- FreeSWITCH-users - FreeSWITCH Mailing Lists

TLS problem using SNOM phones
by Matthias Reinacher 16 Aug '10

16 Aug '10

Hello all, i have a problem using different Snom phones (300/320/820/821) with Freeswitch and TLS in a internet-wide setup (phones being registered via internet at a FS w/ public IP). Sometimes (25-50% of cases) the first try to call someone (internal) won't go through. Logs from phone, Freeswitch and ssldump show that the phone sends an INVITE, the FS asks for more credentials (digest auth b/c phone IP not in ACL), the phone answers with an INVITE w/ more auth credentials -- and this second INVITE package is not received by the FS. It does arrive at the server though, as verified by ssldump. Interestingly, if one presses "Cancel" on the phone, a new TCP/SSL connection is created, apparently the old one died -- see logs from phone, FS, and ssldump below. Also, Snom 820/821 show the registrar as not registered after such an action (presumably b/c original SSL connection is dead). Has anybody encountered this behaviour and can verify it? Are there any ideas what causes the problem here (FS, OpenSSL, phone?) and if there is any remedy for it? I was planning on using FS as a production phone system w/ encrypted signalling and audio using Snom phones. I can't do that right now b/c of the abovementioned problem, and i have not yet found a solution. Any help is greatly appreciated. TIA Matthias Logs: phone, FS, ssldump, please also see annotation enclosed in "--- ... ---" - phone: Sent to tls:XXX.XXX.XXX.XXX:5061 at 11/7/2010 14:41:22:225 (1280 bytes): INVITE sip:9999@XXXX.dyndns.org;user=phone SIP/2.0 Via: SIP/2.0/TLS 192.168.0.114:3967;branch=z9hG4bK-re694j8n03bd;rport From: "Matthias" <sip:1001@XXXX.dyndns.org>;tag=rllbt2d9pz To: <sip:9999@XXXX.dyndns.org;user=phone> Call-ID: 5379263cf7de-1vkl60xxknr0 CSeq: 1 INVITE Max-Forwards: 70 Contact: <sip:1001@192.168.0.114:3967;transport=tls;line=ze6y9ju8>;reg-id=1 X-Serialnumber: 0004134517B7 P-Key-Flags: resolution="31x13", keys="4" User-Agent: snom821/8.4.4 Accept: application/sdp Allow: INVITE, ACK, CANCEL, BYE, REFER, OPTIONS, NOTIFY, SUBSCRIBE, PRACK, MESSAGE, INFO, UPDATE Allow-Events: talk, hold, refer, call-info Supported: timer, 100rel, replaces, from-change Session-Expires: 3600;refresher=uas Min-SE: 90 Content-Type: application/sdp Content-Length: 476 v=0 o=root 739742427 739742427 IN IP4 192.168.0.114 s=call c=IN IP4 192.168.0.114 t=0 0 m=audio 50506 RTP/SAVP 0 8 9 99 3 18 4 101 a=crypto:1 AES_CM_128_HMAC_SHA1_32 inline:0AKzFxymFJ8eHsDOerrZiw8RZhgB9pmDU0q0+4lj a=rtpmap:0 pcmu/8000 a=rtpmap:8 pcma/8000 a=rtpmap:9 g722/8000 a=rtpmap:99 g726-32/8000 a=rtpmap:3 gsm/8000 a=rtpmap:18 g729/8000 a=fmtp:18 annexb=no a=rtpmap:4 g723/8000 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-16 a=ptime:20 a=sendrecv Received from tls:XXX.XXX.XXX.XXX:5061 at 11/7/2010 14:41:22:363 (350 bytes): SIP/2.0 100 Trying Via: SIP/2.0/TLS 192.168.0.114:3967;branch=z9hG4bK-re694j8n03bd;rport=3967;received=78.53.13.206 From: "Matthias" <sip:1001@XXXX.dyndns.org>;tag=rllbt2d9pz To: <sip:9999@XXXX.dyndns.org;user=phone> Call-ID: 5379263cf7de-1vkl60xxknr0 CSeq: 1 INVITE User-Agent: FreeSWITCH-mod_sofia/1.0.head-git- Content-Length: 0 Received from tls:XXX.XXX.XXX.XXX:5061 at 11/7/2010 14:41:22:524 (844 bytes): SIP/2.0 407 Proxy Authentication Required Via: SIP/2.0/TLS 192.168.0.114:3967;branch=z9hG4bK-re694j8n03bd;rport=3967;received=78.53.13.206 From: "Matthias" <sip:1001@XXXX.dyndns.org>;tag=rllbt2d9pz To: <sip:9999@XXXX.dyndns.org;user=phone>;tag=vjyU4aSFye19F Call-ID: 5379263cf7de-1vkl60xxknr0 CSeq: 1 INVITE