[Users] get_hdr_field: bad to header...

Atle Samuelsen clona at cyberhouse.no
Mon Apr 24 10:46:13 CEST 2006


Hi Lars,

ALG = Application layer Gateway.

- Atle

* Lars Sundqvist <lars.sundqvist at home.se> [060424 09:57]:
> Sorry if it is obvious, but what does ALGs stand for? and is there any way this can be prevented or any way i can find out from where these requests come?
> 
> When I do a tcpdump and view the result in ethereal I can see we are getting some UDP packets (that do not get classified as SIP) to the openser port.
> These contain 2, 4 or 18 bytes with: 0a 0d, 00 00 00 00 or the string "KEEP ALIVE MESSAGE"
> 
> I've only captured a small amount of data so these might only be a small subset of the ones we actually receive (non-sip packets that is).
> 
> Could these packets be whats causing the errors in the log? and if so, can i somehow prevent openser to try to parse them as SIP?
> 
> Thanks
> 
> Lars Sundqvist
> 
> 
> Atle Samuelsen wrote:
> 
> >Whild Whild Guess, but I bet itt+s some ALGs that?s fucking up for
> >you..
> >
> >-A
> >
> >* Lars Sundqvist <lars.sundqvist at home.se> [060424 09:11]:
> > 
> >>Hello,
> >>
> >>We have a few hundred users registered to a openser we are running and everything works fine, however i get som error messages in the logs I would like to get rid 
> >>of...
> >>
> >>//sbin/openser[28867]: ERROR: get_hdr_field: bad to header
> >>/sbin/openser[28867]: ERROR: bad header  field
> >>/sbin/openser[28867]: ERROR: get_hdr_field: bad to header
> >>/sbin/openser[28867]: ERROR: bad header  field
> >>/sbin/openser[28867]: ERROR:parse_from_header: bad from header
> >>/sbin/openser[28867]: xl_get_from: ERROR cannot parse FROM header
> >>/sbin/openser[28867]: ERROR: get_hdr_field: bad to header
> >>/sbin/openser[28867]: ERROR: bad header  field
> >>/sbin/openser[28867]: xl_get_to: ERROR cannot parse TO header
> >>/sbin/openser[28867]: [REGISTER] from [<null>] to [<null>]
> >>/sbin/openser[28867]: ERROR: get_hdr_field: bad to header
> >>/sbin/openser[28867]: ERROR: bad header  field
> >>/sbin/openser[28867]: ERROR:maxfwd:is_maxfwd_present : parsing MAX_FORWARD header failed!
> >>/sbin/openser[28867]: ERROR:parse_from_header: bad from header
> >>/sbin/openser[28867]: insert_RR(): From parsing failed
> >>/sbin/openser[28867]: record_route(): Error while inserting Record-Route line
> >>/sbin/openser[28867]: ERROR: get_hdr_field: bad to header
> >>/sbin/openser[28867]: ERROR: bad header  field
> >>/sbin/openser[28867]: find_first_route: Error while parsing headers
> >>/sbin/openser[28867]: analyzing REGISTER request
> >>/sbin/openser[28867]: ERROR: get_hdr_field: bad to header
> >>/sbin/openser[28867]: ERROR: bad header  field
> >>/sbin/openser[28867]: find_credentials(): Error while parsing headers
> >>/sbin/openser[28867]: pre_auth(): Error while looking for credentials
> >>/sbin/openser[28867]: ERROR: get_hdr_field: bad to header
> >>/sbin/openser[28867]: ERROR: bad header  field
> >>/sbin/openser[28867]: ERROR: get_hdr_field: bad to header
> >>/sbin/openser[28867]: ERROR: bad header  field
> >>/sbin/openser[28867]: ERROR: build_res_buf_from_sip_req: alas, parse_headers failed
> >>/sbin/openser[28867]: pre_auth(): Error while sending 400 reply
> >>/
> >>Anyone has a clue what I can do to debug this to find out where the request are coming from or what can be done to stop the invalid(?) requests from being processed 
> >>and clutter my logs?
> >>
> >>Thanks
> >>
> >>Lars Sundqvist
> >>
> >>   
> >
> > 
> >>_______________________________________________
> >>Users mailing list
> >>Users at openser.org
> >>http://openser.org/cgi-bin/mailman/listinfo/users
> >>   
> >
> >
> > 
> 

> _______________________________________________
> Users mailing list
> Users at openser.org
> http://openser.org/cgi-bin/mailman/listinfo/users





More information about the Users mailing list