SIP1 UDP Not Working, SIP2 TLS Seamless


#1

Hi,

i have been mind boggled for days. All phones/pbx were working fine till i think there’s a hack attempt and i had to resetup from scratch again. but my issue now is like this.

Im using UCM6102 (pbx) and GXP 1625 (phone).

I have 2 Sip.
SIP 1: UDP
SIP 2: TLS

i have setup both trunks, and both appears to be registered in the dashboard.

Whenever i try to call the SIP2 trunk, it work seamlessly. But when i try to call the SIP1 Trunk, sometimes it just wont get through. after many tries, it will get through, sometimes it just get through just fine.

I have read many topics from here, keep-alive settings, or nat settings, etc but the issue still persist.

is there any way i can extract information from the system so that the experts here can help me find out the issue?

previously everything was working seamlessly. and i hate myself for not having a backup of the config.

notes: im using the latest firmware for both pbx and phone.
SIP ALG is disabled in my router.


#2

my logic is this, if my SIP2 can receive calls seamlessly, then my setup should be correct and the keep alive settings as default should be okay.

then the only remaining culprit could be udp/tls issue, or my sip provider server is facing intermittent load?

please correct me if im wrong. i have been battling with this issue for the past few days. have done numerous factory reset both pbx and phones. im going crazy. argh @@


#3

here is a user-user forum, the experts are the local Professionals working on this, you can also open a ticket to GS.
That said you don’t have enough elements to give you an answer, it’s important that you have made the NAT rules on the Firewall if you don’t want hacker attacks, you have to start from this point.


#4

how do i make NAT rules on the firewall? any examples?


#5

https://www.ittsystems.com/access-control-list-acl/


#6

thanks, but how about my main issue?

tls sip is working everytime but not the sip udp.


#7

I have already written above that if not by the details and scenario you can not understand much


#8

err, where have you written it? do you have a link to it?


#9

here, take a good look


#10

what information do you need? i will try to provide.


#11

I don’t need anything, you have a problem, if you give the details someone can help you.


#12

and my question is what kind of details is necessary for me to get help? im not a voip provider or provide installation services. im using in my office and had no problems prior for the past 3-4 years. im not sure what else can be done.


#13

Can you advise if the two trunks are from 2 different providers?

Is the Sip1 trunk a register trunk and if so, does it show registered?

Can you call out SIP 1?

On the inbound route from SIP 1, what does the DID look like?


#14

yes, they are 2 different providers,

im able to call out without any problems from both trunks.

this is my inbound rule for SIP1. i have tried _X. also same result. the SIP1 trunk comes with 4 DID, so i made _032730. so that i can direct them to different extensions.


#15

Do a network capture and see if the call arrives to the UCM and what the response from the UCM is. Then look at the number as contained in the From and URI headers and match it exactly in the inbound DID and then set the inbound mode in the trunk settings to either From or URI, whichever header’s number you duplicated in the DID.


