Displaying Encrypted Traffic Detail on the SBC

The syntax of the show sipd ACLI command allows for the tunnel parameter, which displays Oracle Communications Subscriber-Aware Load Balancer (Subscriber-Aware Load Balancer) tunnel statistics on the SBC. Sample output, which shows static operational information at the top and specific port statistics at the bottom, is shown below.

ORACLE# show sipd tunnel

|Tunnel       : 11|182.16.209.48|182.16.209.1
---------------------------------------------------------------
|Conf Name    : M01:11/one                    
|State        : InService      Cur Ping TMOs   : 0/5  
|LB           : hermes         Total Ping TMOs : 0         
|SBC Atoms    : 0              Service Ports   : 20/20 
|SP Atoms     : 0              Application     : SIP       
|Last Event   : srcAddrAware   Purge Timer     : 
|Timer Event  : Heartbeat      Timer           : 1604ms         
|IPT Handle   : 0x3f           Network Intf    : 0|1.11
|ActiveLbId   : 3              Waiting On      : 
|LostCtlCount : 0              Last Lost Cntrl : Never
|NextCfgCheck :                CCP Version     : 7/7
|Source Key   : src-addr
|
|Service Port                              Prev| Cur|Next lbStat Handle Atoms
|------------                              ----|----|---- ------ ------ ------
|Realm192p1:192.168.209.1:4060<6>          CRng IS   -    200    513    0     
|Realm192p1:192.168.209.1:4060<17>         CRng IS   -    200    518    0     
|Realm192p1:192.168.209.1:4061<6>          CRng IS   -    200    514    0     
|Realm192p1:192.168.209.1:4061<17>         CRng IS   -    200    519    0     
|Realm192p1:192.168.209.1:4062<6>          CRng IS   -    200    515    0     
|Realm192p1:192.168.209.1:4062<17>         CRng IS   -    200    520    0     
|Realm192p1:192.168.209.1:4063<6>          CRng IS   -    200    516    0     
|Realm192p1:192.168.209.1:4063<17>         CRng IS   -    200    521    0     
|Realm192p1:192.168.209.1:5060<6>          CRng IS   -    200    517    0     
|Realm192p1:192.168.209.1:5060<17>         CRng IS   -    200    522    0     

To understand the command's service port output, consider the scenario where the user configures the SBC as shown in the section titled SBC Configuration for IMS-AKA Traffic. This configuration defines the protected port range over which IMS-AKA traffic moves between the SBC and the Subscriber-Aware Load Balancer.

The user also typically configures two sip-ports on the SBC to accommodate IMS-AKA. (This is true regardless of whether the SBC supports IMS-AKA behind an Subscriber-Aware Load Balancer or directly.) When configured in conjunction with the protected port range configured in SBC Configuration for IMS-AKA Traffic, the SBC creates Subscriber-Aware Load Balancer service ports for IMS-AKA in addition to the two ports listening on 5060. The show sipd tunnel , therefore, displays statistics for all TCP and UDP ports. In the command output below, <6> indicates a TCP port and <17> indicates a UDP port. Ports using IPv6 can exist simultaneously, and would also be displayed by the command.