Marcelo Terres
2017-Aug-14 15:24 UTC
[asterisk-users] VoIP monitor and multiple RTP streams
Hello. Is someone here using VoIPmonitor? I am using just the sniffer and I found some pcap files that contain some odd streams. For example, I have a file with 3 streams, but the weird stuff is that 2 streams are the same (e.g., have the same source address and port and same destination address and port). Example: "Source Address","Source Port","Destination Address","Destination Port","SSRC","Payload","Packets","Lost","Max Delta (ms)","Max Jitter","Mean Jitter","Status" "6X.XXX.XXX.XXX",34170,"1XX.XXX.XXX.XXX",10602,277011456,"g711A",7289,0,21. 303999999996449,21.265543809819981,0.073286945955809715,"" "1XX.XXX.XXX.XXX",10602,"6X.XXX.XXX.XXX",34170,2020146713,"g711A",2099,0,36. 296999999998661,2.9025967411766738,0.97877393850963945,"" "1XX.XXX.XXX.XXX",10602,"6X.XXX.XXX.XXX",34170,325951803,"g711A",4949,0,41. 879000000000815,4.5846492231155924,1.0537488536922062,"" The only thing that I could notice is that the first packet that had the new SSRC (325951803) has the marker bit on, but I could not find a reason for the SSRC change. Any ideas of what could be causing that? Thanks. Regards, Marcelo H. Terres <mhterres at gmail.com> IM: mhterres at jabber.mundoopensource.com.br https://www.mundoopensource.com.br https://twitter.com/mhterres https://linkedin.com/in/marceloterres -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20170814/d83bbf13/attachment.html>
Marcelo, You need to look at the box changing the SSRC and figure out why it's changing it. Where are you seeing the multiple rows in MySQL or wireshark? On Mon, Aug 14, 2017 at 11:24 AM, Marcelo Terres <mhterres at gmail.com> wrote:> Hello. > > Is someone here using VoIPmonitor? > > I am using just the sniffer and I found some pcap files that contain some > odd streams. > > For example, I have a file with 3 streams, but the weird stuff is that 2 > streams are the same (e.g., have the same source address and port and same > destination address and port). > > Example: > > "Source Address","Source Port","Destination Address","Destination > Port","SSRC","Payload","Packets","Lost","Max Delta (ms)","Max > Jitter","Mean Jitter","Status" > "6X.XXX.XXX.XXX",34170,"1XX.XXX.XXX.XXX",10602,277011456,"g7 > 11A",7289,0,21.303999999996449,21.265543809819981,0.073286945955809715,"" > "1XX.XXX.XXX.XXX",10602,"6X.XXX.XXX.XXX",34170,2020146713," > g711A",2099,0,36.296999999998661,2.9025967411766738,0.97877393850963945,"" > "1XX.XXX.XXX.XXX",10602,"6X.XXX.XXX.XXX",34170,325951803,"g7 > 11A",4949,0,41.879000000000815,4.5846492231155924,1.0537488536922062,"" > > The only thing that I could notice is that the first packet that had the > new SSRC (325951803) has the marker bit on, but I could not find a reason > for the SSRC change. > > Any ideas of what could be causing that? > > Thanks. > > Regards, > > Marcelo H. Terres <mhterres at gmail.com> > IM: mhterres at jabber.mundoopensource.com.br > https://www.mundoopensource.com.br > https://twitter.com/mhterres > https://linkedin.com/in/marceloterres > > -- > _____________________________________________________________________ > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > > Check out the new Asterisk community forum at: https://community.asterisk. > org/ > > New to Asterisk? Start here: > https://wiki.asterisk.org/wiki/display/AST/Getting+Started > > asterisk-users mailing list > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users >-------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20170814/cb58c36a/attachment.html>
Marcelo Terres
2017-Aug-15 08:18 UTC
[asterisk-users] VoIP monitor and multiple RTP streams
Hello Dovid. I tried to figure it out, but to be honest I could not find a reason for the change. The lines that I sent are the RTP streams detected by Wireshark. Regards, Marcelo H. Terres <mhterres at gmail.com> IM: mhterres at jabber.mundoopensource.com.br https://www.mundoopensource.com.br https://twitter.com/mhterres https://linkedin.com/in/marceloterres On 14 August 2017 at 17:52, Dovid Bender <dovid at telecurve.com> wrote:> Marcelo, > > You need to look at the box changing the SSRC and figure out why it's > changing it. Where are you seeing the multiple rows in MySQL or wireshark? > > > On Mon, Aug 14, 2017 at 11:24 AM, Marcelo Terres <mhterres at gmail.com> > wrote: > >> Hello. >> >> Is someone here using VoIPmonitor? >> >> I am using just the sniffer and I found some pcap files that contain some >> odd streams. >> >> For example, I have a file with 3 streams, but the weird stuff is that 2 >> streams are the same (e.g., have the same source address and port and same >> destination address and port). >> >> Example: >> >> "Source Address","Source Port","Destination Address","Destination >> Port","SSRC","Payload","Packets","Lost","Max Delta (ms)","Max >> Jitter","Mean Jitter","Status" >> "6X.XXX.XXX.XXX",34170,"1XX.XXX.XXX.XXX",10602,277011456,"g7 >> 11A",7289,0,21.303999999996449,21.265543809819981,0.073286945955809715,"" >> "1XX.XXX.XXX.XXX",10602,"6X.XXX.XXX.XXX",34170,2020146713,"g >> 711A",2099,0,36.296999999998661,2.9025967411766738,0.97877393850963945,"" >> "1XX.XXX.XXX.XXX",10602,"6X.XXX.XXX.XXX",34170,325951803,"g7 >> 11A",4949,0,41.879000000000815,4.5846492231155924,1.0537488536922062,"" >> >> The only thing that I could notice is that the first packet that had the >> new SSRC (325951803) has the marker bit on, but I could not find a reason >> for the SSRC change. >> >> Any ideas of what could be causing that? >> >> Thanks. >> >> Regards, >> >> Marcelo H. Terres <mhterres at gmail.com> >> IM: mhterres at jabber.mundoopensource.com.br >> https://www.mundoopensource.com.br >> https://twitter.com/mhterres >> https://linkedin.com/in/marceloterres >> >> -- >> _____________________________________________________________________ >> -- Bandwidth and Colocation Provided by http://www.api-digital.com -- >> >> Check out the new Asterisk community forum at: >> https://community.asterisk.org/ >> >> New to Asterisk? Start here: >> https://wiki.asterisk.org/wiki/display/AST/Getting+Started >> >> asterisk-users mailing list >> To UNSUBSCRIBE or update options visit: >> http://lists.digium.com/mailman/listinfo/asterisk-users >> > > > -- > _____________________________________________________________________ > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > > Check out the new Asterisk community forum at: https://community.asterisk. > org/ > > New to Asterisk? Start here: > https://wiki.asterisk.org/wiki/display/AST/Getting+Started > > asterisk-users mailing list > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users >-------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20170815/97d2262b/attachment.html>