audicodes debug recorder

[murraya]

hi guys, having a issue at a site where we have multiple remote sites connected as remote users (8001 sets) via SBC. the sites are complaining of missing speech form external for 2-3 seconds during the call. the issue is random and can happen either multiple times or not at all in a call. (I love trying to find these random hard to reproduce faults )
As the oxe/OMS/OTSBC are all virtual its is not easy to probe the interfaces so thought I would use the audiococes debug recorder. the issue I have is that after I have the traces recorded I'm having an issue with being able to listen to bad calls in an effort to see where the RTP is being lost.
there are 3 interfaces involved on the SBC.
I can only find a old version of the acdr tool from audoicodes which is p0.99.8.560.02 and I can get it sort of working in Wireshark 1.10.8. I get an error when wireshark starts in relation to cdr.dtd but it seems to start still and when I open the trace from the SBC and apply the acdr filter and can see the SIP and RTP messages. If I go to voice calls and look for calls I can see the SIP flows but there is no RTP associated to the calls so have nothing to listen to in order to find at which point the speech goes missing.

Has anyone got a newer or better functioning version of the tool that they could provide or am I useing the tool incorrectly?
thanks in advance guys.

[tgn]

This old plugin will work with an old Wiresharkversion ( 0.99.8 ) only. You can find it here -> https://www.wireshark.org/download/win3 ... .8.paf.exe. This Version is also portable, so you can use it from your USB Drive too.
But beside this i'll check if i have a newer version and send you a PM.

regards...

[murraya]

thanks tgn, I tried that version an and got a lot of errors while starting. the readme in the p0.99.8.560.02 acdr says..

"Our Plugins files were built here for Wireshark version 1.10.8
To see the current Wireshark version - find #define VERSION "bla-bla" in wireshark\wireshark\config.h"

I like how they use the technical term bla-bla

I can hear the audio if I go to the udp rtp strams but as its a busy system it will take a long time to match the call to RTP stram

[tgn]

I can hear the audio if I go to the udp rtp strams but as its a busy system it will take a long time to match the call to RTP stram

yes thats not so easy... because the sip informations is embedded in the acdr layer and so the voip or sip calls funktion from wireshark will not work.
also there are two rtp-streams (or 4 for both directions) if you have a tls secured conversation (one unsecured and the other one secured).

regards...

[tot3nkopf]

Maybe try to set up first Syslog (use the Syslog Viewer provided by Audiocodes) and see if you have errors there.

[murraya]

thanks guys, I have managed to get the audio of a bad call and can hear gaps in the speech on the first incoming leg of the call.
the syslog showed nothing tot but thanks for the input.
FYI bit of a nightmere to decode as there were so many legs involved with 1 call. and this was before the call even got sent to the remote 8001 user over the internet.
carrier to SBC
SBC to OMS (ringing)
SBC to OT (AA)

[cavagnaro]

How you got the audio at the end? Used the same Wireshark plug-in?

Enviado de meu E6633 usando Tapatalk

[murraya]

yeah, use the plugin to decode the messages sent to the debug recorder, find the audiocodes session number in the sip message under the audiocodes headder in the packet, then apply filter in wirshark with that ID. now you have the RTP, SIP messages and sysog messages of the call.
next in wireshark telephoney/RTP/RTPstreams and decode.
this then gives all the seperate RTP streams to listen to.

[cavagnaro]

Nice. How did you fixed the version issue?


Enviado de meu E6633 usando Tapatalk

[murraya]

logged a ticket with Audiocodes and they provided the latest version they use. still old wireshark but at least it works:)