User-Agent: FreeSWITCH-mod_sofia/1.0.head-git- Accept: application/sdp Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, UPDATE, INFO, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: timer, precondition, path, replaces Allow-Events: talk, hold, presence, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer Proxy-Authenticate: Digest realm="XXXX.dyndns.org", nonce="a3346430-8ce9-11df-9347-29b67737619e", algorithm=MD5, qop="auth" Content-Length: 0 Sent to tls:XXX.XXX.XXX.XXX:5061 at 11/7/2010 14:41:22:528 (418 bytes): ACK sip:9999@XXXX.dyndns.org;user=phone SIP/2.0 Via: SIP/2.0/TLS 192.168.0.114:3967;branch=z9hG4bK-re694j8n03bd;rport From: "Matthias" <sip:1001@XXXX.dyndns.org>;tag=rllbt2d9pz To: <sip:9999@XXXX.dyndns.org;user=phone>;tag=vjyU4aSFye19F Call-ID: 5379263cf7de-1vkl60xxknr0 CSeq: 1 ACK Max-Forwards: 70 Contact: <sip:1001@192.168.0.114:3967;transport=tls;line=ze6y9ju8>;reg-id=1 Content-Length: 0 --- the following packet is not received by FS --- Sent to tls:XXX.XXX.XXX.XXX:5061 at 11/7/2010 14:41:22:544 (1541 bytes): INVITE sip:9999@XXXX.dyndns.org;user=phone SIP/2.0 Via: SIP/2.0/TLS 192.168.0.114:3967;branch=z9hG4bK-7g007jateb7f;rport From: "Matthias" <sip:1001@XXXX.dyndns.org>;tag=rllbt2d9pz To: <sip:9999@XXXX.dyndns.org;user=phone> Call-ID: 5379263cf7de-1vkl60xxknr0 CSeq: 2 INVITE Max-Forwards: 70 Contact: <sip:1001@192.168.0.114:3967;transport=tls;line=ze6y9ju8>;reg-id=1 X-Serialnumber: 0004134517B7 P-Key-Flags: resolution="31x13", keys="4" User-Agent: snom821/8.4.4 Accept: application/sdp Allow: INVITE, ACK, CANCEL, BYE, REFER, OPTIONS, NOTIFY, SUBSCRIBE, PRACK, MESSAGE, INFO, UPDATE Allow-Events: talk, hold, refer, call-info Supported: timer, 100rel, replaces, from-change Session-Expires: 3600;refresher=uas Min-SE: 90 Proxy-Authorization: Digest username="1001",realm="XXXX.dyndns.org",nonce="a3346430-8ce9-11df-9347-29b67737619e",uri="sip:9999@XXXX.dyndns.org;user=phone",qop=auth,nc=00000001,cnonce="4fd48758",response="bb47aafad2fc3980d7540b0d2cbf1b03",algorithm=MD5 Content-Type: application/sdp Content-Length: 476 v=0 o=root 739742427 739742427 IN IP4 192.168.0.114 s=call c=IN IP4 192.168.0.114 t=0 0 m=audio 50506 RTP/SAVP 0 8 9 99 3 18 4 101 a=crypto:1 AES_CM_128_HMAC_SHA1_32 inline:0AKzFxymFJ8eHsDOerrZiw8RZhgB9pmDU0q0+4lj a=rtpmap:0 pcmu/8000 a=rtpmap:8 pcma/8000 a=rtpmap:9 g722/8000 a=rtpmap:99 g726-32/8000 a=rtpmap:3 gsm/8000 a=rtpmap:18 g729/8000 a=fmtp:18 annexb=no a=rtpmap:4 g723/8000 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-16 a=ptime:20 a=sendrecv --- before this packet is sent, a new TCP/SSL connection is negotiated --- Sent to tls:XXX.XXX.XXX.XXX:5061 at 11/7/2010 14:41:29:936 (386 bytes): CANCEL sip:9999@XXXX.dyndns.org;user=phone SIP/2.0 Via: SIP/2.0/TLS 192.168.0.114:4655;branch=z9hG4bK-7g007jateb7f;rport From: "Matthias" <sip:1001@XXXX.dyndns.org>;tag=rllbt2d9pz To: <sip:9999@XXXX.dyndns.org;user=phone> Call-ID: 5379263cf7de-1vkl60xxknr0 CSeq: 2 CANCEL Max-Forwards: 70 Reason: SIP;cause=487;text="Request terminated by user" Content-Length: 0 Received from tls:XXX.XXX.XXX.XXX:5061 at 11/7/2010 14:41:30:562 (345 bytes): SIP/2.0 481 Call/Transaction Does Not Exist Via: SIP/2.0/TLS 192.168.0.114:4655;branch=z9hG4bK-7g007jateb7f;rport=4655;received=78.53.13.206 From: "Matthias" <sip:1001@XXXX.dyndns.org>;tag=rllbt2d9pz To: <sip:9999@XXXX.dyndns.org;user=phone>;tag=XUQm659jUQQvB Call-ID: 5379263cf7de-1vkl60xxknr0 CSeq: 2 CANCEL Content-Length: 0 - Freeswitch: recv 1280 bytes from tls/[XXX.XXX.XXX.XXX]:3967 at 12:41:33.774063: ------------------------------------------------------------------------ INVITE