freeswitchforum.com

Форум поддержки FreeSWITCH

FreeSWITCH is a registered trademark of Anthony Minessale. Official FreeSWITCH site.

Текущее время: 28 апр 2024 21:16

Часовой пояс: UTC + 4 часа




Начать новую тему Ответить на тему  [ Сообщений: 29 ]  На страницу Пред.  1, 2, 3  След.
Автор Сообщение
 Заголовок сообщения: Re: freeSWITCH + fail2ban
СообщениеДобавлено: 14 фев 2014 21:13 
FreeSWITCH_GuRu

Зарегистрирован: 22 авг 2012 09:52
Сообщения: 1710
достаточно
Код:
grep -n log-auth-failures /usr/local/freeswitch/conf/autoload_configs/sofia.conf.xml
grep -rn log-auth-failures /usr/local/freeswitch/conf/sip_profiles/

_________________
ЛС: @rostel
Сообщество: @ru_freeswitch


Вернуться к началу
 Профиль  
 
 Заголовок сообщения: Re: freeSWITCH + fail2ban
СообщениеДобавлено: 17 фев 2014 09:45 

Зарегистрирован: 31 янв 2014 11:59
Сообщения: 54
grep -rn log-auth-failures /usr/local/freeswitch/conf/sip_profiles/
Код:
/usr/local/freeswitch/conf/sip_profiles/internal.xml:82:    <param name="log-auth-failures" value="false"/>


Спасибо! Теперь сообщения о неудачной аутентификации выводятся в консоль и пишутся в лог;
Код:
2014-02-17 09:24:15.619935 [WARNING] sofia_reg.c:1579 SIP auth failure (REGISTER) on sofia profile 'internal' for [1000@192.168.0.1] from ip 192.168.0.2


Вернуться к началу
 Профиль  
 
 Заголовок сообщения: Re: freeSWITCH + fail2ban
СообщениеДобавлено: 30 май 2014 16:27 

Зарегистрирован: 31 янв 2014 11:59
Сообщения: 54
Код:
[WARNING] sofia_reg.c:2748 Can't find user [100@server_ip] from 23.250.10.130
You must define a domain called 'server_ip' in your directory and add a user with the id="100" attribute
and you must configure your device to use the proper domain in it's authentication credentials.

[WARNING] sofia_reg.c:1608 SIP auth failure (INVITE) on sofia profile 'internal' for [98800972598126823@server_ip] from ip 23.250.10.130


После такого сообщения злоумышленник узнает, что учетки "100" на сервере не существует?
В звездочке есть alwaysauthreject=yes, а в FS есть подобный механизм?
Или приходится ограничиваться fail2ban?


Вернуться к началу
 Профиль  
 
 Заголовок сообщения: Re: freeSWITCH + fail2ban
СообщениеДобавлено: 01 июн 2014 14:15 
FreeSWITCH_GuRu

Зарегистрирован: 22 авг 2012 09:52
Сообщения: 1710
с чего взяли что узнал?
смотрели что в сигналке?

_________________
ЛС: @rostel
Сообщество: @ru_freeswitch


Вернуться к началу
 Профиль  
 
 Заголовок сообщения: Re: freeSWITCH + fail2ban
СообщениеДобавлено: 03 июн 2014 15:51 

Зарегистрирован: 31 янв 2014 11:59
Сообщения: 54
Это ж был вопрос=) Я ничего не утверждаю;
И я не знаю как это отдебажить.


Вернуться к началу
 Профиль  
 
 Заголовок сообщения: Re: freeSWITCH + fail2ban
СообщениеДобавлено: 03 июн 2014 16:05 
FreeSWITCH_GuRu

Зарегистрирован: 22 авг 2012 09:52
Сообщения: 1710
Код:
fs_cli> sofia profile internal siptrace on
регаетесь левым логином

_________________
ЛС: @rostel
Сообщество: @ru_freeswitch


Вернуться к началу
 Профиль  
 
 Заголовок сообщения: Re: freeSWITCH + fail2ban
СообщениеДобавлено: 04 июн 2014 11:37 

Зарегистрирован: 31 янв 2014 11:59
Сообщения: 54
Много, зато тут все от "А" до "Я" одной попытки зарегистрироваться


[+] 
------------------------------------------------------------------------
recv 761 bytes from udp/[192.210.199.42]:5070 at 11:13:47.999513:
------------------------------------------------------------------------
INVITE sip:810972598656093@server_ip SIP/2.0
To: 810972598656093<sip:810972598656093@server_ip>
From: 9000<sip:9000@server_ip>;tag=fbd183c4
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-c4e63f2097f443d976ba68129fcfa45f;rport
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 1 INVITE
Contact: <sip:9000@192.210.199.42:5070>
Max-Forwards: 70
Allow: INVITE, ACK, CANCEL, BYE
User-Agent: sipcli/v1.8
Content-Type: application/sdp
Content-Length: 284

v=0
o=sipcli-Session 2031997600 323096638 IN IP4 192.210.199.42
s=sipcli
c=IN IP4 192.210.199.42
t=0 0
m=audio 5072 RTP/AVP 18 0 8 101
a=fmtp:101 0-15
a=rtpmap:18 G729/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:8 PCMA/8000
a=rtpmap:101 telephone-event/8000
a=ptime:20
a=sendrecv
------------------------------------------------------------------------
send 382 bytes to udp/[192.210.199.42]:5070 at 11:13:47.999902:
------------------------------------------------------------------------
SIP/2.0 100 Trying
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-c4e63f2097f443d976ba68129fcfa45f;rport=5070
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093<sip:810972598656093@server_ip>
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 1 INVITE
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Content-Length: 0

