Hi Thanks for the advice wiseguy
The MBG logs indicate late heartbeats on a regular basis. Every few minutes as they are from all remote sites I would agree that perhaps the firewall is causing problems however the TNA tool show all ports open and the customer insists they are set according to MBG guidelines.
My understanding is that the heartbeats are sent every 30 seconds and if three are missed the ICP takes the set out of service until it sees heartbeats again. This is confirmed by logs on the 3300.
I would still like to know what to look for when tracing with Wireshark. Minet RTP, SRPT ??
Some logs from the MGB
* Current alarm status: major
* Application Event Type Value Severity Date and Time Description
* MBG set connection status indeterminate Thu Nov 25 12:26:22
* 2010 Acceptor:SSL, ID:08:00:0F:47:F6:7D, Ip:81.18.100.90:27760,
* Icp:172.19.1.10, active-connections:16, LocalIp:10.0.1.100,
* Type:200, dnlist:9456
* MBG set connection lost indeterminate Thu Nov 25 12:24:51 2010
* Acceptor:SSL, ID:08:00:0F:4B:AE:40, Ip:81.18.100.90:9137,
* Icp:172.19.1.10, active-connections:15, Reason: IS read failed -
* connection closed
* MBG set connection established indeterminate Thu Nov 25
* 12:24:51 2010 Acceptor:SSL, ID:08:00:0F:4B:AE:40,
* Ip:81.18.100.90:8292, Icp:172.19.1.10, active-connections:16,
* LocalIp:10.0.1.105, Type:201
* MBG DN event 08:00:0F:4B:AE:40 indeterminate Thu Nov 25
* 12:24:51 2010 Acceptor:SSL, ID:08:00:0F:4B:AE:40,
* Ip:81.18.100.90:8292, Icp:172.19.1.10, dnlist:9452
* MBG set connection status indeterminate Thu Nov 25 12:21:59
* 2010 Acceptor:SSL, ID:08:00:0F:47:F3:9F, Ip:81.18.100.90:36608,
* Icp:172.19.1.10, active-connections:16, LocalIp:10.0.1.102,
* Type:200, dnlist:9455
* MBG set connection status indeterminate Thu Nov 25 12:21:43
* 2010 Acceptor:SSL, ID:08:00:0F:47:F6:A5, Ip:122.55.96.154:38051,
* Icp:172.19.1.10, active-connections:16, LocalIp:10.1.1.133,
* Type:200, dnlist:9458
* MBG set connection status indeterminate Thu Nov 25 12:18:41
* 2010 Acceptor:SSL, ID:08:00:0F:47:FE:A5, Ip:122.55.96.154:46729,
* Icp:172.19.1.10, active-connections:16, LocalIp:10.1.1.76, Type:200,
* dnlist:9457
* MBG set connection status indeterminate Thu Nov 25 12:13:53
* 2010 Acceptor:SSL, ID:08:00:0F:4B:99:49, Ip:81.18.100.90:41530,
* Icp:172.19.1.10, active-connections:16, LocalIp:10.0.1.101,
* Type:201, dnlist:9450