December 2019 - sr-users

Kamailio SIP TLS Troubleshooting
by Sudhakar Parasher 19 Dec '19

19 Dec '19

Hi Experts. Need your opinion on below part related to kamailio I am using SIP Kamailio module Version for the SIP Registrations from the Client mobile phones using Android and IOS which is Over TLSv1.2 , So in nutshell the SIP Signaling is TLS version 1.2 encrypted and Customer is requesting for the forward of the unencrypted SIP signaling messages especially the SIP Registration messages to their probe solutions without storing the SIP messages locally in the Kamailio Database Question :Would it not be possible for Kamailio imply “mirror” all the SIP messages related to all SIP REGISTER dialogs (after removing TLS for inbound messages and prior to adding TLS for outbound message) to a designated IP Address and Port? No need for local database storage. No need for encapsulation. No mirroring of other messages/dialogs. Cheers Sudhakar

4 10

[dispatcher] freeing already freed pointer, called from core: core/xavp.c: xavp_free
by Denys Pozniak 19 Dec '19

19 Dec '19

Hello! The configuration below leads to a CRITICAL message in the console. Please let me know how to avoid this issue. event_route[htable:mod-init] { route(AUTORUN); ... } route[AUTORUN] { if ( ds_select("9", "4") ) { xlog("L_WARN", "[$cfg(route)] *ds_select* $xavp(_dsdst_[0]=>uri) $xavp(_dsdst_[1]=>uri) $xavp(_dsdst_[2]=>uri)\n"); } ... } dispatcher.list # group 9 9 sip:192.168.20.125:5070 9 sip:192.168.20.160:5070 9 sip:192.168.20.7:5070 9 sip:192.168.20.107:5070 9 sip:192.168.20.190:5070 0(6088) DEBUG: dispatcher [dispatch.c:2054]: ds_manage_routes(): set [9] 0(6088) DEBUG: dispatcher [dispatch.c:2158]: ds_manage_routes(): using alg [4] hash [0] 0(6088) DEBUG: dispatcher [dispatch.c:2199]: ds_manage_routes(): selected [4-9-2/0] <sip:192.168.20.190:5070> 0(6088) DEBUG: dispatcher [dispatch.c:2218]: ds_manage_routes(): using first entry [9/0] 0(6088) DEBUG: dispatcher [dispatch.c:2238]: ds_manage_routes(): using entry [9/1] 0(6088) DEBUG: dispatcher [dispatch.c:2238]: ds_manage_routes(): using entry [9/2] 0(6088) DEBUG: dispatcher [dispatch.c:2238]: ds_manage_routes(): using entry [9/3] 0(6088) DEBUG: dispatcher [dispatch.c:2272]: ds_manage_routes(): using default entry [9/4] 0(6088) DEBUG: dispatcher [dispatch.c:2016]: ds_select_dst_limit(): selected target destinations: 5 0(6088) WARNING: <script>: [AUTORUN] *ds_select* sip:192.168.20.190:5070 sip:192.168.20.107:5070 sip:192.168.20.7:5070 1(6089) DEBUG: <core> [core/usr_avp.c:636]: destroy_avp_list(): destroying list 0x7fe5f7d4f420 1(6089) DEBUG: <core> [core/usr_avp.c:636]: destroy_avp_list(): destroying list (nil) 1(6089) DEBUG: <core> [core/usr_avp.c:636]: destroy_avp_list(): destroying list (nil) 1(6089) DEBUG: <core> [core/usr_avp.c:636]: destroy_avp_list(): destroying list (nil) 1(6089) DEBUG: <core> [core/usr_avp.c:636]: destroy_avp_list(): destroying list (nil) 1(6089) DEBUG: <core> [core/usr_avp.c:636]: destroy_avp_list(): destroying list (nil) 1(6089) DEBUG: <core> [core/xavp.c:495]: xavp_destroy_list(): destroying xavp list 0x7fe5f7d4faf0 1(6089) DEBUG: <core> [core/xavp.c:495]: xavp_destroy_list(): destroying xavp list (nil) 1(6089) CRITICAL: <core> [core/mem/q_malloc.c:514]: qm_free(): BUG: freeing already freed pointer (0x7fe5f7d4faf0), called from core: core/xavp.c: xavp_free(65), first free core: core/xavp.c: xavp_free(65) - ignoring 1(6089) DEBUG: <core> [core/xavp.c:495]: xavp_destroy_list(): destroying xavp list (nil) 1(6089) CRITICAL: <core> [core/mem/q_malloc.c:514]: qm_free(): BUG: freeing already freed pointer (0x7fe5f7d4f168), called from core: core/xavp.c: xavp_free(65), first free core: core/xavp.c: xavp_free(65) - ignoring 1(6089) DEBUG: <core> [core/xavp.c:495]: xavp_destroy_list(): destroying xavp list (nil) 1(6089) CRITICAL: <core> [core/mem/q_malloc.c:514]: qm_free(): BUG: freeing already freed pointer (0x7fe5f7d4f378), called from core: core/xavp.c: xavp_free(65), first free core: core/xavp.c: xavp_free(65) - ignoring 1(6089) DEBUG: <core> [core/xavp.c:495]: xavp_destroy_list(): destroying xavp list (nil) 1(6089) CRITICAL: <core> [core/mem/q_malloc.c:514]: qm_free(): BUG: freeing already freed pointer (0x7fe5f7d4f580), called from core: core/xavp.c: xavp_free(65), first free core: core/xavp.c: xavp_free(65) - ignoring 1(6089) DEBUG: <core> [core/xavp.c:495]: xavp_destroy_list(): destroying xavp list (nil) 1(6089) CRITICAL: <core> [core/mem/q_malloc.c:514]: qm_free(): BUG: freeing already freed pointer (0x7fe5f7d4f790), called from core: core/xavp.c: xavp_free(65), first free core: core/xavp.c: xavp_free(65) - ignoring 1(6089) DEBUG: <core> [core/xavp.c:495]: xavp_destroy_list(): destroying xavp list (nil) 1(6089) CRITICAL: <core> [core/mem/q_malloc.c:514]: qm_free(): BUG: freeing already freed pointer (0x7fe5f7d4f9a0), called from core: core/xavp.c: xavp_free(65), first free core: core/xavp.c: xavp_free(65) - ignoring 1(6089) DEBUG: <core> [core/receive.c:457]: receive_msg(): cleaning up ... version: kamailio 5.2.2 (x86_64/linux) flags: STATS: Off, USE_TCP, USE_TLS, USE_SCTP, TLS_HOOKS, USE_RAW_SOCKS, DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MEM, SHM_MMAP, PKG_MALLOC, Q_MALLOC, F_MALLOC, TLSF_MALLOC, DBG_SR_MEMORY, USE_FUTEX, FAST_LOCK-ADAPTIVE_WAIT, USE_DNS_CACHE, USE_DNS_FAILOVER, USE_NAPTR, USE_DST_BLACKLIST, HAVE_RESOLV_RES ADAPTIVE_WAIT_LOOPS=1024, MAX_RECV_BUFFER_SIZE 262144 MAX_URI_SIZE 1024, BUF_SIZE 65535, DEFAULT PKG_SIZE 8MB poll method support: poll, epoll_lt, epoll_et, sigio_rt, select. id: unknown compiled on 19:29:40 Jun 20 2019 with gcc 4.8.5 -- BR, Denys Pozniak

