7 Feb
2015
7 Feb
'15
3:09 a.m.
Hi,
I am currently experiencing an intermittent one way audio issue, when using RTPEngine and
proxying between srtp and rtp. There is no apparent pattern, I have managed to repeat
the on the 7th, 23rd, and 63rd calls to a test number, where upon connection only audio
in the RTP => SRTP direction was working. All other test calls worked as normal.
Digging through the RTPEngine log file the only abnormalities I can see are: Discarded
invalid SRTP packet: authentication failed entries on the calls that had the one way audio
issue.
What could be causing this?
Thanks
Tim.
7 Feb
7 Feb
3:13 a.m.
New subject: RTPEngine Intermittent One Way Audio Issue SRTP => RTP
The following is from the logfile showing a successful call
##### Call 1 - Normal #####
Feb 6 16:15:52 kamailio rtpengine[22145]: [1449147586-14407-219(a)BJC.BGI.B.BAF port 47732]
Confirmed peer address as 172.16.52.4:18678
Feb 6 16:15:52 kamailio rtpengine[22145]: [1449147586-14407-219(a)BJC.BGI.B.BAF port 47742]
Confirmed peer address as 86.188.176.25:49570
Feb 6 16:15:54 kamailio rtpengine[22145]: Got valid command from 127.0.0.1:42444: offer -
{ "sdp": "v=0
o=TimDesk1 8000 8000 IN IP4 192.168.1.105
s=SIP Call
c=IN IP4 192.168.1.105
t=0 0
m=audio 12508 RTP/SAVP 8 13 0 9 2 101
a=sendrecv
a=rtpmap:8 PCMA/8000
a=ptime:20
a=rtpmap:13 CN/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:9 G722/8000
a=rtpmap:2 G726-32/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=crypto:1 AES_CM_128_HMAC_SHA1_80 inline:juFBDXlbHNk9v4q7MZgFyBeBueoCqrqYI+6B4NX6|2^32
a=crypto:2 AES_CM_128_HMAC_SHA1_32 inline:zGPcDnBVaYwupku4YXxQZkVo6P5S6qkMgsz7BKzQ|2^32
", "direction": [ "external", "internal" ],
"replace": [ "origin", "session-connection" ],
"transport-protocol": "RTP/AVP", "call-id":
"1251269203-14407-220@BJC.BGI.B.BAF<mailto:1251269203-14407-220@BJC.BGI.B.BAF>",
"received-from": [ "IP4", "86.188.176.25" ],
"from-tag": "822158480", "command": "offer" }
Feb 6 16:15:54 kamailio rtpengine[22145]: [1251269203-14407-220(a)BJC.BGI.B.BAF] Creating
new call
Feb 6 16:15:54 kamailio rtpengine[22145]: [1251269203-14407-220(a)BJC.BGI.B.BAF] Opened
ports 47752..47753 for media relay
Feb 6 16:15:54 kamailio rtpengine[22145]: [1251269203-14407-220(a)BJC.BGI.B.BAF] Opened
ports 47768..47769 for media relay
Feb 6 16:15:54 kamailio rtpengine[22145]: [1251269203-14407-220(a)BJC.BGI.B.BAF] Returning
to SIP proxy: d3:sdp553:v=0
o=TimDesk1 8000 8000 IN IP4 172.16.52.71
s=SIP Call
c=IN IP4 172.16.52.71
t=0 0
a=ice-lite
m=audio 47752 RTP/AVP 8 13 0 9 2 101
a=rtpmap:8 PCMA/8000
a=ptime:20
a=rtpmap:13 CN/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:9 G722/8000
a=rtpmap:2 G726-32/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=sendrecv
a=rtcp:47753
a=ice-ufrag:0iPdqfhF
a=ice-pwd:jcloLJi39nobxVX7HtpKtTMt9zFA
a=candidate:hgovvroVet3HALus 1 UDP 2130706431 172.16.52.71 47752 typ host
a=candidate:hgovvroVet3HALus 2 UDP 2130706430 172.16.52.71 47753 typ host
6:result2:oke
Feb 6 16:16:00 kamailio rtpengine[22145]: Got valid command from 127.0.0.1:37264: answer
- { "sdp": "v=0
o=CiscoSystemsSIP-GW-UserAgent 556 4215 IN IP4 172.16.52.4
s=SIP Call
c=IN IP4 172.16.52.4
t=0 0
m=audio 18682 RTP/AVP 8 101
c=IN IP4 172.16.52.4
a=rtpmap:8 PCMA/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=ptime:20
", "direction": [ "internal", "external" ],
"replace": [ "origin", "session-connection" ],
"transport-protocol": "RTP/SAVP", "call-id":
"1251269203-14407-220@BJC.BGI.B.BAF<mailto:1251269203-14407-220@BJC.BGI.B.BAF>",
"received-from": [ "IP4", "172.16.52.4" ],
"from-tag": "822158480", "to-tag":
"9019F813-2671", "command": "answer" }
Feb 6 16:16:00 kamailio rtpengine[22145]: [1251269203-14407-220(a)BJC.BGI.B.BAF] Returning
to SIP proxy: d3:sdp586:v=0
o=CiscoSystemsSIP-GW-UserAgent 556 4215 IN IP4 123.123.123.123
s=SIP Call
c=IN IP4 123.123.123.123
t=0 0
a=ice-lite
m=audio 47768 RTP/SAVP 8 101
c=IN IP4 123.123.123.123
a=rtpmap:8 PCMA/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=ptime:20
a=sendrecv
a=rtcp:47769
a=crypto:1 AES_CM_128_HMAC_SHA1_80 inline:s8Q/XEjCiBU7AA7yo5P9KFYhiZrcs1RPUpV/cArM
a=ice-ufrag:ILsVPyrj
a=ice-pwd:nE1g27xxJH0rzWwamuxbAtHid9b2
a=candidate:TUErwQDNDzRhCQkj 1 UDP 2130706431 123.123.123.123 47768 typ host
a=candidate:TUErwQDNDzRhCQkj 2 UDP 2130706430 123.123.123.123 47769 typ host
6:result2:oke
Feb 6 16:16:02 kamailio rtpengine[22145]: Got valid command from 127.0.0.1:39817: answer
- { "sdp": "v=0
o=CiscoSystemsSIP-GW-UserAgent 556 4215 IN IP4 172.16.52.4
s=SIP Call
c=IN IP4 172.16.52.4
t=0 0
m=audio 18682 RTP/AVP 8 101
c=IN IP4 172.16.52.4
a=rtpmap:8 PCMA/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=ptime:20
", "direction": [ "internal", "external" ],
"replace": [ "origin", "session-connection" ],
"transport-protocol": "RTP/SAVP", "call-id":
"1251269203-14407-220@BJC.BGI.B.BAF<mailto:1251269203-14407-220@BJC.BGI.B.BAF>",
"received-from": [ "IP4", "172.16.52.4" ],
"from-tag": "822158480", "to-tag":
"9019F813-2671", "command": "answer" }
Feb 6 16:16:02 kamailio rtpengine[22145]: [1251269203-14407-220(a)BJC.BGI.B.BAF] Returning
to SIP proxy: d3:sdp586:v=0
o=CiscoSystemsSIP-GW-UserAgent 556 4215 IN IP4 123.123.123.123
s=SIP Call
c=IN IP4 123.123.123.123
t=0 0
a=ice-lite
m=audio 47768 RTP/SAVP 8 101
c=IN IP4 123.123.123.123
a=rtpmap:8 PCMA/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=ptime:20
a=sendrecv
a=rtcp:47769
a=crypto:1 AES_CM_128_HMAC_SHA1_80 inline:s8Q/XEjCiBU7AA7yo5P9KFYhiZrcs1RPUpV/cArM
a=ice-ufrag:ILsVPyrj
a=ice-pwd:nE1g27xxJH0rzWwamuxbAtHid9b2
a=candidate:TUErwQDNDzRhCQkj 1 UDP 2130706431 123.123.123.123 47768 typ host
a=candidate:TUErwQDNDzRhCQkj 2 UDP 2130706430 123.123.123.123 47769 typ host
6:result2:oke
Feb 6 16:16:06 kamailio rtpengine[22145]: [1251269203-14407-220(a)BJC.BGI.B.BAF port 47752]
Confirmed peer address as 172.16.52.4:18682
Feb 6 16:16:06 kamailio rtpengine[22145]: [1251269203-14407-220(a)BJC.BGI.B.BAF port 47768]
Confirmed peer address as 86.188.176.25:12508
Feb 6 16:16:06 kamailio rtpengine[22145]: [1251269203-14407-220(a)BJC.BGI.B.BAF port 47768]
No support for kernel packet forwarding available
Feb 6 16:16:06 kamailio rtpengine[22145]: [1251269203-14407-220(a)BJC.BGI.B.BAF port 47752]
No support for kernel packet forwarding available
From: sr-users [mailto:sr-users-bounces@lists.sip-router.org] On Behalf Of Tim Chubb
Sent: 07 February 2015 08:10
To: Kamailio (SER) - Users Mailing List
Subject: [SR-Users] RTPEngine Intermittent One Way Audio Issue SRTP => RTP
Hi,
I am currently experiencing an intermittent one way audio issue, when using RTPEngine and
proxying between srtp and rtp. There is no apparent pattern, I have managed to repeat
the on the 7th, 23rd, and 63rd calls to a test number, where upon connection only audio
in the RTP => SRTP direction was working. All other test calls worked as normal.
Digging through the RTPEngine log file the only abnormalities I can see are: Discarded
invalid SRTP packet: authentication failed entries on the calls that had the one way audio
issue.
What could be causing this?
Thanks
Tim.
3:15 a.m.
New subject: RTPEngine Intermittent One Way Audio Issue SRTP => RTP
And this is a sample from the RTPEngine logfile showing a failed call:
##### Call 2 - One way audio #####
Feb 6 16:16:07 kamailio rtpengine[22145]: Got valid command from 127.0.0.1:42444: offer -
{ "sdp": "v=0
o=TimDesk1 8000 8000 IN IP4 192.168.1.105
s=SIP Call
c=IN IP4 192.168.1.105
t=0 0
m=audio 22016 RTP/SAVP 8 13 0 9 2 101
a=sendrecv
a=rtpmap:8 PCMA/8000
a=ptime:20
a=rtpmap:13 CN/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:9 G722/8000
a=rtpmap:2 G726-32/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=crypto:1 AES_CM_128_HMAC_SHA1_80 inline:XZZ8Fvj4Zl49zkY8ITDlLbOxKLdd+LXWLJBd0L9N|2^32
a=crypto:2 AES_CM_128_HMAC_SHA1_32 inline:AB3kfDPcdZk6smiB7omx07ZkhN8b4tfRuANhFtMg|2^32
", "direction": [ "external", "internal" ],
"replace": [ "origin", "session-connection" ],
"transport-protocol": "RTP/AVP", "call-id":
"848952795-14407-221@BJC.BGI.B.BAF<mailto:848952795-14407-221@BJC.BGI.B.BAF>",
"received-from": [ "IP4", "86.188.176.25" ],
"from-tag": "2103788516", "command": "offer" }
Feb 6 16:16:07 kamailio rtpengine[22145]: [848952795-14407-221(a)BJC.BGI.B.BAF] Creating
new call
Feb 6 16:16:07 kamailio rtpengine[22145]: [848952795-14407-221(a)BJC.BGI.B.BAF] Opened
ports 47790..47791 for media relay
Feb 6 16:16:07 kamailio rtpengine[22145]: [848952795-14407-221(a)BJC.BGI.B.BAF] Opened
ports 47806..47807 for media relay
Feb 6 16:16:07 kamailio rtpengine[22145]: [848952795-14407-221(a)BJC.BGI.B.BAF] Returning
to SIP proxy: d3:sdp553:v=0
o=TimDesk1 8000 8000 IN IP4 172.16.52.71
s=SIP Call
c=IN IP4 172.16.52.71
t=0 0
a=ice-lite