------------------------------------------------------------------------
2014-06-04 11:13:47.986759 [NOTICE] switch_channel.c:1053 New Channel sofia/internal/9000@server_ip [c5b8a65c-ebb7-11e3-b2c6-2d1ffe3917de]
2014-06-04 11:13:47.986759 [DEBUG] switch_core_session.c:1052 Send signal sofia/internal/9000@server_ip [BREAK]
2014-06-04 11:13:47.986759 [DEBUG] switch_core_session.c:1052 Send signal sofia/internal/9000@server_ip [BREAK]
2014-06-04 11:13:48.189944 [DEBUG] switch_core_state_machine.c:470 (sofia/internal/9000@server_ip) Running State Change CS_NEW
2014-06-04 11:13:48.189944 [DEBUG] sofia.c:8367 sofia/internal/9000@server_ip receiving invite from 192.210.199.42:5070 version: 1.5.13b git 6722e3d 2014-06-03 00:25:04Z 64bit
2014-06-04 11:13:48.189944 [DEBUG] sofia.c:8534 IP 192.210.199.42 Rejected by acl "domains". Falling back to Digest auth.
2014-06-04 11:13:48.189944 [WARNING] sofia_reg.c:1663 SIP auth challenge (INVITE) on sofia profile 'internal' for [810972598656093@server_ip] from ip 192.210.199.42
2014-06-04 11:13:48.189944 [DEBUG] switch_core_state_machine.c:489 (sofia/internal/9000@server_ip) State NEW
send 887 bytes to udp/[192.210.199.42]:5070 at 11:13:48.192005:
------------------------------------------------------------------------
SIP/2.0 407 Proxy Authentication Required
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-c4e63f2097f443d976ba68129fcfa45f;rport=5070
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093 <sip:810972598656093@server_ip>;tag=yaZ4N3mm5vtyj
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 1 INVITE
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Accept: application/sdp
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer
Proxy-Authenticate: Digest realm="server_ip", nonce="c5d5d434-ebb7-11e3-b2c7-2d1ffe3917de", algorithm=MD5, qop="auth"
Content-Length: 0

------------------------------------------------------------------------
2014-06-04 11:13:48.189944 [DEBUG] switch_core_session.c:1052 Send signal sofia/internal/9000@server_ip [BREAK]
2014-06-04 11:13:48.189944 [DEBUG] sofia.c:2033 detaching session c5b8a65c-ebb7-11e3-b2c6-2d1ffe3917de
send 887 bytes to udp/[192.210.199.42]:5070 at 11:13:48.695085:
------------------------------------------------------------------------
SIP/2.0 407 Proxy Authentication Required
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-c4e63f2097f443d976ba68129fcfa45f;rport=5070
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093 <sip:810972598656093@server_ip>;tag=yaZ4N3mm5vtyj
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 1 INVITE
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Accept: application/sdp
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer
Proxy-Authenticate: Digest realm="server_ip", nonce="c5d5d434-ebb7-11e3-b2c7-2d1ffe3917de", algorithm=MD5, qop="auth"
Content-Length: 0





------------------------------------------------------------------------
recv 358 bytes from udp/[192.210.199.42]:5070 at 11:13:48.695980:
------------------------------------------------------------------------
ACK sip:810972598656093@server_ip SIP/2.0
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-c4e63f2097f443d976ba68129fcfa45f;rport
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093 <sip:810972598656093@server_ip>;tag=yaZ4N3mm5vtyj
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 1 ACK
Max-Forwards: 70
Content-Length: 0

------------------------------------------------------------------------
recv 1019 bytes from udp/[192.210.199.42]:5070 at 11:13:48.696067:
------------------------------------------------------------------------
INVITE sip:810972598656093@server_ip SIP/2.0
To: 810972598656093<sip:810972598656093@server_ip>
From: 9000<sip:9000@server_ip>;tag=fbd183c4
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-81e519c18d0f8584cc416311471d6741;rport
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 2 INVITE
Contact: <sip:9000@192.210.199.42:5070>
Max-Forwards: 70
Allow: INVITE, ACK, CANCEL, BYE
User-Agent: sipcli/v1.8
Content-Type: application/sdp
Proxy-Authorization: Digest username="9000",realm="server_ip",nonce="c5d5d434-ebb7-11e3-b2c7-2d1ffe3917de",uri="sip:810972598656093@server_ip",response="198d8d6d5eb6c915b07ebc342 aea2653",cnonce="4b41f53e6f00c05",nc=00000001,qop="auth",algorithm=MD5
Content-Length: 284

v=0
o=sipcli-Session 2031997600 323096638 IN IP4 192.210.199.42
s=sipcli
c=IN IP4 192.210.199.42
t=0 0
m=audio 5072 RTP/AVP 18 0 8 101
a=fmtp:101 0-15
a=rtpmap:18 G729/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:8 PCMA/8000
a=rtpmap:101 telephone-event/8000
a=ptime:20
a=sendrecv
------------------------------------------------------------------------
send 382 bytes to udp/[192.210.199.42]:5070 at 11:13:48.696327:
------------------------------------------------------------------------
SIP/2.0 100 Trying
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-81e519c18d0f8584cc416311471d6741;rport=5070
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093<sip:810972598656093@server_ip>
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 2 INVITE
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Content-Length: 0

