[Freeswitch-users] TLS problem using SNOM phones
Peter P GMX
Prometheus001 at gmx.net
Sat Aug 14 14:27:06 PDT 2010
Hello Matthias,
I an working here with a number of 320 and 360 Phones with TLS and SRTP.
This works well as longs as you have added ";transport=tls" to the
outbound proxy and RTP/SAVP to "optional" in your SIP profile.
Best regards
Peter
Matthias Reinacher schrieb:
> Hello all,
> i have a problem using different Snom phones (300/320/820/821) with
> Freeswitch and TLS in a internet-wide setup (phones being registered
> via internet at a FS w/ public IP). Sometimes (25-50% of cases) the
> first try to call someone (internal) won't go through. Logs from
> phone, Freeswitch and ssldump show that the phone sends an INVITE, the
> FS asks for more credentials (digest auth b/c phone IP not in ACL),
> the phone answers with an INVITE w/ more auth credentials -- and this
> second INVITE package is not received by the FS. It does arrive at the
> server though, as verified by ssldump. Interestingly, if one presses
> "Cancel" on the phone, a new TCP/SSL connection is created, apparently
> the old one died -- see logs from phone, FS, and ssldump below. Also,
> Snom 820/821 show the registrar as not registered after such an action
> (presumably b/c original SSL connection is dead).
>
> Has anybody encountered this behaviour and can verify it? Are there
> any ideas what causes the problem here (FS, OpenSSL, phone?) and if
> there is any remedy for it? I was planning on using FS as a production
> phone system w/ encrypted signalling and audio using Snom phones. I
> can't do that right now b/c of the abovementioned problem, and i have
> not yet found a solution.
>
> Any help is greatly appreciated.
>
> TIA
> Matthias
>
>
> Logs: phone, FS, ssldump, please also see annotation enclosed in "---
> ... ---"
>
> - phone:
>
> Sent to tls:XXX.XXX.XXX.XXX:5061 at 11/7/2010 14:41:22:225 (1280 bytes):
>
> INVITE sip:9999 at XXXX.dyndns.org;user=phone SIP/2.0
> Via: SIP/2.0/TLS 192.168.0.114:3967;branch=z9hG4bK-re694j8n03bd;rport
> From: "Matthias" <sip:1001 at XXXX.dyndns.org>;tag=rllbt2d9pz
> To: <sip:9999 at XXXX.dyndns.org;user=phone>
> Call-ID: 5379263cf7de-1vkl60xxknr0
> CSeq: 1 INVITE
> Max-Forwards: 70
> Contact:
> <sip:1001 at 192.168.0.114:3967;transport=tls;line=ze6y9ju8>;reg-id=1
> X-Serialnumber: 0004134517B7
> P-Key-Flags: resolution="31x13", keys="4"
> User-Agent: snom821/8.4.4
> Accept: application/sdp
> Allow: INVITE, ACK, CANCEL, BYE, REFER, OPTIONS, NOTIFY, SUBSCRIBE,
> PRACK, MESSAGE, INFO, UPDATE
> Allow-Events: talk, hold, refer, call-info
> Supported: timer, 100rel, replaces, from-change
> Session-Expires: 3600;refresher=uas
> Min-SE: 90
> Content-Type: application/sdp
> Content-Length: 476
>
> v=0
> o=root 739742427 739742427 IN IP4 192.168.0.114
> s=call
> c=IN IP4 192.168.0.114
> t=0 0
> m=audio 50506 RTP/SAVP 0 8 9 99 3 18 4 101
> a=crypto:1 AES_CM_128_HMAC_SHA1_32
> inline:0AKzFxymFJ8eHsDOerrZiw8RZhgB9pmDU0q0+4lj
