No output for show sip in ASA5515?

[NInja Black]

Hi,

 At the firewall ASA5515 I see that sip packets are being inspected but the 'show sip' command gives 0 output.

Below is the output

Result of the command: "show service-policy inspect sip"

Global policy:
  Service-policy: global_policy
    Class-map: inspection_default
      Inspect: sip , packet 2795, lock fail 0, drop 0, reset-drop 0, v6-fail-close 0
               tcp-proxy: bytes in buffer 0, bytes dropped 0

Result of the command: "sh sip"

Total: 0

Any explanation is appreciated.

[naveenrawat007 · Accepted solution]

Hi 

"show sip" command is used to display the established SIP sessions across the ASA. It may happen that the SIP traffic is being generated and is getting inspected too, but "show sip" only displays data when there is a established sip session only.

Further to check for sip traffic across firewall you can use:

show service-policy

show local-host | in 5060

debug sip

So if you need any output in "show sip" please verify that there is a established sip session across firewall.

please rate if useful

Cheers

Naveen

[NInja Black]

Thanks for the reply Naveen.

I do see few sip sessions but very rarely. Considering around 15 people using softphones I was expecting significant sip sessions at any given time. Yet I hardly see any in ' sh sip' output. Did a wireshark capture on the FW for one of the PCs and it showed sip traffic.

I don't understand. Is that how its supposed to be?