sr-users

sr-users@lists.kamailio.org

39 participants
37513 discussions

Re: Re: [Users] tls. soket queues not flushed
by serega 05 Oct '06

05 Oct '06

Hello, I'm sorry for a big lag. I test system yesterday on other linux kernel (2.6) and obtain the same results. In this case i suppose, that this problem don't bases on system socket implementation. I tested openser on other numbers of tcp workers and obtain next results: 20 children: 2 sockets don't flushed (all had data on receive and send queues), cpu usage is above 48% on each of 2 openser processes, one of them invokes poll function in tls_server.c, other trying to write into tls socket. 1 child: 1 socket don't flushed (receive queue not empty, send queue empty), cpu usage is 90% on one process. 100 children: no problems, all work correctly 2 children: no problems. >Hello, > >On 09/29/06 16:06, serega wrote: >> Hi Klaus and all other who read this. >> >> It's not a problem of tcp socket - yesterday i rewrite gateway config for fowarding directed to extgateway requests to gateway itself. >> In tcp this problems not occured, but after i switched on tls, i see overfilled queues again. In that case i haven't extgateway, communications with >> remote sockets and etc. Did anybody test openser whith big payload? I think this problem occurs because in my case i have big traffic and several process that simultaniously use tls. Did anybody have the same problem? >> > >If you increase the number of the TLS/TCP workers do you get same >results? In case of TLS, there is more CPU used because of >encryption/decryption. How is the CPU usage in teh system while you are >testing? > >As Klaus said, the management of socket queue is done by OS. > >Cheers, >Daniel > >> >>> Hi Serega! >>> >>> I'm not sure - just a guess. openser uses "worker threads". This worker >>> threads get a SIP message from the listener thread, process them, and >>> then they send them. >>> >>> If for some reason the sending fails - e.g. the gateway sends via >>> TCP/TLS to extgateway and extgateway's receiving queue is full. Then >>> gateway's sending buffer gets full and the threads wait until they can >>> send. Thus, as the threads are all busy, also the receiving queue of >>> gateway gets full. I guess after some time the threads give up sending >>> and will read again. >>> >>> The question is: why does the sending buffer gets full? Where is gateway >>> sending the messages to? >>> >>> The sending queue must not get flushed. The queue is in the OS, not in >>> openser. As TCP guarantees that there is no loss/reordering the TCP >>> stack must not flush the queue. >>> >>> regards >>> klaus >>> >>> serega wrote: >>> >>>> Hi all. >>>> >>>> I have next problem while using openser with tls. System consists of >>>> sip statefull server (in next time, simply, server) and stateless sip >>>> gateway (gateway). Server used for connect to jabber server. Server >>>> contains rewrote jabber module logic and also use presence module. >>>> Gateway used to connect to other sip gateway (extgateway) via tls >>>> protocol. Gateway use 1.1 openser version and doesn’t contain changed >>>> code. When server together with gateway restarts and server in its >>>> database contains above 260 subscriptions (in watcherinfo table) i >>>> have error. Socket used by gateway to connect with extgateway >>>> contains in receive and sent queues a lot of data (above 50kByte on >>>> each sides). This data never flushed out. This happens because after >>>> restart sip server through gateway send notifications to extgateway. >>>> When I attached using gdb to process that send data, I saw that it >>>> was in infinity loop because tls library returns SSL_ERROR_WANT_WRITE >>>> and I think it’s correct because we have overfilled send queue. In >>>> this case I don’t interest why receive queue not empty (I think it >>>> happens because sending process have got block on socket). But I >>>> don’t understand why sent queue not flushed. I test this behavior >>>> using tcp – all was correct. Socket not closed by other side because >>>> this status can be unchanged above one day. Anybody can help me? Why >>>> this happens? >>>> >>>> I use openssl-0.9.8c and redhat os (Linux xdevel1 2.4.21-4.ELsmp #1 >>>> SMP Fri Oct 3 17:52:56 EDT 2003 i686 i686 i386 GNU/Linux). Computer >>>> have too Pentium 4 processors). >>>> >>>> >>>> Gateway.cfg (sip.qa.hbex.com – gateway address): >>>> >>>> # # $Id: router_qa.cfg,v 1.1 2006/08/02 18:14:34 ilya Exp $ # # >>>> simple quick-start config script # >>>> >>>> # ----------- global configuration parameters >>>> ------------------------ >>>> >>>> debug=9 # debug level (cmd line: -dddddddddd) >>>> log_facility=LOG_LOCAL0 fork=yes log_stderror=yes # (cmd line: -E) >>>> >>>> >>>> check_via=no # (cmd. line: -v) dns=no # (cmd. line: -r) >>>> rev_dns=no # (cmd. line: -R) children=20 >>>> fifo="/tmp/openser_fifo" server_signature=no >>>> >>>> fifo_db_url="mysql://root:@localhost/openser" >>>> >>>> listen = udp:sip.qa.hbex.com:5060 #incoming sip server address listen >>>> = tcp:sip.qa.hbex.com:5060 >>>> >>>> #tls address disable_tls = 0 listen = tls:sip.qa.hbex.com:5061 listen >>>> = udp:sip.qa.hbex.com:5061 >>>> >>>> tls_certificate = "/ home/inop/ex.com-cert.pem" tls_private_key = >>>> "/home/inop/ex.com-privkey.pem" tls_ca_list = >>>> "/home/inop/ex.com-calist.pem" tls_require_client_certificate=0 >>>> tls_verify_client=0 tls_verify_server=0 >>>> >>>> # ------------------ module loading >>>> ---------------------------------- loadmodule >>>> "/home/interop/openser/lib/openser/modules/rr.so" loadmodule >>>> "/home/interop/openser/lib/openser/modules/xlog.so" loadmodule >>>> "/home/interop/openser/lib/openser/modules/textops.so" loadmodule >>>> "/home/interop/openser/lib/openser/modules/maxfwd.so" loadmodule >>>> "/home/interop/openser/lib/openser/modules/sl.so" loadmodule >>>> "/home/interop/openser/lib/openser/modules/mysql.so" loadmodule >>>> "/home/interop/openser/lib/openser/modules/tm_unchanged.so" >>>> loadmodule "/home/interop/openser/lib/openser/modules/usrloc.so" >>>> loadmodule "/home/interop/openser/lib/openser/modules/registrar.so" >>>> >>>> # ----------------- setting module-specific parameters >>>> --------------- modparam("registrar", "default_expires", 120) >>>> modparam("registrar", "use_domain", 1) >>>> >>>> modparam("usrloc", "use_domain", 1) modparam("usrloc", "db_mode", >>>> 0) # Uncomment this if you want to use SQL database # for persistent >>>> storage and comment the previous line #modparam("usrloc", "db_mode", >>>> 2) >>>> >>>> # add value to ;lr param to make some broken UAs happy modparam("rr", >>>> "enable_full_lr", 1) modparam("maxfwd", "max_limit", 10) # >>>> ------------------------- request routing logic ------------------- >>>> # main routing logic route{ if (!mf_process_maxfwd_header("10")) { >>>> sl_send_reply("483","To Many Hops"); drop(); }; if (dst_port==5061) { >>>> if (search("^To:.*@.*cmnicator.com") || search("^To:.*@.*cihb.com")) >>>> { # rewrite destination and forward to jabber (sip server) route(1); >>>> return; }; sl_reply_error(); return; } if (method=="REGISTER") { >>>> xlog("XXX: saving location msg=$mb\n"); if(!save_noreply("location")) >>>> { log("XXX: Error saving location!\n"); sl_reply_error(); } >>>> sl_send_reply("200","OK"); return; } if >>>> (search("^To:.*@.*cmnicator.com") || search("^To:.*@.*cihb.com")) { >>>> #forward to self route(3); return; } ##forward to ext gateway >>>> route(2); } >>>> >>>> route[1]{ if (method!="MESSAGE" && method!="SUBSCRIBE" && >>>> method!="NOTIFY") { log("XXX: Request not forwarded to sip >>>> server!\n"); sl_send_reply("202","Accepted"); return; } >>>> t_on_reply("1"); record_route(); >>>> >>>> if(!lookup("location")) { if (method!="SUBSCRIBE") { log("XXX: only >>>> subscribes are processed for user that are not registered\n"); >>>> sl_reply_error(); return; } >>>> subst_uri('/(.*)@(.*)/\1#\2*jabber.qa.im.hb.com@jabber01.qa.im.hb.com/ig'); >>>> if(!t_relay()) { log("XXX: error forwarding jabber01...\n"); >>>> sl_reply_error(); return; } else { sl_send_reply("200","OK"); return; >>>> } } else { log("XXX: forwarding to the address of record...\n"); >>>> if(!t_relay()) { log("XXX: error forwarding to address of record >>>> \n"); sl_reply_error(); return; } else { sl_send_reply("200", "OK"); >>>> return; } } >>>> >>>> } >>>> >>>> # forwarding to external gateway route[2]{ log("XXX: rewriting >>>> headers\n"); >>>> subst('/^(From:[^@#]*)#([^@]*)\*jabber.qa.im.hb.com@jabber...qa.im.hb.com(.*)/\1@\2\3/ig'); >>>> >>>> subst('/^(Contact:[^@#]*)#([^@]*)\*jabber.qa.im.hb.com@jabber...qa.im.hb.com(.*)/\1@\2\3/ig'); >>>> >>>> >>>> if(!forward("tls:43.123.141.166:3000")) { log("XXX: Error forwarding >>>> to external gateway!\n"); sl_reply_error(); } else { >>>> sl_send_reply("200", "Accepted"); }; } >>>> >>>> # forwarding to SELF route[3]{ log("XXX: rewriting headers\n"); >>>> subst('/^(From:[^@#]*)#([^@]*)\*jabber.qa.im.hb.com@jabber...qa.im.hb.com(.*)/\1@\2\3/ig'); >>>> >>>> subst('/^(Contact:[^@#]*)#([^@]*)\*jabber.qa.im.hb.com@jabber...qa.im.hb.com(.*)/\1@\2\3/ig'); >>>> >>>> >>>> log("XXX: about to forward to self\n"); >>>> if(!forward("tcp:sip.qa.hbex.com:5061")) { log("XXX: Error forwarding >>>> to self!\n"); sl_reply_error(); } else { sl_send_reply("200", >>>> "Accepted"); }; } >>>> >>>> # this is executed for replies onreply_route[1]{ >>>> subst('/^(To:[^@#]*)#([^@]*)\*jabber.qa.im.hb.com@jabber...qa.im.hb.com(.*)/\1@\2\3/ig'); >>>> >>>> subst('/^(Contact:[^@#]*)#([^@]*)\*jabber.qa.im.hb.com@jabber...qa.im.hb.com(.*)/\1@\2\3/ig'); >>>> route(2); } >>>> >>>> >>>> >>>> _______________________________________________ Users mailing list >>>> Users(a)openser.org http://openser.org/cgi-bin/mailman/listinfo/users >>>> >>> >> >> >> _______________________________________________ >> Users mailing list >> Users(a)openser.org >> http://openser.org/cgi-bin/mailman/listinfo/users >> >> >