> a=rtpmap:0 pcmu/8000
> a=rtpmap:8 pcma/8000
> a=rtpmap:9 g722/8000
> a=rtpmap:99 g726-32/8000
> a=rtpmap:3 gsm/8000
> a=rtpmap:18 g729/8000
> a=fmtp:18 annexb=no
> a=rtpmap:4 g723/8000
> a=rtpmap:101 telephone-event/8000
> a=fmtp:101 0-16
> a=ptime:20
> a=sendrecv
>
>
> Received from tls:XXX.XXX.XXX.XXX:5061 at 11/7/2010 14:41:22:363 (350
> bytes):
>
> SIP/2.0 100 Trying
> Via: SIP/2.0/TLS
> 192.168.0.114:3967;branch=z9hG4bK-re694j8n03bd;rport=3967;received=78.53.13.206
> From: "Matthias" <sip:1001 at XXXX.dyndns.org>;tag=rllbt2d9pz
> To: <sip:9999 at XXXX.dyndns.org;user=phone>
> Call-ID: 5379263cf7de-1vkl60xxknr0
> CSeq: 1 INVITE
> User-Agent: FreeSWITCH-mod_sofia/1.0.head-git-
> Content-Length: 0
>
>
> Received from tls:XXX.XXX.XXX.XXX:5061 at 11/7/2010 14:41:22:524 (844
> bytes):
>
> SIP/2.0 407 Proxy Authentication Required
> Via: SIP/2.0/TLS
> 192.168.0.114:3967;branch=z9hG4bK-re694j8n03bd;rport=3967;received=78.53.13.206
> From: "Matthias" <sip:1001 at XXXX.dyndns.org>;tag=rllbt2d9pz
> To: <sip:9999 at XXXX.dyndns.org;user=phone>;tag=vjyU4aSFye19F
> Call-ID: 5379263cf7de-1vkl60xxknr0
> CSeq: 1 INVITE
> User-Agent: FreeSWITCH-mod_sofia/1.0.head-git-
> Accept: application/sdp
> Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, UPDATE, INFO,
> REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
> Supported: timer, precondition, path, replaces
> Allow-Events: talk, hold, presence, dialog, line-seize, call-info,
> sla, include-session-description, presence.winfo, message-summary, refer
> Proxy-Authenticate: Digest realm="XXXX.dyndns.org
> <http://XXXX.dyndns.org>",
> nonce="a3346430-8ce9-11df-9347-29b67737619e", algorithm=MD5, qop="auth"
> Content-Length: 0
>
>
> Sent to tls:XXX.XXX.XXX.XXX:5061 at 11/7/2010 14:41:22:528 (418 bytes):
>
> ACK sip:9999 at XXXX.dyndns.org;user=phone SIP/2.0
> Via: SIP/2.0/TLS 192.168.0.114:3967;branch=z9hG4bK-re694j8n03bd;rport
> From: "Matthias" <sip:1001 at XXXX.dyndns.org>;tag=rllbt2d9pz
> To: <sip:9999 at XXXX.dyndns.org;user=phone>;tag=vjyU4aSFye19F
> Call-ID: 5379263cf7de-1vkl60xxknr0
> CSeq: 1 ACK
> Max-Forwards: 70
> Contact:
> <sip:1001 at 192.168.0.114:3967;transport=tls;line=ze6y9ju8>;reg-id=1
> Content-Length: 0
>
> --- the following packet is not received by FS ---
>
>
> Sent to tls:XXX.XXX.XXX.XXX:5061 at 11/7/2010 14:41:22:544 (1541 bytes):
>
> INVITE sip:9999 at XXXX.dyndns.org;user=phone SIP/2.0
> Via: SIP/2.0/TLS 192.168.0.114:3967;branch=z9hG4bK-7g007jateb7f;rport
> From: "Matthias" <sip:1001 at XXXX.dyndns.org>;tag=rllbt2d9pz
> To: <sip:9999 at XXXX.dyndns.org;user=phone>
> Call-ID: 5379263cf7de-1vkl60xxknr0
> CSeq: 2 INVITE
> Max-Forwards: 70
> Contact:
> <sip:1001 at 192.168.0.114:3967;transport=tls;line=ze6y9ju8>;reg-id=1
> X-Serialnumber: 0004134517B7
> P-Key-Flags: resolution="31x13", keys="4"
> User-Agent: snom821/8.4.4
> Accept: application/sdp
> Allow: INVITE, ACK, CANCEL, BYE, REFER, OPTIONS, NOTIFY, SUBSCRIBE,
> PRACK, MESSAGE, INFO, UPDATE
