
I have an adtran 912 that I'm seeing one way audio on origination calls (very intermittently). I'm exporting pcap's from the machine to a tftp server over the internet. But the 912 runs out of memory and pauses the pcap process and thus far I haven't been able to get a single decent pcap to show the carrier. I've been on with Adtran support and their answer is to put the tftp server closer to the adtran so that exports finish faster. I'm doing that and will have it done in the am. However I thought I'd ask if there's a magic process that anyone has found for getting good pcaps from these devices. They seem to work well, but troubleshooting is a bitch. You can even log the debug. You have to keep a damn terminal open and hit a key every 4 minutes to not disconnect. Thanks David -- -- www.ringfree.biz 828-575-0030

Ask Adtran for a demo partition of Ncommand and see if its retention of PCAPS allow you to isolate the issue Just a thought Zak Rupas VoIP Engineer *SimpleSignal* Anywhere: 303-242-8606 On Tue, Jun 17, 2014 at 2:07 PM, David Wessell <david at ringfree.biz> wrote:
I have an adtran 912 that I'm seeing one way audio on origination calls (very intermittently).
I'm exporting pcap's from the machine to a tftp server over the internet. But the 912 runs out of memory and pauses the pcap process and thus far I haven't been able to get a single decent pcap to show the carrier.
I've been on with Adtran support and their answer is to put the tftp server closer to the adtran so that exports finish faster. I'm doing that and will have it done in the am.
However I thought I'd ask if there's a magic process that anyone has found for getting good pcaps from these devices. They seem to work well, but troubleshooting is a bitch. You can even log the debug. You have to keep a damn terminal open and hit a key every 4 minutes to not disconnect.
Thanks David
-- -- www.ringfree.biz 828-575-0030
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops

Our methodology for packet captures is to put an independent machine on a spanned port and capture on that. Then it doesn't matter what the devices are doing, you get a true network picture. On Tue, Jun 17, 2014 at 1:07 PM, David Wessell <david at ringfree.biz> wrote:
I have an adtran 912 that I'm seeing one way audio on origination calls (very intermittently).
I'm exporting pcap's from the machine to a tftp server over the internet. But the 912 runs out of memory and pauses the pcap process and thus far I haven't been able to get a single decent pcap to show the carrier.
I've been on with Adtran support and their answer is to put the tftp server closer to the adtran so that exports finish faster. I'm doing that and will have it done in the am.
However I thought I'd ask if there's a magic process that anyone has found for getting good pcaps from these devices. They seem to work well, but troubleshooting is a bitch. You can even log the debug. You have to keep a damn terminal open and hit a key every 4 minutes to not disconnect.
Thanks David
-- -- www.ringfree.biz 828-575-0030
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops

On 17 June 2014 21:16, Carlos Alvarez <caalvarez at gmail.com> wrote:
Our methodology for packet captures is to put an independent machine on a spanned port and capture on that. Then it doesn't matter what the devices are doing, you get a true network picture.
Same here or agents on the systems pushing SIP captures to a Homer instance. -- Kind Regards, Gavin Henry. Do you know we have our own VoIP provider called SureVoIP? See http://www.surevoip.co.uk OpenPGP (GPG/PGP) Public Key: 0x8CFBA8E6 - Import from hkp://subkeys.pgp.net or http://www.suretecgroup.com/0x8CFBA8E6.gpg

We have a standard "kit" that goes to sites when there are issues. It has a hub (real hub, not switch), a cheap manageable switch with a spanned port, and a Linux netbook with packet capture set up on it. This lets anyone with even marginal tech knowledge install it easily and start capturing. The hub is problematic for voice quality, obviously, but can be useful to see broken network packets and junk that a switch may not pass. We once found a network segment that was flooded with some kind of non-standard packets from a SCADA type device which weren't being passed through the switch. On Tue, Jun 17, 2014 at 1:46 PM, Gavin Henry <ghenry at suretec.co.uk> wrote:
On 17 June 2014 21:16, Carlos Alvarez <caalvarez at gmail.com> wrote:
Our methodology for packet captures is to put an independent machine on a spanned port and capture on that. Then it doesn't matter what the devices are doing, you get a true network picture.
Same here or agents on the systems pushing SIP captures to a Homer instance.
-- Kind Regards,
Gavin Henry.
Do you know we have our own VoIP provider called SureVoIP? See http://www.surevoip.co.uk
OpenPGP (GPG/PGP) Public Key: 0x8CFBA8E6 - Import from hkp://subkeys.pgp.net or http://www.suretecgroup.com/0x8CFBA8E6.gpg

Turning off MAC address learning on a switch will turn it into a "hub" without the interface collisions.
-----Original Message----- From: VoiceOps [mailto:voiceops-bounces at voiceops.org] On Behalf Of Carlos Alvarez Sent: Tuesday, June 17, 2014 3:55 PM To: VoiceOps (voiceops at voiceops.org) Subject: Re: [VoiceOps] Adtran Help
We have a standard "kit" that goes to sites when there are issues. It has a hub (real hub, not switch), a cheap manageable switch with a spanned port, and a Linux netbook with packet capture set up on it. This lets anyone with even marginal tech knowledge install it easily and start capturing.
The hub is problematic for voice quality, obviously, but can be useful to see broken network packets and junk that a switch may not pass. We once found a network segment that was flooded with some kind of non-standard packets from a SCADA type device which weren't being passed through the switch.
On Tue, Jun 17, 2014 at 1:46 PM, Gavin Henry <ghenry at suretec.co.uk> wrote:
On 17 June 2014 21:16, Carlos Alvarez <caalvarez at gmail.com> wrote:
Our methodology for packet captures is to put an independent machine on a spanned port and capture on that. Then it doesn't matter what the devices are doing, you get a true network picture.
Same here or agents on the systems pushing SIP captures to a Homer instance.
-- Kind Regards,
Gavin Henry.
Do you know we have our own VoIP provider called SureVoIP? See http://www.surevoip.co.uk
OpenPGP (GPG/PGP) Public Key: 0x8CFBA8E6 - Import from hkp://subkeys.pgp.net or http://www.suretecgroup.com/0x8CFBA8E6.gpg
VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops

I'm pretty certain it still won't pass malformed packets or custom frames that aren't real Ethernet frames. Not completely certain about that. Would be interesting knowledge if anyone else knows for sure. On Tue, Jun 17, 2014 at 2:10 PM, Lee Riemer <LRiemer at bestline.net> wrote:
Turning off MAC address learning on a switch will turn it into a "hub" without the interface collisions.
-----Original Message----- From: VoiceOps [mailto:voiceops-bounces at voiceops.org] On Behalf Of Carlos Alvarez Sent: Tuesday, June 17, 2014 3:55 PM To: VoiceOps (voiceops at voiceops.org) Subject: Re: [VoiceOps] Adtran Help
We have a standard "kit" that goes to sites when there are issues. It has a hub (real hub, not switch), a cheap manageable switch with a spanned port, and a Linux netbook with packet capture set up on it. This lets anyone with even marginal tech knowledge install it easily and start capturing.
The hub is problematic for voice quality, obviously, but can be useful to see broken network packets and junk that a switch may not pass. We once found a network segment that was flooded with some kind of non-standard packets from a SCADA type device which weren't being passed through the switch.
On Tue, Jun 17, 2014 at 1:46 PM, Gavin Henry <ghenry at suretec.co.uk> wrote:
On 17 June 2014 21:16, Carlos Alvarez <caalvarez at gmail.com> wrote:
Our methodology for packet captures is to put an independent machine on a spanned port and capture on that. Then it doesn't matter what the devices are doing, you get a true network picture.
Same here or agents on the systems pushing SIP captures to a Homer instance.
-- Kind Regards,
Gavin Henry.
Do you know we have our own VoIP provider called SureVoIP? See http://www.surevoip.co.uk
OpenPGP (GPG/PGP) Public Key: 0x8CFBA8E6 - Import from hkp://subkeys.pgp.net or http://www.suretecgroup.com/0x8CFBA8E6.gpg
VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops

On 06/17/2014 04:16 PM, Carlos Alvarez wrote:
Our methodology for packet captures is to put an independent machine on a spanned port and capture on that. Then it doesn't matter what the devices are doing, you get a true network picture.
And also a more objective one, not mediated by the device's own potential failings in processing or parsing certain messages. It's best to really see what's on the wire. -- Alex Balashov - Principal Evariste Systems LLC Tel: +1-678-954-0670 Web: http://www.evaristesys.com/, http://www.alexbalashov.com/ Please be kind to the English language: http://www.entrepreneur.com/article/232906

