sr-users

sr-users@lists.kamailio.org

34 participants
37543 discussions

STIR/SHAKEN
by David Villasmil 02 Nov '21

02 Nov '21

Hello guys, I'm trying to test secsipid by creating an Identity header and trying to verify it with the cli utility, but it's failing: # secsipidx -sign-full -orig-tn 123456789 -dest-tn 123456789 -attest A -x5u https://pki.my.domain.com/stir-shaken-public-key.pem -k ec256-private.pem eyJhbGciOiJFUzI1NiIsInBwdCI6InNoYWtlbiIsInR5cCI6InBhc3Nwb3J0IiwieDV1IjoiaHR0cHM6Ly9wa2kudG5jcC50ZXh0bm93LmNvbS9zdGlyLXNoYWtlbi1wdWJsaWMta2V5LnBlbSJ9.eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI6WyIxMjM0NTY3ODkiXX0sImlhdCI6MTYzNTg4OTY3Miwib3JpZyI6eyJ0biI6IjEyMzQ1Njc4OSJ9LCJvcmlnaWQiOiJjNTE4MDI4Ny05NjJmLTRlMDItYTM1NS00YmMzY2JhYzMxNjgifQ.ei1nQY8c9EQzvuBP7pQSI03T2yIfsNg9blzSdufU7tQy0tLJwoqmM9sBAk_Uq9s2jycVxseonZ1yl1kGiSv_GA;info=< https://pki.my.domain.com/stir-shaken-public-key.pem>;alg=ES256;ppt=shaken root@sip-stir-term1:/home/admin# echo "eyJhbGciOiJFUzI1NiIsInBwdCI6InNoYWtlbiIsInR5cCI6InBhc3Nwb3J0IiwieDV1IjoiaHR0cHM6Ly9wa2kudG5jcC50ZXh0bm93LmNvbS9zdGlyLXNoYWtlbi1wdWJsaWMta2V5LnBlbSJ9.eyJhdHRlc3QiOiJBIiwiZGVzdCI6eyJ0biI6WyIxMjM0NTY3ODkiXX0sImlhdCI6MTYzNTg4OTY3Miwib3JpZyI6eyJ0biI6IjEyMzQ1Njc4OSJ9LCJvcmlnaWQiOiJjNTE4MDI4Ny05NjJmLTRlMDItYTM1NS00YmMzY2JhYzMxNjgifQ.ei1nQY8c9EQzvuBP7pQSI03T2yIfsNg9blzSdufU7tQy0tLJwoqmM9sBAk_Uq9s2jycVxseonZ1yl1kGiSv_GA;info=< https://pki.my.domain.com/stir-shaken-public-key.pem>;alg=ES256;ppt=shaken" > identity.txt root@sip-stir-term1:/home/admin# secsipidx -check -fidentity identity.txt -fpubkey /etc/kamailio/secsipid/ec256-private.pem -expire 3600 error message: asn1: structure error: tags don't match (16 vs {class:0 tag:2 length:1 isCompound:false}) {optional:false explicit:false application:false private:false defaultValue:<nil> tag:<nil> stringType:0 timeType:0 set:false omitEmpty:false} tbsCertificate @2 not-ok any ideas? Regards, David Villasmil email: david.villasmil.work(a)gmail.com phone: +34669448337