> Allow-Events: talk, hold, refer, call-info
> Supported: timer, 100rel, replaces, from-change
> Session-Expires: 3600;refresher=uas
> Min-SE: 90
> Proxy-Authorization: Digest username="1001",realm="XXXX.dyndns.org
> <http://XXXX.dyndns.org>",nonce="a3346430-8ce9-11df-9347-29b67737619e",uri="sip:9999 at XXXX.dyndns.org;user=phone",qop=auth,nc=00000001,cnonce="4fd48758",response="bb47aafad2fc3980d7540b0d2cbf1b03",algorithm=MD5
> Content-Type: application/sdp
> Content-Length: 476
>
> v=0
> o=root 739742427 739742427 IN IP4 192.168.0.114
> s=call
> c=IN IP4 192.168.0.114
> t=0 0
> m=audio 50506 RTP/SAVP 0 8 9 99 3 18 4 101
> a=crypto:1 AES_CM_128_HMAC_SHA1_32
> inline:0AKzFxymFJ8eHsDOerrZiw8RZhgB9pmDU0q0+4lj
> a=rtpmap:0 pcmu/8000
> a=rtpmap:8 pcma/8000
> a=rtpmap:9 g722/8000
> a=rtpmap:99 g726-32/8000
> a=rtpmap:3 gsm/8000
> a=rtpmap:18 g729/8000
> a=fmtp:18 annexb=no
> a=rtpmap:4 g723/8000
> a=rtpmap:101 telephone-event/8000
> a=fmtp:101 0-16
> a=ptime:20
> a=sendrecv
>
> --- before this packet is sent, a new TCP/SSL connection is negotiated ---
>
>
> Sent to tls:XXX.XXX.XXX.XXX:5061 at 11/7/2010 14:41:29:936 (386 bytes):
>
> CANCEL sip:9999 at XXXX.dyndns.org;user=phone SIP/2.0
> Via: SIP/2.0/TLS 192.168.0.114:4655;branch=z9hG4bK-7g007jateb7f;rport
> From: "Matthias" <sip:1001 at XXXX.dyndns.org>;tag=rllbt2d9pz
> To: <sip:9999 at XXXX.dyndns.org;user=phone>
> Call-ID: 5379263cf7de-1vkl60xxknr0
> CSeq: 2 CANCEL
> Max-Forwards: 70
> Reason: SIP;cause=487;text="Request terminated by user"
> Content-Length: 0
>
>
> Received from tls:XXX.XXX.XXX.XXX:5061 at 11/7/2010 14:41:30:562 (345
> bytes):
>
> SIP/2.0 481 Call/Transaction Does Not Exist
> Via: SIP/2.0/TLS
> 192.168.0.114:4655;branch=z9hG4bK-7g007jateb7f;rport=4655;received=78.53.13.206
> From: "Matthias" <sip:1001 at XXXX.dyndns.org>;tag=rllbt2d9pz
> To: <sip:9999 at XXXX.dyndns.org;user=phone>;tag=XUQm659jUQQvB
> Call-ID: 5379263cf7de-1vkl60xxknr0
> CSeq: 2 CANCEL
> Content-Length: 0
>
>
>
>
>
> - Freeswitch:
>
> recv 1280 bytes from tls/[XXX.XXX.XXX.XXX]:3967 at 12:41:33.774063:
>
> ------------------------------------------------------------------------
> INVITE sip:9999 at XXXX.dyndns.org;user=phone SIP/2.0
> Via: SIP/2.0/TLS 192.168.0.114:3967;branch=z9hG4bK-re694j8n03bd;rport
> From: "Matthias" <sip:1001 at XXXX.dyndns.org>;tag=rllbt2d9pz
> To: <sip:9999 at XXXX.dyndns.org;user=phone>
> Call-ID: 5379263cf7de-1vkl60xxknr0
> CSeq: 1 INVITE
> Max-Forwards: 70
> Contact:
> <sip:1001 at 192.168.0.114:3967;transport=tls;line=ze6y9ju8>;reg-id=1
> X-Serialnumber: 0004134517B7
> P-Key-Flags: resolution="31x13", keys="4"
> User-Agent: snom821/8.4.4
> Accept: application/sdp
> Allow: INVITE, ACK, CANCEL, BYE, REFER, OPTIONS, NOTIFY, SUBSCRIBE,
> PRACK, MESSAGE, INFO, UPDATE
> Allow-Events: talk, hold, refer, call-info
> Supported: timer, 100rel, replaces, from-change
> Session-Expires: 3600;refresher=uas
> Min-SE: 90
> Content-Type: application/sdp
> Content-Length: 476
>
>
>
> v=0
