- 经验
- 3
- 分贝
- 0
- 家园分
- 8
- 在线时间:
- 0 小时
- 最后登录:
- 2022-12-5
- 帖子:
- 2
- 精华:
- 0
- 注册时间:
- 2021-3-5
- UID:
- 1569281
注册:2021-3-5
|
发表于 2022-12-5 14:34:12
|显示全部楼层
今天和小伙伴电话交流时突发对端听不到我方声音,而我方却能听到对端声音,一度以为话机挂了。后在我方话机的交换机镜像口抓包发现,我方话机INVITE信令发出SDP媒体中IP地址异常:101.71.248.138,包如下所示,
Frame 532: 760 bytes on wire (6080 bits), 760 bytes captured (6080 bits)
Ethernet II, Src: Grandstr_b6:ba:e2 (c0:74:ad:b6:ba:e2), Dst: NewH3CTe_23:97:c3 (a4:fa:76:23:97:c3)
Internet Protocol Version 4, Src: 192.168.200.103, Dst: 192.168.125.254
User Datagram Protocol, Src Port: 5060, Dst Port: 5060
Session Initiation Protocol (INVITE)
Request-Line: INVITE sip:33291@192.168.125.254 SIP/2.0
Message Header
Via: SIP/2.0/UDP 192.168.200.103:5060;branch=z9hG4bK1403656339;rport
From: "autotest" <sip:89233@192.168.125.254>;tag=920580809
To: <sip:33291@192.168.125.254>
Call-ID: 1972697455-5060-3@BJC.BGI.CAA.BAD
[Generated Call-ID: 1972697455-5060-3@BJC.BGI.CAA.BAD]
CSeq: 20 INVITE
Contact: "autotest" <sip:89233@192.168.200.103:5060>
X-Grandstream-PBX: true
Max-Forwards: 70
User-Agent: Grandstream GHP611W 0.1.1.27
Privacy: none
P-Preferred-Identity: "autotest" <sip:89233@192.168.125.254>
P-Access-Network-Info: IEEE-EUI-48;eui-48-addr=A4-FA-76-23-97-C3
P-Emergency-Info: IEEE-EUI-48;eui-48-addr=C0-74-AD-B6-BA-E2
Supported: replaces, path
Allow: INVITE, ACK, OPTIONS, CANCEL, BYE, SUBSCRIBE, NOTIFY, INFO, REFER, UPDATE, MESSAGE
Content-Type: application/sdp
Accept: application/sdp, application/dtmf-relay
Content-Length: 1366
Message Body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): 89233 8000 8000 IN IP4 101.71.248.138
Session Name (s): SIP Call
Connection Information (c): IN IP4 101.71.248.138
Time Description, active time (t): 0 0
Media Description, name and address (m): audio 5020 RTP/SAVP 9 123 0 8 4 18 97 2 101 121 124
Media Attribute (a): sendrecv
Media Attribute (a): rtpmap:9 G722/8000
Media Attribute (a): ptime:20
Media Attribute (a): rtpmap:123 opus/48000/2
Media Attribute (a): fmtp:123 useinbandfec=1; sprop-maxcapturerate=16000; stereo=0; sprop-stereo=0
Media Attribute (a): rtpmap:0 PCMU/8000
Media Attribute (a): rtpmap:8 PCMA/8000
Media Attribute (a): rtpmap:4 G723/8000
Media Attribute (a): fmtp:4 annexa=no; bitrate=5.3
Media Attribute (a): rtpmap:18 G729/8000
Media Attribute (a): fmtp:18 annexb=no
Media Attribute (a): rtpmap:97 iLBC/8000
Media Attribute (a): fmtp:97 mode=30
Media Attribute (a): rtpmap:2 G726-32/8000
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute (a): fmtp:101 0-15
Media Attribute (a): rtpmap:121 GS-FEC/19200
Media Attribute (a): fmtp:121 version=2
Media Attribute (a): rtpmap:124 RED/19200
Media Attribute (a): crypto:1 AEAD_AES_256_GCM inline:cWnsfrNRSCbMBJXt+OWo5EBxy/DlY38zYkVuAJiLiwn1d4eoyNDPlNRkgsw=|2^32
Media Attribute (a): crypto:2 AES_CM_256_HMAC_SHA1_80 inline:18lNiFPoBM1p48YdJQQ/ZtvtM7qQdyHcg1j2JGN1Rzs+lMORfcde5qokA88pQg==|2^32
Media Attribute (a): crypto:3 AES_CM_256_HMAC_SHA1_32 inlineBGIPHpH/Vonmb1fLEX7NRXSfHlsVFrNiyHZ5+u0a/fF9DQ/OzGZYspWwfecvQ==|2^32
Media Attribute (a): crypto:4 AES_256_CM_HMAC_SHA1_80 inline:18lNiFPoBM1p48YdJQQ/ZtvtM7qQdyHcg1j2JGN1Rzs+lMORfcde5qokA88pQg==|2^32
Media Attribute (a): crypto:5 AES_256_CM_HMAC_SHA1_32 inlineBGIPHpH/Vonmb1fLEX7NRXSfHlsVFrNiyHZ5+u0a/fF9DQ/OzGZYspWwfecvQ==|2^32
Media Attribute (a): crypto:6 AES_CM_128_HMAC_SHA1_80 inline:Siqwipt8eoDf+bRBPiJB1q7M36NEZ0sMNxqhC38j|2^32
Media Attribute (a): crypto:7 AES_CM_128_HMAC_SHA1_32 inline:NgQwab7A4OCcYziTiJwIz9dHZJrY4WE3xwtbytuE|2^32
[Generated Call-ID: 1972697455-5060-3@BJC.BGI.CAA.BAD]
上述包表明我方话机局域网IP:192.168.200.103:5060,但媒体中携带地址是外网IP:101.71.248.138,导致对端往外网地址发RTP包。检查话机配置文件cfg,发现话机存在一个web不存在的配置项P76=stun.l.google.com:19302,原来是开启了stun,把配置清空后问题解决。
|
|