Fluke or similar network taps are really the suggested solution here. Either pay for a good one, or make your own, but either way you need something roughly the size of a tablet that can be an inline network tap and analisys device that you can send around easily. Any time you're relying on the questioned device, you could be getting bad data. Thankfully most interconnects are ethernet now, so this is much less the difficult task it used to be. One example of why you would need to is the packets hit the TX ring but then get dropped due to firmware bug: most devices would see them in the capture outbound, but an inline device directly in front would not, removing the ambiguity and finger pointing between you and the handoff. -Blake On Tue, Jun 17, 2014 at 7:43 PM, Alex Balashov <abalashov at evaristesys.com> wrote:
On 06/17/2014 04:16 PM, Carlos Alvarez wrote:
Our methodology for packet captures is to put an independent machine on a spanned port and capture on that. Then it doesn't matter what the devices are doing, you get a true network picture.
And also a more objective one, not mediated by the device's own potential failings in processing or parsing certain messages. It's best to really see what's on the wire.
-- Alex Balashov - Principal Evariste Systems LLC Tel: +1-678-954-0670 Web: http://www.evaristesys.com/, http://www.alexbalashov.com/
Please be kind to the English language:
http://www.entrepreneur.com/article/232906
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops

Which direction is the one-way audio, who can?t hear? Is it behind a firewall or ALG? What stats do you see when you do a ?show voice quality-stats? and look at a bad call? From: VoiceOps [mailto:voiceops-bounces at voiceops.org] On Behalf Of David Wessell Sent: Tuesday, June 17, 2014 3:07 PM To: VoiceOps (voiceops at voiceops.org) Subject: [VoiceOps] Adtran Help I have an adtran 912 that I'm seeing one way audio on origination calls (very intermittently). I'm exporting pcap's from the machine to a tftp server over the internet. But the 912 runs out of memory and pauses the pcap process and thus far I haven't been able to get a single decent pcap to show the carrier. I've been on with Adtran support and their answer is to put the tftp server closer to the adtran so that exports finish faster. I'm doing that and will have it done in the am. However I thought I'd ask if there's a magic process that anyone has found for getting good pcaps from these devices. They seem to work well, but troubleshooting is a bitch. You can even log the debug. You have to keep a damn terminal open and hit a key every 4 minutes to not disconnect. Thanks David -- -- www.ringfree.biz<http://www.ringfree.biz> 828-575-0030

One way audio is origination only. Person behind Adtran can't hear remote caller. And it's very intermittent. 5 calls out of 200. No firewall or ALG. Adtran connects directly to ISP (Local ISP Fiber Based). The adtran connects to our SIP switch which doesn't proxy the media at all. I don't easily have access to the Adtran port to run a tcpdump on. I've asked the ISP if they can get a tcpdump and it's possible. The Adtran is running R10.9.3.E and I have ip-rtp symetric-filter enabled. I'm relatively certain (Not positive, but I got a HUNCH) that it's the carrier. But the lack of good pcap is an issue for proof. Hopefully the ISP can grab a tcpdump for me.. Fingers crossed. The packet capture export function on the Adtran device is near useless so far as I can tell. dw On Tue, Jun 17, 2014 at 4:29 PM, Lee Riemer <LRiemer at bestline.net> wrote:
Which direction is the one-way audio, who can?t hear? Is it behind a firewall or ALG?
What stats do you see when you do a ?show voice quality-stats? and look at a bad call?
*From:* VoiceOps [mailto:voiceops-bounces at voiceops.org] *On Behalf Of *David Wessell *Sent:* Tuesday, June 17, 2014 3:07 PM *To:* VoiceOps (voiceops at voiceops.org) *Subject:* [VoiceOps] Adtran Help
I have an adtran 912 that I'm seeing one way audio on origination calls (very intermittently).
I'm exporting pcap's from the machine to a tftp server over the internet. But the 912 runs out of memory and pauses the pcap process and thus far I haven't been able to get a single decent pcap to show the carrier.
I've been on with Adtran support and their answer is to put the tftp server closer to the adtran so that exports finish faster. I'm doing that and will have it done in the am.
However I thought I'd ask if there's a magic process that anyone has found for getting good pcaps from these devices. They seem to work well, but troubleshooting is a bitch. You can even log the debug. You have to keep a damn terminal open and hit a key every 4 minutes to not disconnect.
Thanks David
-- -- www.ringfree.biz 828-575-0030
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
-- -- www.ringfree.biz 828-575-0030
participants (7)
-
abalashov@evaristesys.com
-
caalvarez@gmail.com
-
david@ringfree.biz
-
ghenry@suretec.co.uk
-
ikiris@gmail.com
-
LRiemer@bestline.net
-
zak@simplesignal.com