#16
|1|0.000000|192.168.1.168|121.121.57.219|TLSv1.2|305|Application Data|
|---|---|---|---|---|---|---|
|2|0.048700|121.121.57.219|192.168.1.168|TCP|60|1734 β†’ 9966 [ACK] Seq=1 Ack=252 Win=1024 Len=0|
|3|0.057500|121.121.57.219|192.168.1.168|TLSv1.2|742|Application Data|
|4|0.057625|192.168.1.168|121.121.57.219|TCP|54|9966 β†’ 1734 [ACK] Seq=252 Ack=689 Win=665 Len=0|
|5|0.077550|192.168.1.168|121.121.57.219|TLSv1.2|295|Application Data|
|6|0.126950|121.121.57.219|192.168.1.168|TCP|60|1734 β†’ 9966 [ACK] Seq=689 Ack=493 Win=1023 Len=0|
|7|0.186200|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|8|0.334800|192.168.1.110|192.168.1.168|SIP|549|Request: OPTIONS sip:192.168.1.168:5068 | |
|9|0.346175|192.168.1.168|192.168.1.110|SIP|849|Status: 200 OK | |
|10|2.186200|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|11|4.186150|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|12|4.813250|103.18.91.174|192.168.1.168|SIP/SDP|960|Request: INVITE sip:0397790388@202.186.113.218 | |
|13|4.829950|192.168.1.168|103.18.91.174|SIP|393|Status: 100 Trying | |
|14|5.206625|192.168.1.168|192.168.1.110|SIP/SDP|1089|Request: INVITE sip:1001@192.168.1.110:5068 | |
|15|5.226025|192.168.1.110|192.168.1.168|SIP|528|Status: 100 Trying | |
|16|5.251025|192.168.1.110|192.168.1.168|SIP|612|Status: 180 Ringing | |
|17|5.265700|192.168.1.168|103.18.91.174|SIP|600|Status: 180 Ringing | |
|18|5.321350|121.121.57.219|192.168.1.168|CLASSIC-STUN|62|Message: Binding Request|
|19|5.350850|Grandstr_68:c6:af|Grandstr_81:64:4a|ARP|42|Who has 192.168.1.110? Tell 192.168.1.168|
|20|5.351275|Grandstr_81:64:4a|Grandstr_68:c6:af|ARP|60|192.168.1.110 is at 00:0b:82:81:64:4a|
|21|6.084150|192.168.1.168|121.121.57.219|TLSv1.2|85|Encrypted Alert|
|22|6.084375|192.168.1.168|121.121.57.219|TCP|54|9966 β†’ 1734 [FIN, ACK] Seq=524 Ack=689 Win=665 Len=0|
|23|6.092950|121.121.57.219|192.168.1.168|TCP|60|1734 β†’ 9966 [ACK] Seq=689 Ack=524 Win=1023 Len=0|
|24|6.186100|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|25|6.311150|192.168.1.168|121.121.57.219|TCP|54|[TCP Retransmission] 9966 β†’ 1734 [FIN, ACK] Seq=524 Ack=689 Win=665 Len=0|
|26|6.494375|121.121.57.219|192.168.1.168|TCP|60|1734 β†’ 9966 [FIN, ACK] Seq=689 Ack=525 Win=0 Len=0|
|27|6.494575|192.168.1.168|121.121.57.219|TCP|54|9966 β†’ 1734 [ACK] Seq=525 Ack=690 Win=665 Len=0|
|28|6.502550|121.121.57.219|192.168.1.168|TCP|60|1734 β†’ 9966 [RST] Seq=690 Win=0 Len=0|
|29|8.186125|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|30|8.256100|ASUSTekC_51:85:28|LLDP_Multicast|LLDP|208|MA/f8:32:e4:51:85:28 MA/f8:32:e4:51:85:28 20 SysN=RT-AC88U SysD= Linux 2.6.36.4brcmarm #1 SMP PREEMPT Mon Mar 30 11:59:04 CST 2020 armv7l |
|31|10.186100|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|32|10.352200|192.168.1.110|192.168.1.168|SIP|549|Request: OPTIONS sip:192.168.1.168:5068 | |
|33|10.361900|192.168.1.168|192.168.1.110|SIP|850|Status: 200 OK | |
|34|10.940850|103.25.200.175|192.168.1.168|TLSv1|204|Application Data, Application Data|
|35|10.946475|192.168.1.168|192.168.1.1|DNS|88|Standard query 0x01c8 SRV _sips._tcp.mt1.voxclaire.com|
|36|10.950375|192.168.1.168|103.25.200.175|TLSv1|204|Application Data, Application Data|
|37|10.960525|103.25.200.175|192.168.1.168|TCP|66|5061 β†’ 60239 [ACK] Seq=139 Ack=139 Win=330 Len=0 TSval=46305818 TSecr=1224294|
|38|10.961475|192.168.1.1|192.168.1.168|DNS|177|Standard query response 0x01c8 No such name SRV _sips._tcp.mt1.voxclaire.com SOA ns1.servconfig.com|
|39|10.962375|192.168.1.168|192.168.1.1|DNS|77|Standard query 0x01c9 A mt1.voxclaire.com|
|40|10.962750|192.168.1.168|192.168.1.1|DNS|77|Standard query 0x01ca AAAA mt1.voxclaire.com|
|41|10.962925|192.168.1.1|192.168.1.168|DNS|93|Standard query response 0x01c9 A mt1.voxclaire.com A 103.25.200.175|
|42|11.165650|192.168.1.1|192.168.1.168|DNS|166|Standard query response 0x01ca AAAA mt1.voxclaire.com SOA ns1.servconfig.com|
|43|11.174000|192.168.1.168|103.25.200.175|TLSv1|220|Application Data, Application Data|
|44|11.184000|103.25.200.175|192.168.1.168|TCP|66|5061 β†’ 60239 [ACK] Seq=139 Ack=293 Win=330 Len=0 TSval=46306042 TSecr=1224317|
|45|11.184275|103.25.200.175|192.168.1.168|TLSv1|236|Application Data, Application Data|
|46|11.188975|192.168.1.168|103.25.200.175|TLSv1|236|Application Data, Application Data|
|47|11.199500|103.25.200.175|192.168.1.168|TLSv1|204|Application Data, Application Data|
|48|11.204175|192.168.1.168|103.25.200.175|TLSv1|204|Application Data, Application Data|
