SPA122 daily disconnections

[info]

Hello, our SPA122 disconnects from the voip server nearly everyday. We've already double checked ethernet connections from the system to the router&switch, everything complies with category 6 ethernet cables. I've set up logging through slogsrv.exe, and here i attach this two-days log.

When it fails, we reboot the system and then it succeds in the connection.

Please could somebody review the log and give us some help? This would be much appreciated,

Thank you,

[Dan Lukes]

Let's go.

disconnects from the voip server

Unfortunately, so many possible meanings of it. Please be specific what you mean. Who claim the SPA112 is disconnected from server ? Why claim it ?

Attached syslog is not so helpful. It seems you didn't turned on logging of voice application or the log level is so low. Also, it lacks timestamps (moreover you didn't mentioned when issue manifested).

As a very blind shot - issues similar to the one you vaguely described are often caused by NAT or statefull firewall. How often the SPA112 is configured to (re-)register ? Is the frequency enough for provider ? Is it hign enough for NAT and/or firewall engine you are using/is on the way ?

Consider to capture all SIP packets between SPA112 and provider when SPA looks disconnected for two registration periods.

[info]

Hi Dan, thanks for helping. Here i go:

- We detect SPA122 losses connection nearly everyday with the voip server, cause we start to receive calls forwarded to other phones. I do check it everytime in the SPA122 web configuration utility. Both lines 1&2 show the Registration state as "failed".

- The log level selected in the Miscellaneous settings as Debug Level is 3. I don't know how to force timestamps to be included in it.

- Our SPA122 is connected to our ISP's router through a switch. The router has the firewall activated, and the SIP ALG function enabled, on port 5060. We do have other ip phones in the same net that do not have problems at all. Do you think we should disable the SIP ALG function, or the firewall and try?

- This is the configuration of SIP in the SPA122:

SIP Timer Values (sec)

SIP T1:                  .5

SIP T2:                  4

SIP T4:                  5

SIP Timer B:       32

SIP Timer F:        16

SIP Timer H:       32

SIP Timer D:       32

SIP Timer J:        32

INVITE Expires:                240

ReINVITE Expires:           30

Reg Min Expires:             1

Reg Max Expires:            7200

Reg Retry Intvl:                30

Reg Retry Long Intvl:    1200

Reg Retry Random Delay:           0

Reg Retry Long Random Delay:                0

Reg Retry Intvl Cap:       0

- Is the frequency enough for provider ? Is it hign enough for NAT and/or firewall engine you are using/is on the way ? I don't know how to answer this questions

- What tool do i have to use to capture SIP packets with the SPA122? (I've already searched in this forum and google but can't find how)

Thanks a lot!!

[Dan Lukes]

Both lines 1&2 show the Registration state as "failed".

Well, it mean the SPA122 tried to register, but it's request has been rejected or not responded at all. Capture of SIP dialog become more important to us.

What tool do i have to use to capture SIP packets with the SPA122? (I've already searched in this forum and google but can't find how

tcpdump on an unix, wireshark on Windows. But topology of LAN needs to be taken into consideration. Packet you are interested to capture needs to be delivered to computer capturing them. Ask local network administrator for help in doubt.

By the way, I assume you are running most recent formware on SPA122.

[info]

Ok, i've found this document: http://docplayer.net/14038038-Installing-and-using-wireshark-for-capturing-network-traffic.html

I assume i can mirror the port and configure wireshark to capture the traffic. By the way, i'm the local network administrator...:))) this is a small company....

The current firmware in the system is 1.4.1 (002).

I hope in a few days i can post the packet log file.

Thank you!

[Dan Lukes]

The router has the firewall activated, and the SIP ALG function enabled, on port 5060. We do have other ip phones in the same net that do not have problems at all. Do you think we should disable the SIP ALG function, or the firewall and try?

I missed it.

Multiple SIP clients behind single IP address may cause troubles. Especially when connected to same server.

Disconnect all other SIP clients and try.

[info]

Multiple SIP clients behind single IP address may cause troubles. Especially when connected to same server.

Of course they're behind a single IP address...they're all share the same internet connection trough the same router. But each one has its own fixed ip in the range 192.168.1.2 to 192.168.1.20

Disconnect all other SIP clients and try.

Ok, my mates are gonna kill me if i do that! I cannot leave them uncommunicated until the SPA122 gives the error.

[info]

Hi Dan, attached you can find the files captured with wireshark for the last two days. You can find there several disconnection periods.

192.168.1.17 is the fixed ip of our SPA122 in our network

Please tell me if you see something erroneous,

Thanks a lot for helping

[Dan Lukes]

 my mates are gonna kill me if i do that! I cannot leave them uncommunicated until the SPA122 gives the error.

It's why God of IT administrators has created weekends ;-)

You can find there several disconnection periods.

It's so large to be read in full. At least I have not enough spare time for it right now. Can you disclose time of one of such unfortunate event ?

[info]

Ok, after learning a bit of wireshark, here I'm trying again:

Attached you'll find a file that doesn't contain any rtp packet, only contains packets sent to&from 192.168.1.17, the ip of the SPA122.

The first packet is a request to register in our voip server (sip1.treefone.com). It tries to register without success continuously from 06:19:39 to 11:02:41. At 11:04:01  finally manages to register ("Status 200 Ok (1 binding)")

192.168.1.13 is a computer connected to the SPA122, as we use it in bridge mode.

Hope this way you can shed a bit of light...

[Dan Lukes]

OK. Both:

spa122.pcapng.txt

filtrado_copia.txt

shows the same.

The SPA122 is sending registration requests but no response has arrived.

Either

1. registration request has not reached the provider's server
2. provider's server considered not to respond
3. the response has not arrived back.

It's hard to debug something like it from just your's side. Ask your provider for assistance. He should confirm your requests are arriving and they are responded. It will eliminate 1) and 2) and even some reasons for 3)

[Dan Lukes]

Please edit your previous comment and REMOVE the file attached. It contain not only SIP dialogs but full capture - so it includes content of calls recorded. Anyone can listen the speaking. Your mates will kill you for a reason.

I filtered out packets not required and attached filtered capture here.

[info]

Oh, thank you...already deleted.