stunner icon indicating copy to clipboard operation
stunner copied to clipboard

STUN binding request with username attribute

Open gl4nce opened this issue 1 year ago • 6 comments

Would it be possible to send the username attribute in STUN binding requests? Obviously some STUN servers expect this attribute on binding requests.

Does this make sense? I'm not such deep into the STUN protocol but looks like it could be a good addition according to RFC 5389?

I'm currently playing with Jitsi Videobridge (SFU). Wireshark shows that this attribut is set on each initial binding request. Unfortunately, there no corresponding option in stunner for that.

gl4nce avatar Sep 20 '24 11:09 gl4nce

Do you have an example of the replies of the server when running with the -debug flag?

firefart avatar Sep 20 '24 13:09 firefart

The server ignores such requests completely. There is no reply. But I don't know it's because of the missing username attribute or anything else.

gl4nce avatar Sep 20 '24 13:09 gl4nce

Just run with the -debug flag. If a requested property is missing, there must be an error code in the response

firefart avatar Sep 20 '24 13:09 firefart

As I said. The server ignores the request. There are no replies. I guess there is some sort of pre-auth in the connection to the Jitsi Videobridge. And yes, it's all the same destination port (443).

I made two Wireshark screenshot for comparison.

Capture of real webrtc connection jvb_live_example

info command with stunner jvb_stunner_test

gl4nce avatar Sep 20 '24 14:09 gl4nce

Hey there @gl4nce - did you solve the issue? I'm facing a very similar situation :)

smaury avatar Aug 28 '25 16:08 smaury

No.

gl4nce avatar Aug 29 '25 08:08 gl4nce