<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hello,</p>
<p>thanks for updating here, good to know large packets were
truncated by heplify.</p>
<p>Cheers,<br>
Daniel<br>
</p>
<div class="moz-cite-prefix">On 23.07.20 16:18, José Lopes wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAK5rbQsyNAMhq_LFPnVX_DxmjwjqjhXnwkMQCCSCyD32i9Qozw@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">
<div dir="ltr">Hello all,
<div><br>
</div>
<div>I figured it out.</div>
<div><br>
</div>
<div>The heplify-server truncates the packets above 8192
bytes, I changed the code of heplify-server and it is
working.</div>
<div>This question is not related to kamailio, so I will open
an issue on heplify-server.</div>
<div><br>
</div>
<div>Thanks.</div>
<div><br>
</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Wed, Jul 22, 2020 at 8:06
PM José Lopes <<a href="mailto:jose.lopes@itcenter.com"
target="_blank" moz-do-not-send="true">jose.lopes@itcenter.com</a>>
wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left:1px solid
rgb(204,204,204);padding-left:1ex">
<div dir="ltr">
<div>Hello all,</div>
<div><br>
</div>
<div>I am using the siptrace module on Kamailio 5.3.5 and
I am trying to monitor the SIP over websockets traffic
with Homer 7.8.1 (heplify-server).</div>
<div><br>
</div>
<div>I notice a strange behavior, some packets are not
presented on Homer.</div>
<div>I checked heplify-server and i notice the next
warning:<br>
</div>
<div>heplify-server: 2020/07/22 18:41:09.425513
decoder.go:103: WARN HEP packet length is 8192 but
should be 11663<br>
</div>
<div><br>
</div>
<div>So I think the packets are truncated by 8192 (packet
size), so they are ignored by heplify-server.</div>
<div><br>
</div>
<div>I have done a tcpdump on the Homer machine and have
the next output, where I can see some packets with size
greater than 8192.<br>
</div>
<div><br>
</div>
<div>19:58:29.788927 IP X.X.X.X.6666 > Y.Y.Y.Y.9060:
UDP, bad length 11658 > 1472<br>
19:58:29.793539 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP,
length 626<br>
19:58:29.810733 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP,
length 579<br>
19:58:29.811121 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP,
length 579<br>
19:58:29.838824 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP,
bad length 11953 > 1472<br>
19:58:29.852286 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP,
length 473<br>
19:58:29.865388 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP,
bad length 3521 > 1472<br>
19:58:29.875311 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP,
length 562<br>
</div>
<div><br>
</div>
<div>Can you guide me to identify where the packets are
truncated?<br>
</div>
<div><br>
</div>
<br clear="all">
<div>
<div dir="ltr">
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div style="font-size:12.8px">
<div dir="ltr"
style="font-size:12.8px;color:rgb(80,0,80)"><font
size="2" face="verdana,
sans-serif"
color="#000000">Os
melhores cumprimentos /
Best regards,</font></div>
<div dir="ltr"
style="font-size:12.8px;color:rgb(80,0,80)"><font
size="2" face="verdana,
sans-serif"
color="#000000"><br>
</font></div>
<div dir="ltr"
style="font-size:12.8px;color:rgb(80,0,80)"><font
size="2" face="verdana,
sans-serif"><font
color="#000000"><b>José
Lopes</b></font><br>
</font><span
style="font-family:verdana,sans-serif;font-size:12.8px;color:black">Research </span><span
style="font-family:verdana,sans-serif;font-size:12.8px;color:black">and</span><span
style="font-family:verdana,sans-serif;font-size:12.8px;color:black"> </span><span
style="font-family:verdana,sans-serif;font-size:12.8px;color:black">Development</span><span
style="font-family:verdana,sans-serif;font-size:12.8px;color:black"> </span><span
style="font-family:verdana,sans-serif;font-size:12.8px;color:black">Technician</span></div>
<div dir="ltr"
style="font-size:12.8px"><font
face="verdana,
sans-serif"
color="#000000"><br>
</font>
<table
style="color:rgb(80,0,80);font-size:12.8px;font-family:Arial,Helvetica,sans-serif;width:600px;border-collapse:collapse">
<tbody>
<tr>
<td
style="font-size:13px;color:black">
<table
style="color:rgb(34,34,34);font-size:12.7273px;font-family:Arial,Helvetica,sans-serif;width:600px;border-collapse:collapse">
<tbody>
<tr>
<td
style="line-height:15px"><font
size="2"
face="verdana,
sans-serif"><font
color="#000000">Phone:</font><font color="#666666"> </font>+351 256 370
980<br>
</font></td>
</tr>
<tr>
<td
style="line-height:15px"><font
size="2"
face="verdana,
sans-serif"><font
color="#000000">Email: </font><a href="mailto:jose.lopes@itcenter.com"
style="color:rgb(17,85,204)"
target="_blank" moz-do-not-send="true">jose.lopes@itcenter.com</a></font><br>
</td>
</tr>
<tr
style="display:block;width:600px;margin-top:10px">
<td
style="width:600px;padding:0px"><img
src="http://www.itcenter.com.pt/app/themes/itcenter/assets/images/logo-itcenter.png?v=1"
moz-do-not-send="true"></td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Kamailio (SER) - Users Mailing List
<a class="moz-txt-link-abbreviated" href="mailto:sr-users@lists.kamailio.org">sr-users@lists.kamailio.org</a>
<a class="moz-txt-link-freetext" href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a>
</pre>
</blockquote>
<pre class="moz-signature" cols="72">--
Daniel-Constantin Mierla -- <a class="moz-txt-link-abbreviated" href="http://www.asipto.com">www.asipto.com</a>
<a class="moz-txt-link-abbreviated" href="http://www.twitter.com/miconda">www.twitter.com/miconda</a> -- <a class="moz-txt-link-abbreviated" href="http://www.linkedin.com/in/miconda">www.linkedin.com/in/miconda</a>
Funding: <a class="moz-txt-link-freetext" href="https://www.paypal.me/dcmierla">https://www.paypal.me/dcmierla</a></pre>
</body>
</html>