sipcapture / heplify

Portable and Lightweight HEP Capture Agent for HOMER
https://sipcapture.org
GNU Affero General Public License v3.0
185 stars 66 forks source link

Packets out of order with TCP Assembly enabled #223

Closed bmp01 closed 5 months ago

bmp01 commented 2 years ago

When TCP assembly is enabled in Heplify the TCP packets have a reported delay compared to UDP resulting in flows in Homer showing messages out of order.
Here TCP Assembly is on and the 180 is sent back from the second device, a SIP Proxy before the Invite shows as being sent to the SIP Server (third device). TCPAsm_On_Red
Here is the same flow without TCP Assembly enabled. TCPAsm_Off_Red

The flow with TCP Assembly off is what I would expect to see normally. The only difference is the top call was captured with Heplify with the -tcpassembly otherwise the same command was used. The only device capturing traffic in this low is the middle server, the SIPProxy. This is running Heplify 1.63 compiled from source.

Any insight/suggestions would be appreciated.