|49|11.214375|103.25.200.175|192.168.1.168|TLSv1|326|Application Data, Application Data, Application Data, Application Data|
|50|11.229075|192.168.1.168|103.25.200.175|TLSv1|204|Application Data, Application Data|
|51|11.278925|103.25.200.175|192.168.1.168|TCP|66|5061 β†’ 60239 [ACK] Seq=707 Ack=739 Win=330 Len=0 TSval=46306137 TSecr=1224322|
|52|12.186050|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|53|12.727250|192.168.1.168|192.168.1.110|SIP|1232|Request: OPTIONS sip:1001@192.168.1.110:5068 | |
|54|12.734925|192.168.1.110|192.168.1.168|SIP|533|Status: 200 OK | |
|55|14.186025|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|56|14.357775|192.168.1.110|192.168.1.168|CLASSIC-STUN|62|Message: Binding Request|
|57|15.796100|103.18.91.174|192.168.1.168|SIP|387|Request: CANCEL sip:0397790388@202.186.113.218 | |
|58|15.804525|192.168.1.168|103.18.91.174|SIP|430|Status: 200 OK | |
|59|15.805600|192.168.1.168|103.18.91.174|SIP|563|Status: 487 Request Terminated | |
|60|15.808650|103.18.91.174|192.168.1.168|SIP|473|Request: ACK sip:0176980075@202.186.113.218:5068 | |
|61|15.814325|192.168.1.168|192.168.1.110|SIP|469|Request: CANCEL sip:1001@192.168.1.110:5068 | |
|62|15.836000|192.168.1.110|192.168.1.168|SIP|581|Status: 200 OK | |
|63|15.851375|192.168.1.110|192.168.1.168|SIP|597|Status: 487 Request Terminated | |
|64|15.860475|192.168.1.168|192.168.1.110|SIP|455|Request: ACK sip:1001@192.168.1.110:5068 | |
|65|16.186000|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|66|18.185975|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|67|18.265950|ASUSTekC_51:85:28|LLDP_Multicast|LLDP|208|MA/f8:32:e4:51:85:28 MA/f8:32:e4:51:85:28 20 SysN=RT-AC88U SysD= Linux 2.6.36.4brcmarm #1 SMP PREEMPT Mon Mar 30 11:59:04 CST 2020 armv7l |
|68|19.361300|192.168.1.168|173.254.235.79|CLASSIC-STUN|62|Message: Binding Request|
|69|19.545975|173.254.235.79|192.168.1.168|CLASSIC-STUN|110|Message: Binding Response|
|70|20.185950|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|71|20.368175|192.168.1.110|192.168.1.168|SIP|550|Request: OPTIONS sip:192.168.1.168:5068 | |
|72|20.376775|192.168.1.168|192.168.1.110|SIP|851|Status: 200 OK | |
|73|20.841475|Grandstr_81:64:4a|Grandstr_68:c6:af|ARP|60|Who has 192.168.1.168? Tell 192.168.1.110|
|74|20.841550|Grandstr_68:c6:af|Grandstr_81:64:4a|ARP|42|192.168.1.168 is at 00:0b:82:68:c6:af|
|75|22.185925|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|76|24.185900|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|77|24.555875|ASUSTekC_51:85:28|Grandstr_68:c6:af|ARP|60|Who has 192.168.1.168? Tell 192.168.1.1|
|78|24.555925|Grandstr_68:c6:af|ASUSTekC_51:85:28|ARP|42|192.168.1.168 is at 00:0b:82:68:c6:af|
|79|25.343050|121.121.57.219|192.168.1.168|CLASSIC-STUN|62|Message: Binding Request|
|80|26.185875|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|81|26.346250|Grandstr_7a:1d:28|LLDP_Multicast|LLDP|256|NA/192.168.1.229 MA/00:0b:82:7a:1d:28 120 SysN=GXP1625_00:0b:82:7a:1d:28 SysD=GXP1625 1.0.4.140 |
|82|26.346775|Grandstr_7a:1d:28|CDP/VTP/DTP/PAgP/UDLD|CDP|127|Device ID: GXP1625_00:0b:82:7a:1d:28  Port ID: eth0  |
|83|26.351025|Grandstr_81:64:4a|LLDP_Multicast|LLDP|256|NA/192.168.1.110 MA/00:0b:82:81:64:4a 120 SysN=GXP1625_00:0b:82:81:64:4a SysD=GXP1625 1.0.4.140 |
|84|26.351750|Grandstr_81:64:4a|CDP/VTP/DTP/PAgP/UDLD|CDP|127|Device ID: GXP1625_00:0b:82:81:64:4a  Port ID: eth0  |
|85|26.586975|192.168.1.1|239.255.255.250|SSDP|424|NOTIFY * HTTP/1.1 |
|86|26.587525|192.168.1.1|239.255.255.250|SSDP|496|NOTIFY * HTTP/1.1 |
|87|26.588050|192.168.1.1|239.255.255.250|SSDP|433|NOTIFY * HTTP/1.1 |
|88|26.588575|192.168.1.1|239.255.255.250|SSDP|492|NOTIFY * HTTP/1.1 |
|89|26.589075|192.168.1.1|239.255.255.250|SSDP|433|NOTIFY * HTTP/1.1 |
|90|26.589575|192.168.1.1|239.255.255.250|SSDP|472|NOTIFY * HTTP/1.1 |
|91|26.590025|192.168.1.1|239.255.255.250|SSDP|433|NOTIFY * HTTP/1.1 |
|92|26.590525|192.168.1.1|239.255.255.250|SSDP|504|NOTIFY * HTTP/1.1 |
|93|26.591050|192.168.1.1|239.255.255.250|SSDP|486|NOTIFY * HTTP/1.1 |
|94|26.591475|192.168.1.1|239.255.255.250|SSDP|488|NOTIFY * HTTP/1.1 |
|95|26.591950|192.168.1.1|239.255.255.250|SSDP|488|NOTIFY * HTTP/1.1 |
|96|26.843650|192.168.1.1|239.255.255.250|SSDP|488|NOTIFY * HTTP/1.1 |
|97|26.844150|192.168.1.1|239.255.255.250|SSDP|488|NOTIFY * HTTP/1.1 |
|98|26.844575|192.168.1.1|239.255.255.250|SSDP|486|NOTIFY * HTTP/1.1 |
|99|26.845025|192.168.1.1|239.255.255.250|SSDP|504|NOTIFY * HTTP/1.1 |
|100|26.845425|192.168.1.1|239.255.255.250|SSDP|433|NOTIFY * HTTP/1.1 |
|101|26.845900|192.168.1.1|239.255.255.250|SSDP|472|NOTIFY * HTTP/1.1 |
|102|26.846450|192.168.1.1|239.255.255.250|SSDP|433|NOTIFY * HTTP/1.1 |
|103|26.846900|192.168.1.1|239.255.255.250|SSDP|492|NOTIFY * HTTP/1.1 |
|104|26.847350|192.168.1.1|239.255.255.250|SSDP|433|NOTIFY * HTTP/1.1 |
|105|26.847450|192.168.1.1|239.255.255.250|SSDP|496|NOTIFY * HTTP/1.1 |
|106|26.847500|192.168.1.1|239.255.255.250|SSDP|424|NOTIFY * HTTP/1.1 |
|107|28.185850|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|108|28.265850|ASUSTekC_51:85:28|LLDP_Multicast|LLDP|208|MA/f8:32:e4:51:85:28 MA/f8:32:e4:51:85:28 20 SysN=RT-AC88U SysD= Linux 2.6.36.4brcmarm #1 SMP PREEMPT Mon Mar 30 11:59:04 CST 2020 armv7l |
|109|30.019475|iRobot_07:ac:48|Broadcast|ARP|60|Who has 192.168.1.1? Tell 192.168.1.154|
|110|30.185800|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|111|30.384100|192.168.1.110|192.168.1.168|SIP|549|Request: OPTIONS sip:192.168.1.168:5068 | |
|112|30.396800|192.168.1.168|192.168.1.110|SIP|849|Status: 200 OK | |
|113|31.428925|121.121.57.219|192.168.1.168|TCP|66|1104 β†’ 9966 [SYN] Seq=0 Win=64240 Len=0 MSS=1400 WS=256 SACK_PERM=1|
|114|31.429175|192.168.1.168|121.121.57.219|TCP|66|9966 β†’ 1104 [SYN, ACK] Seq=0 Ack=1 Win=14600 Len=0 MSS=1460 SACK_PERM=1 WS=32|
|115|31.437875|121.121.57.219|192.168.1.168|TCP|60|1104 β†’ 9966 [ACK] Seq=1 Ack=1 Win=263168 Len=0|
|116|31.443325|121.121.57.219|192.168.1.168|TLSv1.2|625|Client Hello|
|117|31.443475|192.168.1.168|121.121.57.219|TCP|54|9966 β†’ 1104 [ACK] Seq=1 Ack=572 Win=15744 Len=0|
|118|31.444750|192.168.1.168|121.121.57.219|TLSv1.2|191|Server Hello, Change Cipher Spec, Encrypted Handshake Message|
|119|31.455375|121.121.57.219|192.168.1.168|TLSv1.2|105|Change Cipher Spec, Encrypted Handshake Message|
|120|31.459775|121.121.57.219|192.168.1.168|TLSv1.2|716|Application Data|
|121|31.459875|192.168.1.168|121.121.57.219|TCP|54|9966 β†’ 1104 [ACK] Seq=138 Ack=1285 Win=17088 Len=0|
|122|31.475500|192.168.1.168|121.121.57.219|TLSv1.2|280|Application Data|
|123|31.524750|121.121.57.219|192.168.1.168|TCP|60|1104 β†’ 9966 [ACK] Seq=1285 Ack=364 Win=262656 Len=0|
|124|32.185800|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|125|32.240250|fe80::fe15:b4ff:fe3e:462|ff02::1:2|DHCPv6|132|Solicit XID: 0x29fc81 CID: 00030001fc15b43e0462 |
|126|34.185775|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|127|34.388075|192.168.1.110|192.168.1.168|CLASSIC-STUN|62|Message: Binding Request|
|128|36.185750|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|129|37.481400|192.168.1.168|121.121.57.219|TLSv1.2|85|Encrypted Alert|
|130|37.481650|192.168.1.168|121.121.57.219|TCP|54|9966 β†’ 1104 [FIN, ACK] Seq=395 Ack=1285 Win=17088 Len=0|
|131|37.490250|121.121.57.219|192.168.1.168|TCP|60|1104 β†’ 9966 [ACK] Seq=1285 Ack=395 Win=262656 Len=0|
|132|37.691075|192.168.1.168|121.121.57.219|TCP|54|[TCP Retransmission] 9966 β†’ 1104 [FIN, ACK] Seq=395 Ack=1285 Win=17088 Len=0|
|133|37.776275|192.168.1.168|103.18.91.174|SIP|627|Request: REGISTER sip:103.18.91.174  (1 binding) | |
|134|37.779550|103.18.91.174|192.168.1.168|SIP|630|Status: 401 Unauthorized | |
|135|37.790200|192.168.1.168|103.18.91.174|SIP|793|Request: REGISTER sip:103.18.91.174  (1 binding) | |
|136|37.795125|103.18.91.174|192.168.1.168|SIP|655|Status: 200 OK  (1 binding) | |
|137|37.892300|121.121.57.219|192.168.1.168|TCP|60|1104 β†’ 9966 [FIN, ACK] Seq=1285 Ack=396 Win=0 Len=0|
|138|37.892525|192.168.1.168|121.121.57.219|TCP|54|9966 β†’ 1104 [ACK] Seq=396 Ack=1286 Win=17088 Len=0|
|139|37.900775|121.121.57.219|192.168.1.168|TCP|60|1104 β†’ 9966 [RST] Seq=1286 Win=0 Len=0|
|140|38.185725|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|141|38.265725|ASUSTekC_51:85:28|LLDP_Multicast|LLDP|208|MA/f8:32:e4:51:85:28 MA/f8:32:e4:51:85:28 20 SysN=RT-AC88U SysD= Linux 2.6.36.4brcmarm #1 SMP PREEMPT Mon Mar 30 11:59:04 CST 2020 armv7l |
|142|40.185725|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|143|40.399375|192.168.1.110|192.168.1.168|SIP|551|Request: OPTIONS sip:192.168.1.168:5068 | |
|144|40.408975|192.168.1.168|192.168.1.110|SIP|852|Status: 200 OK | |
|145|42.185650|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|146|44.185625|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|147|45.362400|121.121.57.219|192.168.1.168|CLASSIC-STUN|62|Message: Binding Request|
