I've no experience in VoIP and been ditched with looking at an IP trunking problem on our network.The users where getting dead lines or silent calls, but it seems after re-seating IP trunking card here and there around the network a few times, all is settled to normal. Unfortunately it's a third party that look after the majority of the telephony, and as they can't figure out why this happens they often say it must be a problem with the data WAN it traverses.So I started trying to figure something out, I have IPSLA monitoring setup in Solarwinds on most of the routers and all looks well from that aspect; MOS is 4.34 and Jitter is only 1ms at worst. I've taken a wireshark packet capture of the IP trunk by mirroring the port on the switch at a main site where I've been told a lot of calls are routed through. Inside wireshark I used the 'telephony> voip calls' tool and decoded all the calls. The output is showing most calls have 'Out of Seq' and 'Wrong Timestamp' at around 25-50%. Although these calls seem fine otherwise, and I took this capture whilst the fault was not occurring. I know I need to capture next time when the fault is occurring, but this is what I have for now.How can i fix this or even start to troubleshoot further?
p.s- each site has two routers running GLBP to the WAN, over two ISP locations. I read something about having consistent routing to avoid packets arriving out of sequence, but haven't found anything yet to say this is how I can/should do that.
We have a web server running Joomla.There is a plugin to the website which downloads an iCal file from the internet via a URL. The site gives an error when retrieving this file. I can pull the file down manually via a browser, or doing a wget from the command line. However, the plugin fails. [code]I'm sure there's a packet being dropped in here somewhere, but from which side? Why on earth this would work fine through a browser or wget, but not via the PHP code which executes this GET?
Has anyone come across a ping cmd utility for windows with more functionality like the linux one? What I want really is sequence numbering and RTT measured with a few decimals.
I just installed a new ACS 5.1 to authenticate wireless PEAP users, so I created an Access policy "WirelessUsers" with identity store being Windows Active directory and all domain users are selected, and create a service rule that dictates that if the authentication protocol is radius, network device belongs to WLC device group, the result service will be "WirelessUsers", so this part worked perfectely, all domain users are able to gain wireless access via their DOMAIN/usernames and domain passwords. Now I want ACS local indentity store users (those local usernames can be the same or different from their AD usernames) to be able to manage those controllers, so I created another access policy "DeviceAdminUsers" with identity store being local users, another service rule which says that if the authentication protocol is radius, network device belongs to WLC device group, the result service will be "DeviceAdminUsers". The problem is that with the setup, whenenve when I try to SSH to WLC, ACS always put me in "WirelessUsers" access policy, even the login name does not have DOMAIN pre-pended or the login name simly does not exist in AD. if I put the second rule in front of first rule, I am able to authenticate with ACS local username/password and gain access to WLC, but wireless users will fail to authenticate, because ACS is trying to put regular wiress users in "DeviceAdminUsers" access policy. I would expect if username does not exist in AD, ACS should proceed with next rule. Similar requirement was easily achieved in ACS 3.3.
I have a concern about my system. I am running Win XP Pro on my computer and when it boots up and I log in, it takes about two minutes with the internet first, AVG following and windows firewall last amongst other apps.Is there a way that I can increase my loading speeds plus changing the bootup sequence so I don't run high risk of infections from trojans or malware?
For about 3 minutes the 2.4GHz and 5GHz LEDs began to flash in sequence, [2.4-5-2.4-5-2.4-5-Both-Both], it just kept doing that. During that time wireless connections were unresponsive. When they went back to normal I checked the router and it didn't reboot or anything. This is the first anomaly I've ran into running the 2.05NA FW.
On my network I have a Netgear ReadNAS connected and I'm using an add-in (ReadyNAS Remote) that simplifies the log in to for both internet and LAN-users. However, I get a lot of the following entries in the log when that add-in is being used.
When an internet user log in via ReadyNAS Remote: "Blocked outgoing TCP packet from 192.168.0.xxx:3649 to xx.xxx.xxx.xxx:50125 with unexpected acknowledgement 3320366884 (expected 754541166 to 755655246)"
When a LAN-user log in via ReadyNAS Remote: "Blocked incoming TCP packet from 69.xxx.xxx.xx:80 to xx.xx.xx.xxx:50329 with unexpected sequence 3004123085 (expected 3004136875 to 3004393915)"
I have a Dell Latitude E6410 laptop that does not have a Serial port or a Break key on the keyboard. I have a Prolific PL2303 USB-to-Serial adapter which is installed and I can access the CLI ok with this setup via HyperTerminal.
My problem is that I am unable to break into ROMMON using the break sequence Ctrl + Break (as there is no break key). I have also tried TeraTerm with the break sequence of Alt + B.