1 1

how to prevent the log_prefix in syslog acc cdrs?
by Karsten Horsmann 02 Nov '21

02 Nov '21

Hi List, i thought there could be a solution to disable the log_prefix for acc module - but i didn't found it. Is there a solution to supress log_prefix for acc like acc_json did that? I use kamailio 5.5.2 with that settings: log_name="kamailio" log_facility=LOG_LOCAL4 log_prefix="{$hdr(CSeq) $ci} " the acc module then logs the "log_prefix" - plus some module/function stuff: INFO: {1 INVITE SDkk50d01-1f7cc956b0b908e42d284189a11b44e7-ct46om0050} acc [acc.c:285]: acc_log_request(): ACC: transaction answered: timestamp=1635843776;utctime=2021-11-02 09:02:56;method=INVITE;from_tag=SDkk50d01-e8bc0cda;to_tag=XBr6apQ9HN4HD;call_id=SDkk50d01-1f7cc956b0b908e42d284189a11b44e7-ct46om0050;code=200;reason=OK;src_user=bob;src_domain=sip100;src_ip=172.20.120.56;dst_ouser=alice;dst_user=echo;dst_domain=172.20.120.59;user_agent=;x_t_call_id=;x_routing=;x_billing= INFO: {1 ACK SDkk50d01-1f7cc956b0b908e42d284189a11b44e7-ct46om0050} acc [acc.c:285]: acc_log_request(): ACC: request acknowledged: timestamp=1635843776;utctime=2021-11-02 09:02:56;method=ACK;from_tag=SDkk50d01-e8bc0cda;to_tag=XBr6apQ9HN4HD;call_id=SDkk50d01-1f7cc956b0b908e42d284189a11b44e7-ct46om0050;code=200;reason=OK;src_user=bob;src_domain=sip100;src_ip=172.20.120.56;dst_ouser=alice;dst_user=alice;dst_domain=172.20.120.51;user_agent=;x_t_call_id=;x_routing=;x_billing= INFO: {2 BYE SDkk50d01-1f7cc956b0b908e42d284189a11b44e7-ct46om0050} acc [acc.c:285]: acc_log_request(): ACC: transaction answered: timestamp=1635843833;utctime=2021-11-02 09:03:53;method=BYE;from_tag=SDkk50d01-e8bc0cda;to_tag=XBr6apQ9HN4HD;call_id=SDkk50d01-1f7cc956b0b908e42d284189a11b44e7-ct46om0050;code=200;reason=OK;src_user=bob;src_domain=sip100;src_ip=172.20.120.56;dst_ouser=alice;dst_user=alice;dst_domain=172.20.120.51;user_agent=;x_t_call_id=;x_routing=;x_billing= The acc_json module is able to log acc without log_prefix: {"time": "2021/11/02 10:02:56", "method": "INVITE", "from_tag": "SDkk50d01-e8bc0cda", "to_tag": "XBr6apQ9HN4HD", "callid": "SDkk50d01-1f7cc956b0b908e42d284189a11b44e7-ct46om0050", "sip_code": "200", "sip_reason": "OK", "src_user": "bob", "src_domain": "sip100", "src_ip": "172.20.120.56", "dst_ouser": "alice", "dst_user": "echo", "dst_domain": "172.20.120.59", "user_agent": "", "x_t_call_id": "", "x_routing": "", "x_billing": ""} {"time": "2021/11/02 10:03:53", "method": "BYE", "from_tag": "SDkk50d01-e8bc0cda", "to_tag": "XBr6apQ9HN4HD", "callid": "SDkk50d01-1f7cc956b0b908e42d284189a11b44e7-ct46om0050", "sip_code": "200", "sip_reason": "OK", "src_user": "bob", "src_domain": "sip100", "src_ip": "172.20.120.56", "dst_ouser": "alice", "dst_user": "alice", "dst_domain": "172.20.120.51", "user_agent": "", "x_t_call_id": "", "x_routing": "", "x_billing": ""} And just for the records - how to get rid off the rsyslog prefix time/date stuff: # /etc/rsyslog.d/kamailio.conf # drop :msg from rtpengine with "timer run time" - debugging only: :msg, contains, "timer run time" ~ # Template only msg: $template myFormat,"%msg%\n" # log only to local* and NOT to /var/log/messages local6.*;local6.!=info -/var/log/platform/voip/kamailio/rtpengine.log local6.* stop local5.* -/var/log/platform/voip/kamailio/rtpengine-cdr.log; myFormat local5.* stop local4.* -/var/log/platform/voip/kamailio/kamailio.log local4.* stop local2.* -/var/log/platform/voip/kamailio/kamailio-cdr.log; myFormat local2.* stop local1.* -/var/log/platform/voip/kamailio/kamailio-cdr-json.log; myFormat local1.* stop -- Mit freundlichen Grüßen *Karsten Horsmann*

1 0

kamailio didnt run with acc_json (without dialog module) - kamailio 5.5.2
by Karsten Horsmann 02 Nov '21

