<div dir="ltr"><div><div>sorry, i mean ssl dos. <br><br></div>if i use that, that give cpu activity increase to 100%.<br><br></div>i want to make that log so i can use fail2ban to ban source IP attacker<br></div><div class="gmail_extra">
<br><br><div class="gmail_quote">On Wed, Apr 2, 2014 at 5:02 PM, dwi yulianto <span dir="ltr"><<a href="mailto:dwiyulianto.anto@gmail.com" target="_blank">dwiyulianto.anto@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr"><div><div><div>i try ssh dos and that give log in tport. but log about tport tls didnt have any data/time stamp.<br><br></div>maybe if i can make that log into date/time stamp i can make regex for fail2ban to find log when attacker give new connection in tls eventually.<br>
<br></div>am i need to change in tport_type_tls.c in line about SU_DEBUG_5 that have part with "new connection from " and change that with switch_log_printf. but actually i dont really understand about C. so how i can change that with switch_log_printf?<br>
<br></div>Thanks<br><div><br><br><div><div><br><br></div></div></div></div><div class="gmail_extra"><br><br><div class="gmail_quote"><div><div class="h5">On Wed, Apr 2, 2014 at 3:35 PM, Steven Ayre <span dir="ltr"><<a href="mailto:steveayre@gmail.com" target="_blank">steveayre@gmail.com</a>></span> wrote:<br>
</div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5">Sofia stack logging is extremely verbose, far more so than you want to run in production. Doing so will likely hurt the performance of your system due to too much disk I/o<div>
<br></div><div>What're you looking to capture?</div>
<div><br></div><div>FS already has log messages for auth failures for fail2ban to match</div><div><div><div><br></div><div><br></div><div><br><br>On Tuesday, April 1, 2014, dwi yulianto <<a href="mailto:dwiyulianto.anto@gmail.com" target="_blank">dwiyulianto.anto@gmail.com</a>> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>i wanna make log from tport.c in console or in log file with date stamp, so i can use it for fail2ban.<br>
<br></div><div>thanks.<br></div></div>
</blockquote></div>
</div></div><br></div></div>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<br></blockquote></div><br></div>
</blockquote></div><br></div>