[Freeswitch-users] Spoofed CID?
David Ponzone
david.ponzone at ipeva.fr
Thu May 19 20:26:28 MSD 2011
Mazilo,
well, as anyone said, you can't know that for sure.
Here, in France, and I think this may be applicable in most western countries, the end user of a telephony service will always receive only one CLI.
If the call comes from an analog line on the PSTN, the CLI is provided by the telco.
If the call comes from an ISDN line on the PSTN, the CLI is the one sent by the caller's PBX.
So for calls coming from ISDN, the telco will always add another CLI, the real CLI of the customer. We call it NDI in France (meaning Installation Number).
For SIP, you can guess what applies: no rules...
So basically, if you are a end user (not a telco), you will receive a CLI which can be fake.
If you are a telco and are interconnected in SIP or SS7 in the right way, you may (meaning "you are allowed to") receive the 2 CLIs for calls coming from ISDN.
For SIP calls, the issue is still there anyway: the reliability of the CLI depends on the seriousness of the ITSPs out there.
David Ponzone Direction Technique
email: david.ponzone at ipeva.fr
tel: 01 74 03 18 97
gsm: 06 66 98 76 34
Service Client IPeva
tel: 0811 46 26 26
www.ipeva.fr - www.ipeva-studio.com
Ce message et toutes les pièces jointes sont confidentiels et établis à l'intention exclusive de ses destinataires. Toute utilisation ou diffusion non autorisée est interdite. Tout message électronique est susceptible d'altération. IPeva décline toute responsabilité au titre de ce message s'il a été altéré, déformé ou falsifié. Si vous n'êtes pas destinataire de ce message, merci de le détruire immédiatement et d'avertir l'expéditeur.
Le 19/05/2011 à 04:01, mazilo a écrit :
> Today, after my phone rang with a CID of (443)366-9222, I took a look at
> /var/log/freeswitch/freeswitch.log file on my Seagate DockStar (excerpted
> below). What caught my attention is the last line which shows two numbers,
> namely 4433669222 and 4016488312. The question I have is if 4433669222 is a
> spoofed number?
>
> 2011-05-18 12:54:03.258849 [NOTICE] switch_channel.c:812 New Channel
> sofia/external/4433669222 at 64.154.
> 2011-05-18 12:54:03.258849 [DEBUG] sofia.c:4744 Channel
> sofia/external/4433669222 at 64.154.41.150 enteri
> 2011-05-18 12:54:03.258849 [DEBUG] sofia.c:4755 Remote SDP:
> v=0^M
> o=root 241964608 241964608 IN IP4 64.154.41.150^M
> s=Asterisk PBX 1.6.2.13^M
> c=IN IP4 64.154.41.150^M
> t=0 0^M
> m=audio 10730 RTP/AVP 0 8 3 18 101^M
> a=rtpmap:0 PCMU/8000^M
> a=rtpmap:8 PCMA/8000^M
> a=rtpmap:3 GSM/8000^M
> a=rtpmap:18 G729/8000^M
> a=fmtp:18 annexb=no^M
> a=rtpmap:101 telephone-event/8000^M
> a=fmtp:101 0-16^M
> a=ptime:20^M
>
> 2011-05-18 12:54:03.258849 [DEBUG] sofia_glue.c:4637 Audio Codec Compare
> [PCMU:0:8000:20:64000]/[G7221
> 2011-05-18 12:54:03.258849 [DEBUG] sofia_glue.c:4637 Audio Codec Compare
> [PCMU:0:8000:20:64000]/[G7221
> 2011-05-18 12:54:03.258849 [DEBUG] sofia_glue.c:4637 Audio Codec Compare
> [PCMU:0:8000:20:64000]/[G722:
> 2011-05-18 12:54:03.258849 [DEBUG] sofia_glue.c:4637 Audio Codec Compare
> [PCMU:0:8000:20:64000]/[PCMU:
> 2011-05-18 12:54:03.258849 [DEBUG] sofia_glue.c:2760 Set Codec
> sofia/external/4433669222 at 64.154.41.150
> 2011-05-18 12:54:03.258849 [DEBUG] sofia_glue.c:4751 Set 2833 dtmf send/recv
> payload to 101
> 2011-05-18 12:54:03.258849 [DEBUG] sofia.c:4922
> (sofia/external/4433669222 at 64.154.41.150) State Change
>
> 2011-05-18 12:54:03.258849 [DEBUG] sofia.c:4922
> (sofia/external/4433669222 at 64.154.41.150) State Change
> 2011-05-18 12:54:03.258849 [DEBUG] switch_core_session.c:1116 Send signal
> sofia/external/4433669222 at 64
> 2011-05-18 12:54:03.265631 [DEBUG] switch_core_state_machine.c:320
> (sofia/external/4433669222 at 64.154.4
> 2011-05-18 12:54:03.265631 [DEBUG] switch_core_state_machine.c:356
> (sofia/external/4433669222 at 64.154.4
> 2011-05-18 12:54:03.265631 [DEBUG] mod_sofia.c:84
> sofia/external/4433669222 at 64.154.41.150 SOFIA INIT
> 2011-05-18 12:54:03.265631 [DEBUG] mod_sofia.c:124
> (sofia/external/4433669222 at 64.154.41.150) State Cha
> 2011-05-18 12:54:03.265631 [DEBUG] switch_core_session.c:1116 Send signal
> sofia/external/4433669222 at 64
> 2011-05-18 12:54:03.265631 [DEBUG] switch_core_state_machine.c:356
> (sofia/external/4433669222 at 64.154.4
> 2011-05-18 12:54:03.265631 [DEBUG] switch_core_state_machine.c:320
> (sofia/external/4433669222 at 64.154.4
> 2011-05-18 12:54:03.265631 [DEBUG] switch_channel.c:1668
> (sofia/external/4433669222 at 64.154.41.150) Cal
> 2011-05-18 12:54:03.265631 [DEBUG] switch_core_state_machine.c:359
> (sofia/external/4433669222 at 64.154.4
> 2011-05-18 12:54:03.265631 [DEBUG] mod_sofia.c:147
> sofia/external/4433669222 at 64.154.41.150 SOFIA ROUTI
> 2011-05-18 12:54:03.265631 [DEBUG] switch_core_state_machine.c:77
> sofia/external/4433669222 at 64.154.41.
> 2011-05-18 12:54:03.265631 [INFO] mod_dialplan_xml.c:331 Processing
> 4433669222 <4433669222>->401648831
>
>
> -----
> FreeSWITCH hosted on a Seagate DockStar with OpenWRT and ONLY consumes 3 Watts of electricity.
> --
> View this message in context: http://freeswitch-users.2379917.n2.nabble.com/Spoofed-CID-tp6380373p6380373.html
> Sent from the freeswitch-users mailing list archive at Nabble.com.
>
> _______________________________________________
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20110519/ec1ca480/attachment-0001.html
More information about the FreeSWITCH-users
mailing list