Additionally, I have tried setting the baud rate to 2600 and pressing the space bar for 10 seconds to no avail.
I have a 2514 Router that i have tried numerous times to access the break sequence and do a pwd reset, while connected to the console port.. How ever its whopping me good..
I've heard mixed things about the use of DHCP release messages. I've heard that some operating systems don't bother with them at all, which makes sense because many users disconnect the network media without shutting down the workstation. Which operating systems actually send out release messages as part of their shutdown sequence?
When accessing the camera on mydlink, or on a browser using http://x.x.x.x/mjpg.cgi, I would expect the net bit rate to be substantially less than for a sequence of jpg's, since true motion-jpg uses a lossy form of intraframe compression typically yielding a 20:1 data reduction (according to wikipedia). Indeed, I can readily see this reduction in mjpg clips made on my Canon S5is camera. It's not clear whether that is happening with the d-link DCS-930L camera (640x480, quality "high", java).
I'm configuring a 2 PowerConnect in stack mode. I can't seem to resolve this error - Recieved Frame Check Sequence Errors.Both stacks are in the lastest firmware version 3.3.4.1. Physical connections are tight.
One of my customer has raised a new requirement for implementation of short sequence number format support in PPP multilink header for Cisco MWR 2941 E1/T1 serial interface, whereas router is supporting long sequence number format.here is the output of "debug ppp negotiation" command:-Currently in the MWR debugging logs we can see that by default MWR is sending long sequence header format as below
we have multiple Video production networks, with Video servers (AVID Unity ISIS) connected by 10GE fiber links to 4948-10GE switches. On almost every of these switches, I see more or less "Sequence-Err" interface errors. We do not currently have a known problem because this, and no other errors are seen. But I would like to understand the error, and therefore I would like to find out, what a sequence error means, what the cause is, and what the impact (to a frame) is?
By the way, it is well-known that the ISIS Video server does generate very excessive UDP data bursts. Maybe this matters? On Cisco doc I did not find an answer. The document "Troubleshooting Switch Port and Interface Problems" does unfortunately not refer to "sequence-err".
Here is an example output: WS-C4948-10GE#sh int t1/49 TenGigabitEthernet1/49 is up, line protocol is up (connected) [code].....
I am doing image upgrade on Catalyst 6509-E. During TFTP image transfer to sup-bootflash I always see !!!!!!!!!!!!!!!!!o!!!!!!!!!! "o" out of sequence packet. Although the image size seems to be correct at the end but there is always some "o" packets.
I am assuming not, but I haven't tried loading with the image after seeing this.
We have a ACS 4.3.2 installed with users authenticating against an Active Directory database. The AD database not only authenticate the users but also assigns the group that is used to select IP address pool.Now the requirements require to use token authentication with SafeNet. This authentication uses the same username but the password is composed of the original password + OTP.The problem is that the SafeNet server doesn't return the group membership.I've read about the Identity Store Sequence in ACS 5.x and I think I could use it in the following sequence:! configure an Authentication Sequence using the SafeNet token server (this works with ACS 4.x)I configure an Attribute Retrieval Sequence against the AD database. This would use the username only, no password and would retrieve the group membership.
We are running ISE 1.0.4 with a requirement that on the surface is simple, but fails to execute properly no matter how I tweak it it. It is:
VPN users either need to be within a certain AD group or They need to authenticate against RSA.
I set authentication to use an identitysequence with RSA listed first, then AD second. I set authorization to check identity server (using network access:AuthenticationIdentityStore). - If it’s RSA, pass it. - If it’s Active directory, AND the condition with a check on that group membership. Pass if both pass. - Set the default authorization rule to deny access.
This should work. Here’s where it breaks down. It all stems from the fact that the same userIds exist in RSA and AD and that ISE steadfastly refuses to attempt the second identity server method listed in the sequence if RSA is listed first.
• If I list RSA first and the “authentication failed” policy is set to Reject: For users not in RSA that I want to authenticate against AD, it rejects – it attempts against RSA but never hits AD (second server listed in the Identity sequence). This is what is brokenThis works for users in RSA
• If I list the RSA server first and the “authentication failed” policy is set to continue Users not in RSA will pass authentication that shouldn’t because the network access: AuthenticationIdentityStore value will be pointing to the RSA server, regardless of whether they actually passed to that server or not.Effectively users can connect regardless of whether their password is right or notThis option sets it to proceed from authentication to authorization
• If I list AD first in the sequence Since the same ID exists in both AD and RSA, it’ll fail as bad password against AD. It'll never attempt against RSA.
Am I missing a simple fix for this? I have a testbed in which I can simulate the issue but since I don’t have an RSA server handy, I’m using an identity sequence with AD and fallback to internal. It works as I’d expect, falling back from AD to local if the user doesn't exist in AD. If the user is in AD, it never tries local and shows the attempt as a bad password.
I use a wireless adapter to connect to our home network but its stopped receiving packets but is sending them. It has worked fine for ages now it just randomly stopped. The network works with everything else (laptops, Xbox and iPods) but my pc wont receive anything. Also our home connection has no password as we live in the middle of nowhere.
I am having a really hard time with a computer that has a wireless connection. Specifically the internet keeps going out. The computer info is that of the affected computer and not the host computer to which the router and modem are connected.
I can connect to it fine and access everything behind the VPN. I have a Windows 7 machine 32 bits. He can connect to the VPN just fine but not access anything behind it, he is running Windows 7 64-bits. This is not a new setup, the VPN has been working before. If I debug ISAKMP and IPSEC in the ASA I see nothing out of the ordinary. The only thing I see is that the VPN client on his machine is showing that the counter for discarded packets is increasing. This is Ciscos explanation to discarded packets. "Packets discarded—The total number of data packets that the VPN Client rejected because they did not come from the secure VPN device gateway." So it seems that the client does not believe that the packets are from the ASA. I have no idea why that would be and what could have changed that made a functioning VPN turn into a non functioning one. He can not remember doing any major installs or something like that which could mess with the client. We uninstalled the version he was using and installed a slightly newer version but it made no difference.
An IP packet of size 1500 bytes passes through two network segments before it reaches its destination. The header size of this packet is 20 bytes. The maximum size of an IP packet in the first intermediate network (its MTU) is 1024 bytes, and that in the second network is 576 bytes.Explain how the IP packet described above would be fragmented into smaller parts in a router, paying particular attention to the flag bits and to the fragment offset field in the header.
- Fragmentation and reassembly needs to break a data-gram into an almost random number of pieces that later can reassembled. - It uses the identification field to ensure that fragments of different datagrams are not mixed. - IP packet of 1500 bytes comprises 1480 bytes of data and a 20-byte header. - In the first intermediate network, the packet size of 1024 bytes allows for 1000 bytes of data plus a 20-byte IP header.[code]
While troubleshooting high cpu due to interrupts on platforms like 6500 or 7600 we can capture the packets getting punted to the CPU using netdr or on 4500 I think we can even use monitor session. But is there a way where we can capture/sniff packets reaching the CPU on a 7206vxr with NPE-G2?
I have a NAT setup. Some of my udp packets are dropping. How to find more about the NAT to find whether it missed anything or not. the router is 3945e. [code]
I have a weird issue with a QOS policy that I have implemented. Details are below.
This is basically the policy I have created. It is running on a Cisco 877 router (running Advance IP Services 12.4). The internet connection is an Internode ADSL service.
class-map match-any VOIP match access-group name VOICE-OUT ! !
I have ACE10 Module in my switch core 6509, my context "Proxy" was criated for balance connections to Forefront TMG Servers, this balance needs original client IP Address connections end to end in the solution.
My problem is: The clients are complaining of slowness connection to the internet, i captured the traffic in the ace capture feature and i see some RST packets and severals checksum error packets in pcap file.
The topology is:
Client -> ACE VIP VLAN 81 -> RSERVERS VLAN 80
Vlan 80 is in L2 mode(no interface vlan in the switch core 6509, route occurs through the ace appliance). The IP address 10.96.200.6 is the gw for rservers. [Code]...
Ive just downloaded wireshark just to mess around and ive noticed that even when ive got nothing open its still capturing packets. It gives me a choice of interfaces i want to choose to monitor and i would of thought it be "Realtek PCIe Family Controller" as this is normally the default one (im using wireless) but its saying no packets are being captured from this interface its the "Microsoft" Interface thats capturing the packets. Ive attached a screenshot, i know this isnt nothing bad but was just wondering 1) why isnt my Realtek PCIe interface capturing anything?
One Day the internet is fine the next day The Internet Stopped working. The problem is my pc is sending packets but not receiving any i though it was a bug or something so i restarted my pc after i restarted my pc the internet was working fine until a couple of minutes passed it stopped receiving packets again.i tried resetting the modem but nothing worked.I tried winsock fix or resetting TCP/IP and stuff but nothing workscause its starting to frustrate me.
Our computer is sending but not receiving packets. We've tried 3 different wi-fi adapters, and that wasn't the problem. We have no idea what's wrong? It won't pick up any wireless signals by the way, and it works fine while connected via Ethernet.
