Overview

SIP – Session Initiation Protocol – is used for establishing and maintaining real-time sessions used in voice, video and messaging applications.

...

For each message type, there is a Response code similar to HTTP, with 1xx being informational, 2xx/3xx being success, and 4xx, 5xx, 6xx indicating a failure.VSM summarizes this data for Avaya Session Managers and Avaya Session Border Controllers.

The SIP Response Summary dashlet summarizes this data over a 24 hour period, showing a break-down across

...

From this view it is possible to identify system outages, configuration or implementation problems, or external security attacks. 

When the dashet is set to Huge size then the view includes anomaly detection by Response.

Supported Equipment

VSM summarizes this data for

• Session Managers
• Session Border Controllers
  • Audio Codes
  • Avaya 
  • Cisco Unified Border Element (CUBE) 
  • Ribbon Edge Series (SWe Lite,1000,2000)

Dashboard examples

Section

Column width 33% Image Removed Example 1 - System Outage: In this example, everything looks normal - the vast majority of responses are 2xx, or successful responses with only a small percentage of authorization errors, which is to be expected.  Then at 8am there is an outage, causing a rapid spike of Internal Server Errors on Invites. Image Added Image Removed Column width 33% Example 2 - Security issue: This traffic was observed on an external facing SBC - 3/4 of all Invites were met with a Authorization 401, or 403 response code, indicating heavy security attacks requiring further input from engineers Image Added Image Removed Column width 33% Example 3 - Configuration issue: When filtering by message type, it can be seen that a large percentage of service messages are returning a 'Bad Request' error.  This is likely caused by an internal implementation error where something is querying the SIP server for a service response, but has been misconfigured.

...

Anomaly Detection on Huge size

Image Added

SIP Response Summary (Huge) with anomaly detection

Troubleshooting

Image ModifiedNot seeing any SIP response code data? 

1. Check SIP Tracer Tracing is enabled within the configuration of your Session Manager or Session Border Controller, or Session Manager.
   1. Further
   Point it to the VSM Collector IP Address, UDP port 514.  The VSM Collector IP address will be assigned the IPV4/FQDN of the machine VSM is installed on.   Further
   1. help configuring SIP Tracer is available here.
    
   2. Note for v8.0 of Avaya SBCs there is a known issue enabling the SIP Tracer, where clicking the checkbox on the SBC does not save.
2. Ensure any firewalls or network security allows the SIP Traces to route to the VSM Collector IP address on UDP port 514.     
3. Still having issues? Contact your business partner Business Partner or Virsae support.

Image RemovedSeeing a difference between All Source equipment and individually selected equipment?

...