SIP Inspection
Figure 22-16
Pin hole for 100
Trying, media xlate
and SIP session
are kept open for
configured timeout
Restrictions include:
•
•
Verifying and Monitoring SIP Inspection
The show sip command assists in troubleshooting SIP inspection engine issues and is described with the
inspect protocol sip udp 5060 command. The show timeout sip command displays the timeout value
of the designated protocol.
The show sip command displays information for SIP sessions established across the FWSM. Along with
the debug sip, show local-host, and show service-policy inspect sip commands, this command is used
for troubleshooting SIP inspection engine issues.
We recommend that you configure the pager command before entering the show sip command. If there
Note
are a lot of SIP session records and the pager command is not configured, it takes a while for the show
sip command output to reach its end.
The following is sample output from the show sip command:
hostname# show sip
Total: 2
call-id c3943000-960ca-2e43-228f@10.130.56.44
call-id c3943000-860ca-7e1f-11f7@10.130.56.45
This sample shows two active SIP sessions on the FWSM (as shown in the Total field). Each call-id
represents a call.
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
22-86
Extending Timeout for Provisional Responses
UAC
SIP media connections are not cleared when 200 OK is received for the BYE message, CANCEL
message, or 4xx/5xx/6xx SIP message for those SIP sessions established prior to failover. SIP
sessions established after failover are cleared.
Pinholes opened for SIP responses are not cleared along with SIP media connections when 200 OK
is received for the BYE SIP message, CANCEL SIP message, or 4xx/5xx/6xx SIP message. Instead,
pinhole connections are cleared eventually due to timeout.
state Call init, idle 0:00:01
state Active, idle 0:00:06
Chapter 22
INVITE
100 Trying
180 ringing
Applying Application Layer Protocol Inspection
UAC
INVITE
Pin hole for 180
Trying and 200 OK
kept open for
configured timeout
OL-20748-01