<div dir="auto">DTLS=passive solved it.<div dir="auto"><br><div dir="auto">Thanks guys. </div></div></div><br><div class="gmail_quote"><div dir="ltr">On Tue, 10 Apr 2018, 11:37 pm Aqs Younas, <<a href="mailto:aqsyounas@gmail.com">aqsyounas@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Sometimes, I see below logs in RTP engine. <br><br><br><div>Apr 10 17:59:21 centos-1024mb-nyc-02 rtpengine[65101]: INFO: [24b95195-3da3-4e12-8400-5fcf908183e5]: Received command 'answer' from <a href="http://127.0.0.1:44933" target="_blank" rel="noreferrer">127.0.0.1:44933</a></div><div>Apr 10 17:59:21 centos-1024mb-nyc-02 rtpengine[65101]: INFO: [24b95195-3da3-4e12-8400-5fcf908183e5]: answer time = 0.000163 sec</div><div>Apr 10 17:59:21 centos-1024mb-nyc-02 rtpengine[65101]: INFO: [24b95195-3da3-4e12-8400-5fcf908183e5]: Replying to 'answer' from <a href="http://127.0.0.1:44933" target="_blank" rel="noreferrer">127.0.0.1:44933</a></div><div>[1523383161.279950] ERR: [24b95195-3da3-4e12-8400-5fcf908183e5 port 8268]: SRTP output wanted, but no crypto suite was negotiated</div><div>Apr 10 17:59:21 centos-1024mb-nyc-02 rtpengine[65101]: ERR: [24b95195-3da3-4e12-8400-5fcf908183e5 port 8268]: SRTP output wanted, but no crypto suite was negotiated</div><div>Apr 10 17:59:25 centos-1024mb-nyc-02 rtpengine[65101]: INFO: [24b95195-3da3-4e12-8400-5fcf908183e5 port 8268]: Confirmed peer address as <a href="http://72.214.35.171:64834" target="_blank" rel="noreferrer">72.214.35.171:64834</a></div><div>[1523383171.481023] ERR: [24b95195-3da3-4e12-8400-5fcf908183e5 port 8269]: SRTCP output wanted, but no crypto suite was negotiated</div><div>Apr 10 17:59:31 centos-1024mb-nyc-02 rtpengine[65101]: ERR: [24b95195-3da3-4e12-8400-5fcf908183e5 port 8269]: SRTCP output wanted, but no crypto suite was negotiated</div><div>Apr 10 17:59:31 centos-1024mb-nyc-02 rtpengine[65101]: INFO: [24b95195-3da3-4e12-8400-5fcf908183e5 port 8269]: Confirmed peer address as <a href="http://72.214.35.171:50108" target="_blank" rel="noreferrer">72.214.35.171:50108</a></div><div>[1523383176.025296] ERR: [24b95195-3da3-4e12-8400-5fcf908183e5 port 8268]: SRTP output wanted, but no crypto suite was negotiated</div><div>Apr 10 17:59:36 centos-1024mb-nyc-02 rtpengine[65101]: ERR: [24b95195-3da3-4e12-8400-5fcf908183e5 port 8268]: SRTP output wanted, but no crypto suite was negotiated</div><div>[1523383186.000280] ERR: [02d8ccfb-831e-4a81-bd2b-09b007d39209]: DTLS error: 1 (read timeout expired)</div><div>[1523383186.000335] ERR: [02d8ccfb-831e-4a81-bd2b-09b007d39209]: DTLS error on local port 8248</div><div>[1523383186.000419] ERR: [02d8ccfb-831e-4a81-bd2b-09b007d39209]: DTLS error: 1 (read timeout expired)</div><div>[1523383186.000429] ERR: [02d8ccfb-831e-4a81-bd2b-09b007d39209]: DTLS error on local port 8249</div><div><b>Apr 10 17:59:46 centos-1024mb-nyc-02 rtpengine[65101]: ERR: [02d8ccfb-831e-4a81-bd2b-09b007d39209]: DTLS error: 1 (read timeout expired)</b></div><div><b>Apr 10 17:59:46 centos-1024mb-nyc-02 rtpengine[65101]: ERR: [02d8ccfb-831e-4a81-bd2b-09b007d39209]: DTLS error on local port 8248</b></div><div><b>Apr 10 17:59:46 centos-1024mb-nyc-02 rtpengine[65101]: ERR: [02d8ccfb-831e-4a81-bd2b-09b007d39209]: DTLS error: 1 (read timeout expired)</b></div><div><b>Apr 10 17:59:46 centos-1024mb-nyc-02 rtpengine[65101]: ERR: [02d8ccfb-831e-4a81-bd2b-09b007d39209]: DTLS error on local port 8249</b></div><div><b>Apr 10 18:00:41 centos-1024mb-nyc-02 rtpengine[65101]: INFO: [24b95195-3da3-4e12-8400-5fcf908183e5]: Closing call due to timeout</b></div><div>Apr 10 18:00:41 centos-1024mb-nyc-02 rtpengine[65101]: INFO: [24b95195-3da3-4e12-8400-5fcf908183e5]: Final packet stats:</div><div>Apr 10 18:00:41 centos-1024mb-nyc-02 rtpengine[65101]: INFO: [24b95195-3da3-4e12-8400-5fcf908183e5]: --- Tag 'f6d2237d-f960-4542-b138-f39a7fb52770', created 1:32 ago for branch '', in dialogue with '6bdf30d1-2da6-4b6d-b917-aaa720c9c1fa'</div><div>Apr 10 18:00:41 centos-1024mb-nyc-02 rtpengine[65101]: INFO: [24b95195-3da3-4e12-8400-5fcf908183e5]: ------ Media #1 (audio over UDP/TLS/RTP/SAVP) using unknown codec</div><div><b>Apr 10 18:00:41 centos-1024mb-nyc-02 rtpengine[65101]: INFO: [24b95195-3da3-4e12-8400-5fcf908183e5]: --------- Port <a href="http://209.182.216.71:8288" target="_blank" rel="noreferrer">209.182.216.71:8288</a> <> <a href="http://100.84.103.245:4002" target="_blank" rel="noreferrer">100.84.103.245:4002</a> , SSRC 0, 0 p, 0 b, 0 e, 92 ts</b></div><div><b>Apr 10 18:00:41 centos-1024mb-nyc-02 rtpengine[65101]: INFO: [24b95195-3da3-4e12-8400-5fcf908183e5]: --------- Port <a href="http://209.182.216.71:8289" target="_blank" rel="noreferrer">209.182.216.71:8289</a> <> <a href="http://100.84.103.245:4003" target="_blank" rel="noreferrer">100.84.103.245:4003</a> (RTCP), SSRC 0, 0 p, 0 b, 0 e, 92 ts</b></div><div>Apr 10 18:00:41 centos-1024mb-nyc-02 rtpengine[65101]: INFO: [24b95195-3da3-4e12-8400-5fcf908183e5]: --- Tag '6bdf30d1-2da6-4b6d-b917-aaa720c9c1fa', created 1:32 ago for branch '', in dialogue with 'f6d2237d-f960-4542-b138-f39a7fb52770'</div><div>Apr 10 18:00:41 centos-1024mb-nyc-02 rtpengine[65101]: INFO: [24b95195-3da3-4e12-8400-5fcf908183e5]: ------ Media #1 (audio over UDP/TLS/RTP/SAVP) using G722/8000</div><div>Apr 10 18:00:41 centos-1024mb-nyc-02 rtpengine[65101]: INFO: [24b95195-3da3-4e12-8400-5fcf908183e5]: --------- Port <a href="http://209.182.216.71:8268" target="_blank" rel="noreferrer">209.182.216.71:8268</a> <> <a href="http://72.214.35.171:64834" target="_blank" rel="noreferrer">72.214.35.171:64834</a>, SSRC 653128b4, 935 p, 160820 b, 0 e, 60 ts</div><div>Apr 10 18:00:41 centos-1024mb-nyc-02 rtpengine[65101]: INFO: [24b95195-3da3-4e12-8400-5fcf908183e5]: --------- Port <a href="http://209.182.216.71:8269" target="_blank" rel="noreferrer">209.182.216.71:8269</a> <> <a href="http://72.214.35.171:50108" target="_blank" rel="noreferrer">72.214.35.171:50108</a> (RTCP), SSRC 653128b4, 3 p, 278 b, 0 e, 60 ts</div><div><br><br>Any suggestion what might be happening?<br><br>Br, Aqs. </div></div><div class="gmail_extra"><br><div class="gmail_quote">On 10 April 2018 at 22:59, Aqs Younas <span dir="ltr"><<a href="mailto:aqsyounas@gmail.com" target="_blank" rel="noreferrer">aqsyounas@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">I could see SRTP packets coming from one device but they never leave rtpeninge. <div><br></div><div>I put a link to Pastebin containing a call trace with the hope that someone might help me out. </div><div><br></div><div>I could provide more info if required. </div><div><br></div><div><a