Ask Your Question

MATE SIP correlation by few headers

asked 2018-12-17 07:14:19 +0000

Konstantin gravatar image

Hello, guys.

I've tried several different ways but failed to solve the problem. Your help will be approciated.

SIP call flow: incoming LEG_A initiates several different outgoing legs (LEG_B, LEG_C, LEG_D). Each leg (LEG_A, LEG_B, LEG_C, LEG_D) has own Call-ID. Each of initiated leg (LEG_B, LEG_C, LEG_D) has a custom SIP-header to correlate them with LEG_A (P-RC-KEY), its contains Call-ID of LEG_A.

I'm trying to create MATE file to Gog al lof this legs. But the problem is: initial leg (LEG_A) has no P-RC-KEY header. So my goal is to create Gog based on two different headers: Call-ID from 1st leg and P-RC-KEY from all other.

Right now I can do it only based on Call-ID (I have a Gog with LEG_A only) or P-RC-KEY (I have Gog with LEG_B, LEG_C, LEG_D).

I didn't find how to create Gog matching AVP regardless name. I didn't find how to create fake P-RC-KEY header to the LEG_A.

edit retag flag offensive close merge delete


In newer versions of Wireshark there is an UAT to define new header fields, try defining P-RC-KEY and use it as a filter,

Anders gravatar imageAnders ( 2018-12-17 09:55:07 +0000 )edit

I can define P-RC-KEY as a new SIP header and work with it (that's why I can correlate LEG_B, LEG_C, LEG_D together). The problem is that LEG_A has no such header.

Konstantin gravatar imageKonstantin ( 2018-12-17 12:14:45 +0000 )edit

If you use top of trunk I have implemented call leg tracking trough SDP which ties the first call-ID to subsequents parts of the. The filter is call ip.call_id_generated.

Anders gravatar imageAnders ( 2018-12-18 09:16:59 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted

answered 2018-12-17 15:43:33 +0000

JeffMorriss gravatar image

It's been a long while since I used MATE but would Transforms help here?

Maybe by adding a P-RC-KEY to the call legs that don't have it (by setting P-RC-KEY to the value of leg A's Call-ID)?

edit flag offensive delete link more


You are absolutely right - I have to create AVP with Call-ID as correlation key for legs without P-RC-KEY header. But I don't know how to create new AVP with value from sip.Call-ID field. This field already Extracted for Gop correlation - I can't extract it second time for some reason (MATE limitation). And I can't copy value from one AVP to the new one (there are no such syntax).

Konstantin gravatar imageKonstantin ( 2018-12-18 05:44:52 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools



Asked: 2018-12-17 07:14:19 +0000

Seen: 452 times

Last updated: Dec 17 '18