02 Nov '21

Hi List, i want to try out acc_json (to syslog). But if i set up "cdr_enable", 1 - it breaks the startup of kamailio with that error (dialog module is not listed as dependency). Any hints? Nov 01 13:13:59 siprouter2 kamailio[22397]: INFO: acc_json [acc_json_mod.c:135]: mod_init(): janson version : 2.10 Nov 01 13:13:59 siprouter2 kamailio[22397]: ERROR: acc_json [acc_json_mod.c:204]: mod_init(): can't load dialog API Nov 01 13:13:59 siprouter2 kamailio[22397]: ERROR: <core> [core/sr_module.c:943]: init_mod(): Error while initializing module acc_json (/usr/lib64/kamailio/modules/acc_json.so) #!ifdef WITH_DBTEXT loadmodule "db_text.so" #!endif #!ifndef WITH_DBTEXT loadmodule "db_mysql.so" #!endif loadmodule "jsonrpcs.so" loadmodule "kex.so" loadmodule "corex.so" loadmodule "tm.so" loadmodule "tmx.so" loadmodule "sl.so" loadmodule "rr.so" loadmodule "pv.so" loadmodule "maxfwd.so" loadmodule "textops.so" loadmodule "siputils.so" loadmodule "xlog.so" loadmodule "sanity.so" loadmodule "ctl.so" loadmodule "cfg_rpc.so" loadmodule "acc.so" loadmodule "dispatcher.so" loadmodule "permissions.so" loadmodule "avpops.so" #!ifdef WITH_ACCJSON loadmodule "acc_json.so" #!endif #!ifdef WITH_DIALPLAN loadmodule "dialplan.so" modparam("dialplan", "db_url", DBURL) modparam("dialplan", "fetch_rows", 1000) modparam("dialplan", "attrs_pvar", "$avp(s:dest)") #!endif #!ifdef WITH_JSONSTATS loadmodule "xhttp.so" loadmodule "jansson.so" loadmodule "janssonrpcc.so" #!endif #!ifdef WITH_HOMER loadmodule "siptrace.so" #!endif loadmodule "pipelimit.so" loadmodule "htable.so" .... # ----- acc params ----- modparam("acc", "log_flag", FLT_ACC) modparam("acc", "failed_transaction_flag", FLT_ACCFAILED) # ----- acc params ----- #!ifdef WITH_ACCSYSLOG modparam("acc", "log_facility", "LOG_LOCAL2") modparam("acc", "log_level", 2) #!endif /* what special events should be accounted ? */ modparam("acc", "time_mode", 4) modparam("acc", "time_attr", "utctime") modparam("acc", "time_format", "%Y-%m-%d %H:%M:%S") modparam("acc", "acc_time_column", "localtime") ## --- to syslog modparam("acc", "early_media", 1) modparam("acc", "report_ack", 1) modparam("acc", "report_cancels", 1) /* by default ww do not adjust the direct of the sequential requests. * if you enable this parameter, be sure the enable "append_fromtag" * in "rr" module */ modparam("acc", "detect_direction", 0) /* account triggers (flags) */ modparam("acc", "log_flag", FLT_ACC) modparam("acc", "log_missed_flag", FLT_ACCMISSED) modparam("acc", "log_extra", "src_user=$fU;src_domain=$fd;src_ip=$si;" "dst_ouser=$tU;dst_user=$rU;dst_domain=$rd;user_agent=$ua;x_t_call_id=$avp(x-t-call-id);x_routing=$avp(x_routing);x_billing=$avp(x_billing)") modparam("acc", "failed_transaction_flag", FLT_ACCFAILED) /* enhanced DB accounting */ #!ifdef WITH_ACCDB modparam("acc", "db_flag", FLT_ACC) modparam("acc", "db_missed_flag", FLT_ACCMISSED) modparam("acc", "db_url", DBURL) modparam("acc", "db_extra", "src_user=$fU;src_domain=$fd;src_ip=$si;" "dst_ouser=$tU;dst_user=$rU;dst_domain=$rd") #!endif #!ifdef WITH_ACCJSON modparam("acc_json", "acc_missed_flag", 3) modparam("acc_json", "acc_time_mode", 1) modparam("acc_json", "cdr_output_syslog", 1) modparam("acc_json", "acc_time_format", "%Y/%m/%d %H:%M:%S") modparam("acc_json", "acc_log_facility", "LOG_LOCAL1") modparam("acc_json", "acc_log_level", 2) # Set acc_log_level to 2 (L_INFO) modparam("acc_json", "cdr_enable", 1) #!endif .... version: kamailio 5.5.2 (x86_64/linux) 55e232 flags: USE_TCP, USE_TLS, USE_SCTP, TLS_HOOKS, USE_RAW_SOCKS, DISABLE_NAGLE, USE_MCAST, DNS_IP_HACK, SHM_MMAP, PKG_MALLOC, Q_MALLOC, F_MALLOC, TLSF_MALLOC, DBG_SR_MEMORY, USE_FUTEX, FAST_LOCK-ADAPTIVE_WAIT, USE_DNS_CACHE, USE_DNS_FAILOVER, USE_NAPTR, USE_DST_BLOCKLIST, HAVE_RESOLV_RES ADAPTIVE_WAIT_LOOPS 1024, MAX_RECV_BUFFER_SIZE 262144, MAX_URI_SIZE 1024, BUF_SIZE 65535, DEFAULT PKG_SIZE 8MB poll method support: poll, epoll_lt, epoll_et, sigio_rt, select. id: 55e232 compiled on 14:20:31 Aug 25 2021 with gcc 4.8.5 -- Mit freundlichen Grüßen *Karsten Horsmann*