------------------------------------------------------------------------
2014-06-04 11:13:48.689918 [DEBUG] sofia.c:2138 Re-attaching to session c5b8a65c-ebb7-11e3-b2c6-2d1ffe3917de
2014-06-04 11:13:48.689918 [DEBUG] switch_core_session.c:1052 Send signal sofia/internal/9000@server_ip [BREAK]
2014-06-04 11:13:48.689918 [DEBUG] switch_core_session.c:1052 Send signal sofia/internal/9000@server_ip [BREAK]
2014-06-04 11:13:48.689918 [DEBUG] sofia.c:8367 sofia/internal/9000@server_ip receiving invite from 192.210.199.42:5070 version: 1.5.13b git 6722e3d 2014-06-03 00:25:04Z 64bit
2014-06-04 11:13:48.689918 [DEBUG] sofia.c:8534 IP 192.210.199.42 Rejected by acl "domains". Falling back to Digest auth.
2014-06-04 11:13:48.689918 [WARNING] sofia_reg.c:2748 Can't find user [9000@server_ip] from 192.210.199.42
You must define a domain called 'server_ip' in your directory and add a user with the id="9000" attribute
and you must configure your device to use the proper domain in it's authentication credentials.
2014-06-04 11:13:48.689918 [WARNING] sofia_reg.c:1608 SIP auth failure (INVITE) on sofia profile 'internal' for [810972598656093@server_ip] from ip 192.210.199.42
send 744 bytes to udp/[192.210.199.42]:5070 at 11:13:48.705189:
------------------------------------------------------------------------
SIP/2.0 403 Forbidden
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-81e519c18d0f8584cc416311471d6741;rport=5070
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093 <sip:810972598656093@server_ip>;tag=ZKrXQy5Q25gHe
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 2 INVITE
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Accept: application/sdp
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer
Content-Length: 0

------------------------------------------------------------------------
2014-06-04 11:13:48.689918 [DEBUG] switch_core_session.c:1052 Send signal sofia/internal/9000@server_ip [BREAK]
2014-06-04 11:13:48.689918 [NOTICE] sofia.c:2031 Hangup sofia/internal/9000@server_ip [CS_NEW] [CALL_REJECTED]
2014-06-04 11:13:48.689918 [DEBUG] switch_channel.c:3218 Send signal sofia/internal/9000@server_ip [KILL]
2014-06-04 11:13:48.689918 [DEBUG] switch_core_session.c:1387 Send signal sofia/internal/9000@server_ip [BREAK]
2014-06-04 11:13:48.727957 [DEBUG] sofia.c:1298 Channel is already hungup.
2014-06-04 11:13:48.727957 [DEBUG] switch_core_state_machine.c:470 (sofia/internal/9000@server_ip) Running State Change CS_HANGUP
2014-06-04 11:13:48.727957 [DEBUG] switch_core_state_machine.c:733 (sofia/internal/9000@server_ip) Callstate Change DOWN -> HANGUP
2014-06-04 11:13:48.727957 [DEBUG] switch_core_state_machine.c:735 (sofia/internal/9000@server_ip) State HANGUP
2014-06-04 11:13:48.727957 [DEBUG] mod_sofia.c:413 Channel sofia/internal/9000@server_ip hanging up, cause: CALL_REJECTED
2014-06-04 11:13:48.727957 [DEBUG] switch_core_state_machine.c:58 sofia/internal/9000@server_ip Standard HANGUP, cause: CALL_REJECTED
2014-06-04 11:13:48.727957 [DEBUG] switch_core_state_machine.c:735 (sofia/internal/9000@server_ip) State HANGUP going to sleep
2014-06-04 11:13:48.727957 [DEBUG] switch_core_state_machine.c:502 (sofia/internal/9000@server_ip) State Change CS_HANGUP -> CS_REPORTING
2014-06-04 11:13:48.727957 [DEBUG] switch_core_session.c:1387 Send signal sofia/internal/9000@server_ip [BREAK]
2014-06-04 11:13:48.727957 [DEBUG] switch_core_state_machine.c:470 (sofia/internal/9000@server_ip) Running State Change CS_REPORTING
2014-06-04 11:13:48.727957 [DEBUG] switch_core_state_machine.c:821 (sofia/internal/9000@server_ip) State REPORTING
2014-06-04 11:13:48.727957 [DEBUG] switch_core_state_machine.c:102 sofia/internal/9000@server_ip Standard REPORTING, cause: CALL_REJECTED
2014-06-04 11:13:48.727957 [DEBUG] switch_core_state_machine.c:821 (sofia/internal/9000@server_ip) State REPORTING going to sleep
2014-06-04 11:13:48.727957 [DEBUG] switch_core_state_machine.c:496 (sofia/internal/9000@server_ip) State Change CS_REPORTING -> CS_DESTROY
2014-06-04 11:13:48.727957 [DEBUG] switch_core_session.c:1387 Send signal sofia/internal/9000@server_ip [BREAK]
2014-06-04 11:13:48.727957 [DEBUG] switch_core_session.c:1614 Session 259 (sofia/internal/9000@server_ip) Locked, Waiting on external entities
2014-06-04 11:13:48.727957 [NOTICE] switch_core_session.c:1632 Session 259 (sofia/internal/9000@server_ip) Ended
2014-06-04 11:13:48.727957 [NOTICE] switch_core_session.c:1636 Close Channel sofia/internal/9000@server_ip [CS_DESTROY]
2014-06-04 11:13:48.727957 [DEBUG] switch_core_state_machine.c:624 (sofia/internal/9000@server_ip) Running State Change CS_DESTROY
2014-06-04 11:13:48.727957 [DEBUG] switch_core_state_machine.c:634 (sofia/internal/9000@server_ip) State DESTROY
2014-06-04 11:13:48.727957 [DEBUG] mod_sofia.c:323 sofia/internal/9000@server_ip SOFIA DESTROY
2014-06-04 11:13:48.727957 [DEBUG] switch_core_state_machine.c:109 sofia/internal/9000@server_ip Standard DESTROY
2014-06-04 11:13:48.727957 [DEBUG] switch_core_state_machine.c:634 (sofia/internal/9000@server_ip) State DESTROY going to sleep
recv 358 bytes from udp/[192.210.199.42]:5070 at 11:13:48.889984:
------------------------------------------------------------------------
ACK sip:810972598656093@server_ip SIP/2.0
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-81e519c18d0f8584cc416311471d6741;rport
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093 <sip:810972598656093@server_ip>;tag=yaZ4N3mm5vtyj
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 1 ACK
Max-Forwards: 70
Content-Length: 0

------------------------------------------------------------------------
recv 1277 bytes from udp/[192.210.199.42]:5070 at 11:13:48.890126:
------------------------------------------------------------------------
INVITE sip:810972598656093@server_ip SIP/2.0
To: 810972598656093<sip:810972598656093@server_ip>
From: 9000<sip:9000@server_ip>;tag=fbd183c4
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-81e519c18d0f8584cc416311471d6741;rport
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 3 INVITE
Contact: <sip:9000@192.210.199.42:5070>
Max-Forwards: 70
Allow: INVITE, ACK, CANCEL, BYE
User-Agent: sipcli/v1.8
Content-Type: application/sdp
Proxy-Authorization: Digest username="9000",realm="server_ip",nonce="c5d5d434-ebb7-11e3-b2c7-2d1ffe3917de",uri="sip:810972598656093@server_ip",response="198d8d6d5eb6c915b07ebc342 aea2653",cnonce="4b41f53e6f00c05",nc=00000001,qop="auth",algorithm=MD5
Proxy-Authorization: Digest username="9000",realm="server_ip",nonce="c5d5d434-ebb7-11e3-b2c7-2d1ffe3917de",uri="sip:810972598656093@server_ip",response="198d8d6d5eb6c915b07ebc342 aea2653",cnonce="4b41f53e6f00c05",nc=00000001,qop="auth",algorithm=MD5
Content-Length: 284

v=0
o=sipcli-Session 2031997600 323096638 IN IP4 192.210.199.42
s=sipcli
c=IN IP4 192.210.199.42
t=0 0
m=audio 5072 RTP/AVP 18 0 8 101
a=fmtp:101 0-15
a=rtpmap:18 G729/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:8 PCMA/8000
a=rtpmap:101 telephone-event/8000
a=ptime:20
a=sendrecv
------------------------------------------------------------------------
send 382 bytes to udp/[192.210.199.42]:5070 at 11:13:48.890417:
------------------------------------------------------------------------
SIP/2.0 100 Trying
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-81e519c18d0f8584cc416311471d6741;rport=5070
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093<sip:810972598656093@server_ip>
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 3 INVITE
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Content-Length: 0

------------------------------------------------------------------------
2014-06-04 11:13:48.886961 [NOTICE] switch_channel.c:1053 New Channel sofia/internal/9000@server_ip [c6408608-ebb7-11e3-b2c8-2d1ffe3917de]
2014-06-04 11:13:48.886961 [DEBUG] switch_core_session.c:1052 Send signal sofia/internal/9000@server_ip [BREAK]
2014-06-04 11:13:48.886961 [DEBUG] switch_core_session.c:1052 Send signal sofia/internal/9000@server_ip [BREAK]
2014-06-04 11:13:48.946979 [DEBUG] switch_core_state_machine.c:470 (sofia/internal/9000@server_ip) Running State Change CS_NEW
2014-06-04 11:13:48.946979 [DEBUG] sofia.c:8367 sofia/internal/9000@server_ip receiving invite from 192.210.199.42:5070 version: 1.5.13b git 6722e3d 2014-06-03 00:25:04Z 64bit
2014-06-04 11:13:48.946979 [DEBUG] sofia.c:8534 IP 192.210.199.42 Rejected by acl "domains". Falling back to Digest auth.
2014-06-04 11:13:48.946979 [WARNING] sofia_reg.c:1663 SIP auth challenge (INVITE) on sofia profile 'internal' for [810972598656093@server_ip] from ip 192.210.199.42
2014-06-04 11:13:48.946979 [DEBUG] switch_core_state_machine.c:489 (sofia/internal/9000@server_ip) State NEW
send 899 bytes to udp/[192.210.199.42]:5070 at 11:13:48.973201:
------------------------------------------------------------------------
SIP/2.0 407 Proxy Authentication Required
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-81e519c18d0f8584cc416311471d6741;rport=5070
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093 <sip:810972598656093@server_ip>;tag=0vHpSSpUZe73S
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 3 INVITE
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Accept: application/sdp
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer
Proxy-Authenticate: Digest realm="server_ip", nonce="c64b7fd6-ebb7-11e3-b2c9-2d1ffe3917de", stale=true, algorithm=MD5, qop="auth"
Content-Length: 0

------------------------------------------------------------------------
2014-06-04 11:13:48.966983 [DEBUG] switch_core_session.c:1052 Send signal sofia/internal/9000@server_ip [BREAK]
2014-06-04 11:13:48.966983 [DEBUG] sofia.c:2033 detaching session c6408608-ebb7-11e3-b2c8-2d1ffe3917de
send 744 bytes to udp/[192.210.199.42]:5070 at 11:13:49.210060:
------------------------------------------------------------------------
SIP/2.0 403 Forbidden
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-81e519c18d0f8584cc416311471d6741;rport=5070
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093 <sip:810972598656093@server_ip>;tag=ZKrXQy5Q25gHe
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 2 INVITE
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Accept: application/sdp
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer
Content-Length: 0

------------------------------------------------------------------------
send 899 bytes to udp/[192.210.199.42]:5070 at 11:13:49.476167:
------------------------------------------------------------------------
SIP/2.0 407 Proxy Authentication Required
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-81e519c18d0f8584cc416311471d6741;rport=5070
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093 <sip:810972598656093@server_ip>;tag=0vHpSSpUZe73S
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 3 INVITE
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Accept: application/sdp
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer
Proxy-Authenticate: Digest realm="server_ip", nonce="c64b7fd6-ebb7-11e3-b2c9-2d1ffe3917de", stale=true, algorithm=MD5, qop="auth"
Content-Length: 0

------------------------------------------------------------------------
send 744 bytes to udp/[192.210.199.42]:5070 at 11:13:50.212447:
------------------------------------------------------------------------
SIP/2.0 403 Forbidden
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-81e519c18d0f8584cc416311471d6741;rport=5070
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093 <sip:810972598656093@server_ip>;tag=ZKrXQy5Q25gHe
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 2 INVITE
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Accept: application/sdp
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer
Content-Length: 0

------------------------------------------------------------------------
send 899 bytes to udp/[192.210.199.42]:5070 at 11:13:50.476437:
------------------------------------------------------------------------
SIP/2.0 407 Proxy Authentication Required
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-81e519c18d0f8584cc416311471d6741;rport=5070
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093 <sip:810972598656093@server_ip>;tag=0vHpSSpUZe73S
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 3 INVITE
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Accept: application/sdp
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer
Proxy-Authenticate: Digest realm="server_ip", nonce="c64b7fd6-ebb7-11e3-b2c9-2d1ffe3917de", stale=true, algorithm=MD5, qop="auth"
Content-Length: 0

------------------------------------------------------------------------
send 744 bytes to udp/[192.210.199.42]:5070 at 11:13:52.216009:
------------------------------------------------------------------------
SIP/2.0 403 Forbidden
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-81e519c18d0f8584cc416311471d6741;rport=5070
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093 <sip:810972598656093@server_ip>;tag=ZKrXQy5Q25gHe
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 2 INVITE
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Accept: application/sdp
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer
Content-Length: 0

------------------------------------------------------------------------
send 899 bytes to udp/[192.210.199.42]:5070 at 11:13:52.478540:
------------------------------------------------------------------------
SIP/2.0 407 Proxy Authentication Required
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-81e519c18d0f8584cc416311471d6741;rport=5070
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093 <sip:810972598656093@server_ip>;tag=0vHpSSpUZe73S
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 3 INVITE
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Accept: application/sdp
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer
Proxy-Authenticate: Digest realm="server_ip", nonce="c64b7fd6-ebb7-11e3-b2c9-2d1ffe3917de", stale=true, algorithm=MD5, qop="auth"
Content-Length: 0

------------------------------------------------------------------------
send 744 bytes to udp/[192.210.199.42]:5070 at 11:13:56.218975:
------------------------------------------------------------------------
SIP/2.0 403 Forbidden
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-81e519c18d0f8584cc416311471d6741;rport=5070
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093 <sip:810972598656093@server_ip>;tag=ZKrXQy5Q25gHe
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 2 INVITE
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Accept: application/sdp
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer
Content-Length: 0

------------------------------------------------------------------------
send 899 bytes to udp/[192.210.199.42]:5070 at 11:13:56.480576:
------------------------------------------------------------------------
SIP/2.0 407 Proxy Authentication Required
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-81e519c18d0f8584cc416311471d6741;rport=5070
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093 <sip:810972598656093@server_ip>;tag=0vHpSSpUZe73S
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 3 INVITE
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Accept: application/sdp
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer
Proxy-Authenticate: Digest realm="server_ip", nonce="c64b7fd6-ebb7-11e3-b2c9-2d1ffe3917de", stale=true, algorithm=MD5, qop="auth"
Content-Length: 0