2 2

kamailio 5.2.5 wrong send socket on a mhomed proxy.
by Vitalii Aleksandrov 19 Dec '19

19 Dec '19

Hi, kamailio 5.2 branch has a commit 09ac3e47ef79dbd599b7dec5b84ae3b792f025ed cherry picked from master branch. It makes sense for master because get_send_socket2() behavior has changed and function became started and also there were some patches to propagate connection it to uac structure. 5.2 kamailio takes the first interface for TCP/TLS/WS connections and then finds existing tcp connection matched by ip:port, but when the patch is applied connection lookup fails and kamailio can't forward in-dialog messages.

2 1

How to reduce re-INVITE time in Kamailio
by Anuran Barman 18 Dec '19

18 Dec '19

Hi, I am using Kamailio for my SIP Phone app. My main SIP client is the iOS app. Till now everything is working fine regarding the calling. But the problem is when the app is killed I am not able to pick up incoming call. The thing is, when app is killed I am sending PushKit VOIP message to my ios app to wake it up. App is waking up. But by the time app is waking up, the original INVITE message got missed up. So according to SIP protocol it will re-INVITE after some time. Currently if I keep my app open for 10-15 secs after it wakes up, I am able to get the re-INVITE and everything works fine just as it was supposed to. But waiting 10-15 sec on the app is not practical in any sense. So my question is there any way I can reduce the re-INVITE time to like 5/6 seconds so that as soon as the app open it will wait for 5/6 seconds (practical upto some extent) and it will get the call ? Or what kamailio is using as the interval time is a SIP standard and can not be changed? If possible to do so, how can I do that? Please help.

6 11

kamcmd stuck
by Andrew Chen 17 Dec '19

17 Dec '19

Hi everyone, Have anyone experienced kamcmd getting stuck and the only way to fix it was to restart the process? Running 5.2.5 Thanks -- Andy Chen Sr. Telephony Lead Engineer achen@ <achen(a)thinkingphones.com>fuze.com -- *Confidentiality Notice: The information contained in this e-mail and any attachments may be confidential. If you are not an intended recipient, you are hereby notified that any dissemination, distribution or copying of this e-mail is strictly prohibited. If you have received this e-mail in error, please notify the sender and permanently delete the e-mail and any attachments immediately. You should not retain, copy or use this e-mail or any attachment for any purpose, nor disclose all or any part of the contents to any other person. Thank you.*

2 2

OPTION pings with dispatcher to asterisk box
by Karsten Horsmann 16 Dec '19

16 Dec '19

Hello all! i am using kamailio 5.3.1-4 on CentOS and i am using dispatcher to ping his targets. Now i have someone with asterisk that answers with 401 or 404 (depends on asterisk version). So i tried code=401;code=404 as aditional attrs. Seems not to work. Also i tired to change the modparam from class=2 to this: modparam("dispatcher", "ds_ping_reply_codes", "class=2,code=401,code=404") Is that a "bug" or a hidden feature, or i missed something? Btw - Have a nice weekend! SELECT * FROM dispatcher WHERE id=1 \G *************************** 1. row *************************** id: 1 setid: 1100 destination: sip:SOMEWHERE;transport=tls flags: 0 priority: 0 attrs: socket=tls:MY.IP.AD.RR:5061;ping_from=sip:MY.SIP.DOMAIN;code=401;code=404 description: UNTRUSTED "SET": { "ID": 1100, "TARGETS": [{ "DEST": { "URI": "sip:SOMEWHERE;transport=tls", "FLAGS": "IP", "PRIORITY": 0, "ATTRS": { "BODY": "socket=tls:MY.IP.AD.RR:5061;ping_from=sip:MY.SIP.DOMAIN;code=401;code=404", "DUID": "", "MAXLOAD": 0, "WEIGHT": 0, "RWEIGHT": 0, "SOCKET": "tls:MY.SIP.DOMAIN:5061" }, "LATENCY": { "AVG": 48768.816406, "STD": 139490.953125, "EST": 43359.566406, "MAX": 568876, "TIMEOUT": 8 } } }] } }] #!ifdef WITH_MYSQL modparam("dispatcher", "db_url", "DBURL") modparam("dispatcher", "table_name", "dispatcher") #!endif #!ifndef WITH_MYSQL modparam("dispatcher", "list_file", "/etc/kamailio/dispatcher.list") #!endif modparam("dispatcher", "ds_ping_method", "OPTIONS") modparam("dispatcher", "ds_ping_from", "<sip:ping@FANCY-COMPANY-WEBNAME>") modparam("dispatcher", "ds_ping_interval", 30) modparam("dispatcher", "ds_probing_mode", 1) modparam("dispatcher", "ds_probing_threshold", 2) modparam("dispatcher", "setid_pvname", "$var(setid)") modparam("dispatcher", "attrs_pvname", "$var(attrs)") modparam("dispatcher", "ds_ping_reply_codes", "class=2,code=401,code=404") modparam("dispatcher", "ds_ping_latency_stats", 1) https://community.asterisk.org/t/asterisk-responds-with-404-to-options-even… Dec 13 17:25:46 siptrunk3 /usr/sbin/kamailio[25115]: INFO: <script>: Sending message 'OPTIONS sip:SOMEWHERE;transport=tls SIP/2.0 Via: SIP/2.0/TLS MY.IP.AD.RR:5061;branch=z9hG4bK2527.825671c0000000000000000000000000.0 To: <sip:SOMEWHERE;transport=tls> From: <sip:MY.SIP.DOMAIN>;tag=f9bf2579cb456ea8d260d4aabc8248ef-9ca844ad CSeq: 10 OPTIONS Call-ID: 01cb6e272da7b0dd-25115(a)MY.IP.AD.RR Max-Forwards: 70 Content-Length: 0 User-Agent: SBC-OS ' Dec 13 17:25:46 siptrunk3 /usr/sbin/kamailio[25127]: INFO: <script>: Received message 'SIP/2.0 404 Not Found Via: SIP/2.0/TLS MY.IP.AD.RR:5061;branch=z9hG4bK2527.825671c0000000000000000000000000.0;received=MY.IP.AD.RR From: <sip:MY.SIP.DOMAIN>;tag=f9bf2579cb456ea8d260d4aabc8248ef-9ca844ad To: <sip:SOMEWHERE;transport=tls>;tag=as54adca41 Call-ID: 01cb6e272da7b0dd-25115(a)MY.IP.AD.RR CSeq: 10 OPTIONS Server: Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH, MESSAGE Supported: replaces, timer Accept: application/sdp Content-Length: 0 ' -- Cheers *Karsten Horsmann*

