<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>Mario, OS X 10.9 uses the pf and alf firewalls (ipfw was used from 10.5-10.8). Use the free IceFloor app to configure pf via GUI. <a href="http://www.hanynet.com/icefloor/">http://www.hanynet.com/icefloor</a>/ Use fail2ban to add offending IPs to an IceFloor table.<br><br><div>-Terry</div><div><br></div>iPad says Hello World!</div><div><br>On May 20, 2014, at 11:29 AM, Mario G <<a href="mailto:mario_fs@mgtech.com">mario_fs@mgtech.com</a>> wrote:<br><br></div><blockquote type="cite"><div><span>I am on OS X, no iptables, show registrations only show internal phones nothing else. I am sure they are not registered. Just looks like an incoming call trying to dial out.</span><br><span>Mario G </span><br><span></span><br><span>On May 20, 2014, at 11:12 AM, Sean Devoy <<a href="mailto:sdevoy@bizfocused.com">sdevoy@bizfocused.com</a>> wrote:</span><br><span></span><br><blockquote type="cite"><span>Mario,</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>Assuming you are not on windows, You need to run this line</span><br></blockquote><blockquote type="cite"><span>iptables -A INPUT -s 85.25.198.0/24 -j DROP</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>That will block that class C subnet from your system completely. That is the subnet their traffic is coming from. But I am not sure they have not authenticated (registered) on your server. If you are on windows let me know, I can help there too.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>Please send the output from:</span><br></blockquote><blockquote type="cite"><span>iptables -L -v</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>and from the FS console:</span><br></blockquote><blockquote type="cite"><span>show registrations</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>Sean.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>-----Original Message-----</span><br></blockquote><blockquote type="cite"><span>From: <a href="mailto:freeswitch-users-bounces@lists.freeswitch.org">freeswitch-users-bounces@lists.freeswitch.org</a> [<a href="mailto:freeswitch-users-bounces@lists.freeswitch.org">mailto:freeswitch-users-bounces@lists.freeswitch.org</a>] On Behalf Of Mario G</span><br></blockquote><blockquote type="cite"><span>Sent: Tuesday, May 20, 2014 12:57 PM</span><br></blockquote><blockquote type="cite"><span>To: FreeSWITCH Users Help</span><br></blockquote><blockquote type="cite"><span>Subject: [Freeswitch-users] Need help to stop this hack into FreeSwitch!</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>Someone has gotten into my FreeSwitch, my firewall is set to only allow SIP traffic from my ITSP, and I added a rule to block the bad address but it did not work so I am baffled. It looks like 85.25.198.253 (Germany) is making a call to me and trying to call out. I would really appreciate any ideas on what kind of general FW rule to add to prevent this, I don't know what is going on. Next I'll run PCAPs. I was thinking of a rule to block all outgoing SIP traffic except to the ITSP. Would appreciate help, especially an explanation of what they are trying to do in FS.</span><br></blockquote><blockquote type="cite"><span>Mario G</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>* Started May 19 8am, goes through all 7 sip accounts every 10 seconds</span><br></blockquote><blockquote type="cite"><span>* Each time it starts at extension 1000, goes through all 7 accounts, then waits 10 seconds, the extension is incremented by 1 and goes through all 7 accounts, this repeats until finally stopping at extension 9010, then starts at a different time of day hours later.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>* My account is itsp1 and itsp2, there are 5 more but I cut them out to reduce this.</span><br></blockquote><blockquote type="cite"><span>* 1.2.3.4 is my public wan address.</span><br></blockquote><blockquote type="cite"><span>* They look like 85.25.198.253, but blocking that in the FW does not help. Odd since I have done that before and it worked.</span><br></blockquote><blockquote type="cite"><span>* The "processing 4003 <4003>->+972592406392" is baffling.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>This is a short/reduced snippet from the log:</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [NOTICE] switch_channel.c:1054 New Channel <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> [2837a51d-b25d-4b42-9fd9-f5b772d93f70]</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_session.c:1052 Send signal <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> [BREAK]</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_state_machine.c:467 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) Running State Change CS_NEW</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_session.c:1052 Send signal <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> [BREAK]</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] sofia.c:8334 <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> receiving invite from 85.25.198.253:5074 version: 1.5.13b git 285e7dc 2014-05-19 17:38:09Z 64bit</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] sofia.c:6200 Channel <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> entering state [received][100]</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] sofia.c:6210 Remote SDP:</span><br></blockquote><blockquote type="cite"><span>v=0</span><br></blockquote><blockquote type="cite"><span>o=sipcli-Session 1785091527 1239589188 IN IP4 85.25.198.253 s=sipcli c=IN IP4 85.25.198.253</span><br></blockquote><blockquote type="cite"><span>t=0 0</span><br></blockquote><blockquote type="cite"><span>m=audio 5075 RTP/AVP 18 0 8 101</span><br></blockquote><blockquote type="cite"><span>a=rtpmap:18 G729/8000</span><br></blockquote><blockquote type="cite"><span>a=rtpmap:0 PCMU/8000</span><br></blockquote><blockquote type="cite"><span>a=rtpmap:8 PCMA/8000</span><br></blockquote><blockquote type="cite"><span>a=rtpmap:101 telephone-event/8000</span><br></blockquote><blockquote type="cite"><span>a=fmtp:101 0-15</span><br></blockquote><blockquote type="cite"><span>a=ptime:20</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_media.c:3437 Audio Codec Compare [PCMA:8:8000:20:64000] ++++ is saved as a