<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<br>
On 17.11.2011 14:06, Avi Marcus wrote:
<blockquote
cite="mid:CALNZuwkQaFFE3RiA9xOpGC0Wam3pU_8wV7HNkHcZ_275G+fewQ@mail.gmail.com"
type="cite">
<div dir="ltr"><span class="Apple-style-span" style="color:
rgb(34, 34, 34); font-family: arial, sans-serif; font-size:
13px; background-color: rgb(221, 221, 221); ">Service: sip
(udp/5060) (nf_ct_sip: dropping packet) - 9 packets</span>
<div>
<font class="Apple-style-span" color="#222222" face="arial,
sans-serif"><br>
</font></div>
<div><font class="Apple-style-span" color="#222222" face="arial,
sans-serif">I see this every few days - it's via an IP with
a Yealink T20p phone. I've tried looking this up in the
past.. but I don't understand what rules would be dropping
this, and what is being dropped.</font></div>
<div><font class="Apple-style-span" color="#222222" face="arial,
sans-serif">Any clues on how to investigate?</font></div>
</div>
</blockquote>
<br>
Maybe this is related to this bugreport?<br>
<br>
<meta http-equiv="content-type" content="text/html;
charset=ISO-8859-1">
<span class="Apple-style-span" style="color: rgb(0, 0, 0);
font-family: sans-serif; font-style: normal; font-variant: normal;
font-weight: normal; letter-spacing: normal; line-height: normal;
orphans: 2; text-align: -webkit-auto; text-indent: 0px;
text-transform: none; white-space: normal; widows: 2;
word-spacing: 0px; -webkit-text-decorations-in-effect: none;
-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); font-size: medium; ">nf_ct_sip
dropping SIP messages larger then MTU</span><br>
<a href="http://bugzilla.netfilter.org/show_bug.cgi?id=760">http://bugzilla.netfilter.org/show_bug.cgi?id=760</a><br>
<br>
There is some possibility that you don't need the nf_ct_sip - just
unload it (modprobe -r) and if it works, do blacklist the module in
(for exmple in /etc/modprobe.d/00-my-local.conf )<br>
<br>
- Thomas<br>
<br>
</body>
</html>