Drop for no socket

[suthomas1]

Hello, What does these message mean in fortigate terms:- id=13 trace_id=60 msg=" vd-root received a packet(proto=17, 172.16.1.2:22148->172.18.5.64:323) from mgmt." id=13 trace_id=60 msg=" Find an existing session, id-07ea7d53, original direction" id=13 trace_id=60 msg=" No socket found. Drop." This port 323 is some custom built port for an application running behind this firewall. Appreciate all inputs. Thank you.

[emnoc]

msg=" No socket found. Drop."

Can you tell us more about how you got to this point and about 323/udp? Socket drops are usually for stuff directed at the forigate. Is 172.18.5.64:323 a VIP or the fortigate or the system server ?

[erosario]

Hello guys,

I am having a similar issue while attempting to bring up a SIP trunk for a client. 

The client has a policy with 3 public SIP trunks via two different SIP providers (ihub and voiceflex) 

Ihub 1st Via their EFM - Working properly  2nd – Via our Centralized Firewall - Partially working. The call is established but there is no audio on both directions Voiceflex 3rd Via our Centralized Firewall - Working properly 

All SIP trunks have been defined under the same policy and allowing the required ports to make it work. 

Whoever, I keep getting the error below:

2016-07-12 17:11:33 id=13 trace_id=21190 func=print_pkt_detail line=4313 msg="vd-Internet received a packet(proto=17, 81.33.120.150:5060->200.14.53.30:63611) from Shared-Untr. " 2016-07-12 17:11:33 id=13 trace_id=21190 func=resolve_ip_tuple_fast line=4372 msg="Find an existing session, id-69db76b0, original direction" 2016-07-12 17:11:33 id=13 trace_id=21190 func=__ip_session_run_tuple line=2522 msg="run helper-sip(dir=original)"

2016-07-12 17:11:33 id=13 trace_id=21191 func=print_pkt_detail line=4313 msg="vd-VDM056565 received a packet(proto=17, 81.33.120.150:5060->200.14.53.30:63611) from VDM056565-V1. " 2016-07-12 17:11:33 id=13 trace_id=21191 func=resolve_ip_tuple_fast line=4372 msg="Find an existing session, id-69db76ae, original direction" 2016-07-12 17:11:33 id=13 trace_id=21191 func=udp_rcv line=980 msg="No socket found. Drop.

Are you able to shed some light on why it might not be working? Could it be something on the ihub provider?

Thanks in advance

PS: Random public IP's have been used.