2 3

Strip VP8 from SDP in rtpengine
by Rahul mm 30 Oct '21

30 Oct '21

Hello, I'm facing trouble with Android 12 using webview to attempt video call. All the media is rotated from rtpengine. To workaround this problem, I wish to strip VP8 and have the calls run on VP9. For this, I added "codec-strip=VP8" but rtpengine is not able to remove it. I've even tried "codec-strip=VP8/90000" but to no avail. The video is still garbled. Am I doing anything wrong here? Thanks and Regards Rahul

4 4

Stir/Shaken Kamailio modules - stirshaken vs secsipid
by Joel Serrano 29 Oct '21

29 Oct '21

Hi everyone, As most of us, I'm starting to implement STIR/SHAKEN in our platform. I've seen there are 2 modules available in Kamailio for this: stirshaken: https://www.kamailio.org/docs/modules/5.5.x/modules/stirshaken.html secsipid: https://kamailio.org/docs/modules/5.5.x/modules/secsipid.html Suggestions on which to use? Pros/Cons of each? Do any of you have experience with any of the two? Any comments are more than welcome! Thanks, Joel.

1 0

RTPENGINE [ice] Priority collision between candidate pairs
by keffa＠alcall.net 29 Oct '21

29 Oct '21

Hello @everyone Please can you explain me how this message is errors or not ? « Oct 29 08:34:44 ip76 rtpengine[649]: WARNING: [YGiXZ1MmIA port 30104]: [ice] Priority collision between candidate pairs 9oZd7sWNVguf6cgl:e4b19f6635447b850 » thank

5 4

htable shtcn expressions
by Brooks Bridges 29 Oct '21

29 Oct '21

Referring to the expressions outlined at http://www.kamailio.org/wiki/cookbooks/5.4.x/pseudovariables#shtcn_htable_e… , is there any additional documentation or examples floating around that further explains how the right and left prefix matching works? The rest of them are pretty clear, but I'm having troubles with these and can't get them working like I would expect them to work. Confidentiality Notice: This e-mail, and any attachment to it, contains privileged and confidential information intended only for the use of the individual(s) or entity named on the e-mail. If the reader of this e-mail is not the intended recipient, or the employee or agent responsible for delivering it to the intended recipient, you are hereby notified that reading this e-mail is strictly prohibited. If you have received this e-mail in error, please immediately return it to the sender and delete it from your system.

