[asterisk-users] Detecting DoS attacks via SIP

2017-08-15 Thread mdiehl
Hi all, Lately, I've seen an increase in the number of attacks against my system from the so-called "Friendly Scanner." When one of these script kiddies targets my server, all I see for symptoms is a few of my trunks become lagged due to server load and a stream of messages on the console

Re: [asterisk-users] Detecting DoS attacks via SIP

2017-08-15 Thread Richard Mudgett
On Tue, Aug 15, 2017 at 2:37 PM, mdiehl wrote: > Hi all, > > Lately, I've seen an increase in the number of attacks against my system > from the so-called "Friendly Scanner." When one of these script kiddies > targets my server, all I see for symptoms is a few of my

Re: [asterisk-users] Detecting DoS attacks via SIP

2017-08-15 Thread Mark Boyce
Hi Mike In this case, if it’s coming from friendly scanner why not drop the packets at the firewall layer so that Asterisk never sees them? Mark > On 15 Aug 2017, at 20:37, mdiehl wrote: > > Hi all, > > Lately, I've seen an increase in the number of attacks against

Re: [asterisk-users] Detecting DoS attacks via SIP

2017-08-15 Thread Patrick Laimbock
Hi Mike, On 15-08-17 21:37, mdiehl wrote: Hi all, Lately, I've seen an increase in the number of attacks against my system from the so-called "Friendly Scanner." When one of these script kiddies targets my server, all I see for symptoms is a few of my trunks become lagged due to server load

Re: [asterisk-users] VoIP monitor and multiple RTP streams

2017-08-15 Thread Marcelo Terres
Hello Dovid. I tried to figure it out, but to be honest I could not find a reason for the change. The lines that I sent are the RTP streams detected by Wireshark. Regards, Marcelo H. Terres IM: mhter...@jabber.mundoopensource.com.br https://www.mundoopensource.com.br

Re: [asterisk-users] VoIP monitor and multiple RTP streams

2017-08-15 Thread Dovid Bender
Must be something in Asterisk. I have seen it in the past and was never able to figure it out. On Tue, Aug 15, 2017 at 4:18 AM, Marcelo Terres wrote: > Hello Dovid. > > I tried to figure it out, but to be honest I could not find a reason for > the change. > > The lines that