Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

So far, yes. But to be 100% you need to check via a pcap the fragmentation flags in the IP packet(s) for the SIP INVITE. This will tell you (1) if the packet is fragmented and (2) if all the IP packets (UDP fragments) are present. Regards, Bogdan-Andrei Iancu OpenSIPS Founder and Developer

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

Look for the fragmentation flag. On May 17, 2016 1:08 PM, "Nabeel" wrote: > In that case, the answer to your question seems to be that the UDP packets > did not reach the OpenSIPS server, because nothing was added to the > OpenSIPS logs using debug level 4. All of this

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

In that case, the answer to your question seems to be that the UDP packets did not reach the OpenSIPS server, because nothing was added to the OpenSIPS logs using debug level 4. All of this seems to point to the cause being UDP packet fragmentation. Is this correct? On 17 May 2016 4:24 pm,

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

The TCP/IP stack of your server may decide to drop an UDP packet if it cannot re-assemble it correctly (like not all the IP fragments were received). In such a case, you see the IP packets (carrying the fragments) on network level, but they are never delivered at application level. Regards,

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

> > The next question - is this INVITE reaching your opensips script ? to be > sure that the OS delivers the UDP packet to the opensips application. I don't have any firewall on my server. Why would the UDP packet get blocked between entering the server and reaching opensips script? The opensips

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

You can check it in the pcap - if an UDP packet is fragmented into multiple IP packets, you have some fragmentation flag set into the IP header (see https://www.cs.nyu.edu/courses/fall98/G22.2262-001/class11.txt, look for "fragmentation" ). Also, at SIP level, you may check if the advertised

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

As per that capture, I assume that 162.249.6.110 is your server. And there is nothing send further from that IP - only incoming traffic. The next question - is this INVITE reaching your opensips script ? to be sure that the OS delivers the UDP packet to the opensips application. Regards,

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

I think this should do the job: make install modules modules=modules/compression Ionut Ionita OpenSIPS Developer On 05/13/2016 02:20 AM, Nabeel wrote: Do I have to rebuild my OpenSIPS installation completely just for this module? On 13 May 2016 12:16 am, "Ionut Ionita"

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

Do I have to rebuild my OpenSIPS installation completely just for this module? On 13 May 2016 12:16 am, "Ionut Ionita" wrote: > Hi, > > Did you build the module? Is the module loaded into your script? > > Regards, > > Ionut Ionita > OpenSIPS Developer > > On 05/13/2016

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

Hi, Did you build the module? Is the module loaded into your script? Regards, Ionut Ionita OpenSIPS Developer On 05/13/2016 02:09 AM, Nabeel wrote: Hi, I tried to use mc_compact but got this error: CRITICAL:core:yyerror: parse error in config file /usr/local//etc/opensips/opensips.cfg,

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

Hi, I tried to use mc_compact but got this error: CRITICAL:core:yyerror: parse error in config file /usr/local//etc/opensips/opensips.cfg, line 201, column 12-13: unknown command , missing loadmodule? Then trying to load the module I got this error: CRITICAL:core:yyerror: parse error in config

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

Can packet fragmentation be verified (to be sure that it is packet fragmentation)? On 6 May 2016 5:28 pm, "Nabeel" wrote: > The trace I posted earlier is what I see with tcpdump when attempting a > call. There is no other INVITE shown in the trace: >

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

The trace I posted earlier is what I see with tcpdump when attempting a call. There is no other INVITE shown in the trace: http://pastebin.com/raw/C4iymTbh The trace seems to end abruptly in the middle of the SDP, so I think it could be due to packet fragmentation. On 6 May 2016 4:18 pm,

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

So that meas the INVITE never gets to the callee ?? maybe it is not properly routed . Do you see (with ngrep or tcpdump) the INVITE being sent out by opensips towards callee ? Regards, Bogdan-Andrei Iancu OpenSIPS Founder and Developer http://www.opensips-solutions.com On 06.05.2016 12:56,

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

Hi, Thanks for the idea about packet compression. By 'call fails to connect', I meant the call does not connect to the callee, ie. the callee's phone does not ring after the INVITE (despite using TURN server). This was a public WiFi network and that was all I could get at the time. I am using

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

Hi, Hard to analyze a call based on the INVITE packet only :). Still the SIP signaling does not show any ALG interference (also not sure if the capture was done before or after the ALG). Also, what you mean by "call fails" ?no reply, negative reply , no audio ? Regards, Bogdan-Andrei Iancu

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

Hi, Haven't follow if it is or not a fragmentation issue, but if it is, instead of switching to TCP, you can use the compression module to reduce the size of the SIP packet. See the mc_compact() function: http://www.opensips.org/html/docs/modules/2.1.x/compression.html#id293508 If running an

