Sorry for that,
We are use Grandstream IP Phone and for Remain use Analog Phone via Fxs Gateway
Asterisk server is running on AWS and has public IP
All extensions are remote and register over the Internet from various customer locations behind NAT routers.
Server is hosted in AWS with Security Groups allowing SIP and RTP traffic.
SIP trunk is provided by Telnyx using IP authentication.
Now I am waiting for this issue happen again then i share logs at that time
Are the model numbers of the NAT routers all over the map or in general are most of them from the same make/model/manufacturer? (like an ISP)
You had said this suddenly started happening. If you didn’t upgrade your Asterisk install, and your trunk provider didn’t change their trunks, then possibly you have a situation where maybe 70% of the extensions are coming in from maybe the same ISP which for most of those ISP customers are using gear supplied by the ISP. And maybe that ISP pushed out a firmware update for it’s fleet of devices that is dropping SIP connections. Grandstream phones have pretty normal firmware that works more or less going through a NAT, but any VoIP registration that goes through a NAT is dependent on the NAT code not doing something stupid.
Do you have a testbed that mimics your customers networks? For example at home do you have a Grandstream phone going through the Internet to the server at AWS? The OpenWRT 3rd party router firmware allows someone to setup a wireshark sniffer in the router that sends a copy of every packet to Wireshark running on a PC.
When I run wireshark sniffing behind a NAT I use an HP enterprise hub that allows you to define a port as a mirrored port.
All property have different different ISP and router tooo.
We have same network on our office also those extensions are down.
Even telnyx provided trunk also down when this problem arose..
We are waiting for arise this problem again..
Today All things are normal so we can’t not do anything
Not true. You can make sure one of your office extensions is statically assigned an IP address then run wireshark with a filter to sniff just that extension, and then keep the trace running until it does it again.
Okay Sure.
Also have one more question our mobile Application use " pjsip show endpoints " for see extensions status those are online or not in every 5 seconds so possible hitting every 5 second this command from multiple mobile application ??