> o=root 739742427 739742427 IN IP4 192.168.0.114
> s=call
> c=IN IP4 192.168.0.114
> t=0 0
> m=audio 50506 RTP/SAVP 0 8 9 99 3 18 4 101
> a=crypto:1 AES_CM_128_HMAC_SHA1_32
> inline:0AKzFxymFJ8eHsDOerrZiw8RZhgB9pmDU0q0+4lj
> a=rtpmap:0 pcmu/8000
> a=rtpmap:8 pcma/8000
> a=rtpmap:9 g722/8000
> a=rtpmap:99 g726-32/8000
> a=rtpmap:3 gsm/8000
> a=rtpmap:18 g729/8000
> a=fmtp:18 annexb=no
> a=rtpmap:4 g723/8000
> a=rtpmap:101 telephone-event/8000
> a=fmtp:101 0-16
> a=ptime:20
> a=sendrecv
>
> ------------------------------------------------------------------------
> send 350 bytes to tls/[XXX.XXX.XXX.XXX]:3967 at 12:41:33.777861:
>
> ------------------------------------------------------------------------
> SIP/2.0 100 Trying
> Via: SIP/2.0/TLS
> 192.168.0.114:3967;branch=z9hG4bK-re694j8n03bd;rport=3967;received=XXX.XXX.XXX.XXX
> From: "Matthias" <sip:1001 at XXXX.dyndns.org>;tag=rllbt2d9pz
> To: <sip:9999 at XXXX.dyndns.org;user=phone>
> Call-ID: 5379263cf7de-1vkl60xxknr0
> CSeq: 1 INVITE
> User-Agent: FreeSWITCH-mod_sofia/1.0.head-git-
> Content-Length: 0
>
>
>
>
> ------------------------------------------------------------------------
> 2010-07-11 14:41:33.778081 [DEBUG] sofia.c:5999 IP XXX.XXX.XXX.XXX
> Rejected by acl "domains". Falling back to Digest auth.
>
> send 844 bytes to tls/[XXX.XXX.XXX.XXX]:3967 at 12:41:33.864787:
>
> ------------------------------------------------------------------------
> SIP/2.0 407 Proxy Authentication Required
> Via: SIP/2.0/TLS
> 192.168.0.114:3967;branch=z9hG4bK-re694j8n03bd;rport=3967;received=XXX.XXX.XXX.XXX
> From: "Matthias" <sip:1001 at XXXX.dyndns.org>;tag=rllbt2d9pz
> To: <sip:9999 at XXXX.dyndns.org;user=phone>;tag=vjyU4aSFye19F
> Call-ID: 5379263cf7de-1vkl60xxknr0
> CSeq: 1 INVITE
> User-Agent: FreeSWITCH-mod_sofia/1.0.head-git-
> Accept: application/sdp
> Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, UPDATE, INFO,
> REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
> Supported: timer, precondition, path, replaces
> Allow-Events: talk, hold, presence, dialog, line-seize, call-info,
> sla, include-session-description, presence.winfo, message-summary, refer
> Proxy-Authenticate: Digest realm="XXXX.dyndns.org
> <http://XXXX.dyndns.org>",
> nonce="a3346430-8ce9-11df-9347-29b67737619e", algorithm=MD5, qop="auth"
> Content-Length: 0
>
>
>
>
> ------------------------------------------------------------------------
> recv 418 bytes from tls/[XXX.XXX.XXX.XXX]:3967 at 12:41:34.082329:
>
> ------------------------------------------------------------------------
> ACK sip:9999 at XXXX.dyndns.org;user=phone SIP/2.0
> Via: SIP/2.0/TLS 192.168.0.114:3967;branch=z9hG4bK-re694j8n03bd;rport
> From: "Matthias" <sip:1001 at XXXX.dyndns.org>;tag=rllbt2d9pz
> To: <sip:9999 at XXXX.dyndns.org;user=phone>;tag=vjyU4aSFye19F
> Call-ID: 5379263cf7de-1vkl60xxknr0
> CSeq: 1 ACK
> Max-Forwards: 70
> Contact:
> <sip:1001 at 192.168.0.114:3967;transport=tls;line=ze6y9ju8>;reg-id=1
> Content-Length: 0