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

It seems you are facing packet fragmentation, and the second part of the fragment isn't reaching opensips... maybe your wifi router (if it is the only element between your endpoint and opensips) is not correct handling this situation I would sugest a change to TCP as your next step for

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

Yes, it is definitely listening on the non-standard port: # netstat -lnp | grep opensips udp0 0 162.xxx.x.110:12341 0.0.0.0:* 1750/opensips In fact, it even seems to register correctly, but the INVITE does not get through. I have OpenSIPS set on debug level 4 but did not

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

Nabeel, Did you verify that your opensips server is listening on this non Standard port ? run netstat -lnp | grep opensips On Thu, May 5, 2016 at 4:12 PM, Nabeel wrote: > Tito Campen, I took the trace on my OpenSIPS server, which is the > receiving proxy. However,

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

Nabeel, This article points at UDP in terms of media. Which uses very ephemeral sample rates therefore we do not notice packet loss . I would argue that TCP is better when dealing with larger SIP msg packets due to the ability to notify the far end of pending fragments. On Thu, May 5, 2016 at

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

Tito Campen, I took the trace on my OpenSIPS server, which is the receiving proxy. However, OpenSIPS did not add anything to the server's log itself. On 5 May 2016 at 21:08, Tito Cumpen wrote: > Nabel, You should should take a trace at the receiving proxy to verify the >

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

Nabel, You should should take a trace at the receiving proxy to verify the traffic is even getting there. If there is no sdp received from the UAS you would not see rtp traversing at all. Using non Standard points doesn't assure you that messaging traffic will traverse. On Thu, May 5, 2016 at

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

Please read why UDP is better for VoIP: https://www.onsip.com/blog/udp-versus-tcp-for-voip ___ Users mailing list Users@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

Adding to Bogdan's point I am successfully using sip tls on port 443 without any issues as of yet. It's bypassing some isp enforced algs as well as those enforced by local routers. :-). On Thu, May 5, 2016 at 3:35 PM, Nabeel wrote: > > Please check the following SIP

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

Please check the following SIP trace taken within a WiFi network. The call fails to connect despite the INVITE request and using a non-standard port. Could this be caused by SIP ALG, or some unopened RTP port on the router? http://pastebin.com/raw/C4iymTbh

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

And in this case, instead of re-inventing the wheel, just use TLS :) Regards, Bogdan-Andrei Iancu OpenSIPS Founder and Developer http://www.opensips-solutions.com On 04.05.2016 03:05, Alex Balashov wrote: On 05/03/2016 08:03 PM, Nabeel wrote: A possible solution to this seems to be a 'SIP

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

On 05/03/2016 08:03 PM, Nabeel wrote: A possible solution to this seems to be a 'SIP tunnel' server. The server would tunnel the SIP and UDP packets over a common TCP port such as 80 or 443, which are more likely to be open and unblocked on Wi-Fi routers for browsing, Email, etc. The tunnel

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

A possible solution to this seems to be a 'SIP tunnel' server. The server would tunnel the SIP and UDP packets over a common TCP port such as 80 or 443, which are more likely to be open and unblocked on Wi-Fi routers for browsing, Email, etc. The tunnel server would then send this data to OpenSIPS

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

+1 > On 02 May 2016, at 21:59, Russell Treleaven wrote: > > TCP works for me. > On May 2, 2016 8:43 PM, "Nabeel" > wrote: > Thanks for the suggestions of using TLS or changing the port. I changed the > port,

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

TCP works for me. On May 2, 2016 8:43 PM, "Nabeel" wrote: > Thanks for the suggestions of using TLS or changing the port. I changed > the port, but some routers are still able to mess with the SIP headers. I > would have used TLS, if not for two reasons: > > 1. ICE

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

Thanks for the suggestions of using TLS or changing the port. I changed the port, but some routers are still able to mess with the SIP headers. I would have used TLS, if not for two reasons: 1. ICE protocol was originally designed for UDP according to RFC5245, and it seems to work better with

Re: [OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

Using TLS! Also configuring your systems/devices to use other port than 5060 may do the trick... On Mon, May 2, 2016 at 9:14 AM, Nabeel wrote: > Hi, > > Other than using rtpproxy/NAThelper modules, is there any way to > bypass/workaround SIP ALG enabled on many WiFi

[OpenSIPS-Users] How to overcome SIP ALG on Wi-Fi routers

Hi, Other than using rtpproxy/NAThelper modules, is there any way to bypass/workaround SIP ALG enabled on many WiFi routers? Although SIP ALG was designed to help with NAT, in most cases it does the opposite and breaks SIP. Nabeel ___ Users mailing