|148|46.185600|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|149|48.185575|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|150|48.265575|ASUSTekC_51:85:28|LLDP_Multicast|LLDP|208|MA/f8:32:e4:51:85:28 MA/f8:32:e4:51:85:28 20 SysN=RT-AC88U SysD= Linux 2.6.36.4brcmarm #1 SMP PREEMPT Mon Mar 30 11:59:04 CST 2020 armv7l |
|151|49.361500|192.168.1.168|173.254.235.79|CLASSIC-STUN|62|Message: Binding Request|
|152|49.545975|173.254.235.79|192.168.1.168|CLASSIC-STUN|110|Message: Binding Response|
|153|50.055625|Micro-St_21:07:b7|LLDP_Multicast|LLDP|60|MA/30:9c:23:21:07:b7 MA/30:9c:23:21:07:b7 3601 |
|154|50.185525|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|155|50.412650|192.168.1.110|192.168.1.168|SIP|550|Request: OPTIONS sip:192.168.1.168:5068 | |
|156|50.419400|192.168.1.168|192.168.1.110|SIP|850|Status: 200 OK | |
|157|52.185525|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|158|52.264125|121.121.57.219|192.168.1.168|TCP|66|1202 β†’ 9966 [SYN] Seq=0 Win=64240 Len=0 MSS=1400 WS=256 SACK_PERM=1|
|159|52.264400|192.168.1.168|121.121.57.219|TCP|66|9966 β†’ 1202 [SYN, ACK] Seq=0 Ack=1 Win=14600 Len=0 MSS=1460 SACK_PERM=1 WS=32|
|160|52.272950|121.121.57.219|192.168.1.168|TCP|60|1202 β†’ 9966 [ACK] Seq=1 Ack=1 Win=263168 Len=0|
|161|52.279250|121.121.57.219|192.168.1.168|TLSv1.2|625|Client Hello|
|162|52.279375|192.168.1.168|121.121.57.219|TCP|54|9966 β†’ 1202 [ACK] Seq=1 Ack=572 Win=15744 Len=0|
|163|52.280850|192.168.1.168|121.121.57.219|TLSv1.2|191|Server Hello, Change Cipher Spec, Encrypted Handshake Message|
|164|52.291725|121.121.57.219|192.168.1.168|TLSv1.2|105|Change Cipher Spec, Encrypted Handshake Message|
|165|52.297925|121.121.57.219|192.168.1.168|TLSv1.2|732|Application Data|
|166|52.298025|192.168.1.168|121.121.57.219|TCP|54|9966 β†’ 1202 [ACK] Seq=138 Ack=1301 Win=17120 Len=0|
|167|52.309425|192.168.1.168|121.121.57.219|TLSv1.2|402|Application Data|
|168|52.360475|121.121.57.219|192.168.1.168|TCP|60|1202 β†’ 9966 [ACK] Seq=1301 Ack=486 Win=262656 Len=0|
|169|53.050650|121.121.57.219|192.168.1.168|TLSv1.2|171|Application Data|
|170|53.052550|192.168.1.168|121.121.57.219|TLSv1.2|191|Application Data|
|171|53.102425|121.121.57.219|192.168.1.168|TCP|60|1320 β†’ 9966 [ACK] Seq=118 Ack=138 Win=1024 Len=0|
|172|54.185500|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|173|54.418625|192.168.1.110|192.168.1.168|CLASSIC-STUN|62|Message: Binding Request|
|174|54.555475|ASUSTekC_51:85:28|Grandstr_68:c6:af|ARP|60|Who has 192.168.1.168? Tell 192.168.1.1|
|175|54.555550|Grandstr_68:c6:af|ASUSTekC_51:85:28|ARP|42|192.168.1.168 is at 00:0b:82:68:c6:af|
|176|55.420425|Grandstr_81:64:4a|Grandstr_68:c6:af|ARP|60|Who has 192.168.1.168? Tell 192.168.1.110|
|177|55.420500|Grandstr_68:c6:af|Grandstr_81:64:4a|ARP|42|192.168.1.168 is at 00:0b:82:68:c6:af|
|178|56.185450|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|179|57.134325|Grandstr_7a:1d:28|LLDP_Multicast|LLDP|256|NA/192.168.1.229 MA/00:0b:82:7a:1d:28 120 SysN=GXP1625_00:0b:82:7a:1d:28 SysD=GXP1625 1.0.4.140 |
|180|57.134675|Grandstr_7a:1d:28|CDP/VTP/DTP/PAgP/UDLD|CDP|127|Device ID: GXP1625_00:0b:82:7a:1d:28  Port ID: eth0  |
|181|57.138225|Grandstr_81:64:4a|LLDP_Multicast|LLDP|256|NA/192.168.1.110 MA/00:0b:82:81:64:4a 120 SysN=GXP1625_00:0b:82:81:64:4a SysD=GXP1625 1.0.4.140 |
|182|57.138600|Grandstr_81:64:4a|CDP/VTP/DTP/PAgP/UDLD|CDP|127|Device ID: GXP1625_00:0b:82:81:64:4a  Port ID: eth0  |
|183|58.057300|192.168.1.168|121.121.57.219|TLSv1.2|85|Encrypted Alert|
|184|58.057525|192.168.1.168|121.121.57.219|TCP|54|9966 β†’ 1202 [FIN, ACK] Seq=517 Ack=1301 Win=17120 Len=0|
|185|58.066100|121.121.57.219|192.168.1.168|TCP|60|1202 β†’ 9966 [ACK] Seq=1301 Ack=517 Win=262656 Len=0|
|186|58.185425|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|187|58.275450|ASUSTekC_51:85:28|LLDP_Multicast|LLDP|208|MA/f8:32:e4:51:85:28 MA/f8:32:e4:51:85:28 20 SysN=RT-AC88U SysD= Linux 2.6.36.4brcmarm #1 SMP PREEMPT Mon Mar 30 11:59:04 CST 2020 armv7l |
|188|58.281025|192.168.1.168|121.121.57.219|TCP|54|[TCP Retransmission] 9966 β†’ 1202 [FIN, ACK] Seq=517 Ack=1301 Win=17120 Len=0|
|189|58.467550|121.121.57.219|192.168.1.168|TCP|60|1202 β†’ 9966 [FIN, ACK] Seq=1301 Ack=518 Win=0 Len=0|
|190|58.467750|192.168.1.168|121.121.57.219|TCP|54|9966 β†’ 1202 [ACK] Seq=518 Ack=1302 Win=17120 Len=0|
|191|58.476050|121.121.57.219|192.168.1.168|TCP|60|1202 β†’ 9966 [RST] Seq=1302 Win=0 Len=0|
