Call gets disconnected on incoming INFO message

Can somebody please help:

I’m using a self-compiled version of Asterisk 1.2.9.1. I have signed up with several SIP providers which all work fine, except for WebCall (www.webcall.ca).

Every time my calls get disconnected after 5 -10 minutes. With Ethereal and Asterisk “sip debug” I traced it down to an incoming INFO packet from Webcall. Asterisk answers with “403 Unauthorized” and disconnects the call, whereas the Webcall supplied Nortel ATA answers with “200 OK”.

Below are the relevant parts of my sip.conf, an Asterisk debug output of the INFO packet and Ethereal scope traces of both the INFO packet and the reply when using Asterisk and with the (working) Nortel ATA.

Many thanks for your help - it is greatly appreciated!

Wolfgang

========== sip.conf ================

register => 604xxxxxxx@vancbc.webcall.ca::604xxxxxxx@142.165.100.33

; For outgoing calls:

[142.165.100.33]
type=peer
host=vancbc.webcall.ca
fromdomain=vancbc.webcall.ca
fromuser=604xxxxxxx
authname=604xxxxxxx
username=604xxxxxxx
callerid=WT
secret=
context=from-webcall
canreinvite=no
dtmfmode=inband
;dtmfmode=RFC2833
qualify=no
insecure=very
outgoinglimit=1
disallow=all
allow=alaw
allow=ulaw

============== Asterisk sip debug =================

— (11 headers 0 lines)—
Destroying call '569fc6d914e38f3a65a8678f400444fb@192.168.0.2’
Destroying call '315f34e055b459106366d880548578c7@vancbc.webcall.ca
boromir*CLI>
<-- SIP read from 142.165.100.33:5060:
INFO sip:604xxxxxxx@192.168.0.2 SIP/2.0
t: “WT” sip:604xxxxxxx@vancbc.webcall.ca;tag=as33f3f99c
f: sip:604xxxxxxx@vancbc.webcall.ca;tag=4579023110388276043
i: 6d50b8740a2891b86c59c3c968f1c07b@vancbc.webcall.ca
CSeq: 30008 INFO
v: SIP/2.0/UDP 142.165.100.33:5060;branch=z9hG4bK7e5d190b65dfaf10f997acfba8850cd6
Max-Forwards: 20
x-nt-corr-id: 10e57a74ae8158a7f61f95f344faeb6986dd7458@142.165.100.33
k: com.nortelnetworks.firewall,p-3rdpartycontrol,nosec
l: 0

— (10 headers 0 lines)—
Receiving INFO!
Transmitting (no NAT) to 142.165.100.33:5060:
SIP/2.0 403 Unauthorized
Via: SIP/2.0/UDP 142.165.100.33:5060;branch=z9hG4bK7e5d190b65dfaf10f997acfba8850cd6;received=142.165.100.33
From: sip:604xxxxxxx@vancbc.webcall.ca;tag=4579023110388276043
To: “WT” sip:604xxxxxxx@vancbc.webcall.ca;tag=as33f3f99c
Call-ID: 6d50b8740a2891b86c59c3c968f1c07b@vancbc.webcall.ca
CSeq: 30008 INFO
User-Agent: private
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Contact: sip:604xxxxxxx@192.168.0.2
Content-Length: 0
X-Asterisk-HangupCause: Normal Clearing

=========== Ethereal debug INFO with Asterisk ============

No. Time Source Destination Protocol Info
42363 429.097608 142.165.100.33 192.168.0.2 SIP Request: INFO sip:604xxxxxxx@192.168.0.2

Frame 42363 (528 bytes on wire, 528 bytes captured)
Arrival Time: Oct 19, 2006 13:51:09.097191000
Time delta from previous packet: 35.351525000 seconds
Time since reference or first frame: 429.097608000 seconds
Frame Number: 42363
Packet Length: 528 bytes
Capture Length: 528 bytes
Protocols in frame: eth:ip:udp:sip
Coloring Rule Name: UDP
Coloring Rule String: udp
Ethernet II, Src: Cisco_fb:a9:ea (00:08:e3:fb:a9:ea), Dst: Giga-Byt_40:d9:12 (00:20:ed:40:d9:12)
Destination: Giga-Byt_40:d9:12 (00:20:ed:40:d9:12)
Address: Giga-Byt_40:d9:12 (00:20:ed:40:d9:12)
… …0 … … … … = Multicast: This is a UNICAST frame
… …0. … … … … = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: Cisco_fb:a9:ea (00:08:e3:fb:a9:ea)
Address: Cisco_fb:a9:ea (00:08:e3:fb:a9:ea)
… …0 … … … … = Multicast: This is a UNICAST frame
… …0. … … … … = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 142.165.100.33 (142.165.100.33), Dst: 192.168.0.2 (192.168.0.2)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00… = Differentiated Services Codepoint: Default (0x00)
… …0. = ECN-Capable Transport (ECT): 0
… …0 = ECN-CE: 0
Total Length: 514
Identification: 0x99cb (39371)
Flags: 0x00
0… = Reserved bit: Not set
.0… = Don’t fragment: Not set
…0. = More fragments: Not set
Fragment offset: 0
Time to live: 244
Protocol: UDP (0x11)
Header checksum: 0x77ae [correct]
Good: True
Bad : False
Source: 142.165.100.33 (142.165.100.33)
Destination: 192.168.0.2 (192.168.0.2)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
Source port: sip (5060)
Destination port: sip (5060)
Length: 494
Checksum: 0x6e3c [correct]
Session Initiation Protocol
Request-Line: INFO sip:604xxxxxxx@192.168.0.2 SIP/2.0
Method: INFO
Resent Packet: False
Message Header
t: “WT” sip:604xxxxxxx@vancbc.webcall.ca;tag=as7e3264af
SIP Display info: "WT"
SIP to address: sip:604xxxxxxx@vancbc.webcall.ca
SIP tag: as7e3264af
f: sip:604xxxxxxx@vancbc.webcall.ca;tag=55030359082026096418
SIP from address: sip:604xxxxxxx@vancbc.webcall.ca
SIP tag: 55030359082026096418
i: 65717a3653c2c05467e6a2ad34be3a41@vancbc.webcall.ca
CSeq: 52250 INFO
v: SIP/2.0/UDP 142.165.100.33:5060;branch=z9hG4bKf6d0bad5095a7ffadbadba6d0263a708
Max-Forwards: 20
x-nt-corr-id: 10e6250e8be4b10ab1f95f34fc4f74bb685d77a@142.165.100.33
k: com.nortelnetworks.firewall,p-3rdpartycontrol,nosec
l: 0

No. Time Source Destination Protocol Info
42364 429.098043 192.168.0.2 142.165.100.33 SIP Status: 403 Unauthorized

Frame 42364 (587 bytes on wire, 587 bytes captured)
Arrival Time: Oct 19, 2006 13:51:09.097626000
Time delta from previous packet: 0.000435000 seconds
Time since reference or first frame: 429.098043000 seconds
Frame Number: 42364
Packet Length: 587 bytes
Capture Length: 587 bytes
Protocols in frame: eth:ip:udp:sip
Coloring Rule Name: UDP
Coloring Rule String: udp
Ethernet II, Src: Giga-Byt_40:d9:12 (00:20:ed:40:d9:12), Dst: Cisco_fb:a9:ea (00:08:e3:fb:a9:ea)
Destination: Cisco_fb:a9:ea (00:08:e3:fb:a9:ea)
Address: Cisco_fb:a9:ea (00:08:e3:fb:a9:ea)
… …0 … … … … = Multicast: This is a UNICAST frame
… …0. … … … … = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: Giga-Byt_40:d9:12 (00:20:ed:40:d9:12)
Address: Giga-Byt_40:d9:12 (00:20:ed:40:d9:12)
… …0 … … … … = Multicast: This is a UNICAST frame
… …0. … … … … = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.0.2 (192.168.0.2), Dst: 142.165.100.33 (142.165.100.33)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0xb8 (DSCP 0x2e: Expedited Forwarding; ECN: 0x00)
1011 10… = Differentiated Services Codepoint: Expedited Forwarding (0x2e)
… …0. = ECN-Capable Transport (ECT): 0
… …0 = ECN-CE: 0
Total Length: 573
Identification: 0x0000 (0)
Flags: 0x04 (Don’t Fragment)
0… = Reserved bit: Not set
.1… = Don’t fragment: Set
…0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0x8487 [correct]
Good: True
Bad : False
Source: 192.168.0.2 (192.168.0.2)
Destination: 142.165.100.33 (142.165.100.33)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
Source port: sip (5060)
Destination port: sip (5060)
Length: 553
Checksum: 0x8bff [correct]
Session Initiation Protocol
Status-Line: SIP/2.0 403 Unauthorized
Status-Code: 403
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 142.165.100.33:5060;branch=z9hG4bKf6d0bad5095a7ffadbadba6d0263a708;received=142.165.100.33
From: sip:604xxxxxxx@vancbc.webcall.ca;tag=55030359082026096418
SIP from address: sip:604xxxxxxx@vancbc.webcall.ca
SIP tag: 55030359082026096418
To: “WT” sip:604xxxxxxx@vancbc.webcall.ca;tag=as7e3264af
SIP Display info: "WT"
SIP to address: sip:604xxxxxxx@vancbc.webcall.ca
SIP tag: as7e3264af
Call-ID: 65717a3653c2c05467e6a2ad34be3a41@vancbc.webcall.ca
CSeq: 52250 INFO
User-Agent: private
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY
Contact: sip:604xxxxxxx@192.168.0.2
Contact Binding: sip:604xxxxxxx@192.168.0.2
URI: sip:604xxxxxxx@192.168.0.2
SIP contact address: sip:604xxxxxxx@192.168.0.2
Content-Length: 0
X-Asterisk-HangupCause: Normal Clearing

========== Ethereal debug INFO with Nortel ATA ===========

No. Time Source Destination Protocol Info
56257 561.144355 142.165.100.33 192.168.0.9 SIP Request: INFO sip:604xxxxxxx@vancbc.webcall.ca

Frame 56257 (434 bytes on wire, 434 bytes captured)
Arrival Time: Oct 17, 2006 16:26:09.890582000
Time delta from previous packet: 33.290993000 seconds
Time since reference or first frame: 561.144355000 seconds
Frame Number: 56257
Packet Length: 434 bytes
Capture Length: 434 bytes
Protocols in frame: eth:ip:udp:sip
Coloring Rule Name: UDP
Coloring Rule String: udp
Ethernet II, Src: Cisco_fb:a9:ea (00:08:e3:fb:a9:ea), Dst: AmbitMic_b5:c5:e9 (00:02:8a:b5:c5:e9)
Destination: AmbitMic_b5:c5:e9 (00:02:8a:b5:c5:e9)
Address: AmbitMic_b5:c5:e9 (00:02:8a:b5:c5:e9)
… …0 … … … … = Multicast: This is a UNICAST frame
… …0. … … … … = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: Cisco_fb:a9:ea (00:08:e3:fb:a9:ea)
Address: Cisco_fb:a9:ea (00:08:e3:fb:a9:ea)
… …0 … … … … = Multicast: This is a UNICAST frame
… …0. … … … … = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 142.165.100.33 (142.165.100.33), Dst: 192.168.0.9 (192.168.0.9)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00… = Differentiated Services Codepoint: Default (0x00)
… …0. = ECN-Capable Transport (ECT): 0
… …0 = ECN-CE: 0
Total Length: 420
Identification: 0xdaad (55981)
Flags: 0x00
0… = Reserved bit: Not set
.0… = Don’t fragment: Not set
…0. = More fragments: Not set
Fragment offset: 0
Time to live: 244
Protocol: UDP (0x11)
Header checksum: 0x3723 [correct]
Good: True
Bad : False
Source: 142.165.100.33 (142.165.100.33)
Destination: 192.168.0.9 (192.168.0.9)
User Datagram Protocol, Src Port: sip (5060), Dst Port: 5062 (5062)
Source port: sip (5060)
Destination port: 5062 (5062)
Length: 400
Checksum: 0xbb9f [correct]
Session Initiation Protocol
Request-Line: INFO sip:604xxxxxxx@vancbc.webcall.ca SIP/2.0
Method: INFO
Resent Packet: False
Message Header
t: “WT” sip:604xxxxxxx@vancbc.webcall.ca;tag=751570396
SIP Display info: "WT"
SIP to address: sip:604xxxxxxx@vancbc.webcall.ca
SIP tag: 751570396
f: sip:604xxxxxxx@vancbc.webcall.ca;tag=47230648071141913439
SIP from address: sip:604xxxxxxx@vancbc.webcall.ca
SIP tag: 47230648071141913439
i: 651424231@192.168.0.9
CSeq: 48445 INFO
v: SIP/2.0/UDP 142.165.100.33:5060;branch=z9hG4bKdcbc50f2b52235573cdbdb5e068516bd
Max-Forwards: 20
k: com.nortelnetworks.firewall,p-3rdpartycontrol,nosec
l: 0

No. Time Source Destination Protocol Info
56258 561.155559 192.168.0.9 142.165.100.33 SIP Status: 200 OK

Frame 56258 (354 bytes on wire, 354 bytes captured)
Arrival Time: Oct 17, 2006 16:26:09.901786000
Time delta from previous packet: 0.011204000 seconds
Time since reference or first frame: 561.155559000 seconds
Frame Number: 56258
Packet Length: 354 bytes
Capture Length: 354 bytes
Protocols in frame: eth:ip:udp:sip
Coloring Rule Name: UDP
Coloring Rule String: udp
Ethernet II, Src: AmbitMic_b5:c5:e9 (00:02:8a:b5:c5:e9), Dst: Cisco_fb:a9:ea (00:08:e3:fb:a9:ea)
Destination: Cisco_fb:a9:ea (00:08:e3:fb:a9:ea)
Address: Cisco_fb:a9:ea (00:08:e3:fb:a9:ea)
… …0 … … … … = Multicast: This is a UNICAST frame
… …0. … … … … = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: AmbitMic_b5:c5:e9 (00:02:8a:b5:c5:e9)
Address: AmbitMic_b5:c5:e9 (00:02:8a:b5:c5:e9)
… …0 … … … … = Multicast: This is a UNICAST frame
… …0. … … … … = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 192.168.0.9 (192.168.0.9), Dst: 142.165.100.33 (142.165.100.33)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0xa0 (DSCP 0x28: Class Selector 5; ECN: 0x00)
1010 00… = Differentiated Services Codepoint: Class Selector 5 (0x28)
… …0. = ECN-Capable Transport (ECT): 0
… …0 = ECN-CE: 0
Total Length: 340
Identification: 0x6f18 (28440)
Flags: 0x00
0… = Reserved bit: Not set
.0… = Don’t fragment: Not set
…0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0x5669 [correct]
Good: True
Bad : False
Source: 192.168.0.9 (192.168.0.9)
Destination: 142.165.100.33 (142.165.100.33)
User Datagram Protocol, Src Port: 5062 (5062), Dst Port: sip (5060)
Source port: 5062 (5062)
Destination port: sip (5060)
Length: 320
Checksum: 0x539d [correct]
Session Initiation Protocol
Status-Line: SIP/2.0 200 OK
Status-Code: 200
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 142.165.100.33:5060;branch=z9hG4bKdcbc50f2b52235573cdbdb5e068516bd
From: sip:604xxxxxxx@vancbc.webcall.ca;tag=47230648071141913439
SIP from address: sip:604xxxxxxx@vancbc.webcall.ca
SIP tag: 47230648071141913439
To: “WT” sip:604xxxxxxx@vancbc.webcall.ca;tag=751570396
SIP Display info: "WT"
SIP to address: sip:604xxxxxxx@vancbc.webcall.ca
SIP tag: 751570396
Call-ID: 651424231@192.168.0.9
CSeq: 48445 INFO
Content-Length: 0

I realize this is a bit of a stale thread, but the possible answer to the problem is in this bug:

bugs.digium.com/view.php?id=5747

SIP INFO is considered harmful and not implemented in the latest rfc.
jdrosen.net/papers/draft-ros … ul-00.html