Hi Marian, I think we worked it out... (time will tell now)..
Our gateway people were able to put IAX2 debug on, and then filter the trace (manually!) so that we could compare call-flow. Heres what they saw: lon-pbx-backup-1*CLI> Tx-Frame Retry[001] -- OSeqno: 000 ISeqno: 000 Type: IAX Subclass: NEW Timestamp: 00006ms SCall: 00074 DCall: 00000 [xx.xx.xx.xx:4569] lon-pbx-backup-1*CLI> Rx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 001 Type: IAX Subclass: ACK Timestamp: 00006ms SCall: 00001 DCall: 00074 [xx.xx.xx.xx:49308] lon-pbx-backup-1*CLI> Rx-Frame Retry[Yes] -- OSeqno: 000 ISeqno: 001 Type: IAX Subclass: AUTHREQ Timestamp: 00009ms SCall: 00001 DCall: 00074 [xx.xx.xx.xx:49308] AUTHMETHODS : 3 CHALLENGE : 552508132 USERNAME : ubigradin lon-pbx-backup-1*CLI> Tx-Frame Retry[000] -- OSeqno: 001 ISeqno: 000 Type: IAX Subclass: HANGUP Timestamp: 08017ms SCall: 00074 DCall: 00000 [xx.xx.xx.xx:4569] CAUSE CODE : 0 lon-pbx-backup-1*CLI> Rx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 000 Type: IAX Subclass: INVAL Timestamp: 00000ms SCall: 00000 DCall: 00074 [xx.xx.xx.xx:49308] We don't quite understand is the HANGUP.. but we did note the 49308 port.. So the NAT router was changing to different ports. We believe that a Draytek router uses two definitions for NATing... Port Forwarding and "Open Ports". We've switched to "Open Ports" (which really seems like its intended for a RANGE of ports, but we've specified only one. Now when we ethereal our WAN connection, we see 4569 in both directions.. Hopefully solved... Thanks! Adrian Marsh Tel: +44 (0) 20 71833427 Fax: +44 (0) 1793 441594 http://www.ubiquisys.com -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marian Rychtecky Sent: 24 October 2006 11:23 To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: Re: [asterisk-users] INVAL Messages Hi Adrian, yes this problem has happen only sometime, but i dont know exactly when.... i has discover this - plase read my comments: A)Calling directly via public IP's (port 4569 is forwarded on ADSL modem to asterisk1) - not working Tx-Frame Retry[000] -- OSeqno: 000 ISeqno: 000 Type: IAX Subclass: NEW Timestamp: 00013ms SCall: 00004 DCall: 00000 [213.160.177.186:4569] ---------> here is source port of transmiting packet 4569 (my site) .... VERSION : 2 CALLED NUMBER : 1299 CODEC_PREFS : () CALLING NUMBER : 1199 CALLING PRESNTN : 0 CALLING TYPEOFN : 0 CALLING TRANSIT : 0 CALLING NAME : Marian_Rychtecky LANGUAGE : en USERNAME : <some_username> FORMAT : 2 CAPABILITY : 2097151 ADSICPE : 2 DATE TIME : 2006-10-18 10:16:14 Rx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 001 Type: IAX Subclass: AUTHREQ Timestamp: 00006ms SCall: 00003 DCall: 00004 [213.160.177.186:9785] ----------> but here i got response from port 9785 (other site, because of NAT translation on other site) AUTHMETHODS : 3 CHALLENGE : 585590037 USERNAME : VALSABBIA-SLOVENSKO Tx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 000 Type: IAX Subclass: INVAL Timestamp: 00000ms SCall: 00004 DCall: 00003 [213.160.177.186:9785] B) calling thru openvpn - working Tx-Frame Retry[000] -- OSeqno: 000 ISeqno: 000 Type: IAX Subclass: NEW Timestamp: 00004ms SCall: 00001 DCall: 00000 [192.168.255.2:4569] ----------> here im sending the same packet to port 4569... VERSION : 2 CALLED NUMBER : 1299 CODEC_PREFS : () CALLING NUMBER : 1199 CALLING PRESNTN : 0 CALLING TYPEOFN : 0 CALLING TRANSIT : 0 CALLING NAME : Marian_Rychtecky LANGUAGE : en USERNAME : <user_name> FORMAT : 2 CAPABILITY : 2097151 ADSICPE : 2 