|192|59.835175|103.25.200.175|192.168.1.168|TLSv1|460|Application Data, Application Data|
|193|59.848100|192.168.1.168|103.25.200.175|TLSv1|236|Application Data, Application Data|
|194|59.858375|103.25.200.175|192.168.1.168|TCP|66|5061 β†’ 60239 [ACK] Seq=1101 Ack=909 Win=330 Len=0 TSval=46354717 TSecr=1229184|
|195|60.185425|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|196|60.227125|192.168.1.168|121.121.57.219|SIP/SDP|1154|Request: INVITE sip:1002@121.121.57.219:2633 | |
|197|60.257075|121.121.57.219|192.168.1.168|SIP|548|Status: 100 Trying | |
|198|60.279800|121.121.57.219|192.168.1.168|SIP|630|Status: 180 Ringing | |
|199|60.294175|192.168.1.168|103.25.200.175|TLSv1|204|Application Data, Application Data|
|200|60.304350|103.25.200.175|192.168.1.168|TCP|66|5061 β†’ 60239 [ACK] Seq=1101 Ack=1047 Win=330 Len=0 TSval=46355163 TSecr=1229229|
|201|60.428925|192.168.1.110|192.168.1.168|SIP|550|Request: OPTIONS sip:192.168.1.168:5068 | |
|202|60.433800|192.168.1.168|192.168.1.110|SIP|851|Status: 200 OK | |
|203|62.185375|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|204|63.414325|103.25.200.175|192.168.1.168|TLSv1|156|Application Data, Application Data|
|205|63.423525|192.168.1.168|103.25.200.175|TLSv1|156|Application Data, Application Data|
|206|63.433225|192.168.1.168|121.121.57.219|SIP|490|Request: CANCEL sip:1002@121.121.57.219:2633 | |
|207|63.433525|103.25.200.175|192.168.1.168|TCP|66|5061 β†’ 60239 [ACK] Seq=1191 Ack=1137 Win=330 Len=0 TSval=46358292 TSecr=1229542|
|208|63.433675|192.168.1.168|103.25.200.175|TLSv1|172|Application Data, Application Data|
|209|63.443700|103.25.200.175|192.168.1.168|TCP|66|5061 β†’ 60239 [ACK] Seq=1191 Ack=1243 Win=330 Len=0 TSval=46358302 TSecr=1229543|
|210|63.443875|103.25.200.175|192.168.1.168|TLSv1|204|Application Data, Application Data|
|211|63.454750|121.121.57.219|192.168.1.168|SIP|599|Status: 200 OK | |
|212|63.476050|121.121.57.219|192.168.1.168|SIP|615|Status: 487 Request Terminated | |
|213|63.480925|192.168.1.168|103.25.200.175|TCP|66|60239 β†’ 5061 [ACK] Seq=1243 Ack=1329 Win=2003 Len=0 TSval=1229548 TSecr=46358302|
|214|63.485600|192.168.1.168|121.121.57.219|SIP|476|Request: ACK sip:1002@121.121.57.219:2633 | |
|215|64.185350|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|216|65.385575|121.121.57.219|192.168.1.168|CLASSIC-STUN|62|Message: Binding Request|
|217|65.440850|Grandstr_68:c6:af|Grandstr_81:64:4a|ARP|42|Who has 192.168.1.110? Tell 192.168.1.168|
|218|65.441325|Grandstr_81:64:4a|Grandstr_68:c6:af|ARP|60|192.168.1.110 is at 00:0b:82:81:64:4a|
|219|66.185325|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|220|66.915725|121.121.57.219|192.168.1.168|TCP|66|1218 β†’ 9966 [SYN] Seq=0 Win=64240 Len=0 MSS=1400 WS=256 SACK_PERM=1|
|221|66.915975|192.168.1.168|121.121.57.219|TCP|66|9966 β†’ 1218 [SYN, ACK] Seq=0 Ack=1 Win=14600 Len=0 MSS=1460 SACK_PERM=1 WS=32|
|222|66.924775|121.121.57.219|192.168.1.168|TCP|60|1218 β†’ 9966 [ACK] Seq=1 Ack=1 Win=263168 Len=0|
|223|66.925000|121.121.57.219|192.168.1.168|TCP|66|1223 β†’ 9966 [SYN] Seq=0 Win=64240 Len=0 MSS=1400 WS=256 SACK_PERM=1|
|224|66.925150|192.168.1.168|121.121.57.219|TCP|66|9966 β†’ 1223 [SYN, ACK] Seq=0 Ack=1 Win=14600 Len=0 MSS=1460 SACK_PERM=1 WS=32|
|225|66.931550|121.121.57.219|192.168.1.168|TLSv1.2|625|Client Hello|
|226|66.931750|192.168.1.168|121.121.57.219|TCP|54|9966 β†’ 1218 [ACK] Seq=1 Ack=572 Win=15744 Len=0|
|227|66.933150|121.121.57.219|192.168.1.168|TCP|60|1223 β†’ 9966 [ACK] Seq=1 Ack=1 Win=263168 Len=0|
|228|66.933350|192.168.1.168|121.121.57.219|TLSv1.2|191|Server Hello, Change Cipher Spec, Encrypted Handshake Message|
|229|66.938650|121.121.57.219|192.168.1.168|TLSv1.2|625|Client Hello|
|230|66.938825|192.168.1.168|121.121.57.219|TCP|54|9966 β†’ 1223 [ACK] Seq=1 Ack=572 Win=15744 Len=0|
|231|66.940425|192.168.1.168|121.121.57.219|TLSv1.2|191|Server Hello, Change Cipher Spec, Encrypted Handshake Message|
|232|66.943975|121.121.57.219|192.168.1.168|TLSv1.2|105|Change Cipher Spec, Encrypted Handshake Message|
|233|66.950000|121.121.57.219|192.168.1.168|TLSv1.2|740|Application Data|
|234|66.950100|192.168.1.168|121.121.57.219|TCP|54|9966 β†’ 1218 [ACK] Seq=138 Ack=1309 Win=17120 Len=0|
|235|66.950425|121.121.57.219|192.168.1.168|TLSv1.2|105|Change Cipher Spec, Encrypted Handshake Message|
|236|66.954575|121.121.57.219|192.168.1.168|TLSv1.2|716|Application Data|
|237|66.954775|192.168.1.168|121.121.57.219|TCP|54|9966 β†’ 1223 [ACK] Seq=138 Ack=1285 Win=17088 Len=0|

