Comments (15)
Hey @ciscospirit do you have the coredump file available?
from captagent.
Can you tell me, how i can create that?
i enabled it here /etc/default/captagent
but it doesn't generate coredump for it.
btw:
beside this problem, if i need it just for SIP, would it not easier to use heplify instead of captagent?
from captagent.
@ciscospirit sure for simple SIP-only jobs heplify is always a great option with no requirements
from captagent.
so should be cancel the debugging for this right now and switching to heplify?
can you maybe give me instruction, how to use it just for SIP?
is this enough?
./heplify -hs homer.xxx.xxx:9060 -nt tls -m SIP -hn sp1
or do i need something more?
from captagent.
I'm not sure you should use the tls profile, unless the homer side is configured to receive it. Start simple:
./heplify -hs homer.xxx.xxx:9060 -m SIP -hn sp1 -hi 1001
from captagent.
@ciscospirit
I tested right now the configuration you hav, with ONLY SIP enabled in in socket_pcap.xml
and I don't see any problem.
Can you install coredumpctl and check for the core dump created.
Second, It's always a good practice to put the networking device name in dev
<param name="dev" value="eth0"/>
and not let any
Also, remove this <load module="protocol_tls" register="local"/>
from rtpagent.xml
from captagent.
Anyway for heplify
, you can check here for Usage and Examples.
from captagent.
hey,
as we have several neth adapters inside for subsribers and peerings, i thought "any" would be better for that?
what about the rest of the modules? are the all needed for sip only?
<load module="transport_hep" register="local"/>
<load module="protocol_sip" register="local"/>
<load module="database_hash" register="local"/>
<load module="protocol_rtcp" register="local"/>
<load module="socket_pcap" register="local"/>
i think database_hash and protocol_rtcp is useless or?
from captagent.
any
is only a good option if you don't have actual traffic on localhost as well as real interfaces.
If you only want SIP, none of the modules matter. You can switch without special settings.
from captagent.
root@sp2:/# coredumpctl list
No journal files were found.
No coredumps found.
from captagent.
@ciscospirit
These are the modules that MUST be present in rtpagent.xml
to have a minimum working config
<load module="transport_hep" register="local"/>
<load module="protocol_sip" register="local"/>
<load module="database_hash" register="local"/>
<load module="protocol_rtcp" register="local"/>
<load module="socket_pcap" register="local"/>
but if you only want SIP you just need to have this setup in socket_pcap.xml
<profile name="socketspcap_sip" description="HEP Socket" enable="true" serial="2014010402">
<profile name="socketspcap_rtcp" description="HEP Socket" enable="false" serial="2014010402">
Then any
could not be a good fit for some VLAN traffic, it depends on various factors
Btw the coredump could be generated on the next stop of captagent.
My 5c here is that some SIP traffic is causing this because it has some VLAN tags and has an issue with any
.
I just tested with normal SIP on 5060 and no issue occurred.
from captagent.
yes we have a lot of vlans and bond configured...
so in your opinion, which interface i should take? can i list there several interfaces like neth0,neth1,neth2?
from captagent.
@ciscospirit i suggest moving this issue to helplify if that's the subject, and reading the docs and examples there
from captagent.
we are still trying to solve it with captagent and the bond,vlan,neth configuration, as kYro things, it is a problem with the vlan.
we have neth8,neth9 which generates bonding0 and neth0, neth2 for bond2, so i am not sure how i configure socket_pcap.xml for several devices.
can i just duplicate the " " as often i have it made for every device or can i use several devices in one param setting?
from captagent.
@ciscospirit no, you cannot list neth0,neth1,...,netN in dev
.
You need to define multiple profiles for SIP, one each taking its interface, but this has some limitations, as socket_pcap is using libpcap library and the application is not multithreading.
So it could be that the application cannot hold too much traffic, but it's good to try.
Plus, if you have VLAN you must set it in the BPF filter.
This said, you can try something like this is socket_pcap.xml
<profile name="socketspcap_sip0" description="HEP Socket" enable="true" serial="2014010402">
<settings>
<param name="dev" value="neth0"/>
<param name="promisc" value="true"/>
<param name="reasm" value="false"/>
<param name="websocket-detection" value="false"/>
<param name="tcpdefrag" value="false"/>
<param name="erspan" value="false"/>
<!-- <param name="capture-filter" value="ip_to_ip"/> -->
<param name="capture-plan" value="sip_capture_plan.cfg"/>
<param name="filter">
<value>vlan and port 5060 and length >= 64</value>
</param>
</settings>
</profile>
<profile name="socketspcap_sip1" description="HEP Socket" enable="true" serial="2014010402">
<settings>
<param name="dev" value="neth1"/>
<param name="promisc" value="true"/>
<param name="reasm" value="false"/>
<param name="websocket-detection" value="false"/>
<param name="tcpdefrag" value="false"/>
<param name="erspan" value="false"/>
<!-- <param name="capture-filter" value="ip_to_ip"/> -->
<param name="capture-plan" value="sip_capture_plan.cfg"/>
<param name="filter">
<value>vlan and port 5060 and length >= 64</value>
</param>
</settings>
</profile>
NOTE: socketspcap_sip0 and socketspcap_sip1
NOTE1: it should be recommended to put the minimum length to filter out bad or corrupted files (the minimum size of an ISO-OSI packet with a payload is usually 64 bytes).
NOTE2: That VLAN BPF filter is intended to catch SIP traffic ONLY with VLAN.
If you want to catch both VLAN and not VLAN this should be the correct filter
(ip and port 5060 and len >= 64) or (vlan and port 5060 and len >= 64)
Let me know if this helps, anyway do some tst from your side, I'm sure there's a configuration setup that do the trick for you :)
Regards
from captagent.
Related Issues (20)
- captagent[3276431]: [ERR] protocol_sip.c:141 Couldnot find this call HOT 29
- Captagent Problem on Debian 11 HOT 5
- Problem with systemd captagent HOT 7
- TLS doesn't work for captagent HOT 1
- Multiple transport profiles HOT 6
- Captagent crashed: double free or corruption HOT 4
- Can not compile - Missing files? HOT 2
- Сaptagent does not capture traffic destined for the ipsec tunnel HOT 1
- captagent 6.4.1 DEB Missing the package dependencies: error while loading shared libraries: libfl.so.2: HOT 1
- Centos7 compile error HOT 8
- Is --enable-mysql option working ? HOT 4
- TODO: remove MySQL feature as not supported anymore
- "TLS has been not enabled." - even after fresh reinstall HOT 3
- Segmentation fault when specify a specific filter with Captagent 6.4.1 HOT 9
- Segmentation fault socket_pcap.c Captagent 6.4.1 HOT 3
- Segfault with captagent version 6.4.1 on Debian 11 HOT 16
- have problem with debian 12 and capagent HOT 2
- [ERR] protocol_sip.c:141 This is not DIAMETER HOT 7
- Missing some parts of SIP header and the entire SDP in HEP message HOT 17
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from captagent.