sip:9999@XXXX.dyndns.org;user=phone SIP/2.0 Via: SIP/2.0/TLS 192.168.0.114:3967;branch=z9hG4bK-re694j8n03bd;rport From: "Matthias" <sip:1001@XXXX.dyndns.org>;tag=rllbt2d9pz To: <sip:9999@XXXX.dyndns.org;user=phone> Call-ID: 5379263cf7de-1vkl60xxknr0 CSeq: 1 INVITE Max-Forwards: 70 Contact: <sip:1001@192.168.0.114:3967;transport=tls;line=ze6y9ju8>;reg-id=1 X-Serialnumber: 0004134517B7 P-Key-Flags: resolution="31x13", keys="4" User-Agent: snom821/8.4.4 Accept: application/sdp Allow: INVITE, ACK, CANCEL, BYE, REFER, OPTIONS, NOTIFY, SUBSCRIBE, PRACK, MESSAGE, INFO, UPDATE Allow-Events: talk, hold, refer, call-info Supported: timer, 100rel, replaces, from-change Session-Expires: 3600;refresher=uas Min-SE: 90 Content-Type: application/sdp Content-Length: 476 v=0 o=root 739742427 739742427 IN IP4 192.168.0.114 s=call c=IN IP4 192.168.0.114 t=0 0 m=audio 50506 RTP/SAVP 0 8 9 99 3 18 4 101 a=crypto:1 AES_CM_128_HMAC_SHA1_32 inline:0AKzFxymFJ8eHsDOerrZiw8RZhgB9pmDU0q0+4lj a=rtpmap:0 pcmu/8000 a=rtpmap:8 pcma/8000 a=rtpmap:9 g722/8000 a=rtpmap:99 g726-32/8000 a=rtpmap:3 gsm/8000 a=rtpmap:18 g729/8000 a=fmtp:18 annexb=no a=rtpmap:4 g723/8000 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-16 a=ptime:20 a=sendrecv ------------------------------------------------------------------------ send 350 bytes to tls/[XXX.XXX.XXX.XXX]:3967 at 12:41:33.777861: ------------------------------------------------------------------------ SIP/2.0 100 Trying Via: SIP/2.0/TLS 192.168.0.114:3967;branch=z9hG4bK-re694j8n03bd;rport=3967;received=XXX.XXX.XXX.XXX From: "Matthias" <sip:1001@XXXX.dyndns.org>;tag=rllbt2d9pz To: <sip:9999@XXXX.dyndns.org;user=phone> Call-ID: 5379263cf7de-1vkl60xxknr0 CSeq: 1 INVITE User-Agent: FreeSWITCH-mod_sofia/1.0.head-git- Content-Length: 0 ------------------------------------------------------------------------ 2010-07-11 14:41:33.778081 [DEBUG] sofia.c:5999 IP XXX.XXX.XXX.XXX Rejected by acl "domains". Falling back to Digest auth. send 844 bytes to tls/[XXX.XXX.XXX.XXX]:3967 at 12:41:33.864787: ------------------------------------------------------------------------ SIP/2.0 407 Proxy Authentication Required Via: SIP/2.0/TLS 192.168.0.114:3967;branch=z9hG4bK-re694j8n03bd;rport=3967;received=XXX.XXX.XXX.XXX From: "Matthias" <sip:1001@XXXX.dyndns.org>;tag=rllbt2d9pz To: <sip:9999@XXXX.dyndns.org;user=phone>;tag=vjyU4aSFye19F Call-ID: 5379263cf7de-1vkl60xxknr0 CSeq: 1 INVITE User-Agent: FreeSWITCH-mod_sofia/1.0.head-git- Accept: application/sdp Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, UPDATE, INFO, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: timer, precondition, path, replaces Allow-Events: talk, hold, presence, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer Proxy-Authenticate: Digest realm="XXXX.dyndns.org", nonce="a3346430-8ce9-11df-9347-29b67737619e", algorithm=MD5, qop="auth" Content-Length: 0 ------------------------------------------------------------------------ recv 418 bytes from tls/[XXX.XXX.XXX.XXX]:3967 at 12:41:34.082329: ------------------------------------------------------------------------ ACK sip:9999@XXXX.dyndns.org;user=phone SIP/2.0 Via: SIP/2.0/TLS 192.168.0.114:3967;branch=z9hG4bK-re694j8n03bd;rport From: "Matthias" <sip:1001@XXXX.dyndns.org>;tag=rllbt2d9pz To: <sip:9999@XXXX.dyndns.org;user=phone>;tag=vjyU4aSFye19F Call-ID: 5379263cf7de-1vkl60xxknr0 CSeq: 1 ACK Max-Forwards: 70 Contact: <sip:1001@192.168.0.114:3967;transport=tls;line=ze6y9ju8>;reg-id=1 Content-Length: 0 --- here, the 2nd INVITE packet w/ credentials is missing, note time difference to next packet --- ------------------------------------------------------------------------ recv 386 bytes from tls/[XXX.XXX.XXX.XXX]:4655 at 12:41:41.905857: ------------------------------------------------------------------------ CANCEL sip:9999@XXXX.dyndns.org;user=phone SIP/2.0 Via: SIP/2.0/TLS 192.168.0.114:4655;branch=z9hG4bK-7g007jateb7f;rport From: "Matthias" <sip:1001@XXXX.dyndns.org>;tag=rllbt2d9pz To: <sip:9999@XXXX.dyndns.org;user=phone> Call-ID: 5379263cf7de-1vkl60xxknr0 CSeq: 2 CANCEL Max-Forwards: 70 Reason: SIP;cause=487;text="Request terminated by user" Content-Length: 0 ------------------------------------------------------------------------ send 345 bytes to tls/[XXX.XXX.XXX.XXX]:4655 at 12:41:41.906402: ------------------------------------------------------------------------ SIP/2.0 481 Call/Transaction Does Not Exist Via: SIP/2.0/TLS 192.168.0.114:4655;branch=z9hG4bK-7g007jateb7f;rport=4655;received=XXX.XXX.XXX.XXX From: "Matthias" <sip:1001@XXXX.dyndns.org>;tag=rllbt2d9pz To: <sip:9999@XXXX.dyndns.org;user=phone>;tag=XUQm659jUQQvB Call-ID: 5379263cf7de-1vkl60xxknr0 CSeq: 2 CANCEL Content-Length: 0 - ssldump: 1 254 2335.8000 (417.3058) C>SV3.1(1300) application_data --------------------------------------------------------------- INVITE sip:9999@XXXX.dyndns.org;user=phone SIP/2.0 Via: SIP/2.0/TLS 192.168.0.114:3967;branch=z9hG4bK-re694j8n03bd;rport From: "Matthias" <sip:1001@XXXX.dyndns.org>;tag=rllbt2d9pz To: <sip:9999@XXXX.dyndns.org;user=phone> Call-ID: 5379263cf7de-1vkl60xxknr0 CSeq: 1 INVITE Max-Forwards: 70 Contact: <sip:1001@192.168.0.114:3967;transport=tls;line=ze6y9ju8>;reg-id=1 X-Serialnumber: 0004134517B7 P-Key-Flags: resolution="31x13", keys="4" User-Agent: snom821/8.4.4 Accept: application/sdp Allow: INVITE, ACK, CANCEL, BYE, REFER, OPTIONS, NOTIFY, SUBSCRIBE, PRACK, MESSAGE, INFO, UPDATE Allow-Events: talk, hold, refer, call-info Supported: timer, 100rel, replaces, from-change Session-Expires: 3600;refresher=uas Min-SE: 90 Content-Type: application/sdp Content-Length: 476 v=0 o=root 739742427 739742427 IN IP4 192.168.0.114 s=call c=IN IP4 192.168.0.114 t=0 0 m=audio 50506 RTP/SAVP 0 8 9 99 3 18 4 101 a=crypto:1 AES_CM_128_HMAC_SHA1_32 inline:0AKzFxymFJ8eHsDOerrZiw8RZhgB9pmDU0q0+4lj a=rtpmap:0 pcmu/8000 a=rtpmap:8 pcma/8000 a=rtpmap:9 g722/8000 a=rtpmap:99 g726-32/8000 a=rtpmap:3 gsm/8000 a=rtpmap:18 g729/8000 a=fmtp:18 annexb=no a=rtpmap:4 g723/8000 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-16 a=ptime:20 a=sendrecv --------------------------------------------------------------- 1 255 2335.8043 (0.0043) S>CV3.1(138) application_data --------------------------------------------------------------- SIP/2.0 100 Trying Via: SIP/2.0/TLS 192.168.0.114:3967;branch=z9hG4bK-re694j8n03bd;rport=3967;received=78.53.13.206 --------------------------------------------------------------- 1 256 2335.8044 (0.0000) S>CV3.1(183) application_data --------------------------------------------------------------- From: "Matthias" <sip:1001@XXXX.dyndns.org>;tag=rllbt2d9pz To: <sip:9999@XXXX.dyndns.org;user=phone> Call-ID: 5379263cf7de-1vkl60xxknr0 CSeq: 1 INVITE --------------------------------------------------------------- 1 257 2335.8045 (0.0000) S>CV3.1(89) application_data --------------------------------------------------------------- User-Agent: FreeSWITCH-mod_sofia/1.0.head-git- Content-Length: 0 --------------------------------------------------------------- 1 258 2335.8935 (0.0890) S>CV3.1(161) application_data --------------------------------------------------------------- SIP/2.0 407 Proxy Authentication Required Via: SIP/2.0/TLS 192.168.0.114:3967;branch=z9hG4bK-re694j8n03bd;rport=3967;received=78.53.13.206 --------------------------------------------------------------- 1 259 2335.8935 (0.0000) S>CV3.1(84) application_data --------------------------------------------------------------- From: "Matthias" <sip:1001@XXXX.dyndns.org>;tag=rllbt2d9pz --------------------------------------------------------------- 1 260 2335.8935 (0.0000) S>CV3.1(85) application_data --------------------------------------------------------------- To: <sip:9999@XXXX.dyndns.org;user=phone>;tag=vjyU4aSFye19F --------------------------------------------------------------- 1 261 2335.8935 (0.0000) S>CV3.1(72) application_data --------------------------------------------------------------- Call-ID: 5379263cf7de-1vkl60xxknr0 CSeq: 1 INVITE --------------------------------------------------------------- 1 262 2335.8935 (0.0000) S>CV3.1(542) application_data --------------------------------------------------------------- User-Agent: FreeSWITCH-mod_sofia/1.0.head-git- Accept: application/sdp Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, UPDATE, INFO, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE Supported: timer, precondition, path, replaces Allow-Events: talk, hold, presence, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer Proxy-Authenticate: Digest realm="XXXX.dyndns.org", nonce="a3346430-8ce9-11df-9347-29b67737619e", algorithm=MD5, qop="auth" Content-Length: 0 --------------------------------------------------------------- 1 263 2336.1083 (0.2147) C>SV3.1(438) application_data --------------------------------------------------------------- ACK sip:9999@XXXX.dyndns.org;user=phone SIP/2.0 Via: SIP/2.0/TLS 192.168.0.114:3967;branch=z9hG4bK-re694j8n03bd;rport From: "Matthias" <sip:1001@XXXX.dyndns.org>;tag=rllbt2d9pz To: <sip:9999@XXXX.dyndns.org;user=phone>;tag=vjyU4aSFye19F Call-ID: 5379263cf7de-1vkl60xxknr0 CSeq: 1 ACK Max-Forwards: 70 Contact: <sip:1001@192.168.0.114:3967;transport=tls;line=ze6y9ju8>;reg-id=1 Content-Length: 0 --- here, the 2nd INVITE packet is received, but it doesn't arrive at FS --- --------------------------------------------------------------- 1 2336.1229 (0.0145) S>C TCP FIN 1 264 2336.2127 (0.0898) C>SV3.1(1561) application_data --------------------------------------------------------------- INVITE sip:9999@XXXX.dyndns.org;user=phone SIP/2.0 Via: SIP/2.0/TLS 192.168.0.114:3967;branch=z9hG4bK-7g007jateb7f;rport From: "Matthias" <sip:1001@XXXX.dyndns.org>;tag=rllbt2d9pz To: <sip:9999@XXXX.dyndns.org;user=phone> Call-ID: 5379263cf7de-1vkl60xxknr0 CSeq: 2 INVITE Max-Forwards: 70 Contact: <sip:1001@192.168.0.114:3967;transport=tls;line=ze6y9ju8>;reg-id=1 X-Serialnumber: 0004134517B7 P-Key-Flags: resolution="31x13", keys="4" User-Agent: snom821/8.4.4 Accept: application/sdp Allow: INVITE, ACK, CANCEL, BYE, REFER, OPTIONS, NOTIFY, SUBSCRIBE, PRACK, MESSAGE, INFO, UPDATE Allow-Events: talk, hold, refer, call-info Supported: timer, 100rel, replaces, from-change Session-Expires: 3600;refresher=uas Min-SE: 90 Proxy-Authorization: Digest username="1001",realm="XXXX.dyndns.org",nonce="a3346430-8ce9-11df-9347-29b67737619e",uri="sip:9999@XXXX.dyndns.org;user=phone",qop=auth,nc=00000001,cnonce="4fd48758",response="bb47aafad2fc3980d7540b0d2cbf1b03",algorithm=MD5 Content-Type: application/sdp Content-Length: 476 v=0 o=root 739742427 739742427 IN IP4 192.168.0.114 s=call c=IN IP4 192.168.0.114 t=0 0 m=audio 50506 RTP/SAVP 0 8 9 99 3 18 4 101 a=crypto:1 AES_CM_128_HMAC_SHA1_32 inline:0AKzFxymFJ8eHsDOerrZiw8RZhgB9pmDU0q0+4lj a=rtpmap:0 pcmu/8000 a=rtpmap:8 pcma/8000 a=rtpmap:9 g722/8000 a=rtpmap:99 g726-32/8000 a=rtpmap:3 gsm/8000 a=rtpmap:18 