im not sure what or how to read but from the looks of it, seems like the calls didnt make it to the UCM when it fails.

039779XXXX and 032730XXXX are numbers given by SIP1.
103.18.91.174 is my SIP1 provider.
mt1.voxclaire.com is my SIP2 provider


#17

this is a packet capture when i tried to make calls to 032730XXXX and it didnt get through at all. no ringing.

|1|0.000000|192.168.1.168|121.121.57.219|TCP|305|9966 β†’ 1194 [PSH, ACK] Seq=1 Ack=1 Win=666 Len=251 [TCP segment of a reassembled PDU]|
|---|---|---|---|---|---|---|
|2|0.039450|121.121.57.219|192.168.1.168|TCP|742|1194 β†’ 9966 [PSH, ACK] Seq=1 Ack=252 Win=1023 Len=688 [TCP segment of a reassembled PDU]|
|3|0.039650|192.168.1.168|121.121.57.219|TCP|54|9966 β†’ 1194 [ACK] Seq=252 Ack=689 Win=711 Len=0|
|4|0.059200|192.168.1.168|121.121.57.219|TCP|295|9966 β†’ 1194 [PSH, ACK] Seq=252 Ack=689 Win=711 Len=241 [TCP segment of a reassembled PDU]|
|5|0.107975|121.121.57.219|192.168.1.168|TCP|60|1194 β†’ 9966 [ACK] Seq=689 Ack=493 Win=1022 Len=0|
|6|0.114400|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|7|0.361275|192.168.1.110|192.168.1.168|CLASSIC-STUN|62|Message: Binding Request|
|8|2.114400|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|9|2.378375|Grandstr_68:c6:af|Grandstr_81:64:4a|ARP|42|Who has 192.168.1.110? Tell 192.168.1.168|
|10|2.378925|Grandstr_81:64:4a|Grandstr_68:c6:af|ARP|60|192.168.1.110 is at 00:0b:82:81:64:4a|
|11|4.114400|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|12|4.404400|ASUSTekC_51:85:28|LLDP_Multicast|LLDP|208|MA/f8:32:e4:51:85:28 MA/f8:32:e4:51:85:28 20 SysN=RT-AC88U SysD= Linux 2.6.36.4brcmarm #1 SMP PREEMPT Mon Mar 30 11:59:04 CST 2020 armv7l |
|13|5.194675|121.121.57.219|192.168.1.168|TCP|732|1194 β†’ 9966 [PSH, ACK] Seq=689 Ack=493 Win=1022 Len=678 [TCP segment of a reassembled PDU]|
|14|5.206250|192.168.1.168|121.121.57.219|TCP|402|9966 β†’ 1194 [PSH, ACK] Seq=493 Ack=1367 Win=756 Len=348 [TCP segment of a reassembled PDU]|
|15|5.260500|121.121.57.219|192.168.1.168|TCP|60|1194 β†’ 9966 [ACK] Seq=1367 Ack=841 Win=1028 Len=0|
|16|5.298775|192.168.1.168|173.254.235.79|CLASSIC-STUN|62|Message: Binding Request|
|17|5.483225|173.254.235.79|192.168.1.168|CLASSIC-STUN|110|Message: Binding Response|
|18|5.980950|121.121.57.219|192.168.1.168|TLSv1.2|171|Application Data|
|19|5.982725|192.168.1.168|121.121.57.219|TLSv1.2|191|Application Data|
|20|6.032575|121.121.57.219|192.168.1.168|TCP|60|1320 β†’ 9966 [ACK] Seq=118 Ack=138 Win=1028 Len=0|
|21|6.114325|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|22|7.374900|192.168.1.110|192.168.1.168|SIP|550|Request: OPTIONS sip:192.168.1.168:5068 | |
|23|7.383600|192.168.1.168|192.168.1.110|SIP|851|Status: 200 OK | |
|24|8.114325|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|25|8.358575|121.121.57.219|192.168.1.168|TCP|716|1194 β†’ 9966 [PSH, ACK] Seq=1367 Ack=841 Win=1028 Len=662 [TCP segment of a reassembled PDU]|
|26|8.378150|192.168.1.168|121.121.57.219|TCP|280|9966 β†’ 1194 [PSH, ACK] Seq=841 Ack=2029 Win=801 Len=226 [TCP segment of a reassembled PDU]|
|27|8.432475|121.121.57.219|192.168.1.168|TCP|60|1194 β†’ 9966 [ACK] Seq=2029 Ack=1067 Win=1027 Len=0|
|28|10.114300|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|29|11.800925|192.168.1.168|192.168.1.1|DNS|88|Standard query 0x827f SRV _sips._tcp.mt1.voxclaire.com|
|30|11.815250|192.168.1.1|192.168.1.168|DNS|177|Standard query response 0x827f No such name SRV _sips._tcp.mt1.voxclaire.com SOA ns1.servconfig.com|
|31|11.815700|192.168.1.168|192.168.1.1|DNS|88|Standard query 0xf3a7 SRV _sips._tcp.mt1.voxclaire.com|
|32|11.830350|192.168.1.1|192.168.1.168|DNS|177|Standard query response 0xf3a7 No such name SRV _sips._tcp.mt1.voxclaire.com SOA ns1.servconfig.com|
|33|11.831025|192.168.1.168|192.168.1.1|DNS|77|Standard query 0x06df A mt1.voxclaire.com|
|34|11.831200|192.168.1.168|192.168.1.1|DNS|77|Standard query 0x6dcb AAAA mt1.voxclaire.com|
|35|11.831800|192.168.1.1|192.168.1.168|DNS|93|Standard query response 0x06df A mt1.voxclaire.com A 103.25.200.175|
|36|11.981100|121.121.57.219|192.168.1.168|CLASSIC-STUN|62|Message: Binding Request|
|37|12.033950|192.168.1.1|192.168.1.168|DNS|166|Standard query response 0x6dcb AAAA mt1.voxclaire.com SOA ns1.servconfig.com|
|38|12.114250|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|39|12.376950|Grandstr_81:64:4a|Grandstr_68:c6:af|ARP|60|Who has 192.168.1.168? Tell 192.168.1.110|
|40|12.377025|Grandstr_68:c6:af|Grandstr_81:64:4a|ARP|42|192.168.1.168 is at 00:0b:82:68:c6:af|
|41|12.483575|Grandstr_7a:1d:28|LLDP_Multicast|LLDP|256|NA/192.168.1.229 MA/00:0b:82:7a:1d:28 120 SysN=GXP1625_00:0b:82:7a:1d:28 SysD=GXP1625 1.0.4.140 |
|42|12.483925|Grandstr_7a:1d:28|CDP/VTP/DTP/PAgP/UDLD|CDP|127|Device ID: GXP1625_00:0b:82:7a:1d:28  Port ID: eth0  |
|43|12.486350|Grandstr_81:64:4a|LLDP_Multicast|LLDP|256|NA/192.168.1.110 MA/00:0b:82:81:64:4a 120 SysN=GXP1625_00:0b:82:81:64:4a SysD=GXP1625 1.0.4.140 |
|44|12.487750|Grandstr_81:64:4a|CDP/VTP/DTP/PAgP/UDLD|CDP|127|Device ID: GXP1625_00:0b:82:81:64:4a  Port ID: eth0  |
|45|13.109575|192.168.1.1|239.255.255.250|SSDP|424|NOTIFY * HTTP/1.1 |
|46|13.110125|192.168.1.1|239.255.255.250|SSDP|496|NOTIFY * HTTP/1.1 |
|47|13.110625|192.168.1.1|239.255.255.250|SSDP|433|NOTIFY * HTTP/1.1 |
|48|13.111150|192.168.1.1|239.255.255.250|SSDP|492|NOTIFY * HTTP/1.1 |
|49|13.111625|192.168.1.1|239.255.255.250|SSDP|433|NOTIFY * HTTP/1.1 |
|50|13.112150|192.168.1.1|239.255.255.250|SSDP|472|NOTIFY * HTTP/1.1 |
|51|13.112625|192.168.1.1|239.255.255.250|SSDP|433|NOTIFY * HTTP/1.1 |
|52|13.113150|192.168.1.1|239.255.255.250|SSDP|504|NOTIFY * HTTP/1.1 |
|53|13.113650|192.168.1.1|239.255.255.250|SSDP|486|NOTIFY * HTTP/1.1 |
|54|13.114175|192.168.1.1|239.255.255.250|SSDP|488|NOTIFY * HTTP/1.1 |