------------------------------------------------------------------------
2014-06-04 11:13:59.146770 [WARNING] switch_core_state_machine.c:570 c6408608-ebb7-11e3-b2c8-2d1ffe3917de sofia/internal/9000@server_ip Abandoned
2014-06-04 11:13:59.146770 [NOTICE] switch_core_state_machine.c:573 Hangup sofia/internal/9000@server_ip [CS_NEW] [WRONG_CALL_STATE]
2014-06-04 11:13:59.146770 [DEBUG] switch_channel.c:3218 Send signal sofia/internal/9000@server_ip [KILL]
2014-06-04 11:13:59.146770 [DEBUG] switch_core_session.c:1387 Send signal sofia/internal/9000@server_ip [BREAK]
2014-06-04 11:13:59.146770 [DEBUG] switch_core_state_machine.c:470 (sofia/internal/9000@server_ip) Running State Change CS_HANGUP
2014-06-04 11:13:59.146770 [DEBUG] switch_core_state_machine.c:733 (sofia/internal/9000@server_ip) Callstate Change DOWN -> HANGUP
2014-06-04 11:13:59.146770 [DEBUG] switch_core_state_machine.c:735 (sofia/internal/9000@server_ip) State HANGUP
2014-06-04 11:13:59.146770 [DEBUG] mod_sofia.c:413 Channel sofia/internal/9000@server_ip hanging up, cause: WRONG_CALL_STATE
2014-06-04 11:13:59.146770 [DEBUG] switch_core_state_machine.c:58 sofia/internal/9000@server_ip Standard HANGUP, cause: WRONG_CALL_STATE
2014-06-04 11:13:59.146770 [DEBUG] switch_core_state_machine.c:735 (sofia/internal/9000@server_ip) State HANGUP going to sleep
2014-06-04 11:13:59.146770 [DEBUG] switch_core_state_machine.c:502 (sofia/internal/9000@server_ip) State Change CS_HANGUP -> CS_REPORTING
2014-06-04 11:13:59.146770 [DEBUG] switch_core_session.c:1387 Send signal sofia/internal/9000@server_ip [BREAK]
2014-06-04 11:13:59.146770 [DEBUG] switch_core_state_machine.c:470 (sofia/internal/9000@server_ip) Running State Change CS_REPORTING
2014-06-04 11:13:59.146770 [DEBUG] switch_core_state_machine.c:821 (sofia/internal/9000@server_ip) State REPORTING
2014-06-04 11:13:59.146770 [DEBUG] switch_core_state_machine.c:102 sofia/internal/9000@server_ip Standard REPORTING, cause: WRONG_CALL_STATE
2014-06-04 11:13:59.146770 [DEBUG] switch_core_state_machine.c:821 (sofia/internal/9000@server_ip) State REPORTING going to sleep
2014-06-04 11:13:59.146770 [DEBUG] switch_core_state_machine.c:496 (sofia/internal/9000@server_ip) State Change CS_REPORTING -> CS_DESTROY
2014-06-04 11:13:59.146770 [DEBUG] switch_core_session.c:1387 Send signal sofia/internal/9000@server_ip [BREAK]
2014-06-04 11:13:59.146770 [DEBUG] switch_core_session.c:1614 Session 260 (sofia/internal/9000@server_ip) Locked, Waiting on external entities
2014-06-04 11:13:59.146770 [NOTICE] switch_core_session.c:1632 Session 260 (sofia/internal/9000@server_ip) Ended
2014-06-04 11:13:59.146770 [NOTICE] switch_core_session.c:1636 Close Channel sofia/internal/9000@server_ip [CS_DESTROY]
2014-06-04 11:13:59.146770 [DEBUG] switch_core_state_machine.c:624 (sofia/internal/9000@server_ip) Running State Change CS_DESTROY
2014-06-04 11:13:59.146770 [DEBUG] switch_core_state_machine.c:634 (sofia/internal/9000@server_ip) State DESTROY
2014-06-04 11:13:59.146770 [DEBUG] mod_sofia.c:323 sofia/internal/9000@server_ip SOFIA DESTROY
2014-06-04 11:13:59.146770 [DEBUG] switch_core_state_machine.c:109 sofia/internal/9000@server_ip Standard DESTROY
2014-06-04 11:13:59.146770 [DEBUG] switch_core_state_machine.c:634 (sofia/internal/9000@server_ip) State DESTROY going to sleep
send 744 bytes to udp/[192.210.199.42]:5070 at 11:14:00.222023:
------------------------------------------------------------------------
SIP/2.0 403 Forbidden
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-81e519c18d0f8584cc416311471d6741;rport=5070
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093 <sip:810972598656093@server_ip>;tag=ZKrXQy5Q25gHe
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 2 INVITE
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Accept: application/sdp
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer
Content-Length: 0

------------------------------------------------------------------------
send 899 bytes to udp/[192.210.199.42]:5070 at 11:14:00.482629:
------------------------------------------------------------------------
SIP/2.0 407 Proxy Authentication Required
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-81e519c18d0f8584cc416311471d6741;rport=5070
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093 <sip:810972598656093@server_ip>;tag=0vHpSSpUZe73S
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 3 INVITE
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Accept: application/sdp
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer
Proxy-Authenticate: Digest realm="server_ip", nonce="c64b7fd6-ebb7-11e3-b2c9-2d1ffe3917de", stale=true, algorithm=MD5, qop="auth"
Content-Length: 0

------------------------------------------------------------------------
send 744 bytes to udp/[192.210.199.42]:5070 at 11:14:04.224323:
------------------------------------------------------------------------
SIP/2.0 403 Forbidden
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-81e519c18d0f8584cc416311471d6741;rport=5070
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093 <sip:810972598656093@server_ip>;tag=ZKrXQy5Q25gHe
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 2 INVITE
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Accept: application/sdp
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer
Content-Length: 0

------------------------------------------------------------------------
send 899 bytes to udp/[192.210.199.42]:5070 at 11:14:04.484695:
------------------------------------------------------------------------
SIP/2.0 407 Proxy Authentication Required
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-81e519c18d0f8584cc416311471d6741;rport=5070
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093 <sip:810972598656093@server_ip>;tag=0vHpSSpUZe73S
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 3 INVITE
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Accept: application/sdp
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer
Proxy-Authenticate: Digest realm="server_ip", nonce="c64b7fd6-ebb7-11e3-b2c9-2d1ffe3917de", stale=true, algorithm=MD5, qop="auth"
Content-Length: 0

------------------------------------------------------------------------
send 744 bytes to udp/[192.210.199.42]:5070 at 11:14:08.224487:
------------------------------------------------------------------------
SIP/2.0 403 Forbidden
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-81e519c18d0f8584cc416311471d6741;rport=5070
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093 <sip:810972598656093@server_ip>;tag=ZKrXQy5Q25gHe
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 2 INVITE
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Accept: application/sdp
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer
Content-Length: 0

------------------------------------------------------------------------
send 899 bytes to udp/[192.210.199.42]:5070 at 11:14:08.487029:
------------------------------------------------------------------------
SIP/2.0 407 Proxy Authentication Required
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-81e519c18d0f8584cc416311471d6741;rport=5070
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093 <sip:810972598656093@server_ip>;tag=0vHpSSpUZe73S
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 3 INVITE
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Accept: application/sdp
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer
Proxy-Authenticate: Digest realm="server_ip", nonce="c64b7fd6-ebb7-11e3-b2c9-2d1ffe3917de", stale=true, algorithm=MD5, qop="auth"
Content-Length: 0

------------------------------------------------------------------------
send 744 bytes to udp/[192.210.199.42]:5070 at 11:14:12.226243:
------------------------------------------------------------------------
SIP/2.0 403 Forbidden
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-81e519c18d0f8584cc416311471d6741;rport=5070
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093 <sip:810972598656093@server_ip>;tag=ZKrXQy5Q25gHe
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 2 INVITE
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Accept: application/sdp
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer
Content-Length: 0

------------------------------------------------------------------------
send 899 bytes to udp/[192.210.199.42]:5070 at 11:14:12.488807:
------------------------------------------------------------------------
SIP/2.0 407 Proxy Authentication Required
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-81e519c18d0f8584cc416311471d6741;rport=5070
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093 <sip:810972598656093@server_ip>;tag=0vHpSSpUZe73S
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 3 INVITE
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Accept: application/sdp
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer
Proxy-Authenticate: Digest realm="server_ip", nonce="c64b7fd6-ebb7-11e3-b2c9-2d1ffe3917de", stale=true, algorithm=MD5, qop="auth"
Content-Length: 0

------------------------------------------------------------------------
send 744 bytes to udp/[192.210.199.42]:5070 at 11:14:16.227736:
------------------------------------------------------------------------
SIP/2.0 403 Forbidden
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-81e519c18d0f8584cc416311471d6741;rport=5070
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093 <sip:810972598656093@server_ip>;tag=ZKrXQy5Q25gHe
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 2 INVITE
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Accept: application/sdp
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer
Content-Length: 0

------------------------------------------------------------------------
send 899 bytes to udp/[192.210.199.42]:5070 at 11:14:16.490391:
------------------------------------------------------------------------
SIP/2.0 407 Proxy Authentication Required
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-81e519c18d0f8584cc416311471d6741;rport=5070
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093 <sip:810972598656093@server_ip>;tag=0vHpSSpUZe73S
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 3 INVITE
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Accept: application/sdp
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer
Proxy-Authenticate: Digest realm="server_ip", nonce="c64b7fd6-ebb7-11e3-b2c9-2d1ffe3917de", stale=true, algorithm=MD5, qop="auth"
Content-Length: 0

------------------------------------------------------------------------
send 744 bytes to udp/[192.210.199.42]:5070 at 11:14:20.229036:
------------------------------------------------------------------------
SIP/2.0 403 Forbidden
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-81e519c18d0f8584cc416311471d6741;rport=5070
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093 <sip:810972598656093@server_ip>;tag=ZKrXQy5Q25gHe
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 2 INVITE
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Accept: application/sdp
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer
Content-Length: 0

------------------------------------------------------------------------
send 899 bytes to udp/[192.210.199.42]:5070 at 11:14:20.492746:
------------------------------------------------------------------------
SIP/2.0 407 Proxy Authentication Required
Via: SIP/2.0/UDP 192.210.199.42:5070;branch=z9hG4bK-81e519c18d0f8584cc416311471d6741;rport=5070
From: 9000<sip:9000@server_ip>;tag=fbd183c4
To: 810972598656093 <sip:810972598656093@server_ip>;tag=0vHpSSpUZe73S
Call-ID: c4e63f2097f443d976ba68129fcfa45f
CSeq: 3 INVITE
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Accept: application/sdp
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer
Proxy-Authenticate: Digest realm="server_ip", nonce="c64b7fd6-ebb7-11e3-b2c9-2d1ffe3917de", stale=true, algorithm=MD5, qop="auth"
Content-Length: 0


Вернуться к началу
 Профиль  
 
 Заголовок сообщения: Re: freeSWITCH + fail2ban
СообщениеДобавлено: 04 июн 2014 13:39 
FreeSWITCH_GuRu

Зарегистрирован: 22 авг 2012 09:52
Сообщения: 1710
1. это не попытки зарегистрароваться
2. после непрохождения авторизации INVITE шлетесь лесом сообщением SIP/2.0 403 Forbidden, из которого ничего не видно

_________________
ЛС: @rostel
Сообщество: @ru_freeswitch


Вернуться к началу
 Профиль  
 
 Заголовок сообщения: Re: freeSWITCH + fail2ban
СообщениеДобавлено: 04 июн 2014 16:20 

Зарегистрирован: 31 янв 2014 11:59
Сообщения: 54
В предыдущем спойлере был бот
Теперь сам регистрируюсь с несуществующей учеткой и неверным паролем

На REGISTER получаю 401 Unauthorized, верно?

[+] 
------------------------------------------------------------------------
SUBSCRIBE sip:2500@server_ip;transport=UDP SIP/2.0
Via: SIP/2.0/UDP my_ip:5060;branch=z9hG4bK-d8754z-ed2e85231d028125-1---d8754z-
Max-Forwards: 70
Contact: <sip:2500@my_ip:5060;transport=UDP>
To: <sip:2500@server_ip;transport=UDP>
From: <sip:2500@server_ip;transport=UDP>;tag=7154f90a
Call-ID: Y2M1Y2ZkMjZmZWNhMWVlZDAxM2JiZDUzNjBmMTU2Yjg.
CSeq: 1 SUBSCRIBE
Expires: 3600
Accept: application/simple-message-summary
Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE
Supported: replaces, norefersub, extended-refer, X-cisco-serviceuri
User-Agent: Zoiper for Windows 2.38 rev.16635
Event: message-summary
Allow-Events: presence, kpml
Content-Length: 0

------------------------------------------------------------------------
recv 672 bytes from udp/[my_ip2]:60466 at 16:11:06.664476:
------------------------------------------------------------------------
REGISTER sip:server_ip;transport=UDP SIP/2.0
Via: SIP/2.0/UDP my_ip:5060;branch=z9hG4bK-d8754z-e87462585386eac9-1---d8754z-
Max-Forwards: 70
Contact: <sip:2500@my_ip:5060;rinstance=d0208fcc7f5dd9fd;transport=UDP>
To: <sip:2500@server_ip;transport=UDP>
From: <sip:2500@server_ip;transport=UDP>;tag=ae7cea47
Call-ID: OWIxOWM3MTAyY2Y4OTRlZTE0YzY0YjhjY2E5MzY5ODg.
CSeq: 1 REGISTER
Expires: 3600
Allow: INVITE, ACK, CANCEL, BYE, NOTIFY, REFER, MESSAGE, OPTIONS, INFO, SUBSCRIBE
Supported: replaces, norefersub, extended-refer, X-cisco-serviceuri
User-Agent: Zoiper for Windows 2.38 rev.16635
Allow-Events: presence, kpml
Content-Length: 0

------------------------------------------------------------------------
2014-06-04 16:11:06.646745 [WARNING] sofia_reg.c:1663 SIP auth challenge (REGISTER) on sofia profile 'internal' for [2500@server_ip] from ip my_ip2
send 836 bytes to udp/[my_ip2]:5060 at 16:11:06.666035:
------------------------------------------------------------------------
SIP/2.0 202 Accepted
Via: SIP/2.0/UDP my_ip:5060;branch=z9hG4bK-d8754z-ed2e85231d028125-1---d8754z-;received=my_ip2
From: <sip:2500@server_ip;transport=UDP>;tag=7154f90a
To: <sip:2500@server_ip;transport=UDP>;tag=rHjZnhC1HC14
Call-ID: Y2M1Y2ZkMjZmZWNhMWVlZDAxM2JiZDUzNjBmMTU2Yjg.
CSeq: 1 SUBSCRIBE
Contact: <sip:2500@server_ip:5060>
Expires: 3600
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
Allow-Events: talk, hold, conference, presence, as-feature-event, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer
Subscription-State: active;expires=3600
Content-Length: 0

------------------------------------------------------------------------
send 694 bytes to udp/[my_ip2]:5060 at 16:11:06.667690:
------------------------------------------------------------------------
SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP my_ip:5060;branch=z9hG4bK-d8754z-e87462585386eac9-1---d8754z-;received=my_ip2
From: <sip:2500@server_ip;transport=UDP>;tag=ae7cea47
To: <sip:2500@server_ip;transport=UDP>;tag=UH5c2NrBNv9jN
Call-ID: OWIxOWM3MTAyY2Y4OTRlZTE0YzY0YjhjY2E5MzY5ODg.
CSeq: 1 REGISTER
User-Agent: FreeSWITCH-mod_sofia/1.5.13b+git~20140603T002504Z~6722e3dfea~64bit
Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, INFO, UPDATE, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE
Supported: timer, path, replaces
WWW-Authenticate: Digest realm="server_ip", nonce="4e6500c6-ebe1-11e3-b303-2d1ffe3917de", algorithm=MD5, qop="auth"
Content-Length: 0


Вернуться к началу
 Профиль  
 
 Заголовок сообщения: Re: freeSWITCH + fail2ban
СообщениеДобавлено: 05 июн 2014 08:29 
FreeSWITCH_GuRu

Зарегистрирован: 22 авг 2012 09:52
Сообщения: 1710
после первого REGISTER SIP/2.0 401 Unauthorized - запрос авторизации
вы должны ответить ещё одним REGISTER, содержащим хеши
вот ответ софтсвича на него и нужно смотреть

_________________
ЛС: @rostel
Сообщество: @ru_freeswitch


Вернуться к началу
 Профиль  
 
Показать сообщения за:  Поле сортировки  
Начать новую тему Ответить на тему  [ Сообщений: 29 ]  На страницу Пред.  1, 2, 3  След.

Часовой пояс: UTC + 4 часа


Кто сейчас на конференции

Сейчас этот форум просматривают: нет зарегистрированных пользователей и гости: 277


Вы не можете начинать темы
Вы не можете отвечать на сообщения
Вы не можете редактировать свои сообщения
Вы не можете удалять свои сообщения
Вы не можете добавлять вложения

Найти:
Перейти:  
Powered by phpBB® Forum Software © phpBB Group
Русская поддержка phpBB