[SIPForum-discussion] Should ACK sent by SS1 before receiving from UAC?

[Aditya Prakash]

thanks..

can any one give suggestion how to write snort rules i.e signature so that
when i do
svamp network ip
like svmap -10.0.0.1/24

by this command it will show version and all..
i dont want that due to security issues.




tys truly
aditya prakash


On Tue, Sep 24, 2013 at 1:32 PM, Binan AL Halabi <binanalhalabi at yahoo.com>wrote:

>
> Hi Aditya,
>
> In case no forking you have 1 dialog per session. In case the INVITE is
> forked (multiple 2xx are received from different remote UAs). Each 2xx
> establishes different dialog.
>
> // Binan.
>  ------------------------------
>  *Från:* Aditya Prakash <adipra90 at gmail.com>
> *Till:* bikram mohanty <bikram_mohanty007 at yahoo.com>
> *Kopia:* Binan AL Halabi <binanalhalabi at yahoo.com>; siddharth sharma <
> sid77sharma77 at gmail.com>; "discussion at sipforum.org" <
> discussion at sipforum.org>
> *Skickat:* tisdag, 24 september 2013 6:35
> *Ämne:* Re: [SIPForum-discussion] Should ACK sent by SS1 before receiving
> from UAC?
>
> can any one tell me what should be the default value for number of dialog
> per session in sip
>
>
> yours sincerely
> aditya prakash
>
>
> On Mon, Sep 23, 2013 at 4:58 PM, bikram mohanty <
> bikram_mohanty007 at yahoo.com> wrote:
>
> it could be possible that SS1 sends ACK and then send the 200 OK in down
> stream.
> this call leg specific to the sip phone and SS1 ,so sip phone should
> respond with ACK in side the timer.
> As mentioned the connectivity is lost that's why 200 OK could not reach
> the SIP phone.
>
> And SS1 goes on re-transmitting 200 OK.
> As it did not get any response timer fired and sends a BYE.
>
> Bikram
>
>
>   ------------------------------
>  *From:* Binan AL Halabi <binanalhalabi at yahoo.com>
> *To:* siddharth sharma <sid77sharma77 at gmail.com>
> *Cc:* "discussion at sipforum.org" <discussion at sipforum.org>
> *Sent:* Friday, 6 September 2013 2:28 PM
> *Subject:* Re: [SIPForum-discussion] Should ACK sent by SS1 before
> receiving from UAC?
>
> Hi Siddharth,
> The ACK for 2xx responses is end-to-end. So when 200 OK reaches the SIP
> phone, the ACK is generated from the SIP phone and forwarded to SS1.
>
> // Binan
>
>   ------------------------------
>  *Från:* siddharth sharma <sid77sharma77 at gmail.com>
> *Till:* discussion at sipforum.org
> *Skickat:* torsdag, 29 augusti 2013 13:51
> *Ämne:* [SIPForum-discussion] Should ACK sent by SS1 before receiving
> from UAC?
>
> Hi All,
>
> I have one issue here.
>
> Call scenario is like below.
>
> SIP phone ---> SS1 ----> SBC ----> SS2 ---> MGW ---> PSTN user.
>
> In the above scenario, call is originated by SIP phone and sent to PSTN
> user. 180 ringing message was sent from SS2 and send to SS1 and SS1 sent it
> to SIP phone.
> PSTN user answered the phone. So, 200 Ok was sent by SS2 to SS1. Here, SS1
> is sending ACK message first to SS2 and then it is sending 200Ok to SIP
> phone.
>
> During this time, connectivity was lost between SS1 to SIP phone. So, SS1
> keep sending 200Ok message and after certain timer, call released by SS1 by
> sending BYE message.
>
> In this case, CDR was not generated at SS1 end because it was failed call
> for SS1. But SS2 generated CDR because it has received ACK message.
>
> I want to know is SS1 behaving properly?
>
> _______________________________________________
> This is the SIP Forum discussion mailing list
> TO UNSUBSCRIBE, or edit your delivery options, please visit
> http://sipforum.org/mailman/listinfo/discussion
> Post to the list at discussion at sipforum.org
>
>
>
> _______________________________________________
> This is the SIP Forum discussion mailing list
> TO UNSUBSCRIBE, or edit your delivery options, please visit
> http://sipforum.org/mailman/listinfo/discussion
> Post to the list at discussion at sipforum.org
>
>
>
> _______________________________________________
> This is the SIP Forum discussion mailing list
> TO UNSUBSCRIBE, or edit your delivery options, please visit
> http://sipforum.org/mailman/listinfo/discussion
> Post to the list at discussion at sipforum.org
>
>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://sipforum.org/pipermail/discussion/attachments/20130924/fdede758/attachment-0002.html>