3 5

Configuration script behaviour with http_async_client usage
by Kris Domagalski 29 Oct '21

29 Oct '21

Hi, I'm new in Kamailio and looking for some configuration guidance. I'm using http_async_client for API requests. It's configured to use TEST2 route, which should be executed upon reception of HTTPS response. After receiving the response I would like to go back to the request_route and perform some more actions. Currently behaviour is, in the syslog I can see only entries which I push from TEST2 route (TEST 123). Cannot see the one from request route. Current syslog output: TEST123 Expected syslog output: TEST 123 TEST 789 And now my question is why kamailio is not executing remaining actions (xlog) in request_route? request_route { route(TEST1); xlog("L_INFO","TEST 789\n"); } route[TEST1] { # define API request body in JSON format jansson_set("string", "from", $fU, "$var(http_routing_query)"); # set API request parameters $http_req(all) = $null; $http_req(suspend) = 1; $http_req(timeout) = 100; $http_req(method) = "POST"; $http_req(hdr) = "Content-Type: application/json"; $http_req(body) = $var(http_routing_query); t_newtran(); # send API request http_async_query(http://local:3000/test, "TEST2"); } route[TEST2] { xlog("L_INFO","TEST 123\n"); } Thanks Kris

1 0

Re: [SR-Users] No "child_destroy" export - issue with module flatstore and flush=0
by Chaigneau, Nicolas 29 Oct '21

29 Oct '21

Hello Henning, Thanks for your reply ! For the record, I'm using Kamailio module "flatstore" with the flush deactivated. In this situation, when Kamailio is stopped, I'm losing the remaining data in files not yet flushed. So my idea was, when destroy is called, to iterate over the connection pools, and flush/close all the opened files properly. But I found out that it's not that simple :/ Do you think this is something that could be fixed in Kamailio ? Regards, Nicolas. De : Henning Westerholt <hw(a)gilawa.com> Envoyé : mardi 26 octobre 2021 20:38 À : Kamailio (SER) - Users Mailing List Cc : Chaigneau, Nicolas Objet : RE: No "child_destroy" export ? Hi Nicolas, you are right, there is no special function for children destroy. Most modules do not need it, as the data is in shared memory, processes are started over standard kamailio APIs which will be stopped from the core automatically, to give some background. Some modules do it by just iterating over an internal list of their children and then do the cleanup task. You can find an example in cdp module (destroy, diameter_peer_destroy). Cheers, Henning -- Henning Westerholt - https://skalatan.de/blog/ Kamailio services - https://gilawa.com<https://gilawa.com/> From: sr-users <sr-users-bounces(a)lists.kamailio.org<mailto:sr-users-bounces@lists.kamailio.org>> On Behalf Of Chaigneau, Nicolas Sent: Tuesday, October 26, 2021 7:14 PM To: sr-users(a)lists.kamailio.org<mailto:sr-users@lists.kamailio.org> Subject: [SR-Users] No "child_destroy" export ? Hello, I have a module, for which I need to perform some processing in the children processes when Kamailio is being stopped. I've looked at the "struct module_export", in which I see "mod_init", "child_init", "mod_destroy"... but no "child_destroy". :/ Is there a way to achieve this ? Thanks for your help. Regards, Nicolas. This message contains information that may be privileged or confidential and is the property of the Capgemini Group. It is intended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain, copy, disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message.

2 2

Does failure_route for redirection covers all error cases ?
by Liviu ANDRON 29 Oct '21

29 Oct '21

Hello, We are routing calls to FreeSWITCH servers. We have a failure routing mechanism in place, which looks pretty common from my research around: route[INVITE] { ... t_on_failure("REROUTE"); and failure_route[REROUTE] { if (t_is_canceled()) { exit; } // also 6xx ? if (t_check_status("5[0-9][0-9]") or (t_branch_timeout() and !t_branch_replied())) { // re-route to another available FreeSWITCH server } } The problem is that we don't capture all the failures we would like to, one such example being 480 sent by FreeSWITCH in various cases (even default in hangup_cause_to_sip, mod_sofia.c, https://github.com/signalwire/freeswitch/blob/master/src/mod/endpoints/mod_…), like a Python script crash, but also legitimate cases like "user not registered" (USER_NOT_REGISTERED). Are there other cases? Like a timeout replied (t_branch_timeout() and t_branch_replied()) which never recovers ? Shouldn't any t_branch_timeout() re-arm the failure route ? Thanks, Liviu

3 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users