2 1

[Users] OpenserAdmin: openser log
by Ronald Wiplinger 05 Oct '06

05 Oct '06

In the log file (OpenserAdmin) I see my registered phones with different addresses. I would like to know what it means: a. public IP with a port number sip:7111@59.124.230.151:65129 b. private IP with a port number sip:7112@192.168.10.75:5060 c. private IP with NO port number sip:7113@192.168.10.45 d. Eyebeam with public IP with port and rinstance (???) sip:7311@203.70.36.126:65321;rinstance=059afa5458d206a7 e. Gizmo phone, secondary number should be 7312. sip:17476063396@proxy01.sipphone.com:5060 d. and e. are on my desktop connected to a ADSL router, which obviously makes the NAT to 203.70.36.126, my current public IP on that line. b and c are also on a private network and connected through the same ADSL router as a. Why a has a public IP, while b and c not? Why have all a port, but c not ??? bye Ronald

1 0

[Users] How to read log files?
by Ronald Wiplinger 04 Oct '06

04 Oct '06

I got two places to look: /var/log/openser and the output of ngrep. I would like to see only one case of one phone / phone call. Is there a tool to filter that out? Has anybody made a transfer from the ngrep to a mysql database? I expect that this would be easier to select single cases. Where are and how must I set-up openser to get CDRs ? bye Ronald Wiplinger

1 0

[Users] uac_redirect
by Andreas Granig 04 Oct '06

04 Oct '06

Hi, Two questions about the uac_redirect module: 1. If I extract contacts from a 302 with two contacts having the same q-value by using get_redirects("1:1"), which one of the contacts is selected? The first one? The last one? 2. If I apply a filter rule like: modparam("uac_redirect", "default_filter", "deny") modparam("uac_redirect", "accept_filter", "sip:.+@foo.bar.com") and I get a 302 with a Contact, say, "sip:foo@some.other.tld", then the module logs this error: "ERROR:uac_redirect:get_redirects: get contact from shm_reply branch 0 failed". I'd say if zero contacts are extracted from branches due to filters, it's not really an error. Any suggestions for a better error handling? Andy

2 2

[Users] check_route_param and rr_preset
by Helge Waastad 04 Oct '06

04 Oct '06

Hi, I was just wondering if the check_route_param("") works on record_route_preset Routes? It never hits when my Route: are, f.ex like xxx.xxx.xxx.xxx:<port>;nat=yes Is this true? br hw -- Helge Waastad Senior Engineer Systemavdelingen Smartnet

3 12

[Serusers] re: How to change the To/From headers?
by lawrence k.y. lin 04 Oct '06