>
> --- here, the 2nd INVITE packet w/ credentials is missing, note time
> difference to next packet ---
>
>
>
>
> ------------------------------------------------------------------------
> recv 386 bytes from tls/[XXX.XXX.XXX.XXX]:4655 at 12:41:41.905857:
>
> ------------------------------------------------------------------------
> CANCEL sip:9999 at XXXX.dyndns.org;user=phone SIP/2.0
> Via: SIP/2.0/TLS 192.168.0.114:4655;branch=z9hG4bK-7g007jateb7f;rport
> From: "Matthias" <sip:1001 at XXXX.dyndns.org>;tag=rllbt2d9pz
> To: <sip:9999 at XXXX.dyndns.org;user=phone>
> Call-ID: 5379263cf7de-1vkl60xxknr0
> CSeq: 2 CANCEL
> Max-Forwards: 70
> Reason: SIP;cause=487;text="Request terminated by user"
> Content-Length: 0
>
>
>
>
> ------------------------------------------------------------------------
> send 345 bytes to tls/[XXX.XXX.XXX.XXX]:4655 at 12:41:41.906402:
>
> ------------------------------------------------------------------------
> SIP/2.0 481 Call/Transaction Does Not Exist
> Via: SIP/2.0/TLS
> 192.168.0.114:4655;branch=z9hG4bK-7g007jateb7f;rport=4655;received=XXX.XXX.XXX.XXX
> From: "Matthias" <sip:1001 at XXXX.dyndns.org>;tag=rllbt2d9pz
> To: <sip:9999 at XXXX.dyndns.org;user=phone>;tag=XUQm659jUQQvB
> Call-ID: 5379263cf7de-1vkl60xxknr0
> CSeq: 2 CANCEL
> Content-Length: 0
>
>
>
>
> - ssldump:
>
> 1 254 2335.8000 (417.3058) C>SV3.1(1300) application_data
> ---------------------------------------------------------------
> INVITE sip:9999 at XXXX.dyndns.org;user=phone SIP/2.0
> Via: SIP/2.0/TLS 192.168.0.114:3967;branch=z9hG4bK-re694j8n03bd;rport
> From: "Matthias" <sip:1001 at XXXX.dyndns.org>;tag=rllbt2d9pz
> To: <sip:9999 at XXXX.dyndns.org;user=phone>
> Call-ID: 5379263cf7de-1vkl60xxknr0
> CSeq: 1 INVITE
> Max-Forwards: 70
> Contact:
> <sip:1001 at 192.168.0.114:3967;transport=tls;line=ze6y9ju8>;reg-id=1
> X-Serialnumber: 0004134517B7
> P-Key-Flags: resolution="31x13", keys="4"
> User-Agent: snom821/8.4.4
> Accept: application/sdp
> Allow: INVITE, ACK, CANCEL, BYE, REFER, OPTIONS, NOTIFY,
> SUBSCRIBE, PRACK, MESSAGE, INFO, UPDATE
> Allow-Events: talk, hold, refer, call-info
> Supported: timer, 100rel, replaces, from-change
> Session-Expires: 3600;refresher=uas
> Min-SE: 90
> Content-Type: application/sdp
> Content-Length: 476
>
>
>
> v=0
> o=root 739742427 739742427 IN IP4 192.168.0.114
> s=call
> c=IN IP4 192.168.0.114
> t=0 0
> m=audio 50506 RTP/SAVP 0 8 9 99 3 18 4 101
> a=crypto:1 AES_CM_128_HMAC_SHA1_32
> inline:0AKzFxymFJ8eHsDOerrZiw8RZhgB9pmDU0q0+4lj
> a=rtpmap:0 pcmu/8000
> a=rtpmap:8 pcma/8000
> a=rtpmap:9 g722/8000
> a=rtpmap:99 g726-32/8000
> a=rtpmap:3 gsm/8000
> a=rtpmap:18 g729/8000
> a=fmtp:18 annexb=no
> a=rtpmap:4 g723/8000
> a=rtpmap:101 telephone-event/8000
> a=fmtp:101 0-16
> a=ptime:20
> a=sendrecv
> ---------------------------------------------------------------
> 1 255 2335.8043 (0.0043) S>CV3.1(138) application_data
> ---------------------------------------------------------------
