Re: conntrack_sip messages showing up in 2.6.32

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 

On Mon, Dec 14, 2009 at 12:20:47PM +0100, Patrick McHardy wrote:
> 
> Conntrack logs packets dropped by helpers automatically starting in
> 2.6.32. If you can capture those packets (either using tcpdump or
> the ULOG pcap output plugin) I can have a look at why they are dropped.

Attached. The first 4 packets are ok, I'd say.

The other (dropped) attempts might have something to do with the
fact the the machine in question has several interfaces with
several ip addresses, and the internal DNS resolves to all of
them, as they are reachable from intern.

Bye,

Joerg

Ôò¡Ü]]'KZh÷÷j)Ù%ÆÏEé@@ÜÙ¬¬ÄÄÕ¥«REGISTER sip:dorchain.net SIP/2.0
Via: SIP/2.0/UDP 172.17.2.7;rport;branch=z9hG4bKrowvfuqz
Max-Forwards: 70
To: "Joerg" <sip:joerg-intern@xxxxxxxxxxxx>
From: "Joerg" <sip:joerg-intern@xxxxxxxxxxxx>;tag=cdyak
Call-ID: stkvrcjwnjpljph@xxxxxxxxxxxxxxxxxxxx
CSeq: 546 REGISTER
Contact: <sip:joerg-intern@xxxxxxxxxx>;expires=3600
Allow: INVITE,ACK,BYE,CANCEL,OPTIONS,PRACK,REFER,NOTIFY,SUBSCRIBE,INFO,MESSAGE
User-Agent: Twinkle/1.4.2
Content-Length: 0

]]'Kk>>%ÆÏj)ÙE`0?w@?»¬¬ÄÄ×-SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 172.17.2.7;branch=z9hG4bKrowvfuqz;received=172.17.2.7;rport=5060
From: "Joerg" <sip:joerg-intern@xxxxxxxxxxxx>;tag=cdyak
To: "Joerg" <sip:joerg-intern@xxxxxxxxxxxx>;tag=as3c9168c7
Call-ID: stkvrcjwnjpljph@xxxxxxxxxxxxxxxxxxxx
CSeq: 546 REGISTER
Server: Asterisk PBX 1.6.2.0~rc7-1
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO
Supported: replaces, timer
WWW-Authenticate: Digest algorithm=MD5, realm="dorchain.net", nonce="5ddd6bd6"
Content-Length: 0

]]'Kür??j)Ù%ÆÏE?@@Ü3¬¬ÄÄ{@REGISTER sip:dorchain.net SIP/2.0
Via: SIP/2.0/UDP 172.17.2.7;rport;branch=z9hG4bKhctucsvj
Max-Forwards: 70
To: "Joerg" <sip:joerg-intern@xxxxxxxxxxxx>
From: "Joerg" <sip:joerg-intern@xxxxxxxxxxxx>;tag=cdyak
Call-ID: stkvrcjwnjpljph@xxxxxxxxxxxxxxxxxxxx
CSeq: 547 REGISTER
Contact: <sip:joerg-intern@xxxxxxxxxx>;expires=3600
Authorization: Digest username="joerg-intern",realm="dorchain.net",nonce="5ddd6bd6",uri="sip:dorchain.net",response="8b65512b41ea901a90575cab8971eb68",algorithm=MD5
Allow: INVITE,ACK,BYE,CANCEL,OPTIONS,PRACK,REFER,NOTIFY,SUBSCRIBE,INFO,MESSAGE
User-Agent: Twinkle/1.4.2
Content-Length: 0

