[SR-Users] HEP siptrace HEPv3 truncated and ignored by heplify-server (Homer 7)

[José Lopes]

Hello all,

I figured it out.

The heplify-server truncates the packets above 8192 bytes, I changed the
code of heplify-server and it is working.
This question is not related to kamailio, so I will open an issue on
heplify-server.

Thanks.


On Wed, Jul 22, 2020 at 8:06 PM José Lopes <jose.lopes at itcenter.com> wrote:

> Hello all,
>
> I am using the siptrace module on Kamailio 5.3.5 and I am trying to
> monitor the SIP over websockets traffic with Homer 7.8.1 (heplify-server).
>
> I notice a strange behavior, some packets are not presented on Homer.
> I checked heplify-server and i notice the next warning:
> heplify-server: 2020/07/22 18:41:09.425513 decoder.go:103: WARN HEP packet
> length is 8192 but should be 11663
>
> So I think the packets are truncated by 8192 (packet size), so they are
> ignored by heplify-server.
>
> I have done a tcpdump on the Homer machine and have the next output, where
> I can see some packets with size greater than 8192.
>
> 19:58:29.788927 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, bad length 11658 >
> 1472
> 19:58:29.793539 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, length 626
> 19:58:29.810733 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, length 579
> 19:58:29.811121 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, length 579
> 19:58:29.838824 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, bad length 11953 >
> 1472
> 19:58:29.852286 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, length 473
> 19:58:29.865388 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, bad length 3521 > 1472
> 19:58:29.875311 IP X.X.X.X.6666 > Y.Y.Y.Y.9060: UDP, length 562
>
> Can you guide me to identify where the packets are truncated?
>
>
> Os melhores cumprimentos / Best regards,
>
> *José Lopes*
> Research and Development Technician
>
> Phone: +351 256 370 980
> Email: jose.lopes at itcenter.com
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20200723/de521986/attachment.htm>