href="https://pastebin.com/tYVpFQAh" target="_blank" rel="noreferrer">https://pastebin.com/tYVpFQAh</a><br><br>Br, Aqs. <br><div><br></div></div></div><div class="m_-2209063606374584731HOEnZb"><div class="m_-2209063606374584731h5"><div class="gmail_extra"><br><div class="gmail_quote">On 10 April 2018 at 01:39, Aqs Younas <span dir="ltr"><<a href="mailto:aqsyounas@gmail.com" target="_blank" rel="noreferrer">aqsyounas@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Greetings list, <div><br></div><div>I am trying to make two endpoints talking on DTLS-SRTP. But I hear on audio. </div><div><br></div><div>Things work perfectly fine if I use RTP or SRTP with TLS. </div><div><br></div><div>Endpoints are pjsip based application not webrtc based clients. </div><div><br></div><div><br></div><div>Below are logs from rtpengine. I hope someone could point out amiss. </div><div><br></div><div><div>Apr 9 20:02:43 centos-1024mb-nyc-02 rtpengine[58438]: INFO: [66d2da58-21fe-48bd-9999-a1f3a22afa6d]: --------- Port <a href="http://209.182.216.71:8176" target="_blank" rel="noreferrer">209.182.216.71:8176</a> <> <a href="http://72.214.35.171:63577" target="_blank" rel="noreferrer">72.214.35.171:63577</a>, SSRC 1234c6eb, 641 p, 110252 b, 0 e, 60 ts</div><div>Apr 9 20:02:43 centos-1024mb-nyc-02 rtpengine[58438]: INFO: [66d2da58-21fe-48bd-9999-a1f3a22afa6d]: --------- Port <a href="http://209.182.216.71:8177" target="_blank" rel="noreferrer">209.182.216.71:8177</a> <> <a href="http://72.214.35.171:63056" target="_blank" rel="noreferrer">72.214.35.171:63056</a> (RTCP), SSRC 1234c6eb, 4 p, 372 b, 0 e, 60 ts</div><div>Apr 9 20:12:24 centos-1024mb-nyc-02 rtpengine[58438]: INFO: Version git-master-3ef300b shutting down</div><div>Apr 9 20:12:37 centos-1024mb-nyc-02 rtpengine[58958]: INFO: Generating new DTLS certificate</div><div>Apr 9 20:12:37 centos-1024mb-nyc-02 rtpengine[58959]: INFO: Startup complete, version git-master-3ef300b</div><div>Apr 9 20:13:43 centos-1024mb-nyc-02 rtpengine[58959]: INFO: [a5ca8335-84d2-4daf-a0e2-6465e72b6d08]: Received command 'offer' from <a href="http://127.0.0.1:57645" target="_blank" rel="noreferrer">127.0.0.1:57645</a></div><div>Apr 9 20:13:43 centos-1024mb-nyc-02 rtpengine[58959]: NOTICE: [a5ca8335-84d2-4daf-a0e2-6465e72b6d08]: Creating new call</div><div>Apr 9 20:13:43 centos-1024mb-nyc-02 rtpengine[58959]: INFO: [a5ca8335-84d2-4daf-a0e2-6465e72b6d08]: offer time = 0.002612 sec</div><div>Apr 9 20:13:43 centos-1024mb-nyc-02 rtpengine[58959]: INFO: [a5ca8335-84d2-4daf-a0e2-6465e72b6d08]: Replying to 'offer' from <a href="http://127.0.0.1:57645" target="_blank" rel="noreferrer">127.0.0.1:57645</a></div><div>Apr 9 20:13:56 centos-1024mb-nyc-02 rtpengine[58959]: INFO: [a5ca8335-84d2-4daf-a0e2-6465e72b6d08]: Received command 'answer' from <a href="http://127.0.0.1:42309" target="_blank" rel="noreferrer">127.0.0.1:42309</a></div><div>Apr 9 20:13:56 centos-1024mb-nyc-02 rtpengine[58959]: INFO: [a5ca8335-84d2-4daf-a0e2-6465e72b6d08]: answer time = 0.000220 sec</div><div>Apr 9 20:13:56 centos-1024mb-nyc-02 rtpengine[58959]: INFO: [a5ca8335-84d2-4daf-a0e2-6465e72b6d08]: Replying to 'answer' from <a href="http://127.0.0.1:42309" target="_blank" rel="noreferrer">127.0.0.1:42309</a></div><div>Apr 9 20:13:56 centos-1024mb-nyc-02 rtpengine[58959]: INFO: [a5ca8335-84d2-4daf-a0e2-6465e72b6d08 port 8000]: DTLS: Peer certificate accepted</div><div>Apr 9 20:13:56 centos-1024mb-nyc-02 rtpengine[58959]: INFO: [a5ca8335-84d2-4daf-a0e2-6465e72b6d08 port 8000]: DTLS-SRTP successfully negotiated</div><div>Apr 9 20:13:57 centos-1024mb-nyc-02 rtpengine[58959]: ERR: [a5ca8335-84d2-4daf-a0e2-6465e72b6d08 port 8000]: SRTP output wanted, but no crypto suite was negotiated</div><div>Apr 9 20:14:00 centos-1024mb-nyc-02 rtpengine[58959]: INFO: [a5ca8335-84d2-4daf-a0e2-6465e72b6d08 port 8000]: Confirmed peer address as <a href="http://72.214.35.171:58634" target="_blank" rel="noreferrer">72.214.35.171:58634</a></div><div>Apr 9 20:14:07 centos-1024mb-nyc-02 rtpengine[58959]: ERR: [a5ca8335-84d2-4daf-a0e2-6465e72b6d08 port 8001]: SRTCP output wanted, but no crypto suite was negotiated</div><div>Apr 9 20:14:07 centos-1024mb-nyc-02 rtpengine[58959]: [a5ca8335-84d2-4daf-a0e2-6465e72b6d08] version=2, padding=0, count=1, payloadtype=200, length=12, ssrc=2045607967, ntp_sec=1379282714, ntp_fractions=439054259, rtp_ts=1838072137, sender_packets=3366262813, sender_bytes=2383498210, ssrc=815258372, fraction_lost=96, packet_loss=13713522, last_seq=3314313929, jitter=2878956247, last_sr=2456273253, delay_since_last_sr=3351655681</div><div>Apr 9 20:14:07 centos-1024mb-nyc-02 rtpengine[58959]: INFO: [a5ca8335-84d2-4daf-a0e2-6465e72b6d08 port 8001]: Confirmed peer address as <a href="http://72.214.35.171:57732" target="_blank" rel="noreferrer">72.214.35.171:57732</a></div><div>Apr 9 20:14:12 centos-1024mb-nyc-02 rtpengine[58959]: ERR: [a5ca8335-84d2-4daf-a0e2-6465e72b6d08 port 8000]: SRTP output wanted, but no crypto suite was negotiated</div><div>Apr 9 20:14:17 centos-1024mb-nyc-02 rtpengine[58959]: [a5ca8335-84d2-4daf-a0e2-6465e72b6d08] version=2, padding=0, count=1, payloadtype=200, length=12, ssrc=2045607967, ntp_sec=2811881700, ntp_fractions=4080266212, rtp_ts=371429680, sender_packets=958830616, sender_bytes=2579186043, ssrc=1909756377, fraction_lost=174, packet_loss=11416637, last_seq=3106722675, jitter=758758394, last_sr=2663618457, delay_since_last_sr=1399181077</div><div>Apr 9 20:14:27 centos-1024mb-nyc-02 rtpengine[58959]: ERR: [a5ca8335-84d2-4daf-a0e2-6465e72b6d08 port 8000]: SRTP output wanted, but no crypto suite was negotiated</div><div>Apr 9 20:14:27 centos-1024mb-nyc-02 rtpengine[58959]: ERR: [a5ca8335-84d2-4daf-a0e2-6465e72b6d08 port 8001]: SRTCP output wanted, but no crypto suite was negotiated</div><div>Apr 9 20:14:27 centos-1024mb-nyc-02 rtpengine[58959]: [a5ca8335-84d2-4daf-a0e2-6465e72b6d08] version=2, padding=0, cou</div><div><br><br>It is how I have programmed it in my Kamailio configuration. </div><div><br></div><div>ON INVITE</div><div><br></div><div>rtpengine_offer("replace-origin replace-session-connection ICE=remove UDP/TLS/RTP/SAVP");<br></div><div><br></div><div>
<span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline">ON 200-ok</span> <br></div><div><br></div><div>rtpengine_answer("replace-origin replace-session-connection ICE=remove UDP/TLS/RTP/SAVP"); </div></div><div><br></div><div><br></div><div>Best Regards, </div><span class="m_-2209063606374584731m_-2570865809709200011HOEnZb"><font color="#888888"><div><br></div><div>Aqs Younas</div></font></span></div>
</blockquote></div><br></div>
</div></div></blockquote></div><br></div>
</blockquote></div>