for HEP trace when we want (without duplicate display)</div><div><br></div><div>- let's send both to a local sngrep and a remote homer</div><div>- let's trace the 100 reply to INVITE too<br><br>=========<br><br>let's put in .bashrc:</div><div><br></div><div>alias sngrepa='sngrep -l 5000 -R -Ludp:<a href="http://127.0.0.1:9080">127.0.0.1:9080</a> -v "OPTIONS\ sip" "portrange 5050-5090 or (ip[6:2] & 0x1fff) != 0"'<br>alias sngrepw='sngrep -l 5000 -R -v "OPTIONS\ sip" "portrange 9069-9071 or (ip[6:2] & 0x1fff) != 0"'<br></div><div><br></div><div>sngrepa will be used for "normal traffic", "sngrepw" for HEP trace<br>the negation of OPTIONS would not be useful in sngrepw, but is there so the command line understands when the BPF filter begins</div><div><br></div><div>=========</div><div><br>opensips.cfg:</div><div><br></div><div>modparam("tm", "auto_100trying", 0)<br></div><div><br></div><div>modparam("proto_hep", "hep_id", "[hep_dst] <a href="http://127.0.0.1:9070">127.0.0.1:9070</a>; transport=udp; version=3")<br>modparam("proto_hep", "hep_id", "[hep_dst2] <a href="http://168.77.20.250:9060">168.77.20.250:9060</a>; transport=udp; version=3")<br>modparam("proto_hep", "homer5_on", 1)<br>modparam("proto_hep", "homer5_delim", "#")<br>modparam("proto_hep", "hep_capture_id", 100)<br><br>modparam("tracer", "trace_on", 1)<br>modparam("tracer", "trace_id", "[sngrep]uri=hep:hep_dst")<br>modparam("tracer", "trace_id", "[homer]uri=hep:hep_dst2")<br></div><div><br></div><div>route {<br></div><div> t_newtran();<br><br> if (!has_totag()) {<br> if(is_method("INVITE") ) {<br> trace("sngrep", "D"); <br> trace("homer", "D"); <br> send_reply(100, "Trying Hard");<br> }<br> } else {<br> match_dialog();<br> }<br></div><div><br></div><div> if(is_method("MESSAGE|REGISTER|SUBSCRIBE|NOTIFY|PUBLISH") ) {<br> trace("sngrep", "T");<br> trace("homer", "T");<br> }<br></div><div>}</div><div><br></div><div>local_route {<br></div><div> if(is_method("NOTIFY") ) {<br> trace("sngrep", "M"); <br> trace("homer", "M");<br> }<br></div><div>}</div><div><br></div><div>onreply_route[local] {</div><div> if(is_method("NOTIFY") ) {<br> trace("sngrep", "M"); <br> trace("homer", "M");<br> }<br>}<br></div><div><br></div><div>=========<br></div><div><br></div><div>beginning of the commonc .sngreprc:</div><div><br>alias 168.77.20.201 FS1<br>alias 168.77.20.202 FS2<br>alias 168.77.20.203 FS3<br>alias 67.153.242.46 LB<br>alias 168.77.20.200 LB<br>alias 194.143.78.61 GW1<br>alias 94.43.18.61 GW2</div><div>...<br>set background default<br></div><div>...</div><div>set eep.listen on<br>set eep.listen.version 3<br>set eep.listen.address 127.0.0.1<br>set eep.listen.port 9070<br>set eep.listen.pass<br>set eep.listen.uuid off<br></div><div><br></div><div><br></div><div>-giovanni<br><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Mar 24, 2021 at 2:43 AM Ovidiu Sas <<a href="mailto:osas@voipembedded.com">osas@voipembedded.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hello all,<br>
<br>
Here's a quick recipe to ease the troubleshooting of encrypted SIP traffic:<br>
<a href="https://voipembedded.wordpress.com/2021/03/23/troubleshooting-opensips-encrypted-sip-traffic/" rel="noreferrer" target="_blank">https://voipembedded.wordpress.com/2021/03/23/troubleshooting-opensips-encrypted-sip-traffic/</a><br>
<br>
Regards,<br>
Ovidiu Sas<br>
<br>
-- <br>
VoIP Embedded, Inc.<br>
<a href="http://www.voipembedded.com" rel="noreferrer" target="_blank">http://www.voipembedded.com</a><br>
<br>
_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opensips.org" target="_blank">Users@lists.opensips.org</a><br>
<a href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users" rel="noreferrer" target="_blank">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a><br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature">Sincerely,<br><br>Giovanni Maruzzelli<br>OpenTelecom.IT<br>cell: +39 347 266 56 18<br><br></div></div>