sr-users

sr-users@lists.kamailio.org

38 participants
37512 discussions

Re: Re: [Users] tls. soket queues not flushed
by serega 30 Sep '06

30 Sep '06

Hi Klaus and all other who read this. It's not a problem of tcp socket - yesterday i rewrite gateway config for fowarding directed to extgateway requests to gateway itself. In tcp this problems not occured, but after i switched on tls, i see overfilled queues again. In that case i haven't extgateway, communications with remote sockets and etc. Did anybody test openser whith big payload? I think this problem occurs because in my case i have big traffic and several process that simultaniously use tls. Did anybody have the same problem? >Hi Serega! > >I'm not sure - just a guess. openser uses "worker threads". This worker >threads get a SIP message from the listener thread, process them, and >then they send them. > >If for some reason the sending fails - e.g. the gateway sends via >TCP/TLS to extgateway and extgateway's receiving queue is full. Then >gateway's sending buffer gets full and the threads wait until they can >send. Thus, as the threads are all busy, also the receiving queue of >gateway gets full. I guess after some time the threads give up sending >and will read again. > >The question is: why does the sending buffer gets full? Where is gateway >sending the messages to? > >The sending queue must not get flushed. The queue is in the OS, not in >openser. As TCP guarantees that there is no loss/reordering the TCP >stack must not flush the queue. > >regards >klaus > >serega wrote: >> Hi all. >> >> I have next problem while using openser with tls. System consists of >> sip statefull server (in next time, simply, server) and stateless sip >> gateway (gateway). Server used for connect to jabber server. Server >> contains rewrote jabber module logic and also use presence module. >> Gateway used to connect to other sip gateway (extgateway) via tls >> protocol. Gateway use 1.1 openser version and doesn’t contain changed >> code. When server together with gateway restarts and server in its >> database contains above 260 subscriptions (in watcherinfo table) i >> have error. Socket used by gateway to connect with extgateway >> contains in receive and sent queues a lot of data (above 50kByte on >> each sides). This data never flushed out. This happens because after >> restart sip server through gateway send notifications to extgateway. >> When I attached using gdb to process that send data, I saw that it >> was in infinity loop because tls library returns SSL_ERROR_WANT_WRITE >> and I think it’s correct because we have overfilled send queue. In >> this case I don’t interest why receive queue not empty (I think it >> happens because sending process have got block on socket). But I >> don’t understand why sent queue not flushed. I test this behavior >> using tcp – all was correct. Socket not closed by other side because >> this status can be unchanged above one day. Anybody can help me? Why >> this happens? >> >> I use openssl-0.9.8c and redhat os (Linux xdevel1 2.4.21-4.ELsmp #1 >> SMP Fri Oct 3 17:52:56 EDT 2003 i686 i686 i386 GNU/Linux). Computer >> have too Pentium 4 processors). >> >> >> Gateway.cfg (sip.qa.hbex.com – gateway address): >> >> # # $Id: router_qa.cfg,v 1.1 2006/08/02 18:14:34 ilya Exp $ # # >> simple quick-start config script # >> >> # ----------- global configuration parameters >> ------------------------ >> >> debug=9 # debug level (cmd line: -dddddddddd) >> log_facility=LOG_LOCAL0 fork=yes log_stderror=yes # (cmd line: -E) >> >> >> check_via=no # (cmd. line: -v) dns=no # (cmd. line: -r) >> rev_dns=no # (cmd. line: -R) children=20 >> fifo="/tmp/openser_fifo" server_signature=no >> >> fifo_db_url="mysql://root:@localhost/openser" >> >> listen = udp:sip.qa.hbex.com:5060 #incoming sip server address listen >> = tcp:sip.qa.hbex.com:5060 >> >> #tls address disable_tls = 0 listen = tls:sip.qa.hbex.com:5061 listen >> = udp:sip.qa.hbex.com:5061 >> >> tls_certificate = "/ home/inop/ex.com-cert.pem" tls_private_key = >> "/home/inop/ex.com-privkey.pem" tls_ca_list = >> "/home/inop/ex.com-calist.pem" tls_require_client_certificate=0 >> tls_verify_client=0 