]]'K
?KK%ÆÏj)ÙE`=?x@?­¬¬ÄÄ)fSIP/2.0 200 OK
Via: SIP/2.0/UDP 172.17.2.7;branch=z9hG4bKhctucsvj;received=172.17.2.7;rport=5060
From: "Joerg" <sip:joerg-intern@xxxxxxxxxxxx>;tag=cdyak
To: "Joerg" <sip:joerg-intern@xxxxxxxxxxxx>;tag=as3c9168c7
Call-ID: stkvrcjwnjpljph@xxxxxxxxxxxxxxxxxxxx
CSeq: 547 REGISTER
Server: Asterisk PBX 1.6.2.0~rc7-1
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO
Supported: replaces, timer
Expires: 3600
Contact: sip:joerg-intern@xxxxxxxxxx;expires=3600
Date: Tue, 15 Dec 2009 09:56:45 GMT
Content-Length: 0

hk'KÛ.÷÷j)Ù%ÆÏEé@@0ú¬ÔX??ÄÄÕ¤REGISTER sip:dorchain.net SIP/2.0
Via: SIP/2.0/UDP 172.17.2.7;rport;branch=z9hG4bKzlguqamq
Max-Forwards: 70
To: "Joerg" <sip:joerg-intern@xxxxxxxxxxxx>
From: "Joerg" <sip:joerg-intern@xxxxxxxxxxxx>;tag=uyhuk
Call-ID: stkvrcjwnjpljph@xxxxxxxxxxxxxxxxxxxx
CSeq: 548 REGISTER
Contact: <sip:joerg-intern@xxxxxxxxxx>;expires=3600
Allow: INVITE,ACK,BYE,CANCEL,OPTIONS,PRACK,REFER,NOTIFY,SUBSCRIBE,INFO,MESSAGE
User-Agent: Twinkle/1.4.2
Content-Length: 0

hk'K?Ð÷÷j)Ù%ÆÏEé@@0ú¬ÔX??ÄÄÕ¤REGISTER sip:dorchain.net SIP/2.0
Via: SIP/2.0/UDP 172.17.2.7;rport;branch=z9hG4bKzlguqamq
Max-Forwards: 70
To: "Joerg" <sip:joerg-intern@xxxxxxxxxxxx>
From: "Joerg" <sip:joerg-intern@xxxxxxxxxxxx>;tag=uyhuk
Call-ID: stkvrcjwnjpljph@xxxxxxxxxxxxxxxxxxxx
CSeq: 548 REGISTER
Contact: <sip:joerg-intern@xxxxxxxxxx>;expires=3600
Allow: INVITE,ACK,BYE,CANCEL,OPTIONS,PRACK,REFER,NOTIFY,SUBSCRIBE,INFO,MESSAGE
User-Agent: Twinkle/1.4.2
Content-Length: 0

ik'KTÑ÷÷j)Ù%ÆÏEé@@0ú¬ÔX??ÄÄÕ¤REGISTER sip:dorchain.net SIP/2.0
Via: SIP/2.0/UDP 172.17.2.7;rport;branch=z9hG4bKzlguqamq
Max-Forwards: 70
To: "Joerg" <sip:joerg-intern@xxxxxxxxxxxx>
From: "Joerg" <sip:joerg-intern@xxxxxxxxxxxx>;tag=uyhuk
Call-ID: stkvrcjwnjpljph@xxxxxxxxxxxxxxxxxxxx
CSeq: 548 REGISTER
Contact: <sip:joerg-intern@xxxxxxxxxx>;expires=3600
Allow: INVITE,ACK,BYE,CANCEL,OPTIONS,PRACK,REFER,NOTIFY,SUBSCRIBE,INFO,MESSAGE
User-Agent: Twinkle/1.4.2
Content-Length: 0

kk'K?é÷÷j)Ù%ÆÏEé@@0ú¬ÔX??ÄÄÕ¤REGISTER sip:dorchain.net SIP/2.0
Via: SIP/2.0/UDP 172.17.2.7;rport;branch=z9hG4bKzlguqamq
Max-Forwards: 70
To: "Joerg" <sip:joerg-intern@xxxxxxxxxxxx>
From: "Joerg" <sip:joerg-intern@xxxxxxxxxxxx>;tag=uyhuk
Call-ID: stkvrcjwnjpljph@xxxxxxxxxxxxxxxxxxxx
CSeq: 548 REGISTER
Contact: <sip:joerg-intern@xxxxxxxxxx>;expires=3600
Allow: INVITE,ACK,BYE,CANCEL,OPTIONS,PRACK,REFER,NOTIFY,SUBSCRIBE,INFO,MESSAGE
User-Agent: Twinkle/1.4.2
Content-Length: 0

ok'KPÒ÷÷j)Ù%ÆÏEé@@0ú¬ÔX??ÄÄÕ¤REGISTER sip:dorchain.net SIP/2.0
Via: SIP/2.0/UDP 172.17.2.7;rport;branch=z9hG4bKzlguqamq
Max-Forwards: 70
To: "Joerg" <sip:joerg-intern@xxxxxxxxxxxx>
From: "Joerg" <sip:joerg-intern@xxxxxxxxxxxx>;tag=uyhuk
Call-ID: stkvrcjwnjpljph@xxxxxxxxxxxxxxxxxxxx
CSeq: 548 REGISTER
Contact: <sip:joerg-intern@xxxxxxxxxx>;expires=3600
Allow: INVITE,ACK,BYE,CANCEL,OPTIONS,PRACK,REFER,NOTIFY,SUBSCRIBE,INFO,MESSAGE
User-Agent: Twinkle/1.4.2
Content-Length: 0

ok'K¦Ô>>%ÆÏj)ÙE`0W1@"ÔX??¬ÄÄ3SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 172.17.2.7;branch=z9hG4bKzlguqamq;received=172.17.2.7;rport=5060
From: "Joerg" <sip:joerg-intern@xxxxxxxxxxxx>;tag=uyhuk
To: "Joerg" <sip:joerg-intern@xxxxxxxxxxxx>;tag=as4d9e6bef
Call-ID: stkvrcjwnjpljph@xxxxxxxxxxxxxxxxxxxx
CSeq: 548 REGISTER
Server: Asterisk PBX 1.6.2.0~rc7-1
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO
Supported: replaces, timer
WWW-Authenticate: Digest algorithm=MD5, realm="dorchain.net", nonce="392b99bd"
Content-Length: 0

ok'K[Ù??j)Ù%ÆÏE?@@0T¬ÔX??ÄÄ{ ?REGISTER sip:dorchain.net SIP/2.0
Via: SIP/2.0/UDP 172.17.2.7;rport;branch=z9hG4bKrksmokjy
Max-Forwards: 70
To: "Joerg" <sip:joerg-intern@xxxxxxxxxxxx>
From: "Joerg" <sip:joerg-intern@xxxxxxxxxxxx>;tag=uyhuk
Call-ID: stkvrcjwnjpljph@xxxxxxxxxxxxxxxxxxxx
CSeq: 549 REGISTER
Contact: <sip:joerg-intern@xxxxxxxxxx>;expires=3600
Authorization: Digest username="joerg-intern",realm="dorchain.net",nonce="392b99bd",uri="sip:dorchain.net",response="2a7c353d7e0dca7f05c9095befb03b58",algorithm=MD5
Allow: INVITE,ACK,BYE,CANCEL,OPTIONS,PRACK,REFER,NOTIFY,SUBSCRIBE,INFO,MESSAGE
User-Agent: Twinkle/1.4.2
Content-Length: 0

ok'KËæKK%ÆÏj)ÙE`=W2@ÔX??¬ÄÄ),õSIP/2.0 200 OK
Via: SIP/2.0/UDP 172.17.2.7;branch=z9hG4bKrksmokjy;received=172.17.2.7;rport=5060
From: "Joerg" <sip:joerg-intern@xxxxxxxxxxxx>;tag=uyhuk
To: "Joerg" <sip:joerg-intern@xxxxxxxxxxxx>;tag=as4d9e6bef
Call-ID: stkvrcjwnjpljph@xxxxxxxxxxxxxxxxxxxx
CSeq: 549 REGISTER
Server: Asterisk PBX 1.6.2.0~rc7-1
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO
Supported: replaces, timer
Expires: 3600
Contact: sip:joerg-intern@xxxxxxxxxx;expires=3600
Date: Tue, 15 Dec 2009 10:56:47 GMT
Content-Length: 0

Attachment: signature.asc
Description: Digital signature

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux