SIP 200 OK packet dropped by SIP ALG
SIP 200 OK packet dropped by SIP ALG with the following errors:
Jun 29 09:09:18 09:09:18.369280:CID-0:RT:>>>>>>>>> RECV PACKET begin 687 bytes >>>>>>>>> Jun 29 09:09:18 09:09:18.369280:CID-0:RT:sip_alg..... SIP/2.0 200 OK Jun 29 09:09:18 09:09:18.369280:CID-0:RT:sip_alg..... Via: SIP/2.0/UDP 10.4.4.4:60104;maddr=10.4.4.4;branch=fa932cc4bbb021a2f9f5fa6aba8b3f7f Jun 29 09:09:18 09:09:18.369280:CID-0:RT:sip_alg..... From: sip:[email protected]:5060;tag=B6465AD3-54FC-40AD-8158-781658CC8758 Jun 29 09:09:18 09:09:18.369280:CID-0:RT:sip_alg..... To: "" <sip:[email protected]:5060>;tag=hssUA_550790872-2641 Jun 29 09:09:18 09:09:18.369280:CID-0:RT:sip_alg..... Call-ID: [email protected] Jun 29 09:09:18 09:09:18.369280:CID-0:RT:sip_alg..... CSeq: 2 INVITE Jun 29 09:09:18 09:09:18.369280:CID-0:RT:sip_alg..... Session-Expires: 1800;Refresher=uas Jun 29 09:09:18 09:09:18.369280:CID-0:RT:sip_alg..... Supported: timer Jun 29 09:09:18 09:09:18.369280:CID-0:RT:sip_alg..... Contact: "" <sip:[email protected]:5060> Jun 29 09:09:18 09:09:18.369280:CID-0:RT:sip_alg..... Allow: INVITE,ACK,BYE,CANCEL,INFO,REFER,NOTIFY,OPTIONS Jun 29 09:09:18 09:09:18.369280:CID-0:RT:sip_alg..... Content-Type: application/sdp Jun 29 09:09:18 09:09:18.369280:CID-0:RT:sip_alg..... Content-Length: 152 Jun 29 09:09:18 09:09:18.369280:CID-0:RT:sip_alg..... Jun 29 09:09:18 09:09:18.369280:CID-0:RT:sip_alg..... v=0 Jun 29 09:09:18 09:09:18.369280:CID-0:RT:sip_alg..... o="" 73725820 73725823 IN IP4 10.13.10.21 Jun 29 09:09:18 09:09:18.369280:CID-0:RT:sip_alg..... s=- Jun 29 09:09:18 09:09:18.369280:CID-0:RT:sip_alg..... c=IN IP4 10.13.14.21 Jun 29 09:09:18 09:09:18.369280:CID-0:RT:sip_alg..... t=0 0 Jun 29 09:09:18 09:09:18.369280:CID-0:RT:sip_alg..... m=audio 4010 RTP/AVP 0 Jun 29 09:09:18 09:09:18.369280:CID-0:RT:sip_alg..... a=rtpmap:0 PCMU/8000 Jun 29 09:09:18 09:09:18.369280:CID-0:RT:sip_alg..... a=ptime:20 Jun 29 09:09:18 09:09:18.369280:CID-0:RT:sip_alg..... a=sendrecv Jun 29 09:09:18 09:09:18.369280:CID-0:RT:sip_alg..... Jun 29 09:09:18 09:09:18.369280:CID-0:RT:<<<<<<<<< RECV PACKET end <<<<<<<<< Jun 29 09:09:18 09:09:18.369280:CID-0:RT:SPU invalid session id 00000000 Jun 29 09:09:18 09:09:18.369280:CID-0:RT: jsf drop pak pid 7, jbuf 0x4bbb6bd0, release hold 0, sess_id 0 Jun 29 09:09:18 09:09:18.369280:CID-0:RT: After PKT_PROC for plugin id 7, jb 0x4bbb6b50. rc 7, ctx.jb 0x4bbb6bd0 Jun 29 09:09:18 09:09:18.369280:CID-0:RT: ----- flow_process_pkt rc 0x7 (fp rc -1)
Further troubleshooting by enabling the following traceoptions:
root> show configuration security traceoptions | display set set security traceoptions file <filename> eg. sip-trace-detail set security traceoptions flag all root> show configuration security alg sip traceoptions | display set set security alg sip traceoptions flag all extensive root> show configuration security flow traceoptions | display set set security flow traceoptions file <filename> set security flow traceoptions flag all set security flow traceoptions packet-filter 1 source-port 5060 set security flow traceoptions packet-filter 1 destination-port 5060
The error as in the sip-trace-detail file shows:
Jun 30 00:32:08 00:27:10.212714:CID-0:RT:sip: ------------------sip vector entry ----------------- Jun 30 00:32:08 00:27:10.212714:CID-0:RT:sip_alg..... packet received (10.13.10.21 -> 10.4.4.4) len=715 Jun 30 00:32:08 00:27:10.212714:CID-0:RT:SIP incoming ---- rdata 0x4594fc74 from pool 0 Jun 30 00:32:08 00:27:10.212714:CID-0:RT:sip_alg/phse Set next phase to: Decode. Jun 30 00:32:08 00:27:10.212714:CID-0:RT:sip_alg/phse Enter decode phase Jun 30 00:32:08 00:27:10.212714:CID-0:RT:dummy0x4594f Parsing 687 bytes Jun 30 00:32:08 00:27:10.212714:CID-0:RT:sipparser Syntax error in line 4 col 5 (hname=To) Jun 30 00:32:08 00:27:10.212714:CID-0:RT:sipparser Syntax error in line 9 col 10 (hname=Contact) Jun 30 00:32:08 00:27:10.212714:CID-0:RT:dummy0x4594f Incoming Response 200 Jun 30 00:32:08 00:27:10.212714:CID-0:RT:dummy0x4594f Bad message: missing some header Jun 30 00:32:08 00:27:10.212714:CID-0:RT:sip_alg..... SIP ALG decode error! Jun 30 00:32:08 00:27:10.212714:CID-0:RT:sip_alg/phse Set next phase to: Exit. Jun 30 00:32:08 00:27:10.212714:CID-0:RT:sip_alg/phse Enter exit phase Jun 30 00:32:08 00:27:10.212714:CID-0:RT:sip_alg..... ERROR packet not processed by stack
Following is a packet capture of the SIP 200 OK packet which matches the above trace:
Matching this debug to the above packet capture, the error occurs in the To field where the “SIP Display info” contains the following “” NULL content as shown highlighted in the above picture.
The SRX SIP ALG had an issue with parsing the above mentioned NULL content. This issue has been fixed from the following releases 10.4R5, 10.2R5. 10.3R4, 11.1R2.