Hi,
We are having an error in the Kamailio logs which we need to resolve this
issue,
ERROR is ::* /usr/local/sbin/kamailio[10149]: ERROR: tm [t_reply.c:1081]:
run_failure_handlers(): error running run_top_route for failure handler.*
We are getting this error at the time of the 3xx response, Can anyone help
me on this?
Thank you.
Hi Gang
While still hunting DMQ issues, I noticed that the OS is reporting UDP
drops. Maybe DMQ packets? Would DMQ re-send a lost packet?
I increased OS UDP RX buffers times 10 and monitoring counters.
I also found that DMQ can use tcp or tls as transport.
Could this help to prevent loosing DMQ messages? Or is this prone to
cause new issues?
Mit freundlichen Grüssen
-Benoît Panizzon-
--
I m p r o W a r e A G - Leiter Commerce Kunden
______________________________________________________
Zurlindenstrasse 29 Tel +41 61 826 93 00
CH-4133 Pratteln Fax +41 61 826 93 01
Schweiz Web http://www.imp.ch
______________________________________________________
Hello,
I'm trying to solve a problem with calls WebRTC/UDP. I think is a
fragmentation problem because udp/webRTC calls works without problem.
The INVITE from Kamailio to the UDP device not receive any type of answer.
I'm trying to reduce the SDP annex size using:
|sdp_remove_line_by_prefix|
for some lines unsuccessfully. Maybe I don't know where put this
function in the script.
Or, is there another way to solve this issue?
Thank you in advance
Regards
--
---
I'm SoCIaL, MayBe
Hi Team
I'm still hunting down DMQ dialog issues.
https://www.kamailio.org/docs/modules/devel/modules/dialog.html#dialog.p.en…
Quote:
"Notably, it is not possible to send in-dialog requests on any but the
original proxy instance."
I make sure, that if a procied call (with same callID) is being
redirected from anywhere, it is send to the came dialog aware kamailio
instance it originated from. This seems to have fixed a lot of issues
with dialogues getting corrupted.
The two main purposed we use dialog is:
* CDR
* Channel Counting / Limiting
modparam("dialog", "profiles_with_value", "custprofilecounter");
Can a such profile WITH value be written from any node sharing dialog
via DMQ or is this bound to cause troubes?
Example.
Two call get to same customer, but over two different nodes.
Node A is getting a call:
set_dlg_profile("custprofilecounter","Customer7664");
get_profile_size("custprofilecounter","Customer7664","$var(busy_count)");
=> $var(busy_count) is now 1.
The profile is replicated to Node B and the value can be accessed there.
While Call on Node A is running, Node B is getting a call to same
customer:
set_dlg_profile("custprofilecounter","Customer7664");
get_profile_size("custprofilecounter","Customer7664","$var(busy_count)");
=> $var(busy_count) is now 2 on Node B.
Is this value being replicated BACK to Node A where the profile counter
originally was created?
As far as I have experienced, this is the case.
But what happens if the call on Node B is ending before the Call on
Node A? Will the counter being decreased also correctly be replicated
to Node A?
What happens the other way round?
What happens if both call end at the same time? Is a race condition
possible, or is there some sort of locking to prevent this?
Can I use profiles_with_value the way I use them? Or is this bound to
fail because it's not supported?
Mit freundlichen Grüssen
-Benoît Panizzon-
--
I m p r o W a r e A G - Leiter Commerce Kunden
______________________________________________________
Zurlindenstrasse 29 Tel +41 61 826 93 00
CH-4133 Pratteln Fax +41 61 826 93 01
Schweiz Web http://www.imp.ch
______________________________________________________
(Please keep the list in CC)
Hello,
The web tools might use another logic internally. I had some success with a java library use case and also with PostgreSQL, I think.
A usual use-case is to have an encrypted password value in a DB, for data at rest encryption. The password is encrypted from something else. Then inside the Kamailio cfg you want to encrypt it on the fly, to use it for example for challenging a phone with username/password.
Maybe you can give it a try with some python or other script languages, where you can play with the different crypto system parameter more easily.