> SIP/2.0 100 Trying
> Via: SIP/2.0/TLS
> 192.168.0.114:3967;branch=z9hG4bK-re694j8n03bd;rport=3967;received=78.53.13.206
> ---------------------------------------------------------------
> 1 256 2335.8044 (0.0000) S>CV3.1(183) application_data
> ---------------------------------------------------------------
> From: "Matthias" <sip:1001 at XXXX.dyndns.org>;tag=rllbt2d9pz
> To: <sip:9999 at XXXX.dyndns.org;user=phone>
> Call-ID: 5379263cf7de-1vkl60xxknr0
> CSeq: 1 INVITE
> ---------------------------------------------------------------
> 1 257 2335.8045 (0.0000) S>CV3.1(89) application_data
> ---------------------------------------------------------------
> User-Agent: FreeSWITCH-mod_sofia/1.0.head-git-
> Content-Length: 0
>
>
>
> ---------------------------------------------------------------
> 1 258 2335.8935 (0.0890) S>CV3.1(161) application_data
> ---------------------------------------------------------------
> SIP/2.0 407 Proxy Authentication Required
> Via: SIP/2.0/TLS
> 192.168.0.114:3967;branch=z9hG4bK-re694j8n03bd;rport=3967;received=78.53.13.206
> ---------------------------------------------------------------
> 1 259 2335.8935 (0.0000) S>CV3.1(84) application_data
> ---------------------------------------------------------------
> From: "Matthias" <sip:1001 at XXXX.dyndns.org>;tag=rllbt2d9pz
> ---------------------------------------------------------------
> 1 260 2335.8935 (0.0000) S>CV3.1(85) application_data
> ---------------------------------------------------------------
> To: <sip:9999 at XXXX.dyndns.org;user=phone>;tag=vjyU4aSFye19F
> ---------------------------------------------------------------
> 1 261 2335.8935 (0.0000) S>CV3.1(72) application_data
> ---------------------------------------------------------------
> Call-ID: 5379263cf7de-1vkl60xxknr0
> CSeq: 1 INVITE
> ---------------------------------------------------------------
> 1 262 2335.8935 (0.0000) S>CV3.1(542) application_data
> ---------------------------------------------------------------
> User-Agent: FreeSWITCH-mod_sofia/1.0.head-git-
> Accept: application/sdp
> Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, UPDATE, INFO,
> REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
> Supported: timer, precondition, path, replaces
> Allow-Events: talk, hold, presence, dialog, line-seize, call-info,
> sla, include-session-description, presence.winfo, message-summary, refer
> Proxy-Authenticate: Digest realm="XXXX.dyndns.org
> <http://XXXX.dyndns.org>",
> nonce="a3346430-8ce9-11df-9347-29b67737619e", algorithm=MD5, qop="auth"
> Content-Length: 0
>
>
>
> ---------------------------------------------------------------
> 1 263 2336.1083 (0.2147) C>SV3.1(438) application_data
> ---------------------------------------------------------------
> ACK sip:9999 at XXXX.dyndns.org;user=phone SIP/2.0
> Via: SIP/2.0/TLS 192.168.0.114:3967;branch=z9hG4bK-re694j8n03bd;rport
> From: "Matthias" <sip:1001 at XXXX.dyndns.org>;tag=rllbt2d9pz