m=audio 47790 RTP/AVP 8 13 0 9 2 101
a=rtpmap:8 PCMA/8000
a=ptime:20
a=rtpmap:13 CN/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:9 G722/8000
a=rtpmap:2 G726-32/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=sendrecv
a=rtcp:47791
a=ice-ufrag:k2elgesL
a=ice-pwd:MatMz0J3a3xFc87Tok0ykF8EFlYU
a=candidate:hgovvroVet3HALus 1 UDP 2130706431 172.16.52.71 47790 typ host
a=candidate:hgovvroVet3HALus 2 UDP 2130706430 172.16.52.71 47791 typ host
6:result2:oke
Feb 6 16:16:13 kamailio rtpengine[22145]: Got valid command from 127.0.0.1:37264: answer
- { "sdp": "v=0
o=CiscoSystemsSIP-GW-UserAgent 2893 6808 IN IP4 172.16.52.4
s=SIP Call
c=IN IP4 172.16.52.4
t=0 0
m=audio 18680 RTP/AVP 8 101
c=IN IP4 172.16.52.4
a=rtpmap:8 PCMA/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=ptime:20
", "direction": [ "internal", "external" ],
"replace": [ "origin", "session-connection" ],
"transport-protocol": "RTP/SAVP", "call-id":
"848952795-14407-221@BJC.BGI.B.BAF<mailto:848952795-14407-221@BJC.BGI.B.BAF>",
"received-from": [ "IP4", "172.16.52.4" ],
"from-tag": "2103788516", "to-tag":
"901A2AA1-13C0", "command": "answer" }
Feb 6 16:16:13 kamailio rtpengine[22145]: [848952795-14407-221(a)BJC.BGI.B.BAF] Returning
to SIP proxy: d3:sdp587:v=0
o=CiscoSystemsSIP-GW-UserAgent 2893 6808 IN IP4 123.123.123.123
s=SIP Call
c=IN IP4 123.123.123.123
t=0 0
a=ice-lite
m=audio 47806 RTP/SAVP 8 101
c=IN IP4 123.123.123.123
a=rtpmap:8 PCMA/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=ptime:20
a=sendrecv
a=rtcp:47807
a=crypto:1 AES_CM_128_HMAC_SHA1_80 inline:oej4VLwO5K/OvjXVKH9Qg9dECCqjCAVd2zvu4Au5
a=ice-ufrag:xKKraWbi
a=ice-pwd:5VaewbH0SMYob82Mln1hMs4hbMJl
a=candidate:TUErwQDNDzRhCQkj 1 UDP 2130706431 123.123.123.123 47806 typ host
a=candidate:TUErwQDNDzRhCQkj 2 UDP 2130706430 123.123.123.123 47807 typ host
6:result2:oke
Feb 6 16:16:15 kamailio rtpengine[22145]: Got valid command from 127.0.0.1:39817: answer
- { "sdp": "v=0
o=CiscoSystemsSIP-GW-UserAgent 2893 6808 IN IP4 172.16.52.4
s=SIP Call
c=IN IP4 172.16.52.4
t=0 0
m=audio 18680 RTP/AVP 8 101
c=IN IP4 172.16.52.4
a=rtpmap:8 PCMA/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=ptime:20
", "direction": [ "internal", "external" ],
"replace": [ "origin", "session-connection" ],
"transport-protocol": "RTP/SAVP", "call-id":
"848952795-14407-221@BJC.BGI.B.BAF<mailto:848952795-14407-221@BJC.BGI.B.BAF>",
"received-from": [ "IP4", "172.16.52.4" ],
"from-tag": "2103788516", "to-tag":
"901A2AA1-13C0", "command": "answer" }
Feb 6 16:16:15 kamailio rtpengine[22145]: [848952795-14407-221(a)BJC.BGI.B.BAF] Returning
to SIP proxy: d3:sdp587:v=0
o=CiscoSystemsSIP-GW-UserAgent 2893 6808 IN IP4 123.123.123.123
s=SIP Call
c=IN IP4 123.123.123.123
t=0 0
a=ice-lite
m=audio 47806 RTP/SAVP 8 101
c=IN IP4 123.123.123.123
a=rtpmap:8 PCMA/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=ptime:20
a=sendrecv
a=rtcp:47807