DATE TIME : 2006-10-18 10:14:16 -- Called VALSABBIA-SLOVENSKO:[EMAIL PROTECTED]/1299 Rx-Frame Retry[ No] -- OSeqno: 000 ISeqno: 001 Type: IAX Subclass: AUTHREQ Timestamp: 00012ms SCall: 00001 DCall: 00001 [192.168.255.2:4569] -----------> here i got reply from port 4569 (and this port is excepted) AUTHMETHODS : 3 CHALLENGE : 186694617 USERNAME : VALSABBIA-SLOVENSKO Tx-Frame Retry[000] -- OSeqno: 001 ISeqno: 001 Type: IAX Subclass: AUTHREP Timestamp: 00034ms SCall: 00001 DCall: 00001 [192.168.255.2:4569] MD5 RESULT : b0674601456416db7e474de9a858c742 Rx-Frame Retry[ No] -- OSeqno: 001 ISeqno: 002 Type: IAX Subclass: ACCEPT ------------> so get ACCEPT and evething is working Timestamp: 00041ms SCall: 00001 DCall: 00001 [192.168.255.2:4569] FORMAT : 2 So i suppose that is the problem with comparing of source and destination port of IAX2 packets.... Look at your tcpdump and write me plase if you have the same troubles. Good luck, Marian Adrian Marsh napsal(a): > Hi Marian, > > Thanks for the info, something I'll check into... we have recently > swapped the router over.. > > We receive a NEW message: > > THEM > US (new) > > So the port forward (inbound) works ok.. > > We send them a reply: > > THEM < US (AUTHREQ) > > And then they send us the INVAL... > > THEM > US (INVAL) > > Now if any of the SRC ports got changed incorrectly, then wouldn't the > call stop completely? > > This only happens some of the time, intermittently - is yours constant? > > I've a Draytek 2910G router.. > > > Adrian Marsh > > > Tel: +44 (0) 20 71833427 > Fax: +44 (0) 1793 441594 > > http://www.ubiquisys.com > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Marian > Rychtecky > Sent: 23 October 2006 20:07 > To: Asterisk Users Mailing List - Non-Commercial Discussion > Subject: Re: [asterisk-users] INVAL Messages > > Hi Adrian, > are you using this IAX thru NAT? I have this problem when i try > call > with IAX2 and this Asterisk server is behind the NAT... > > I think its here problem with UDP source port which is changed in NAT > router, but im not sure 100%.... > > Marian > > Adrian Marsh napsal(a): >> All, >> >> >> >> Has anyone seen INVAL messages on an IAX link before? >> >> >> >> I'm occasionally getting them from my Gateway provider, and I need to >> narrow down the potential cause. >> >> >> >> Symptoms are: Incoming calls fail, I see NEW, AUTHREQ then INVAL >> messages between the two A*k boxes... then for no reason at all it'll >> start working ok again.. >> >> >> >> >> >> My Asterisik: 1.2.10, Gateway A*k : 1.2.0 - Any known issues > with >> IAX on either? >> >> >> >> >> >> My best guess so far is that the packets are getting corrupted >> on-route.. and I've asked the gateway folks to capture the traffic > when >> it happens again to confirm... >> >> >> >> Thanks, >> >> >> >> Adrian >> >> >> > ------------------------------------------------------------------------ >> _______________________________________________ >> --Bandwidth and Colocation provided by Easynews.com -- >> >> asterisk-users mailing list >> To UNSUBSCRIBE or update options visit: >> http://lists.digium.com/mailman/listinfo/asterisk-users > -- Marian Rychtecky [EMAIL PROTECTED] Tel. +420 724 397 441 ICQ 76582857 _______________________________________________ --Bandwidth and Colocation provided by Easynews.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users _______________________________________________ --Bandwidth and Colocation provided by Easynews.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
