Laut tcpdump kommt der Client an die Telefonanlage, meldet sich aber nicht an (Im Log der Anlage erscheint er nicht):
16:53:42.036965 IP 10.81.234.131.56089 > 192.168.200.5.xmpp-client: Flags [S], seq 1895341923, win 65535, options [mss 1357,nop,wscale 6,nop,nop,TS val 722042744 ecr 0,sackOK,eol], length 0
16:53:42.037023 IP 192.168.200.5.xmpp-client > 10.81.234.131.56089: Flags [S.], seq 694108417, ack 1895341924, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
16:53:42.045557 IP 10.81.234.131.56089 > 192.168.200.5.xmpp-client: Flags [.], ack 1, win 4096, length 0
16:53:42.045580 IP 10.81.234.131.56089 > 192.168.200.5.xmpp-client: Flags [P.], seq 1:22, ack 1, win 4096, length 21
16:53:42.045601 IP 192.168.200.5.xmpp-client > 10.81.234.131.56089: Flags [.], ack 22, win 229, length 0
16:53:42.053818 IP 10.81.234.131.56089 > 192.168.200.5.xmpp-client: Flags [P.], seq 22:138, ack 1, win 4096, length 116
16:53:42.053831 IP 192.168.200.5.xmpp-client > 10.81.234.131.56089: Flags [.], ack 138, win 229, length 0
16:53:52.045769 IP 10.81.234.131.56089 > 192.168.200.5.xmpp-client: Flags [F.], seq 138, ack 1, win 4096, length 0
16:53:52.045853 IP 192.168.200.5.xmpp-client > 10.81.234.131.56089: Flags [F.], seq 1, ack 139, win 229, length 0
16:53:52.063479 IP 10.81.234.131.56089 > 192.168.200.5.xmpp-client: Flags [.], ack 2, win 4096, length 0
Meldet man sich erneut an, so sieht die Anfrage im dump identisch aus.
Nach ca. 5-10 Anmeldeversuchen klappt die Anmeldung und im Dump stehen ca. 200 Einträge, hier ein Auszug:
16:59:03.684322 IP 10.81.234.131.58017 > 192.168.200.5.xmpp-client: Flags [S], seq 76828537, win 65535, options [mss 1357,nop,wscale 6,nop,nop,TS val 2603057554 ecr 0,sackOK,eol], length 0
16:59:03.684346 IP 192.168.200.5.xmpp-client > 10.81.234.131.58017: Flags [S.], seq 949593667, ack 76828538, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
16:59:03.694004 IP 10.81.234.131.58017 > 192.168.200.5.xmpp-client: Flags [.], ack 1, win 4096, length 0
16:59:03.694100 IP 10.81.234.131.58017 > 192.168.200.5.xmpp-client: Flags [P.], seq 1:22, ack 1, win 4096, length 21
16:59:03.694128 IP 192.168.200.5.xmpp-client > 10.81.234.131.58017: Flags [.], ack 22, win 229, length 0
16:59:03.699457 IP 192.168.200.5.xmpp-client > 10.81.234.131.58005: Flags [P.], seq 29820:30559, ack 10772, win 604, length 739
16:59:03.702188 IP 10.81.234.131.58017 > 192.168.200.5.xmpp-client: Flags [P.], seq 22:138, ack 1, win 4096, length 116
16:59:03.702213 IP 192.168.200.5.xmpp-client > 10.81.234.131.58017: Flags [.], ack 138, win 229, length 0
16:59:03.711788 IP 10.81.234.131.58005 > 192.168.200.5.xmpp-client: Flags [P.], seq 10772:11035, ack 29820, win 4096, length 263
16:59:03.712021 IP 10.81.234.131.58005 > 192.168.200.5.xmpp-client: Flags [.], seq 11035:12392, ack 29820, win 4096, length 1357
16:59:03.712042 IP 192.168.200.5.xmpp-client > 10.81.234.131.58005: Flags [.], ack 12392, win 648, length 0
16:59:03.712402 IP 10.81.234.131.58005 > 192.168.200.5.xmpp-client: Flags [P.], seq 12392:12774, ack 29820, win 4096, length 382
16:59:03.713142 IP 10.81.234.131.58005 > 192.168.200.5.xmpp-client: Flags [P.], seq 12774:14587, ack 29820, win 4096, length 1813
16:59:03.713156 IP 192.168.200.5.xmpp-client > 10.81.234.131.58005: Flags [.], ack 14587, win 697, length 0
16:59:03.713169 IP 10.81.234.131.58005 > 192.168.200.5.xmpp-client: Flags [.], ack 30559, win 4096, length 0
16:59:03.713176 IP 192.168.200.5.xmpp-client > 10.81.234.131.58005: Flags [P.], seq 30559:30895, ack 14587, win 697, length 336
16:59:03.714765 IP 192.168.200.5.xmpp-client > 10.81.234.131.58005: Flags [.], seq 30895:34966, ack 14587, win 697, length 4071
16:59:03.714791 IP 192.168.200.5.xmpp-client > 10.81.234.131.58005: Flags [.], seq 34966:39037, ack 14587, win 697, length 4071
16:59:03.714861 IP 192.168.200.5.xmpp-client > 10.81.234.131.58005: Flags [.], seq 39037:40394, ack 14587, win 697, length 1357
16:59:03.721098 IP 10.81.234.131.58005 > 192.168.200.5.xmpp-client: Flags [P.], seq 14587:14697, ack 30559, win 4096, length 110
16:59:03.721184 IP 10.81.234.131.58005 > 192.168.200.5.xmpp-client: Flags [.], ack 30895, win 4096, length 0
16:59:03.721194 IP 192.168.200.5.xmpp-client > 10.81.234.131.58005: Flags [P.], seq 40394:40743, ack 14697, win 697, length 349
16:59:03.721767 IP 192.168.200.5.xmpp-client > 10.81.234.131.58005: Flags [.], seq 40743:42100, ack 14697, win 697, length 1357
16:59:03.722191 IP 10.81.234.131.58005 > 192.168.200.5.xmpp-client: Flags [.], ack 33609, win 4096, length 0
16:59:03.722217 IP 10.81.234.131.58005 > 192.168.200.5.xmpp-client: Flags [.], ack 36323, win 4096, length 0
16:59:03.722434 IP 10.81.234.131.58005 > 192.168.200.5.xmpp-client: Flags [.], ack 39037, win 4096, length 0
16:59:03.730646 IP 10.81.234.131.58005 > 192.168.200.5.xmpp-client: Flags [.], ack 40743, win 4090, length 0
16:59:03.730676 IP 192.168.200.5.xmpp-client > 10.81.234.131.58005: Flags [P.], seq 42100:43063, ack 14697, win 697, length 963
Ein https Aufruf und eine Anmeldung an der Anlage ist immer möglich.
Es gibt nur mit dem Client Probleme, auf der Anlage läuft ein XMPP Server auf Server Port 5222 und Web Port 443.
Hängt die Anlage und der Client an einer anderen Sophos im lokalen LAN, so gibt es keine Probleme.
Wie kann man das Problem lokalisieren?
Danke für euer Feedback!
This thread was automatically locked due to age.