tls_verify_server=0 >> >> # ------------------ module loading >> ---------------------------------- loadmodule >> "/home/interop/openser/lib/openser/modules/rr.so" loadmodule >> "/home/interop/openser/lib/openser/modules/xlog.so" loadmodule >> "/home/interop/openser/lib/openser/modules/textops.so" loadmodule >> "/home/interop/openser/lib/openser/modules/maxfwd.so" loadmodule >> "/home/interop/openser/lib/openser/modules/sl.so" loadmodule >> "/home/interop/openser/lib/openser/modules/mysql.so" loadmodule >> "/home/interop/openser/lib/openser/modules/tm_unchanged.so" >> loadmodule "/home/interop/openser/lib/openser/modules/usrloc.so" >> loadmodule "/home/interop/openser/lib/openser/modules/registrar.so" >> >> # ----------------- setting module-specific parameters >> --------------- modparam("registrar", "default_expires", 120) >> modparam("registrar", "use_domain", 1) >> >> modparam("usrloc", "use_domain", 1) modparam("usrloc", "db_mode", >> 0) # Uncomment this if you want to use SQL database # for persistent >> storage and comment the previous line #modparam("usrloc", "db_mode", >> 2) >> >> # add value to ;lr param to make some broken UAs happy modparam("rr", >> "enable_full_lr", 1) modparam("maxfwd", "max_limit", 10) # >> ------------------------- request routing logic ------------------- >> # main routing logic route{ if (!mf_process_maxfwd_header("10")) { >> sl_send_reply("483","To Many Hops"); drop(); }; if (dst_port==5061) { >> if (search("^To:.*@.*cmnicator.com") || search("^To:.*@.*cihb.com")) >> { # rewrite destination and forward to jabber (sip server) route(1); >> return; }; sl_reply_error(); return; } if (method=="REGISTER") { >> xlog("XXX: saving location msg=$mb\n"); if(!save_noreply("location")) >> { log("XXX: Error saving location!\n"); sl_reply_error(); } >> sl_send_reply("200","OK"); return; } if >> (search("^To:.*@.*cmnicator.com") || search("^To:.*@.*cihb.com")) { >> #forward to self route(3); return; } ##forward to ext gateway >> route(2); } >> >> route[1]{ if (method!="MESSAGE" && method!="SUBSCRIBE" && >> method!="NOTIFY") { log("XXX: Request not forwarded to sip >> server!\n"); sl_send_reply("202","Accepted"); return; } >> t_on_reply("1"); record_route(); >> >> if(!lookup("location")) { if (method!="SUBSCRIBE") { log("XXX: only >> subscribes are processed for user that are not registered\n"); >> sl_reply_error(); return; } >> subst_uri('/(.*)@(.*)/\1#\2*jabber.qa.im.hb.com@jabber01.qa.im.hb.com/ig'); >> if(!t_relay()) { log("XXX: error forwarding jabber01...\n"); >> sl_reply_error(); return; } else { sl_send_reply("200","OK"); return; >> } } else { log("XXX: forwarding to the address of record...\n"); >> if(!t_relay()) { log("XXX: error forwarding to address of record >> \n"); sl_reply_error(); return; } else { sl_send_reply("200", "OK"); >> return; } } >> >> } >> >> # forwarding to external gateway route[2]{ log("XXX: rewriting >> headers\n"); >> subst('/^(From:[^@#]*)#([^@]*)\*jabber.qa.im.hb.com@jabber...qa.im.hb.com(.*)/\1@\2\3/ig'); >> >> subst('/^(Contact:[^@#]*)#([^@]*)\*jabber.qa.im.hb.com@jabber...qa.im.hb.com(.*)/\1@\2\3/ig'); >> >> >> if(!forward("tls:43.123.141.166:3000")) { log("XXX: Error forwarding >> to external gateway!\n"); sl_reply_error(); } else { >> sl_send_reply("200", "Accepted"); }; } >> >> # forwarding to SELF route[3]{ log("XXX: rewriting headers\n"); >> subst('/^(From:[^@#]*)#([^@]*)\*jabber.qa.im.hb.com@jabber...qa.im.hb.com(.*)/\1@\2\3/ig'); >> >> subst('/^(Contact:[^@#]*)#([^@]*)\*jabber.qa.im.hb.com@jabber...qa.im.hb.com(.*)/\1@\2\3/ig'); >> >> >> log("XXX: about to forward to self\n"); >> if(!forward("tcp:sip.qa.hbex.com:5061")) { log("XXX: Error forwarding >> to self!\n"); sl_reply_error(); } else { sl_send_reply("200", >> "Accepted"); }; } >> >> # this is executed for replies onreply_route[1]{ >> subst('/^(To:[^@#]*)#([^@]*)\*jabber.qa.im.hb.com@jabber...qa.im.hb.com(.*)/\1@\2\3/ig'); >> >> subst('/^(Contact:[^@#]*)#([^@]*)\*jabber.qa.im.hb.com@jabber...qa.im.hb.com(.*)/\1@\2\3/ig'); >> route(2); } >> >> >> >> _______________________________________________ Users mailing list >> Users(a)openser.org http://openser.org/cgi-bin/mailman/listinfo/users > >