|55|13.114800|192.168.1.1|239.255.255.250|SSDP|488|NOTIFY * HTTP/1.1 |
|56|13.364250|ASUSTekC_51:85:28|Grandstr_68:c6:af|ARP|60|Who has 192.168.1.168? Tell 192.168.1.1|
|57|13.364325|Grandstr_68:c6:af|ASUSTekC_51:85:28|ARP|42|192.168.1.168 is at 00:0b:82:68:c6:af|
|58|13.366950|192.168.1.1|239.255.255.250|SSDP|488|NOTIFY * HTTP/1.1 |
|59|13.367450|192.168.1.1|239.255.255.250|SSDP|488|NOTIFY * HTTP/1.1 |
|60|13.367875|192.168.1.1|239.255.255.250|SSDP|486|NOTIFY * HTTP/1.1 |
|61|13.368375|192.168.1.1|239.255.255.250|SSDP|504|NOTIFY * HTTP/1.1 |
|62|13.368800|192.168.1.1|239.255.255.250|SSDP|433|NOTIFY * HTTP/1.1 |
|63|13.369250|192.168.1.1|239.255.255.250|SSDP|472|NOTIFY * HTTP/1.1 |
|64|13.369700|192.168.1.1|239.255.255.250|SSDP|433|NOTIFY * HTTP/1.1 |
|65|13.370150|192.168.1.1|239.255.255.250|SSDP|492|NOTIFY * HTTP/1.1 |
|66|13.370575|192.168.1.1|239.255.255.250|SSDP|433|NOTIFY * HTTP/1.1 |
|67|13.370675|192.168.1.1|239.255.255.250|SSDP|496|NOTIFY * HTTP/1.1 |
|68|13.370700|192.168.1.1|239.255.255.250|SSDP|424|NOTIFY * HTTP/1.1 |
|69|14.114250|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|70|14.383975|192.168.1.168|121.121.57.219|TCP|85|9966 β†’ 1194 [PSH, ACK] Seq=1067 Ack=2029 Win=801 Len=31 [TCP segment of a reassembled PDU]|
|71|14.384175|192.168.1.168|121.121.57.219|TCP|54|9966 β†’ 1194 [FIN, ACK] Seq=1098 Ack=2029 Win=801 Len=0|
|72|14.399100|121.121.57.219|192.168.1.168|TCP|60|1194 β†’ 9966 [ACK] Seq=2029 Ack=1098 Win=1027 Len=0|
|73|14.404250|ASUSTekC_51:85:28|LLDP_Multicast|LLDP|208|MA/f8:32:e4:51:85:28 MA/f8:32:e4:51:85:28 20 SysN=RT-AC88U SysD= Linux 2.6.36.4brcmarm #1 SMP PREEMPT Mon Mar 30 11:59:04 CST 2020 armv7l |
|74|14.628275|192.168.1.168|121.121.57.219|TCP|54|[TCP Retransmission] 9966 β†’ 1194 [FIN, ACK] Seq=1098 Ack=2029 Win=801 Len=0|
|75|14.800600|121.121.57.219|192.168.1.168|TCP|60|1194 β†’ 9966 [FIN, ACK] Seq=2029 Ack=1099 Win=0 Len=0|
|76|14.800775|192.168.1.168|121.121.57.219|TCP|54|9966 β†’ 1194 [ACK] Seq=1099 Ack=2030 Win=801 Len=0|
|77|14.809300|121.121.57.219|192.168.1.168|TCP|60|1194 β†’ 9966 [RST] Seq=2030 Win=0 Len=0|
|78|14.817500|192.168.1.168|103.25.200.175|TLSv1|140|Application Data, Application Data|
|79|14.827425|103.25.200.175|192.168.1.168|TCP|66|5061 β†’ 60239 [ACK] Seq=1 Ack=75 Win=330 Len=0 TSval=46983758 TSecr=1292087|
|80|16.114225|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|81|17.390750|192.168.1.110|192.168.1.168|SIP|551|Request: OPTIONS sip:192.168.1.168:5068 | |
|82|17.402725|192.168.1.168|192.168.1.110|SIP|852|Status: 200 OK | |
|83|18.114200|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|84|20.114150|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|85|20.394950|192.168.1.110|192.168.1.168|CLASSIC-STUN|62|Message: Binding Request|
|86|22.114150|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|87|24.025025|192.168.1.168|103.18.91.174|SIP|627|Request: REGISTER sip:103.18.91.174  (1 binding) | |
|88|24.028300|103.18.91.174|192.168.1.168|SIP|630|Status: 401 Unauthorized | |
|89|24.039025|192.168.1.168|103.18.91.174|SIP|793|Request: REGISTER sip:103.18.91.174  (1 binding) | |
|90|24.044125|103.18.91.174|192.168.1.168|SIP|655|Status: 200 OK  (1 binding) | |
|91|24.114125|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|92|24.414125|ASUSTekC_51:85:28|LLDP_Multicast|LLDP|208|MA/f8:32:e4:51:85:28 MA/f8:32:e4:51:85:28 20 SysN=RT-AC88U SysD= Linux 2.6.36.4brcmarm #1 SMP PREEMPT Mon Mar 30 11:59:04 CST 2020 armv7l |
|93|26.114100|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|94|27.409100|192.168.1.110|192.168.1.168|SIP|551|Request: OPTIONS sip:192.168.1.168:5068 | |
|95|27.416050|192.168.1.168|192.168.1.110|SIP|852|Status: 200 OK | |
|96|27.862550|iRobot_07:ac:48|Broadcast|ARP|60|Who has 192.168.1.1? Tell 192.168.1.154|
|97|28.114050|ASUSTekC_51:85:28|Spanning-tree-(for-bridges)_00|STP|60|Conf. Root = 32768/0/f8:32:e4:51:85:28  Cost = 0  Port = 0x8001|
|98|29.381650|121.121.57.219|192.168.1.168|TCP|66|1185 β†’ 9966 [SYN] Seq=0 Win=64240 Len=0 MSS=1400 WS=256 SACK_PERM=1|
|99|29.381925|192.168.1.168|121.121.57.219|TCP|66|9966 β†’ 1185 [SYN, ACK] Seq=0 Ack=1 Win=14600 Len=0 MSS=1460 SACK_PERM=1 WS=32|
|100|29.390700|121.121.57.219|192.168.1.168|TCP|60|1185 β†’ 9966 [ACK] Seq=1 Ack=1 Win=263168 Len=0|
|101|29.395975|121.121.57.219|192.168.1.168|TLSv1.2|625|Client Hello|
|102|29.396125|192.168.1.168|121.121.57.219|TCP|54|9966 β†’ 1185 [ACK] Seq=1 Ack=572 Win=15744 Len=0|
|103|29.397400|192.168.1.168|121.121.57.219|TLSv1.2|191|Server Hello, Change Cipher Spec, Encrypted Handshake Message|
|104|29.408250|121.121.57.219|192.168.1.168|TLSv1.2|105|Change Cipher Spec, Encrypted Handshake Message|
|105|29.411900|121.121.57.219|192.168.1.168|TLSv1.2|740|Application Data|
|106|29.412050|192.168.1.168|121.121.57.219|TCP|54|9966 β†’ 1185 [ACK] Seq=138 Ack=1309 Win=17120 Len=0|

#18

When you open the pcap file with Wirehshark, look at the top of the app and find β€œTelephony”. Once found then use the pull down and select β€œSIP Flows”. This will show you all the SIP messaging seen at the UCM interface.

As you are using UDP for this trunk, look at the SIP messaging and look for INVITE. If there are any, then hopefully it is coming from the provider in question. You can then use your cursor to highlight the entry and at then click on SIP Flow. This will provide a graphical diagram of the messaging back and forth and you should be able to see the an error code if there is one.

Make certain the provider is not blacklisted in the UCM in Fail2Ban. If you see the error let us know what it is and perhaps we can steer you in the right direction. If you do not see an INVITE, then either the router needs tweaking or a call to the provider may be in order.


#19

this is the sip flow when the call successfully go through


#20

call successfully go through