From: Joerg Dorchain <joerg@dorchain.net>
To: Patrick McHardy <kaber@trash.net>, netfilter@vger.kernel.org
Subject: Re: nf_conntrack_sip problem
Date: Thu, 2 Jul 2009 11:04:40 +0200 [thread overview]
Message-ID: <20090702090440.GI9285@Redstar.dorchain.net> (raw)
In-Reply-To: <20090702081741.GH9285@Redstar.dorchain.net>
[-- Attachment #1: Type: text/plain, Size: 1125 bytes --]
On Thu, Jul 02, 2009 at 10:17:41AM +0200, Joerg Dorchain wrote:
>
> I works, but somewhat ugly.
> # conntrack -E expect
> 180 proto=17 src=0.0.0.0 dst=85.93.219.122 sport=0 dport=11080
> 180 proto=17 src=0.0.0.0 dst=85.93.219.122 sport=0 dport=11081
> 180 proto=17 src=0.0.0.0 dst=212.88.133.153 sport=0 dport=7076
> 180 proto=17 src=0.0.0.0 dst=212.88.133.153 sport=0 dport=7077
>
> All the places where the ip is 0.0.0.0 or the port is 0 could be
> filled more specifically. The necessary information is available
> in the same SIP/SDP flow as the used information. Besides the two
> RTP stream are unidirectional, so I'd like to have something like
> this:
> 180 proto=17 src=212.88.133.153 dst=85.93.219.122 sport=7076 dport=11080
> 180 proto=17 src=85.93.219.122 dst=212.88.133.153 sport=11081 dport=7077
Sorry for replying to often to myself, I have another addendum:
In case of asterisk reinvites in order to have to RTP stream
moved away from the machine, there are still connections expected
despite that these invites are explicitly meant to stop rtp
streams to the local machine.
Joerg
[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 266 bytes --]
next prev parent reply other threads:[~2009-07-02 9:04 UTC|newest]
Thread overview: 12+ messages / expand[flat|nested] mbox.gz Atom feed top
2009-07-01 11:37 nf_conntrack_sip problem Joerg Dorchain
2009-07-01 12:03 ` Patrick McHardy
2009-07-01 14:43 ` Joerg Dorchain
2009-07-01 15:05 ` Patrick McHardy
2009-07-01 16:10 ` Joerg Dorchain
2009-07-01 16:16 ` Patrick McHardy
2009-07-01 20:56 ` Joerg Dorchain
2009-07-02 8:17 ` Joerg Dorchain
2009-07-02 9:04 ` Joerg Dorchain [this message]
2009-07-03 9:45 ` Patrick McHardy
2009-07-03 11:20 ` Joerg Dorchain
2009-07-03 9:44 ` Patrick McHardy
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20090702090440.GI9285@Redstar.dorchain.net \
--to=joerg@dorchain.net \
--cc=kaber@trash.net \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox