[SR-Users] HEP siptrace HEPv3 truncated and ignored by heplify-server (Homer 7)

[José Lopes]

Hello all,

I am using the siptrace module on Kamailio 5.3.5 and I am trying to monitor
the SIP over websockets traffic with Homer 7.8.1 (heplify-server).

I notice a strange behavior, some packets are not presented on Homer.
I checked heplify-server and i notice the next warning:
heplify-server: 2020/07/22 18:41:09.425513 decoder.go:103: WARN HEP packet
length is 8192 but should be 11663

So I think the packets are truncated by 8192 (packet size), so they are
ignored by heplify-server.

I have done a tcpdump on the Homer machine and have the next output, where
I can see some packets with size greater than 8192.

19:58:29.788927 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, bad length 11658 > 1472
19:58:29.793539 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, length 626
19:58:29.810733 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, length 579
19:58:29.811121 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, length 579
19:58:29.838824 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, bad length 11953 > 1472
19:58:29.852286 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, length 473
19:58:29.865388 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, bad length 3521 > 1472
19:58:29.875311 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, length 562

Can you guide me to identify where the packets are truncated?


Os melhores cumprimentos / Best regards,

*José Lopes*
Research and Development Technician

Phone: +351 256 370 980
Email: jose.lopes at itcenter.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20200722/27d74547/attachment.htm>