04 Oct '06

Hello, I looked at the FAQ in iptel.log and did a search on it for "how to change the To/From headers?" but did not find the answer. There is an item in FAQ for "Why not change the To/From headers?" in the following url "http://www.iptel.org/FAQ_To_From_change", but did mention how to change the To/From headers. Are there variables related to To/From headers that we can change ? Please advise, thanks, Larry _________________________________________________________________ Be seen and heard with Windows Live Messenger and Microsoft LifeCams http://clk.atdmt.com/MSN/go/msnnkwme0020000001msn/direct/01/?href=http://ww…

1 0

[Serusers] blocking CID continuing using radius authentication
by Rosario Pingaro 04 Oct '06

04 Oct '06

I would like to use the ATAs features to block the CID for anonymous calls. At the same time I wouldn't like to break my accounting done by Radius Authentication. This is the ser.cfg about radius auth for international calls: if (!radius_is_user_in("From","int")) { sl_send_reply("403","Internazionali non abilitate"); break; I use to authenticate the "From" field so if I disable the CID on the ata I will receive an anonymous from field. What do I have to authenticate to mantain a working accounting? Do I have to authenticate against "Credentials"? What is the difference between Credentials and from headers? Regards Rosario

1 2

[Users] Group creation with openserctl
by Antoine Fressancourt 04 Oct '06

04 Oct '06

Hello, I am somehow trying to add a user to a group, with the openserctl command : openserctl acl grant 5220 mitel I get a response : WARINIG: Invalid privilege: acl 'mitel' ignored I tryed to browse the web about that issue and about group creation without success, so I would be really pleased to hear from your advices. By the way, "bruteforcing" the addition of the user in the group table is working. Thank you, Antoine

2 1

[Users] Mediaproxy
by Lucio Maciel 04 Oct '06

04 Oct '06

Hi How many simultaneous calls mediaproxy.py can handle with a good server (Dell poweredge 6850, dual XEON, lots of memory and bandwitch) ? Lúcio Fernando Maciel Telecom South America R. Ramiro D'Ávilla, 20 sala 306 Porto Alegre - RS - Brasil lucio(a)tesatelecom.com +55 (51) 3061-5569 +55 (51) 8442-1079

2 1

Re: [Users] ERROR 1062 (23000) at line 1: Duplicate entry '' for key 'phplib_id'
by Bogdan-Andrei Iancu 04 Oct '06

04 Oct '06

maybe we should add for the future a detection of the md5 utility to avoid this kind of problems regards, bogdan Lindsey Hans Joseph Lao wrote: > it worked! :-) thanks a lot! > Bogdan-Andrei Iancu wrote: > >> you can run "MD5=md5 openserctl ...." or for a permanent change see >> in openserctl.base file the MD5 definition. >> >> regards, >> bogdan >> >> Lindsey Hans Joseph Lao wrote: >> >>> i have a utility called md5 installed in my freeBSD system. Can you >>> show me the way on how to integrate it with openserctl? >>> >>> Thanks! >>> >>> Bogdan-Andrei Iancu wrote: >>> >>>> from 1.0.x to 1.1.x there was a change in how the phplib_id is >>>> computed..now is done via md5sum to avoid any shell compatibility >>>> problems (as before). >>>> >>>> check if you have the md5 utility on your system (typically is >>>> md5sum) or check if it has a different name than "md5sum" >>>> >>>> regards, >>>> bogdan >>>> >>>> >>>> Lindsey Hans Joseph Lao wrote: >>>> >>>>> Indeed, it has an empty value in the table... i am unable to add >>>>> subscribers because the error shown below occurs. this happened >>>>> when i switched from openser1.0.1 no tls to openser 1.1.0-tls. >>>>> Here's what happens when I try to add a user to the database: >>>>> >>>>> md5sum: not found >>>>> md5sum: not found >>>>> md5sum: not found >>>>> >>>>> then it prompts for my mysql password. I don't think I have >>>>> installed those to binaries. However, when using openser1.0.1. I >>>>> couldn't encountering this error... >>>>> Probably a bug? >>>>> >>>>> Thanks! >>>>> >>>>> Bogdan-Andrei Iancu wrote: >>>>> >>>>>> ok- it must be the phplib_id column - can you check its value in >>>>>> the table? is must not be NULL or empty... >>>>>> >>>>>> I suspect your openserctl fails to compute the phplib_id and you >>>>>> get a constant empty string for all subscribers.. do you get any >>>>>> errors? do you have "md5sum" and "awk" installed on your machine? >>>>>> >>>>>> regards, >>>>>> bogdan >>>>>> >>>> >>> >> >

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users