match</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_media.c:3383 Audio Codec Compare [PCMA:8:8000:20:64000]/[GSM:3:8000:20:13200]</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_media.c:3309 Set telephone-event payload to 101</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_media.c:2343 Set Codec <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> PCMU/8000 20 ms 160 samples 64000 bits</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_codec.c:111 <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> Original read codec set to PCMU:0</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_media.c:3626 Set 2833 dtmf send/recv payload to 101</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] sofia.c:6485 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) State Change CS_NEW -> CS_INIT</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_session.c:1387 Send signal <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> [BREAK]</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_state_machine.c:486 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) State NEW</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_state_machine.c:467 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) Running State Change CS_INIT</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_state_machine.c:507 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) State INIT</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] mod_sofia.c:87 <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> SOFIA INIT</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_state_machine.c:40 <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> Standard INIT</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_state_machine.c:48 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) State Change CS_INIT -> CS_ROUTING</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_session.c:1387 Send signal <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> [BREAK]</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_state_machine.c:507 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) State INIT going to sleep</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_state_machine.c:467 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) Running State Change CS_ROUTING</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_channel.c:2178 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) Callstate Change DOWN -> RINGING</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_state_machine.c:523 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) State ROUTING</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] mod_sofia.c:123 <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> SOFIA ROUTING</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_state_machine.c:164 <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> Standard ROUTING</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [INFO] mod_dialplan_xml.c:558 Processing 4003 <4003>->+972592406392 in context public</span><br></blockquote><blockquote type="cite"><span>Dialplan: <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> parsing [public->unloop] continue=false</span><br></blockquote><blockquote type="cite"><span>Dialplan: <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> Regex (PASS) [unloop] ${unroll_loops}(true) =~ /^true$/ break=on-false</span><br></blockquote><blockquote type="cite"><span>Dialplan: <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> Regex (FAIL) [unloop] ${sip_looped_call}() =~ /^true$/ break=on-false</span><br></blockquote><blockquote type="cite"><span>Dialplan: <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> parsing [public->outside_call] continue=true</span><br></blockquote><blockquote type="cite"><span>Dialplan: <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> Absolute Condition [outside_call]</span><br></blockquote><blockquote type="cite"><span>Dialplan: <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> Action set(outside_call=true)</span><br></blockquote><blockquote type="cite"><span>Dialplan: <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> Action export(RFC2822_DATE=${strftime(%a, %d %b %Y %T %z)})</span><br></blockquote><blockquote type="cite"><span>Dialplan: <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> parsing [public->call_debug] continue=true</span><br></blockquote><blockquote type="cite"><span>Dialplan: <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> Regex (FAIL) [call_debug] ${call_debug}(false) =~ /^true$/ break=never</span><br></blockquote><blockquote type="cite"><span>Dialplan: <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> parsing [public->public_extensions] continue=false</span><br></blockquote><blockquote type="cite"><span>Dialplan: <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> Regex (FAIL) [public_extensions] destination_number(+972592406392) =~ /^([1-2][0-1][0-3])$/ break=on-false .......... deleted lines</span><br></blockquote><blockquote type="cite"><span>Dialplan: <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> Regex (FAIL) [itsp1_did] destination_number(+972592406392) =~ /^(1212121212121)$/ break=on-false</span><br></blockquote><blockquote type="cite"><span>Dialplan: <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> parsing [public->itsp2_did] continue=false</span><br></blockquote><blockquote type="cite"><span>Dialplan: <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> Regex (FAIL) [itsp2_did] destination_number(+972592406392) =~ /^(1313131313131)$/ break=on-false</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_state_machine.c:214 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) State Change CS_ROUTING -> CS_EXECUTE</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_session.c:1387 Send signal <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> [BREAK]</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_state_machine.c:523 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) State ROUTING going to sleep</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_state_machine.c:467 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) Running State Change CS_EXECUTE</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_state_machine.c:530 