[Freeswitch-users] mod_radius_cdr - unwanted connections to at&t ip

Stefan Kainz stefan.kainz at 1012.at
Thu Aug 14 13:15:37 MSD 2014


Hello,

After a clean install of both, debian and freeswitch ( with 
mod_radius_cdr enabled )
i noticed a few accounting-packages sent to strange ip's on port 1813.

120.0.0.224 ( at&t )
32.45.27.224 ( chinaunicom )

i'm pretty sure those packages originate from mod_radius_cdr.
since we're not related with these companys in any way, i'm wondering 
why mod_radius_cdr is ( at least trying ) to sent cdr's to those ip's.

here is a sample of a cdr sent to at&t:

------------------------------
/U *xxx*.*xxx*.*xxx*.*xxx*:59323 -> *120.0.0.224*:1813//
//....r...`/..I....I..(.....,&0670776c-2388-11e4-aef1-8b582cc877c8......l...*xxxxxxxxxxx*....l.......l...*xxxxxxx*....l.............l.......l...default....l...*xxxxxxxxxxxx*....l...."..l...src/switch_ivr_originate.c.'..l..!2014-08-14T09:53:05.848983+0200......).......O..f/
----------------------------


I also searched the source files of mod_radius_cdr, but sadly ( or 
luckily ) no match.

Somebody cares to look into this?

If i'm in the wrong place for this question, maybe some of you can point 
me in the right direction ;)

have a nice day,

regards,


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20140814/7ac462cc/attachment.html 


Join us at ClueCon 2016 Aug 8-12, 2016
More information about the FreeSWITCH-users mailing list