3 6

Reject tls invites without a=crypto sdp
by Karsten Horsmann 16 Dec '19

16 Dec '19

Hi, I use Kamailio 5.3.1 with rtpengine to offer an siptrunk endpoint for my customers. I observe that someone of them use tls to encrypt signaling but forgotten to encrypt rtp. I want to reject this invites. Are there any hints how to do this? Thought about reading the sdp and search for a=crypto line and if not send reply with (what code ever will be good for that). Cheers Karsten

2 4

Removing extra Connection information in SDP
by Kjeld Flarup 16 Dec '19

16 Dec '19

Hello I have a problem with some phone numbers at Telenor. Our door telephone does not reply with an ACK on the 200 OK. All I found was a weird SDP response with two "connection information" lines Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): BroadWorks 307119541 1 IN IP4 194.247.61.31 Session Name (s): - Connection Information (c): IN IP4 194.247.61.31 Time Description, active time (t): 0 0 Session Attribute (a): sendrecv Media Description, name and address (m): audio 23116 RTP/AVP 8 101 Connection Information (c): IN IP4 194.247.61.31 Media Attribute (a): rtpmap:8 PCMA/8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute (a): fmtp:101 0-15 Media Attribute (a): maxptime:40 Media Attribute (a): bsoft:1 image udptl t38 Media Attribute (a): sendrecv Media Attribute (a): silenceSupp:off - - - - Media Attribute (a): setup:actpass To debug, I would like to remove one of the "Connection Information (c): IN IP4 194.247.61.31", to see if this is what confuses the door telephone. But how do I do that? I tried with this but nothing happeded onreply_route[DOOR_MANAGE_REPLY] { if (is_method("INVITE|SUBSCRIBE")) { sdp_remove_line_by_prefix("c=IN IP4 194"); } return 1; } -- --------------------- Med Liberalistiske Hilsner ---------------------- Civilingeniør, Kjeld Flarup - Mit sind er mere åbent end min tegnebog Sofienlundvej 6B, 7560 Hjerm, Tlf: 40 29 41 49 Den ikke akademiske hjemmeside for liberalismen -www.liberalismen.dk <http://www.liberalismen.dk>

2 1

using tls targets in dispatcher
by Narasimhaiah, Vinod Maralenahalli 15 Dec '19

15 Dec '19

Hi I am using kamailio server to forward the request to a new kamailio-server which listens only on TLS. *problem: Not able to specify the dispatcher with tls protocol* I am using the below configuration in dispatcher.list kamailio version:4.4.2 *# setid(integer) destination(sip uri) flags (integer, optional), priority(int,opt), attrs (str,optional)1 sip:mynetwork.com <http://mynetwork.com>;transport=tls 8 1 socket=tls:mynetwork.com:5328 <http://mynetwork.com:5328>* and if I specify the destination as just sip:mynetwork.com:5328 with out attrs and transport=tls if is falling back to UDP. Thank you vinod.M.N

2 1

Kamailio dispatcher to use tls targets.
by vinod mn 15 Dec '19

15 Dec '19

Hi I am using kamailio server to forward the request to a new kamailio-server which listens only on TLS. *problem: Not able to specify the dispatcher with tls protocol* I am using the below configuration in dispatcher.list kamailio version:4.4.2 *# setid(integer) destination(sip uri) flags (integer, optional), priority(int,opt), attrs (str,optional)1 sip:mynetwork.com <http://mynetwork.com/>;transport=tls 8 1 socket=tls:mynetwork.com:5328 <http://mynetwork.com:5328/>* and if I specify the destination as just sip:mynetwork.com:5328 with out attrs and transport=tls if is falling back to UDP. Thank you vinod.M.N

1 0