> To: <sip:9999 at XXXX.dyndns.org;user=phone>;tag=vjyU4aSFye19F
> Call-ID: 5379263cf7de-1vkl60xxknr0
> CSeq: 1 ACK
> Max-Forwards: 70
> Contact:
> <sip:1001 at 192.168.0.114:3967;transport=tls;line=ze6y9ju8>;reg-id=1
> Content-Length: 0
>
>
>
>
> --- here, the 2nd INVITE packet is received, but it doesn't arrive at
> FS ---
>
>
>
> ---------------------------------------------------------------
> 1 2336.1229 (0.0145) S>C TCP FIN
> 1 264 2336.2127 (0.0898) C>SV3.1(1561) application_data
> ---------------------------------------------------------------
> INVITE sip:9999 at XXXX.dyndns.org;user=phone SIP/2.0
> Via: SIP/2.0/TLS 192.168.0.114:3967;branch=z9hG4bK-7g007jateb7f;rport
> From: "Matthias" <sip:1001 at XXXX.dyndns.org>;tag=rllbt2d9pz
> To: <sip:9999 at XXXX.dyndns.org;user=phone>
> Call-ID: 5379263cf7de-1vkl60xxknr0
> CSeq: 2 INVITE
> Max-Forwards: 70
> Contact:
> <sip:1001 at 192.168.0.114:3967;transport=tls;line=ze6y9ju8>;reg-id=1
> X-Serialnumber: 0004134517B7
> P-Key-Flags: resolution="31x13", keys="4"
> User-Agent: snom821/8.4.4
> Accept: application/sdp
> Allow: INVITE, ACK, CANCEL, BYE, REFER, OPTIONS, NOTIFY,
> SUBSCRIBE, PRACK, MESSAGE, INFO, UPDATE
> Allow-Events: talk, hold, refer, call-info
> Supported: timer, 100rel, replaces, from-change
> Session-Expires: 3600;refresher=uas
> Min-SE: 90
> Proxy-Authorization: Digest username="1001",realm="XXXX.dyndns.org
> <http://XXXX.dyndns.org>",nonce="a3346430-8ce9-11df-9347-29b67737619e",uri="sip:9999 at XXXX.dyndns.org;user=phone",qop=auth,nc=00000001,cnonce="4fd48758",response="bb47aafad2fc3980d7540b0d2cbf1b03",algorithm=MD5
> Content-Type: application/sdp
> Content-Length: 476
>
>
>
> v=0
> o=root 739742427 739742427 IN IP4 192.168.0.114
> s=call
> c=IN IP4 192.168.0.114
> t=0 0
> m=audio 50506 RTP/SAVP 0 8 9 99 3 18 4 101
> a=crypto:1 AES_CM_128_HMAC_SHA1_32
> inline:0AKzFxymFJ8eHsDOerrZiw8RZhgB9pmDU0q0+4lj
> a=rtpmap:0 pcmu/8000
> a=rtpmap:8 pcma/8000
> a=rtpmap:9 g722/8000
> a=rtpmap:99 g726-32/8000
> a=rtpmap:3 gsm/8000
> a=rtpmap:18 g729/8000
> a=fmtp:18 annexb=no
> a=rtpmap:4 g723/8000
> a=rtpmap:101 telephone-event/8000
> a=fmtp:101 0-16
> a=ptime:20
> a=sendrecv
> ---------------------------------------------------------------
>
> --- a new TCP/SSL connection is initiated for the next packet ---
>
> 1 2336.2128 (0.0001) C>S TCP FIN
> New TCP connection #7: XXX.XXX.XXX (4655) <-> XXX.XXX.XXX (5061)
> 7 1 0.1214 (0.1214) C>SV3.1(63) Handshake
> ClientHello
> Version 3.1
> random[32]=
> 3c 26 79 5c 23 37 ce ec 6b 40 cc 95 14 16 f8 e9
> fd 5e 36 da dd 56 ab 2a 8e 0e 15 aa 4c d7 93 98
> cipher suites
> TLS_RSA_WITH_RC4_128_MD5
> TLS_RSA_WITH_RC4_128_SHA
> TLS_RSA_WITH_NULL_MD5
> TLS_RSA_WITH_NULL_SHA
> TLS_DH_anon_WITH_3DES_EDE_CBC_SHA
> TLS_DH_anon_WITH_RC4_128_MD5
> TLS_RSA_WITH_DES_CBC_SHA
> TLS_RSA_EXPORT1024_WITH_RC4_56_SHA
> TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA
> TLS_DH_anon_WITH_DES_CBC_SHA
> compression methods
> NULL
> 7 2 0.1219 (0.0005) S>CV3.1(74) Handshake
