Solved

Cisco ISR received: SIP/2.0 400 Bad Request - Malformed..

Posted on 2014-03-14
6
1,308 Views
Last Modified: 2014-03-14
I have an internal customer with an iPhone trying to forward all calls to their desk phone.  Calling his phone directly works just fine.  But when forwarding all from his AT&T iPhone ccsip messages debug at the 3845 ISR outputs in part what I've posted below (altered to protect the innocent.)  Any IP Telephony hotshots on here to lend insight as to what's going on?

INVITE sip:9164896045@57.22.34.234:5060 SIP/2.0
Via: SIP/2.0/UDP 27.15.69.99:5060;branch=z9hG4bK02B4b323079bc2e4e47
From: <sip:7774440500@27.15.69.99:5060;pstn-params=9084818088>;tag=gK02581260
To: <sip:9164896045@57.22.34.234:5060>
Call-ID: 453134832_44257581@27.15.69.99
CSeq: 32276 INVITE
Max-Forwards: 29
Allow: INVITE,ACK,CANCEL,BYE,REGISTER,REFER,INFO,SUBSCRIBE,NOTIFY,PRACK,UPDATE,OPTIONS,MESSAGE,PUBLISH
Accept: application/sdp, application/isup, application/dtmf, application/dtmf-relay,  multipart/mixed
Contact: <sip:7774440500@27.15.69.99:5060>
P-Preferred-Identity: <sip:7774440500@27.15.69.99:5060>
Diversion: <sip:27.15.69.99:5060>;privacy=off;screen=no; reason=unconditional; counter=1
Diversion: <sip:27.15.69.99:5060>;privacy=off;screen=no; reason=unconditional; counter=1
Supported: timer,100rel
Session-Expires: 1800
Min-SE: 90
Content-Length:  235
Content-Disposition: session; handling=required
Content-Type: application/sdp

v=0
o=Sonus_UAC 24402 0 IN IP4 27.15.69.99
s=SIP Media Capabilities
c=IN IP4 27.15.69.74
t=0 0
m=audio 8164 RTP/AVP 0 101
a=rtpmap:0 PCMU/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=sendrecv
a=maxptime:20

16885682: Mar 14 09:26:12.586 PDT: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Sent:
SIP/2.0 400 Bad Request - 'Malformed CC-Diversion/Diversion/CC-Redirect Header'
Via: SIP/2.0/UDP 27.15.69.99:5060;branch=z9hG4bK02B4b323079bc2e4e47
From: <sip:7774440500@27.15.69.99:5060;pstn-params=9084818088>;tag=gK02581260
To: <sip:9164896045@57.22.34.234:5060>;tag=C81A6E14-C2C
Call-ID: 453134832_44257581@27.15.69.99
CSeq: 32276 INVITE
Reason: Q.850;cause=100
Content-Length: 0
0
Comment
Question by:amigan_99
  • 3
  • 3
6 Comments
 
LVL 20

Accepted Solution

by:
José Méndez earned 500 total points
Comment Utility
You have two malformed Diversion headers in the INVITE:

Diversion: <sip:27.15.69.99:5060>;privacy=off;screen=no; reason=unconditional; counter=1
Diversion: <sip:27.15.69.99:5060>;privacy=off;screen=no; reason=unconditional; counter=1

See how there is no URI to contact, after the <sip: there should be something like

bobMaister@27.15.69.99:5060>

No device would know where is it been diverted to. Check the RFC, I found no empty instances for this header:

https://tools.ietf.org/html/rfc5806
0
 
LVL 1

Author Comment

by:amigan_99
Comment Utility
Thank you.  So contacting my service provider would be the next step?
0
 
LVL 20

Expert Comment

by:José Méndez
Comment Utility
Yup. Or whoever owns this device: 27.15.69.99 which is the one sending the INVITE.
0
Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

 
LVL 1

Author Comment

by:amigan_99
Comment Utility
That's them.  Thanks so much!
0
 
LVL 1

Author Closing Comment

by:amigan_99
Comment Utility
Thanks for the assist!
0
 
LVL 20

Expert Comment

by:José Méndez
Comment Utility
Welcome!
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Article by: user_n
How Sip Phone (User Agent) works and communicates with sip servers 1.  There is a sip server and a sip registrar.  The sip server and sip registrar can be one server or two different servers. The sip registrar is the server on which it is record…
Almost all Internet protocol telephones have built-in switches at the back that allow you to connect your personal computer to one port and use the other port to connect your phone to to a Cisco switch.   Why we need to connect the PC to the pho…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now