2 1

[Users] Is there a way to give a dial tone to the caller?
by Ronald Wiplinger 30 Sep '06

30 Sep '06

When I am placing a call I will never hear a dial tone. Is there a way to add dial tone? bye Ronald

2 2

[Users] Please help for creating CA root certificate nad client certificate
by Ferianto siregar 30 Sep '06

30 Sep '06

Dear all, Thank you very much for this chance. Thank you for your time to read this message. All, I have read document about tls from openser.org In that document, I read that to create CA root and client certifacate, we just must run script ./gen_rootCA.sh and ./gen_usercert.sh where is in tls/tools. It will produce rootCA directory and user directory. Then, I put the rootCA directory and user directory into my public webserver in order the client can download it. But, when I try to download the certificate from the server (using Redhat 9.0), to the client computer (using Windows XP), why I can not download it? Do, I have to convert the extension form .pem to .crt? How can I convert it? Please help..Please.. Regards, Ferianto __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

1 0

[Serusers] Best platform for SER --->please suggest some thing
by ravi reddy 30 Sep '06

30 Sep '06

Hello guys, I want to install SER on a SERVER so please suggest me some servers (prefererably with configuration like HP, or some thing) because basically i dont have any knowledge on server types . so, any comments and suggestions are appreciated . Thank You. Regards, Ravi.

3 3

[Serusers] SER and Routing Help Question
by Mario Roeber 30 Sep '06

30 Sep '06

Hello, maybe someone can help me with the routing. here the schema. Firewall with 3 Network interfaces 2x interfaces intern 1x interface extern the default provider is sipgate.de. ser shoult route all registration default to sipgate and listen on 2 intern interfaces. ser shoult handel all intern calls and route direct intern. user auth i'dont need or radius i'dont need. all inbount calls from extern shoult route automatic to right sip- phone. current i use the default configuration with 2 options more. listen 212.21.68.62 listen 212.21.69.110 maybe someone can help me to with the routing thanks a lot for your time, if you can help me. regards mario roeber

1 0

[Users] [openser] Displaying Caller-ID
by Tracy Lofton 29 Sep '06

29 Sep '06

Hi Everybody, I was wondering if I would be able to display the CallerID in the display of the callee's phone rather than it displaying anonymous, maybe it can be done if I used something like this from the tm module: if(search("From:[0-9]{10}@.*"){ append_hf("remote-party-id:<sip:2134445555 at mydomain.com>") ) or would i use openser auth module with append_rpid_hf() in some form or fashion? If so, how can I do this? Just need a little input, guidance and assistance and to know if it actually can be done. If not this method, then what can I use to display the callID of the calling party to the caller display. Some providers are known to block the call if a certain amount of digits are not displayed. Thanks in advance. Tracy _________________________________________________________________ Add fun gadgets and colorful themes to express yourself on Windows Live Spaces http://clk.atdmt.com/MSN/go/msnnkwsp0070000001msn/direct/01/?href=http://ww…

3 3

Re: [Serusers] how to add mysql.so
by vijay tiwari 29 Sep '06

29 Sep '06

thanks when i install mysql and i type this command ./configure --prefix=/usr/local/mysql --enable-large-files --enable-shared=yes it show me some checking and show me this error checking "LinuxThreads"... "Not found" configure: error: This is a linux system and Linuxthreads was not found. On linux Linuxthreads should be used. Please install Linuxthreads (or a new glibc) and try again. See the Installation chapter in the Reference Manual for more information. and i am not able to install mysql sip <sip(a)arcdiv.com> wrote: Why not? That's a little vague. Can't add them because you don't have it? Can't add them because of permissions problems? Can't add them because the directory doesn't exist? Can't add them because you don't know the unix copy command? A little more specific information goes a long way. N. On Fri, 29 Sep 2006 07:30:18 -0700 (PDT), vijay tiwari wrote > > hi all > > > i am not able to add the mysql in that locations /usr/local/lib/ser/modules > > > thanks > vijay > --------------------------------- All-new Yahoo! Mail - Fire up a more powerful email and get things done faster. Vijay Tiwari Network Admin Sachitel Communications Noida(U.P.) M- 09871633711 --------------------------------- Do you Yahoo!? Get on board. You're invited to try the new Yahoo! Mail.

1 0

[Users] thought exercise
by Mark Kent 29 Sep '06

29 Sep '06

I wonder if anyone on this list is open to a thought exercise? I'm trying to put together a cogent message about this, but in the meantime: I've got a situation where my openser box seems to route stuff to itself and it loops around and around until I get the classic "Too Many Hops" error. This seems to happen most often on BYE, although I've seen an ACK do it too. Here is a small ngrep snippet, after PHONE has called OPENSER-ONE who statelessly relays to OPENSER-TWO who t_relays to PSTNGW, and then the pstn user hangs-up: U 23:03:53.254382 PSTNGW:5060 -> OPENSER-TWO:5060 BYE sip:JoeUser@OPENSER-ONE.example.com:5060;user=phone SIP/2.0 Call-ID: callid@PHONE From: <sip:18005551212@OPENSER-TWO.example.com:5060>;tag=26674 To: "Joe User" <sip:JoeUser@OPENSER-ONE.example.com>;tag=thetag Content-Length: 0 CSeq: 1 BYE Via: SIP/2.0/UDP PSTNGW:5060;branch=thebranch Route: <sip:JoeUser@OPENSER-ONE:5060> Max-Forwards: 70 # U 23:03:53.255013 OPENSER-TWO:5060 -> OPENSER-ONE:5060 BYE sip:JoeUser@OPENSER-ONE:5060 SIP/2.0 Record-Route: <sip:JoeUser@OPENSER-TWO;lr=on;ftag=26674> Call-ID: callid@PHONE From: <sip:18005551212@OPENSER-TWO.example.com:5060>;tag=26674 To: "Joe User" <sip:JoeUser@OPENSER-ONE.example.com>;tag=thetag Content-Length: 0 CSeq: 1 BYE Via: SIP/2.0/UDP OPENSER-TWO;branch=otherbranch.0 Via: SIP/2.0/UDP PSTNGW:5060;branch=thebranch Max-Forwards: 69 Route: <sip:JoeUser@OPENSER-ONE.example.com:5060;user=phone> Right here OPENSER-ONE freaks out, and the delay causes OPENSER-TWO to re-transmit: # U 23:03:53.611227 OPENSER-TWO:5060 -> OPENSER-ONE:5060 BYE sip:JoeUser@OPENSER-ONE:5060 SIP/2.0 Record-Route: <sip:JoeUser@OPENSER-TWO;lr=on;ftag=26674> Call-ID: callid@PHONE From: <sip:18005551212@OPENSER-TWO.example.com:5060>;tag=26674 To: "Joe User" <sip:JoeUser@OPENSER-ONE.example.com>;tag=thetag Content-Length: 0 CSeq: 1 BYE Via: SIP/2.0/UDP OPENSER-TWO;branch=otherbranch.0 Via: SIP/2.0/UDP PSTNGW:5060;branch=thebranch Max-Forwards: 69 Route: <sip:JoeUser@OPENSER-ONE.example.com:5060;user=phone> OK, so who on this list is good enough to be able to suggest plausible theories about what my openser.cfg flaw is? If you don't want to speculate openly on the list then please send me a direct email. Thanks, -mark

3 6

[Users] e2e ACK matching problem
by JF 29 Sep '06

29 Sep '06

Hi all, I'm facing a cenario where an INVITE transaction goes through one (Open)SER more than one time, and the ACK to a 480 Temporarily Unavailable is wrongly being matched as an e2e ACK. I dug through tm code and found this comment in t_lookup.c: /* here we do an exercise which will be removed from future code * versions: we try to match end-2-end ACKs if they appear at our * server. This allows some applications bound to TM via callbacks * to correlate the e2e ACKs with transaction context, e.g., for * purpose of accounting. We think it is a bad place here, among * other things because it is not reliable. If a transaction loops * via SER the ACK can't be matched to proper INVITE transaction * (it is a separate transactino with its own branch ID) and it * matches all transaction instances in the loop dialog-wise. * Eventually, regardless to which transaction in the loop the * ACK belongs, only the first one will match. */ Does anyone have a solution to this problem? Thanks, JF

1 0

[Serusers] Registration
by senthil.nachimuthu＠bt.com 29 Sep '06

29 Sep '06

> Hi, > I want to configure SER as a proxy server. I would like SER to > proxy presence messages and I have done that with the help of > record_route and t_relay_to_udp. > I would like to have SER forwarding the register message to another > server to authenticate and after successful authentication SER store > the location to route the requests. I observed SER is not allowing URI > getting registered. > > I tried the following but did not work.. > > if(!uri==myself) { > > if( method=="REGISTER") { > record_route(); > save("location"); > t_relay_to_udp("132.146.109.243","5060"); > break; > }; > }; > > > Can anyone let me know how can I enable other domain URI passing > through SER to reach other server which authenticates them? > > > Thanks and Regards, > Senthil Kumar, >

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

sr-users