> ServerHello
> Version 3.1
> random[32]=
> 4c 39 bc 05 60 47 db 31 51 42 29 ae 9f 45 c5 2f
> 56 5b 02 dd 4b 3b c1 f7 f3 b7 80 9b 8b 16 7a a0
> session_id[32]=
> f5 49 8b 05 df 1d 7a 30 6d b5 58 79 b6 a3 e4 1d
> c2 c1 98 fc de f5 64 8f 85 cc 7c 7f a9 08 9f d7
> cipherSuite TLS_RSA_WITH_RC4_128_SHA
> compressionMethod NULL
> 7 3 0.1219 (0.0000) S>CV3.1(644) Handshake
> Certificate
> 7 4 0.1219 (0.0000) S>CV3.1(4) Handshake
> ServerHelloDone
> 7 5 0.4413 (0.3193) C>SV3.1(134) Handshake
> ClientKeyExchange
> EncryptedPreMasterSecret[128]=
> 38 71 d5 4f 2f 4f 66 08 37 92 57 ef 4a bd 13 60
> 6f 7c 0f 23 47 83 a5 59 95 25 91 58 10 c2 b9 ea
> 8d 12 88 d9 33 06 a8 8c aa e6 17 b8 91 35 0f 56
> 49 a7 9f 77 04 9c fe b1 17 70 c0 a3 5f bc 77 ff
> 25 41 a5 2f cd f3 24 d7 3c da 9f a7 86 30 a8 64
> 7d ca cd 06 6c d4 a0 fc 18 b7 5a 04 69 45 ae 28
> 4e 0f bf 3c 49 87 fc f6 91 3b 1d 00 6e 81 46 5f
> e3 7e cd a2 40 b2 37 3b c3 fc 0a 17 8b aa 76 88
> 7 6 0.4413 (0.0000) C>SV3.1(1) ChangeCipherSpec
> 7 7 0.4413 (0.0000) C>SV3.1(36) Handshake
> Finished
> verify_data[12]=
> 64 c2 1f cb 54 7c ec 60 0a 45 db e4
>
> 7 8 0.4504 (0.0091) S>CV3.1(1) ChangeCipherSpec
> 7 9 0.4504 (0.0000) S>CV3.1(36) Handshake
> Finished
> verify_data[12]=
> 17 f3 73 52 66 96 4a 87 ba 6d 42 f5
>
> 7 10 0.5550 (0.1046) C>SV3.1(406) application_data
> ---------------------------------------------------------------
> CANCEL sip:9999 at XXXX.dyndns.org;user=phone SIP/2.0
> Via: SIP/2.0/TLS 192.168.0.114:4655;branch=z9hG4bK-7g007jateb7f;rport
> From: "Matthias" <sip:1001 at XXXX.dyndns.org>;tag=rllbt2d9pz
> To: <sip:9999 at XXXX.dyndns.org;user=phone>
> Call-ID: 5379263cf7de-1vkl60xxknr0
> CSeq: 2 CANCEL
> Max-Forwards: 70
> Reason: SIP;cause=487;text="Request terminated by user"
> Content-Length: 0
>
>
>
> ---------------------------------------------------------------
> 7 11 0.5559 (0.0008) S>CV3.1(163) application_data
> ---------------------------------------------------------------
> SIP/2.0 481 Call/Transaction Does Not Exist
> Via: SIP/2.0/TLS
> 192.168.0.114:4655;branch=z9hG4bK-7g007jateb7f;rport=4655;received=78.53.13.206
> ---------------------------------------------------------------
> 7 12 0.5560 (0.0000) S>CV3.1(84) application_data
> ---------------------------------------------------------------
> From: "Matthias" <sip:1001 at XXXX.dyndns.org>;tag=rllbt2d9pz
> ---------------------------------------------------------------
> 7 13 0.5560 (0.0000) S>CV3.1(85) application_data
> ---------------------------------------------------------------
> To: <sip:9999 at XXXXXXXX.dyndns.org;user=phone>;tag=XUQm659jUQQvB
> ---------------------------------------------------------------
> 7 14 0.5560 (0.0000) S>CV3.1(72) application_data
> ---------------------------------------------------------------
> Call-ID: 5379263cf7de-1vkl60xxknr0
> CSeq: 2 CANCEL
>
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
More information about the FreeSWITCH-users
mailing list