SIP OPTIONS “storm”?

Home » Asterisk Users » SIP OPTIONS “storm”?
Asterisk Users 5 Comments

Greetings-

I recently experienced an odd situation. I have an Asterisk 11.5.0 system (Box A) with a SIP peering to another Asterisk 1.8.23.0 system (Box B). At some point, Box A started sending over 65Mbps of SIP OPTIONS packets to Box A. I do have qualify=yes for the peer on both sides, and the qualifyfreq is not set (aka default of 60secs).

Of course, logs on Box A were not set to show debug info, so there is no indication of a problem. Logs on Box B show no issues, only at a very specific start time, there are suddenly tons of:

[2014-02-13 00:12:50] DEBUG[31516] chan_sip.c: Allocating new SIP dialog for 2a338cf5518531e31190bd4b7826d137@x.y.z.166:5060 – OPTIONS (No RTP)

I’ve done quite a bit of searching, but am not finding anything of consequence. Also, the Asterisk changelogs are not providing anything that would indicate this is known and fixed, at least for the 11.x branch.

Thoughts/suggestions? Thanks!

–Tim

5 thoughts on - SIP OPTIONS “storm”?

  • SIP options message is due to check the peer registration is keepalive. As per my understanding it might be because of network flap may be wireshark trace can give you any clue.

    Regards

  • —– Original Message —–

    Right, but a packet capture shows the source to be box A, and the destination to be box B. NMS reports from the same time period confirm the traffic flows. I’m not guessing or stabbing in the dark, I did my homework before posting. 🙂

    Checking the IDs across ~25 packets, all have different SIP IDs.

    Any thoughts?

    –Tim

    —

  • Attach the packet capture to your Jira bug report or post it online somewhere. Hopefully someone will look at it.

    —–Original Message—