a=crypto:1 AES_CM_128_HMAC_SHA1_80 inline:oej4VLwO5K/OvjXVKH9Qg9dECCqjCAVd2zvu4Au5
a=ice-ufrag:xKKraWbi
a=ice-pwd:5VaewbH0SMYob82Mln1hMs4hbMJl
a=candidate:TUErwQDNDzRhCQkj 1 UDP 2130706431 123.123.123.123 47806 typ host
a=candidate:TUErwQDNDzRhCQkj 2 UDP 2130706430 123.123.123.123 47807 typ host
6:result2:oke
Feb 6 16:16:16 kamailio rtpengine[22145]: [848952795-14407-221(a)BJC.BGI.B.BAF port 47806]
Discarded invalid SRTP packet: authentication failed
Feb 6 16:16:19 kamailio rtpengine[22145]: [848952795-14407-221(a)BJC.BGI.B.BAF port 47790]
Confirmed peer address as 172.16.52.4:18680
Feb 6 16:16:19 kamailio rtpengine[22145]: [848952795-14407-221(a)BJC.BGI.B.BAF port 47806]
Confirmed peer address as 86.188.176.25:22016
Feb 6 16:16:19 kamailio rtpengine[22145]: [848952795-14407-221(a)BJC.BGI.B.BAF port 47806]
No support for kernel packet forwarding available
Feb 6 16:16:19 kamailio rtpengine[22145]: [848952795-14407-221(a)BJC.BGI.B.BAF port 47790]
No support for kernel packet forwarding available
If anyone has any ideas, please let me know.
From: sr-users [mailto:sr-users-bounces@lists.sip-router.org] On Behalf Of Tim Chubb
Sent: 07 February 2015 08:10
To: Kamailio (SER) - Users Mailing List
Subject: [SR-Users] RTPEngine Intermittent One Way Audio Issue SRTP => RTP
Hi,
I am currently experiencing an intermittent one way audio issue, when using RTPEngine and
proxying between srtp and rtp. There is no apparent pattern, I have managed to repeat
the on the 7th, 23rd, and 63rd calls to a test number, where upon connection only audio
in the RTP => SRTP direction was working. All other test calls worked as normal.
Digging through the RTPEngine log file the only abnormalities I can see are: Discarded
invalid SRTP packet: authentication failed entries on the calls that had the one way audio
issue.
What could be causing this?
Thanks
Tim.
8:51 a.m.
On 07/02/15 03:09 AM, Tim Chubb wrote:
Hi,
I am currently experiencing an intermittent one way audio issue, when
using RTPEngine and proxying between srtp and rtp. There is no
apparent pattern, I have managed to repeat the on the 7^th , 23^rd ,
and 63^rd calls to a test number, where upon connection only audio in
the RTP => SRTP direction was working. All other test calls worked as
normal. Digging through the RTPEngine log file the only abnormalities I
can see are: Discarded invalid SRTP packet: authentication failed
entries on the calls that had the one way audio issue.
Your caller side uses an SRTP authentication tag and apparently
sometimes fails to calculate it correctly (or rtpengine does). You'd
have to a packet capture of the RTP traffic to see what exactly is going
on. Using the crypto tags found in the SDP, it's possible to verify the
authentication tags (I believe Wireshark does that automatically in some
cases).
cheers
3396
days inactive
3396
days old
3 comments
2 participants
participants (2)
-
Richard Fuchs -
Tim Chubb