Cheers,
Henning
--
Henning Westerholt – https://skalatan.de/blog/
Kamailio services – https://gilawa.com<https://gilawa.com/>
From: Jayesh Nambiar <jayesh1017(a)gmail.com>
Sent: Donnerstag, 5. Oktober 2023 06:41
To: Henning Westerholt <hw(a)gilawa.com>
Subject: Re: [SR-Users] Crypto module AES algorithm details
Hello Henning,
Thanks for the super fast reply.
I tested this within kamailio 5.3.4 and I can successfully encrypt a header value and also the same encrypted value decrypts to proper plain text when.
But when I compare the encrypted text with online resources like https://www.devglan.com/online-tools/aes-encryption-decryption and https://www.javainuse.com/aesgenerator, their encrypted text value is different from what I see from kamailio.
Both these resources produce the same encrypted text while the encrypted text from kamailio is different.
How do I validate this?
My use case is as follows:
-- I get an encrypted text in a SIP Header
-- I decrypt it and validate it against some DB
-- If valid proceed or else exit
Now if the algorithm doesnt match exactly, there are chances of error, hence asking question on how to validate it.
On Wed, Oct 4, 2023 at 1:43 PM Henning Westerholt <hw(a)gilawa.com<mailto:hw@gilawa.com>> wrote:
Hello Jayesh,
AFAIK its uses AES 256 with CBC mode. The IV is generated from OpenSSL, e.g. https://www.openssl.org/docs/man3.0/man3/EVP_BytesToKey.html
For newer versions I have added the init_vector functionality to enable interoperability with other crypto functions, e.g. some databases, java frameworks etc. If you want to use this functionality, I’d suggest to update, as the 5.3. is also end of life since some time. Otherwise you can of course also backport this feature.
Cheers,
Henning
--
Henning Westerholt – https://skalatan.de/blog/
Kamailio services – https://gilawa.com<https://gilawa.com/>
From: Jayesh Nambiar via sr-users <sr-users(a)lists.kamailio.org<mailto:sr-users@lists.kamailio.org>>
Sent: Mittwoch, 4. Oktober 2023 08:54
To: Kamailio (SER) - Users Mailing List <sr-users(a)lists.kamailio.org<mailto:sr-users@lists.kamailio.org>>
Cc: Jayesh Nambiar <jayesh1017(a)gmail.com<mailto:jayesh1017@gmail.com>>
Subject: [SR-Users] Crypto module AES algorithm details
Hello,
I am running kamailio-5.3.4 on one of my setup and I intend to use the crypto module in the same.
I wanted to understand the following details when the module is used:
I understand it uses the AES algorithm, is that correct?
Does it use AES 128, 192 or 256 bit algorithms?
Does it use CBC or ECB mode for AES?
The 5.3 version does not have an parameter for init-vector, so does kamailio use any init vector internally in this case?
When i compared the encrypted text that kamailio produces and the ones available online, they were producing different outputs even when same shared secret was used. Hence asking for more clarification
PS: Upgrading kamailio is my very last option as this is one af an old setup which only needs this feature without much changes.
Thanks for any valuable response.
-- Jayesh
Hello,
I'm using Kamailio as SIP proxy between Session Manager and SBC
So here is the scenario :
Session Manager sends a call (Invite) to Kamailio, kamailio needs to relay it to SBC after doing some modification.
(-----Session Manager-----) ----------- > (----Kamailio----) ----------- > (-----SBC-----)
My routing logic is similar to the below:
route{
if ((method==OPTIONS) && (! uri=~"sip:.*[@]+.*")) {
options_reply();
}
if (is_method("INVITE")) {
sql_query("cb", "select number from pool1 order by random() limit 1", "ra");
$var(rand)=$dbr(ra=>[0,0]);
uac_replace_from($var(rand),"sip:$var(rand)@192.168.1.1");
xlog("L_INFO","Random: $var(rand)");
$td = "192.168.1.10";
$rd = "192.168.1.10";
t_relay();
}
}
Where:
192.168.1.1 is Kamailio IP
192.168.1.10 is SBC IP
The issue is that I'm not sure to handle the other SIP packets like 183,CANCEL, BYE etc that can be received from both SBC and session Manager?
What to add to my configuration to handle it properly?
Regards,