Hi Roel Just guessing: do you have conntrack enabled? If not, "modprobe nf_conntrack_netlink" (you can remove it and its dependencies later) What are the outputs of sysctl net.netfilter.nf_conntrack_count and sysctl net.netfilter.nf_conntrack_max when the problem shows up? cheers Ethy On Thu, 31 Mar 2016 12:17:12 +0000 "Dovid Bender" <dovid at telecurve.com> wrote:> Just guessing I would verify that the out of : iptables -L -nv > Shows no dropped packets, try disabling selinux as well as look at the limits > of the asterisk pid (cat /proc/<Asterisk PID>/limits). I know the defualt for > rhel is 1024 which was never enough for us. > > > Regards, > > Dovid > > -----Original Message----- > From: Roel van Meer <roel at 1afa.com> > Date: Thu, 31 Mar 2016 14:10:48 > To: <dovid at telecurve.com>; Asterisk Users Mailing List - Non-Commercial > Discussion<asterisk-users at lists.digium.com> Subject: Re: [asterisk-users] > Lost outgoing SIP packets > > Dovid Bender writes: > > > The tcpdump that you are running is on the Asterisk box or via port > > mirroring? > > It's on the asterisk box itself. > > I've already replaced the network card - no change. > > Thanks, > > Roel > > > > Regards, > > > > Dovid > > > > -----Original Message----- > > From: Roel van Meer <roel at 1afa.com> > > Sender: asterisk-users-bounces at lists.digium.comDate: Thu, 31 Mar 2016 > > 13:34:51 > > To: <asterisk-users at lists.digium.com> > > Reply-To: Asterisk Users Mailing List - Non-Commercial Discussion > > <asterisk-users at lists.digium.com> > > Subject: [asterisk-users] Lost outgoing SIP packets > > > > Hi list! > > > > I have a problem where SIP packets sent by Asterisk do not hit the wire, and > > I don't know what could cause this. > > > > I'm running Asterisk 1.8.28_cert5 with full SIP debug. At the same time, I'm > > doing a tcpdump of the traffic on the network interface. I can see in the > > SIP debug log that asterisk is sending packets. Most of the time, I can see > > those packets in the tcpdump, as you would expect. > > However, sometimes Asterisk sends a packet that *does not show up* in the > > tcpdump. Asterisk then does several retransmits (that also don't show up). > > The next packet that is not a retransmit does show up again. > > > > This causes Asterisk to log the peer it was sending packets to temporarily > > as Lagged or unreachable. > > > > There is no outgoing firewall on this box. > > > > Could anyone give me some pointers where to look? > > > > If Asterisk logs "VERBOSE[13019] chan_sip.c: Reliably Transmitting (NAT) to > > x.x.x.x:" you would expect to see that packet in a tcpdump trace, right? > > What could cause this not to be so? Are there network statistics I could > > look at? Is there a counter in /proc or /sys for problems with sending > > packets? Anything? > > > > If more information is necessary please do let me know. > > > > Thanks a lot in advance, > > > > Roel > > > > -- > > _____________________________________________________________________ > > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > > New to Asterisk? Join us for a live introductory webinar every Thurs: > > http://www.asterisk.org/hello > > > > asterisk-users mailing list > > To UNSUBSCRIBE or update options visit: > > http://lists.digium.com/mailman/listinfo/asterisk-users > > -- > > _____________________________________________________________________ > > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > > New to Asterisk? Join us for a live introductory webinar every Thurs: > > http://www.asterisk.org/hello > > > > asterisk-users mailing list > > To UNSUBSCRIBE or update options visit: > > http://lists.digium.com/mailman/listinfo/asterisk-users > -- > _____________________________________________________________________ > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > New to Asterisk? Join us for a live introductory webinar every Thurs: > http://www.asterisk.org/hello > > asterisk-users mailing list > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users
Ethy H. Brito writes:> Just guessing: do you have conntrack enabled?Yes, I do.> If not, "modprobe nf_conntrack_netlink" (you can remove it and its > dependencies > later) > > What are the outputs of > sysctl net.netfilter.nf_conntrack_count > and > sysctl net.netfilter.nf_conntrack_max > > when the problem shows up?Hm, good one. I'll monitor them. Currently the values are: root at communiceer:~# sysctl net.netfilter.nf_conntrack_max net.netfilter.nf_conntrack_max = 65536 root at communiceer:~# sysctl net.netfilter.nf_conntrack_count net.netfilter.nf_conntrack_count = 245 I'll report back if the count comes anywhere near maximum. Are there any other limits like these that might play a role here? Thanks, Roel> cheers > > Ethy > > On Thu, 31 Mar 2016 12:17:12 +0000 > "Dovid Bender" <dovid at telecurve.com> wrote: > > > Just guessing I would verify that the out of : iptables -L -nv > > Shows no dropped packets, try disabling selinux as well as look at the > limits > > of the asterisk pid (cat /proc/<Asterisk