g729/8000 a=fmtp:18 annexb=no a=rtpmap:4 g723/8000 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-16 a=ptime:20 a=sendrecv --------------------------------------------------------------- --- a new TCP/SSL connection is initiated for the next packet --- 1 2336.2128 (0.0001) C>S TCP FIN New TCP connection #7: XXX.XXX.XXX (4655) <-> XXX.XXX.XXX (5061) 7 1 0.1214 (0.1214) C>SV3.1(63) Handshake ClientHello Version 3.1 random[32]= 3c 26 79 5c 23 37 ce ec 6b 40 cc 95 14 16 f8 e9 fd 5e 36 da dd 56 ab 2a 8e 0e 15 aa 4c d7 93 98 cipher suites TLS_RSA_WITH_RC4_128_MD5 TLS_RSA_WITH_RC4_128_SHA TLS_RSA_WITH_NULL_MD5 TLS_RSA_WITH_NULL_SHA TLS_DH_anon_WITH_3DES_EDE_CBC_SHA TLS_DH_anon_WITH_RC4_128_MD5 TLS_RSA_WITH_DES_CBC_SHA TLS_RSA_EXPORT1024_WITH_RC4_56_SHA TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA TLS_DH_anon_WITH_DES_CBC_SHA compression methods NULL 7 2 0.1219 (0.0005) S>CV3.1(74) Handshake ServerHello Version 3.1 random[32]= 4c 39 bc 05 60 47 db 31 51 42 29 ae 9f 45 c5 2f 56 5b 02 dd 4b 3b c1 f7 f3 b7 80 9b 8b 16 7a a0 session_id[32]= f5 49 8b 05 df 1d 7a 30 6d b5 58 79 b6 a3 e4 1d c2 c1 98 fc de f5 64 8f 85 cc 7c 7f a9 08 9f d7 cipherSuite TLS_RSA_WITH_RC4_128_SHA compressionMethod NULL 7 3 0.1219 (0.0000) S>CV3.1(644) Handshake Certificate 7 4 0.1219 (0.0000) S>CV3.1(4) Handshake ServerHelloDone 7 5 0.4413 (0.3193) C>SV3.1(134) Handshake ClientKeyExchange EncryptedPreMasterSecret[128]= 38 71 d5 4f 2f 4f 66 08 37 92 57 ef 4a bd 13 60 6f 7c 0f 23 47 83 a5 59 95 25 91 58 10 c2 b9 ea 8d 12 88 d9 33 06 a8 8c aa e6 17 b8 91 35 0f 56 49 a7 9f 77 04 9c fe b1 17 70 c0 a3 5f bc 77 ff 25 41 a5 2f cd f3 24 d7 3c da 9f a7 86 30 a8 64 7d ca cd 06 6c d4 a0 fc 18 b7 5a 04 69 45 ae 28 4e 0f bf 3c 49 87 fc f6 91 3b 1d 00 6e 81 46 5f e3 7e cd a2 40 b2 37 3b c3 fc 0a 17 8b aa 76 88 7 6 0.4413 (0.0000) C>SV3.1(1) ChangeCipherSpec 7 7 0.4413 (0.0000) C>SV3.1(36) Handshake Finished verify_data[12]= 64 c2 1f cb 54 7c ec 60 0a 45 db e4 7 8 0.4504 (0.0091) S>CV3.1(1) ChangeCipherSpec 7 9 0.4504 (0.0000) S>CV3.1(36) Handshake Finished verify_data[12]= 17 f3 73 52 66 96 4a 87 ba 6d 42 f5 7 10 0.5550 (0.1046) C>SV3.1(406) application_data --------------------------------------------------------------- CANCEL sip:9999@XXXX.dyndns.org;user=phone SIP/2.0 Via: SIP/2.0/TLS 192.168.0.114:4655;branch=z9hG4bK-7g007jateb7f;rport From: "Matthias" <sip:1001@XXXX.dyndns.org>;tag=rllbt2d9pz To: <sip:9999@XXXX.dyndns.org;user=phone> Call-ID: 5379263cf7de-1vkl60xxknr0 CSeq: 2 CANCEL Max-Forwards: 70 Reason: SIP;cause=487;text="Request terminated by user" Content-Length: 0 --------------------------------------------------------------- 7 11 0.5559 (0.0008) S>CV3.1(163) application_data --------------------------------------------------------------- SIP/2.0 481 Call/Transaction Does Not Exist Via: SIP/2.0/TLS 192.168.0.114:4655;branch=z9hG4bK-7g007jateb7f;rport=4655;received=78.53.13.206 --------------------------------------------------------------- 7 12 0.5560 (0.0000) S>CV3.1(84) application_data --------------------------------------------------------------- From: "Matthias" <sip:1001@XXXX.dyndns.org>;tag=rllbt2d9pz --------------------------------------------------------------- 7 13 0.5560 (0.0000) S>CV3.1(85) application_data --------------------------------------------------------------- To: <sip:9999@XXXXXXXX.dyndns.org;user=phone>;tag=XUQm659jUQQvB --------------------------------------------------------------- 7 14 0.5560 (0.0000) S>CV3.1(72) application_data --------------------------------------------------------------- Call-ID: 5379263cf7de-1vkl60xxknr0 CSeq: 2 CANCEL

