SIP/TCP Capturing Issue

[mikekovacevic]

Hello,

I've been trying to mirror SIP TCP traffic via heplify through heplify-server and have some issues processing TCP packets. I'm using heplify-server 0.96. For context, we're using OpenSIPS as a SIP Proxy to convert from a WebSocket (which end-user clients are using via a load balancer) to SIP over UDP. It seems that the TCP traffic is being mirrored via heplify, however is not being inserted into HOMER properly via heplify-server. I've attached a few items from my debugging and would appreciate some help:

webrtc_capture.zip

• Interface capture at OpenSIPS showing both TCP/UDP traffic (interface.pcap) (this is then mirrored over TLS from heplify to heplify-server)
• Resulting HOMER PCAP (includes messages from other parts of our infrastructure) showing that the TCP SIP messages are missing
• The heplify-server.log showing warnings with malformed packets
• The configuration of heplify-server

Please let me know if there's anything else I can attach to help with debugging.

[negbie]

Hi @mikekovacevic, ok I understand your setup from the pcap. Some things you need to know. You have to run heplify with -tcpassembly flag but it's still in beta stage and needs some improvements. I tested it with some TCP pcaps from heplify's example folder but I will have a look into your pcap aswell.

Would it be ok for you to close this here and reopen inside heplify repository?

[mikekovacevic]

Sure thing, I'll close here and recreate on the heplify repository.