PID>/limits). I know the defualt > for > > rhel is 1024 which was never enough for us. > > > > > > Regards, > > > > Dovid > > > > -----Original Message----- > > From: Roel van Meer <roel at 1afa.com> > > Date: Thu, 31 Mar 2016 14:10:48 > > To: <dovid at telecurve.com>; Asterisk Users Mailing List - Non-Commercial > > Discussion<asterisk-users at lists.digium.com> Subject: Re: [asterisk-users] > > Lost outgoing SIP packets > > > > Dovid Bender writes: > > > > > The tcpdump that you are running is on the Asterisk box or via port > > > mirroring? > > > > It's on the asterisk box itself. > > > > I've already replaced the network card - no change. > > > > Thanks, > > > > Roel > > > > > > > Regards, > > > > > > Dovid > > > > > > -----Original Message----- > > > From: Roel van Meer <roel at 1afa.com> > > > Sender: asterisk-users-bounces at lists.digium.comDate: Thu, 31 Mar 2016 > > > 13:34:51 > > > To: <asterisk-users at lists.digium.com> > > > Reply-To: Asterisk Users Mailing List - Non-Commercial Discussion > > > <asterisk-users at lists.digium.com> > > > Subject: [asterisk-users] Lost outgoing SIP packets > > > > > > Hi list! > > > > > > I have a problem where SIP packets sent by Asterisk do not hit the wire, > and > > > I don't know what could cause this. > > > > > > I'm running Asterisk 1.8.28_cert5 with full SIP debug. At the same time, > I'm > > > doing a tcpdump of the traffic on the network interface. I can see in the > > > SIP debug log that asterisk is sending packets. Most of the time, I can > see > > > those packets in the tcpdump, as you would expect. > > > However, sometimes Asterisk sends a packet that *does not show up* in the > > > tcpdump. Asterisk then does several retransmits (that also don't show > up). > > > The next packet that is not a retransmit does show up again. > > > > > > This causes Asterisk to log the peer it was sending packets to > temporarily > > > as Lagged or unreachable. > > > > > > There is no outgoing firewall on this box. > > > > > > Could anyone give me some pointers where to look? > > > > > > If Asterisk logs "VERBOSE[13019] chan_sip.c: Reliably Transmitting (NAT) > to > > > x.x.x.x:" you would expect to see that packet in a tcpdump trace, right? > > > What could cause this not to be so? Are there network statistics I could > > > look at? Is there a counter in /proc or /sys for problems with sending > > > packets? Anything? > > > > > > If more information is necessary please do let me know. > > > > > > Thanks a lot in advance, > > > > > > Roel > > > > > > -- > > > _____________________________________________________________________ > > > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > > > New to Asterisk? Join us for a live introductory webinar every Thurs: > > > http://www.asterisk.org/hello > > > > > > asterisk-users mailing list > > > To UNSUBSCRIBE or update options visit: > > > http://lists.digium.com/mailman/listinfo/asterisk-users > > > -- > > > _____________________________________________________________________ > > > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > > > New to Asterisk? Join us for a live introductory webinar every Thurs: > > > http://www.asterisk.org/hello > > > > > > asterisk-users mailing list > > > To UNSUBSCRIBE or update options visit: > > > http://lists.digium.com/mailman/listinfo/asterisk-users > > -- > > _____________________________________________________________________ > > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > > New to Asterisk? Join us for a live introductory webinar every Thurs: > > http://www.asterisk.org/hello > > > > asterisk-users mailing list > > To UNSUBSCRIBE or update options visit: > > http://lists.digium.com/mailman/listinfo/asterisk-users > > -- > _____________________________________________________________________ > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > New to Asterisk? Join us for a live introductory webinar every Thurs: > http://www.asterisk.org/hello > > asterisk-users mailing list > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users
On Thu, 31 Mar 2016 15:29:07 +0200 Roel van Meer <roel at 1afa.com> wrote:> Ethy H. Brito writes: > > > Just guessing: do you have conntrack enabled? > > Yes, I do. > > > If not, "modprobe nf_conntrack_netlink" (you can remove it and its > > dependencies > > later) > > > > What are the outputs of > > sysctl net.netfilter.nf_conntrack_count > > and > > sysctl net.netfilter.nf_conntrack_max > > > > when the problem shows up? > > Hm, good one. I'll monitor them. Currently the values are: > > root at communiceer:~# sysctl net.netfilter.nf_conntrack_max > net.netfilter.nf_conntrack_max = 65536 > > root at communiceer:~# sysctl net.netfilter.nf_conntrack_count > net.netfilter.nf_conntrack_count = 245 > > I'll report back if the count comes anywhere near maximum. > > Are there any other limits like these that might play a role here?I think nf_conntrack_count is the one you should be aware of. But you can play with the timeouts in net.ipv4.netfilter.ip_conntrack_* if you experience any problems. Cheers Ethy> > Thanks, > > Roel > > > > cheers > > > > Ethy > > > > On Thu, 31 Mar 2016 12:17:12 +0000 > > "Dovid Bender" <dovid at telecurve.com> wrote: > > > > > Just guessing I would verify that the out of : iptables -L -nv > > > Shows no dropped packets, try disabling selinux as well as look at the > > limits > > > of the asterisk pid (cat /proc/<Asterisk PID>/limits). I know the > > > defualt > > for > > > rhel is 1024 which was never enough for us. > > > > > > > > > Regards, > > > > > > Dovid > > > > > > -----Original Message----- > > > From: Roel van Meer <roel at 1afa.com> > > > Date: Thu, 31 Mar 2016 14:10:48 > > > To: <dovid at telecurve.com>; Asterisk Users Mailing List - Non-Commercial > > > Discussion<asterisk-users at lists.digium.com> Subject: Re: [asterisk-users] > > > Lost outgoing SIP packets > > > > > > Dovid Bender writes: > > > > > > > The tcpdump that you are running is on the Asterisk box or via port > > > > mirroring? > > > > > > It's on the asterisk box itself. > > > > > > I've already replaced the network card - no change. > > > > > > Thanks, > > > > > > Roel > > > > > > > > > > Regards, > > > > > > > > Dovid > > > > > > > > -----Original Message----- > > > > From: Roel van Meer <roel at 1afa.com> > > > > Sender: asterisk-users-bounces at lists.digium.comDate: Thu, 31 Mar 2016 > > > > 13:34:51 > > > > To: <asterisk-users at lists.digium.com> > > > > Reply-To: Asterisk Users Mailing List - Non-Commercial Discussion > > > > <asterisk-users at lists.digium.com> > > > > Subject: [asterisk-users] Lost outgoing SIP packets > > > > > > > > Hi list! > > > > > > > > I have a problem where SIP packets sent by Asterisk do not hit the > > > > wire, > > and > > > > I don't know what could cause this. > > > > > > > > I'm running Asterisk 1.8.28_cert5 with full SIP debug. At the same > > > > time, > > I'm > > > > doing a tcpdump of the traffic on the network interface. I can see in > > > > the SIP debug log that asterisk is sending packets. Most of the time, I > > > > can > > see > > > > those packets in the tcpdump, as you would expect. > > > > However, sometimes Asterisk sends a packet that *does not show up* in > > > > the tcpdump. Asterisk then does several retransmits (that also don't > > > > show > > up). > > > > The next packet that is not a retransmit does show up again. > > > > > > > > This causes Asterisk to log the peer it was sending packets to > > temporarily > > > > as Lagged or unreachable. > > > > > > > > There is no outgoing firewall on this box. > > > > > > > > Could anyone give me some pointers where to look? > > > > > > > > If Asterisk logs "VERBOSE[13019] chan_sip.c: Reliably Transmitting > > > > (NAT) > > to > > > > x.x.x.x:" you would expect to see that packet in a tcpdump trace, right? > > > > What could cause this not to be so? Are there network statistics I could > > > > look at? Is there a counter in /proc or /sys for problems with sending > > > > packets? Anything? > > > > > > > > If more information is necessary please do let me know. > > > > > > > > Thanks a lot in advance, > > > > > > > > Roel > > > > > > > > -- > > > > _____________________________________________________________________ > > > > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > > > > New to Asterisk? Join us for a live introductory webinar every Thurs: > > > > http://www.asterisk.org/hello > > > > > > > > asterisk-users mailing list > > > > To UNSUBSCRIBE or update options visit: > > > > http://lists.digium.com/mailman/listinfo/asterisk-users > > > > -- > > > > _____________________________________________________________________ > > > > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > > > > New to Asterisk? Join us for a live introductory webinar every Thurs: > > > > http://www.asterisk.org/hello > > > > > > > > asterisk-users mailing list > > > > To UNSUBSCRIBE or update options visit: > > > > http://lists.digium.com/mailman/listinfo/asterisk-users > > > -- > > > _____________________________________________________________________ > > > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > > > New to Asterisk? Join us for a live introductory webinar every Thurs: > > > http://www.asterisk.org/hello > > > > > > asterisk-users mailing list > > > To UNSUBSCRIBE or update options visit: > > > http://lists.digium.com/mailman/listinfo/asterisk-users > > > > -- > > _____________________________________________________________________ > > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > > New to Asterisk? Join us for a live introductory webinar every Thurs: > > http://www.asterisk.org/hello > > > > asterisk-users mailing list > > To UNSUBSCRIBE or update options visit: > > http://lists.digium.com/mailman/listinfo/asterisk-users > > -- > _____________________________________________________________________ > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > New to Asterisk? Join us for a live introductory webinar every Thurs: > http://www.asterisk.org/hello > > asterisk-users mailing list > To UNSUBSCRIBE or update options visit: