On Sun, May 15, 2011 at 08:24:08AM +0200, Leandro Dardini wrote:
> 2011/5/15 RSCL Mumbai <rscl.mum...@gmail.com>
>
> >
> > On Sat, May 14, 2011 at 11:43 AM, Leandro Dardini <ldard...@gmail.com>wrote:
> >
> >> Check if someone is brute forcing your asterisk accounts. It used to
> >> happen to me before I install fail2ban. You can easily check the "full" log
> >> of asterisk or with just a "tcpdump -i any -n port 5060 or port 4569".
> >>
> >> Thx for the tcpdump command.
> > Checked, all looks good.
> > Packets coming from trusted domains only.
> >
> > What should be the next step ?
> >
> > Thx
> > Sans
> >
> >
> Have you tried to restart asterisk?
>
> As last chance, install strace and check what is asterisk doing. Get the pid
> (PID) of the running asterisk and run:
>
> strace -p PID -f -F &> /tmp/strace.log
Not exactly. Asterisk is multi-threaded. strae traces a specific thread.
To see the most active thread, press 'H' (shift-h) in top. Wait for the
display to refresh at least twice (on the first time it won't make
sense) and now check to see which is the top thread.
--
Tzafrir Cohen
icq#16849755 jabber:tzafrir.co...@xorcom.com
+972-50-7952406 mailto:tzafrir.co...@xorcom.com
http://www.xorcom.com iax:gu...@local.xorcom.com/tzafrir
--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
http://www.asterisk.org/hello
asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-users
