Hi All,

Is there any limit to the size of a SIP message ? How much data is a UA
expected to process before it can determine that it's being sent malicious
messages ?

I'm thinking of this from the security aspect of SIP devices that need to
simultaneously process multiple messages over multiple connections, that can
potentially be brought down by trying to accept huge amounts of data from
too many simultaneous connections.

If I remember correctly, SNMP sets max sizes at 484 for UDP and 8K for TCP.
Any analogous restrictions on SIP ?

I understand that SIP attempts to be extensible (for IM etc.), and so the
standards won't define a set limit on message sizes (as it doesn't for
headers). And it's probably upto implementations as to how much they are
willing to accept. However, looking at this from a compliancy point of view,
in RFC3261, it says that Max-Forwards can be upto 255. This would mean that
a UAS can potentially expect to see requests coming in with 255RR+255VIA's.
Add a couple bodies and standard headers on that message and it'd be huge.
Are UAS's expected to be able to handle such messages to be compliant ?

Thanks,
Pranab
_______________________________________________
Sip-implementors mailing list
[EMAIL PROTECTED]
http://lists.cs.columbia.edu/mailman/listinfo/sip-implementors

Reply via email to