First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

MATE SIP correlation by few headers

  • retag add tags

Hello, guys.

I've tried several different ways but failed to solve the problem. Your help will be approciated.

SIP call flow: incoming LEG_A initiates several different outgoing legs (LEG_B, LEG_C, LEG_D). Each leg (LEG_A, LEG_B, LEG_C, LEG_D) has own Call-ID. Each of initiated leg (LEG_B, LEG_C, LEG_D) has a custom SIP-header to correlate them with LEG_A (P-RC-KEY), its contains Call-ID of LEG_A.

I'm trying to create MATE file to Gog al lof this legs. But the problem is: initial leg (LEG_A) has no P-RC-KEY header. So my goal is to create Gog based on two different headers: Call-ID from 1st leg and P-RC-KEY from all other.

Right now I can do it only based on Call-ID (I have a Gog with LEG_A only) or P-RC-KEY (I have Gog with LEG_B, LEG_C, LEG_D).

I didn't find how to create Gog matching AVP regardless name. I didn't find how to create fake P-RC-KEY header to the LEG_A.

Konstantin's avatar
1
Konstantin
asked 2018-12-17 07:14:19 +0000
edit flag offensive 0 remove flag close merge delete

Comments

In newer versions of Wireshark there is an UAT to define new header fields, try defining P-RC-KEY and use it as a filter,

Anders's avatar Anders (2018-12-17 09:55:07 +0000) edit

I can define P-RC-KEY as a new SIP header and work with it (that's why I can correlate LEG_B, LEG_C, LEG_D together). The problem is that LEG_A has no such header.

Konstantin's avatar Konstantin (2018-12-17 12:14:45 +0000) edit

If you use top of trunk I have implemented call leg tracking trough SDP which ties the first call-ID to subsequents parts of the. The filter is call ip.call_id_generated.

Anders's avatar Anders (2018-12-18 09:16:59 +0000) edit
add a comment see more comments

1 Answer

0

It's been a long while since I used MATE but would Transforms help here?

Maybe by adding a P-RC-KEY to the call legs that don't have it (by setting P-RC-KEY to the value of leg A's Call-ID)?

JeffMorriss's avatar
6.4k
JeffMorriss
answered 2018-12-17 15:43:33 +0000
edit flag offensive 0 remove flag delete link

Comments

You are absolutely right - I have to create AVP with Call-ID as correlation key for legs without P-RC-KEY header. But I don't know how to create new AVP with value from sip.Call-ID field. This field already Extracted for Gop correlation - I can't extract it second time for some reason (MATE limitation). And I can't copy value from one AVP to the new one (there are no such syntax).

Konstantin's avatar Konstantin (2018-12-18 05:44:52 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer