SSCA SIP Troubleshooting & Diagnostic Tools — Questions and Answers
Question 1: What is the primary function of SIP OPTIONS method?
- To register a user agent
- To terminate a session
- To authenticate users
- To query capabilities of a server or endpoint (Correct answer)
Correct answer: To query capabilities of a server or endpoint
The SIP OPTIONS method is used to query a server or endpoint about its capabilities and supported features without establishing a call. It allows a user agent to discover what methods, codecs, and extensions a remote party supports. This is useful for pre-call negotiation and ensuring compatibility before attempting to set up a session.
Question 2: Which tool is commonly used to capture and analyze SIP traffic?
- Netstat
- Wireshark (Correct answer)
- Tracert
- Telnet
Correct answer: Wireshark
Wireshark is a powerful and widely used network protocol analyzer that can capture and analyze network traffic, including SIP packets. It allows administrators to inspect the contents of individual SIP messages, trace call flows, and identify issues like malformed packets or signaling errors. Its detailed packet inspection capabilities make it invaluable for troubleshooting VoIP problems.
Question 3: What does SIP response code 486 indicate?
- Request Terminated
- User Not Found
- Busy Here (Correct answer)
- Forbidden
Correct answer: Busy Here
SIP response code 486 indicates 'Busy Here,' meaning the called party is currently busy and cannot accept another call. This response is sent by the user agent or server to inform the caller that the recipient is unavailable. It's a standard way to communicate that the intended recipient is engaged in another conversation.
Question 4: Why is SIP ladder diagram useful in diagnostics?
- They encrypt call data
- They list all IP addresses
- They help visualize SIP message flow (Correct answer)
- They measure network speed
Correct answer: They help visualize SIP message flow
A SIP ladder diagram is a graphical representation that illustrates the sequence and flow of SIP messages between different entities during a call setup or teardown. This visual aid is extremely useful in diagnostics as it helps administrators quickly understand the order of events, identify where a call failed, or pinpoint delays in the signaling process. It provides a clear timeline of interactions.
Question 5: What is a common reason for one-way audio in SIP calls?
- Incorrect codec
- Improper NAT/firewall configuration (Correct answer)
- Caller ID mismatch
- High bandwidth
Correct answer: Improper NAT/firewall configuration
One-way audio in SIP calls is frequently caused by improper Network Address Translation (NAT) or firewall configurations. NAT devices and firewalls can block or incorrectly translate the Real-time Transport Protocol (RTP) media streams, preventing one of the parties from receiving audio. This typically happens when the firewall doesn't correctly open the necessary ports for the RTP traffic.
Question 6: Which log level is most detailed for troubleshooting SIP?
- Info
- Warning
- Error
- Debug (Correct answer)
Correct answer: Debug
The 'Debug' log level provides the most granular and detailed information for troubleshooting SIP issues. It captures extensive details about every step of the SIP signaling process, including message contents, internal states, and processing logic. While it generates a large volume of data, it is essential for diagnosing complex or intermittent problems that are not apparent at higher log levels.
Question 7: Which SIP header is crucial for tracing call routes?
- From
- To
- Via (Correct answer)
- Contact
Correct answer: Via
The SIP 'Via' header is crucial for tracing call routes because it records the path taken by a SIP request or response through various proxies. Each proxy server that processes a SIP message adds its own address to the top of the Via header. This creates a historical record of the message's journey, allowing for easy identification of the signaling path and potential bottlenecks or failures.
Question 8: What tool helps trace packet path over a network?
- Traceroute (Correct answer)
- Nslookup
- Ping
- ARP
Correct answer: Traceroute
Traceroute (or tracert on Windows) is a network diagnostic tool used to display the path and measure transit delays of packets across an IP network. It identifies all the routers (hops) that a packet traverses from the source to the destination. This is invaluable for pinpointing where network connectivity issues or excessive delays might be occurring along the path of VoIP traffic.
Question 9: Why would a 403 Forbidden SIP response be received?
- User is offline
- Network congestion
- Unauthorized request (Correct answer)
- DNS failure
Correct answer: Unauthorized request
A 403 Forbidden SIP response indicates that the server understood the request but refuses to fulfill it, typically due to authorization issues. This means the user or the request itself is not authorized to perform the requested action, such as making a call to a specific destination or accessing a particular resource. It's a security-related denial of service.
SSCA SIP Troubleshooting & Diagnostic Tools
What is the primary function of SIP OPTIONS method?