3 2

Strange early media SDP behavior
by Sergey Okhapkin 16 Aug '10

16 Aug '10

Late negotiation is on, bypass_media=true. Leg B receives the following SDP in SIP 183 message: v=0 o=root 4913 4913 IN IP4 64.21.13.41 s=session c=IN IP4 64.21.13.41 t=0 0 m=audio 37650 RTP/AVP 0 8 18 101 a=rtpmap:0 PCMU/8000 a=rtpmap:8 PCMA/8000 a=rtpmap:18 G729/8000 a=fmtp:18 annexb=no a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-16 a=silenceSupp:off - - - - a=ptime:20 a=sendrecv 3 codecs in SDP offer. Freeswitch send to leg A SIP 183 with the following SDP: v=0 o=root 4913 4913 IN IP4 64.21.13.41 s=session c=IN IP4 64.21.13.41 t=0 0 m=audio 37650 RTP/AVP 0 101 a=rtpmap:0 PCMU/8000 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-16 a=silenceSupp:off - - - - a=ptime:20 1 codec only. Why 2 other codecs are removed from SDP? Tested on today's git, older versions have the same behavior. Is it expected behavior or a bug?

2 3

Failed to compile sofia.c for ARM
by mazilo 16 Aug '10

16 Aug '10

I tried to compile freeswitch-1.0.6 on OpenWRT for a Marvell Kirkwood (ARM) platform to no avail. The same source codes compiled just fine for a Broadcomm (MIPS/MIPS32) platform. What fails to compile is the source code of sofia.c at line 1574 with the following error messages: ++++++++++++++++++++++++++ make[8]: Entering directory `/opt/tmp/openwrt-svn-trunk-ARM/build_dir/target-arm_v5te_uClibc-0.9.30.2_eabi/freeswitch-1.0.6/src/mod/endpoints/mod_sofia' Creating mod_sofia_la-mod_sofia.lo mkdir .libs Compiling mod_sofia.c ... Creating mod_sofia_la-sofia.lo Compiling sofia.c ... sofia.c: In function 'logger': sofia.c:1574: error: used struct type value where scalar is required make[8]: *** [mod_sofia_la-sofia.lo] Error 1 make[8]: Leaving directory `/opt/tmp/openwrt-svn-trunk-ARM/build_dir/target-arm_v5te_uClibc-0.9.30.2_eabi/freeswitch-1.0.6/src/mod/endpoints/mod_sofia' make[7]: *** [all] Error 2 make[7]: Leaving directory `/opt/tmp/openwrt-svn-trunk-ARM/build_dir/target-arm_v5te_uClibc-0.9.30.2_eabi/freeswitch-1.0.6/src/mod/endpoints/mod_sofia' make[6]: *** [mod_sofia-all] Error 1 make[6]: Leaving directory `/opt/tmp/openwrt-svn-trunk-ARM/build_dir/target-arm_v5te_uClibc-0.9.30.2_eabi/freeswitch-1.0.6/src/mod' make[5]: *** [all-recursive] Error 1 make[5]: Leaving directory `/opt/tmp/openwrt-svn-trunk-ARM/build_dir/target-arm_v5te_uClibc-0.9.30.2_eabi/freeswitch-1.0.6/src' ++++++++++++++++++++++++++ The pertaining sofia.c source code at line 1574 is shown below: ++++++++++++++++++++++++++ 1569 static void logger(void *logarg, char const *fmt, va_list ap) 1570 { 1571 if (!fmt) 1572 return; 1573 1574 if (ap) { 1575 switch_log_vprintf(SWITCH_CHANNEL_LOG_CLEAN, mod_sofia_glob als.tracelevel, fmt, ap); 1576 } else { 1577 switch_log_printf(SWITCH_CHANNEL_LOG_CLEAN, mod_sofia_globa ls.tracelevel, "%s", fmt); 1578 } 1579 } ++++++++++++++++++++++++++ I am no programmer; however, isn't va_list ap indicates ap is a struct type value while the if(ap) expects ap to be a scalar value? If so, why sofia.c doesn't fail to compile for a MIPS/MIPS32 platform but fails to compile for an ARM platform? That said, how does one go about to fix this so that sofia.c source will compile cleanly on both platforms? Thanks. -- View this message in context: http://freeswitch-users.2379917.n2.nabble.com/Failed-to-compile-sofia-c-for… Sent from the freeswitch-users mailing list archive at Nabble.com.

5 20

Native stacks
by Jan Berger 16 Aug '10

16 Aug '10

Hi, Creating a new thread. If it is any interest for a native stack in FreeSWITCH we could address it later. It lacks the state-engine. Actually, last time I asked I was told someone in Germany was working on this? But, as I looked at it recently I concluded that with Sangoma supporting their own boards, and Digium maintaining libpri for theirs - we basically have covered a majority of the E1/T1 boards that is used in here. Correct me if I am wrong. Jan <snip> Interesting. I've had more success with the libpri stack than the native stack because the native stack is definitely a work in progress. I assisted Mike J in getting 5ESS support in the native stack, but we definitely don't have explicit 4ESS support. I think you are better off using the libpri method and debugging it than trying to get the native PRI stack to work on a 4ESS connection </snip>

8 18

can't make current
by Jean-Yves F. Barbier 16 Aug '10

16 Aug '10

Hi list, make current Making clean in src /bin/bash: line 26: /usr/bin/make: Liste d'arguments trop longue (args list too long) make: *** [clean-recursive] Erreur 1 How can I avoid such an annoying PB? JY --

2 4

ODBC postgresql network and FS
by Madovsky 16 Aug '10

16 Aug '10

Hi Clue guys, hope you enjoy at Cluecon ! Is there any setings in FS to restart it in case of idle DB connection ? exemple : if the DB on node1 fails and node2 starts DB in failover with the same shared IP, FS continues to believe that node1 is yet the right node to contact.... so all SIP communicatio with DB are stalled maybe a restart or other would be nice or anything else to unblock the status. Thanks Franck

2 1

Fedora 10 64bits last git
by Madovsky 15 Aug '10

15 Aug '10

success to compile install last git with Fedora 10 64bits. only a little load module error : 2010-07-30 00:33:45.401990 [CRIT] switch_loadable_module.c:926 Error Loading module /usr/local/freeswitch/mod/mod_spidermonkey.so **/lib64/libnssutil3.so: undefined symbol: PR_GetEnv** And so what ? the book saiys : --without-libcurl for Fedora if you have this error I forgot the habit to find the right page of book, replaced by bookgle....argh ;). I love books !! F

2 1

FreeSWITCH -- Router -- WAN -- Router -- OpenSBC -- Several Remote Spa5xx
by Loy Glenn 15 Aug '10

15 Aug '10

As the Subject outlines, this is the basic setup. Does anyone have any experience w/ FreeSWITCH and any session border controllers? The problem we are having seems to be related to NAT. We have several Cisco Spa5xxG phones which remotely register to a FS that is publicly accessible. The phones are behind NAT router, and begin to fail after more than 4 register. I am thinking about using the SBC for a registration/media proxy, and am wondering how I would get FS and the SBC to work together. Any ideas? -- You Rock! Your E-Mail Should Too! Signup Now at Rock.com and get 2GB of Storage! http://connections.rock.com/user/displayUserRegisterPage.kickAction?as=1167…

2 1

SIP session timer
by Sergey Okhapkin 15 Aug '10

15 Aug '10

Is it possible to use SIP UPDATE method to check session activity instead of re-INVITE?

4 4

Multiple Dialog Subscription NOTIFY Messages
by Jerry Richards 15 Aug '10

15 Aug '10

Hello, If I configure 5 phones to subscribe to "dialog" events of a particular extension, and then make a call to that extension, each subscribing phone receives multiple NOTIFY messages with dialog state "early". I looked into the content of the NOTIFY messages received by one of the subscribers. It received 5 pairs of NOTIFY messages where each pair contained a different <dialog id>. What is the reason FS would do this? Thanks, Jerry

3 3