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) State EXECUTE</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] mod_sofia.c:178 <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> SOFIA EXECUTE</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_state_machine.c:256 <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> Standard EXECUTE EXECUTE <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> set(outside_call=true)</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] mod_dptools.c:1435 <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> SET [outside_call]=[true] EXECUTE <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> export(RFC2822_DATE=Mon, 19 May 2014 17:02:23 -0700)</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_channel.c:1246 EXPORT (export_vars) [RFC2822_DATE]=[Mon, 19 May 2014 17:02:23 -0700]</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [NOTICE] switch_core_state_machine.c:313 <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> has executed the last dialplan instruction, hanging up.</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [NOTICE] switch_core_state_machine.c:315 Hangup <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> [CS_EXECUTE] [NORMAL_CLEARING]</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_channel.c:3216 Send signal <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> [KILL]</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_session.c:1387 Send signal <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> [BREAK]</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_state_machine.c:530 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) State EXECUTE going to sleep</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_state_machine.c:467 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) Running State Change CS_HANGUP</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.827470 [DEBUG] switch_core_state_machine.c:730 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) Callstate Change RINGING -> HANGUP</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.846717 [DEBUG] switch_core_state_machine.c:732 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) State HANGUP</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.846717 [DEBUG] mod_sofia.c:413 Channel <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> hanging up, cause: NORMAL_CLEARING</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.846717 [DEBUG] mod_sofia.c:547 Responding to INVITE with: 480</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.846717 [DEBUG] switch_core_state_machine.c:58 <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> Standard HANGUP, cause: NORMAL_CLEARING</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.846717 [DEBUG] switch_core_state_machine.c:732 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) State HANGUP going to sleep</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.846717 [DEBUG] switch_core_state_machine.c:499 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) State Change CS_HANGUP -> CS_REPORTING</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.846717 [DEBUG] switch_core_session.c:1387 Send signal <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> [BREAK]</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.846717 [DEBUG] switch_core_state_machine.c:467 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) Running State Change CS_REPORTING</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.846717 [DEBUG] switch_core_state_machine.c:818 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) State REPORTING</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.846717 [DEBUG] switch_core_state_machine.c:102 <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> Standard REPORTING, cause: NORMAL_CLEARING</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.846717 [DEBUG] switch_core_state_machine.c:818 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) State REPORTING going to sleep</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.846717 [DEBUG] switch_core_state_machine.c:493 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) State Change CS_REPORTING -> CS_DESTROY</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.846717 [DEBUG] switch_core_session.c:1387 Send signal <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> [BREAK]</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.846717 [DEBUG] switch_core_session.c:1604 Session 234 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) Locked, Waiting on external entities</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.846717 [NOTICE] switch_core_session.c:1622 Session 234 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) Ended</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.846717 [NOTICE] switch_core_session.c:1626 Close Channel <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> [CS_DESTROY]</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.846717 [DEBUG] switch_core_state_machine.c:618 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) Callstate Change HANGUP -> DOWN</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.846717 [DEBUG] switch_core_state_machine.c:621 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) Running State Change CS_DESTROY</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.846717 [DEBUG] switch_core_state_machine.c:631 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) State DESTROY</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.846717 [DEBUG] mod_sofia.c:323 <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> SOFIA DESTROY</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.846717 [DEBUG] switch_core_state_machine.c:109 <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> Standard DESTROY</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:23.846717 [DEBUG] switch_core_state_machine.c:631 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) State DESTROY going to sleep</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:25.107472 [NOTICE] switch_channel.c:1054 New Channel <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> [364bd3e4-2c4b-4412-b259-10cfb0b6c391]</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:25.107472 [DEBUG] switch_core_session.c:1052 Send signal <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> [BREAK]</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:25.107472 [DEBUG] switch_core_state_machine.c:467 (<a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a>) Running State Change CS_NEW</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:25.107472 [DEBUG] switch_core_session.c:1052 Send signal <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> [BREAK]</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:25.107472 [DEBUG] sofia.c:8334 <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> receiving invite from 85.25.198.253:5084 version: 1.5.13b git 285e7dc 2014-05-19 17:38:09Z 64bit</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:25.107472 [DEBUG] sofia.c:6200 Channel <a href="mailto:sofia/itsp1/4003@1.2.3.4">sofia/itsp1/4003@1.2.3.4</a> entering state [received][100]</span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:25.107472 [DEBUG] sofia.c:6210 Remote SDP:</span><br></blockquote><blockquote type="cite"><span>v=0</span><br></blockquote><blockquote type="cite"><span>o=sipcli-Session 17343503 2124966596 IN IP4 85.25.198.253 s=sipcli c=IN IP4 85.25.198.253</span><br></blockquote><blockquote type="cite"><span>t=0 0</span><br></blockquote><blockquote type="cite"><span>m=audio 5085 RTP/AVP 18 0 8 101</span><br></blockquote><blockquote type="cite"><span>a=rtpmap:18 G729/8000</span><br></blockquote><blockquote type="cite"><span>a=rtpmap:0 PCMU/8000</span><br></blockquote><blockquote type="cite"><span>a=rtpmap:8 PCMA/8000</span><br></blockquote><blockquote type="cite"><span>a=rtpmap:101 telephone-event/8000</span><br></blockquote><blockquote type="cite"><span>a=fmtp:101 0-15</span><br></blockquote><blockquote type="cite"><span>a=ptime:20</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>2014-05-19 17:02:25.107472 [DEBUG] switch_core_media.c:3383 Audio Codec Compare [G729:18:8000:20:8000]/[G722:9:8000:20:64000]</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>_________________________________________________________________________</span><br></blockquote><blockquote type="cite"><span>Professional FreeSWITCH Consulting Services:</span><br></blockquote><blockquote type="cite"><span><a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a></span><br></blockquote><blockquote type="cite"><span><a href="http://www.freeswitchsolutions.com">http://www.freeswitchsolutions.com</a></span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>FreeSWITCH-powered IP PBX: The CudaTel Communication Server <a href="http://www.cudatel.com">http://www.cudatel.com</a></span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>Official FreeSWITCH Sites</span><br></blockquote><blockquote type="cite"><span><a href="http://www.freeswitch.org">http://www.freeswitch.org</a></span><br></blockquote><blockquote type="cite"><span><a href="http://wiki.freeswitch.org">http://wiki.freeswitch.org</a></span><br></blockquote><blockquote type="cite"><span><a href="http://www.cluecon.com">http://www.cluecon.com</a></span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>FreeSWITCH-users mailing list</span><br></blockquote><blockquote type="cite"><span><a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a></span><br></blockquote><blockquote type="cite"><span><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a></span><br></blockquote><blockquote type="cite"><span>UNSUBSCRIBE:http://<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users">lists.freeswitch.org/mailman/options/freeswitch-users</a></span><br></blockquote><blockquote type="cite"><span><a href="http://www.freeswitch.org">http://www.freeswitch.org</a></span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>_________________________________________________________________________</span><br></blockquote><blockquote type="cite"><span>Professional FreeSWITCH Consulting Services:</span><br></blockquote><blockquote type="cite"><span><a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a></span><br></blockquote><blockquote type="cite"><span><a href="http://www.freeswitchsolutions.com">http://www.freeswitchsolutions.com</a></span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>FreeSWITCH-powered IP PBX: The CudaTel Communication Server</span><br></blockquote><blockquote type="cite"><span><a href="http://www.cudatel.com">http://www.cudatel.com</a></span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>Official FreeSWITCH Sites</span><br></blockquote><blockquote type="cite"><span><a href="http://www.freeswitch.org">http://www.freeswitch.org</a></span><br></blockquote><blockquote type="cite"><span><a href="http://wiki.freeswitch.org">http://wiki.freeswitch.org</a></span><br></blockquote><blockquote type="cite"><span><a href="http://www.cluecon.com">http://www.cluecon.com</a></span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>FreeSWITCH-users mailing list</span><br></blockquote><blockquote type="cite"><span><a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a></span><br></blockquote><blockquote type="cite"><span><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a></span><br></blockquote><blockquote type="cite"><span>UNSUBSCRIBE:http://<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users">lists.freeswitch.org/mailman/options/freeswitch-users</a></span><br></blockquote><blockquote type="cite"><span><a href="http://www.freeswitch.org">http://www.freeswitch.org</a></span><br></blockquote><span></span><br><span></span><br><span>_________________________________________________________________________</span><br><span>Professional FreeSWITCH Consulting Services:</span><br><span><a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a></span><br><span><a href="http://www.freeswitchsolutions.com">http://www.freeswitchsolutions.com</a></span><br><span></span><br><span>FreeSWITCH-powered IP PBX: The CudaTel Communication Server</span><br><span><a href="http://www.cudatel.com">http://www.cudatel.com</a></span><br><span></span><br><span>Official FreeSWITCH Sites</span><br><span><a href="http://www.freeswitch.org">http://www.freeswitch.org</a></span><br><span><a href="http://wiki.freeswitch.org">http://wiki.freeswitch.org</a></span><br><span><a href="http://www.cluecon.com">http://www.cluecon.com</a></span><br><span></span><br><span>FreeSWITCH-users mailing list</span><br><span><a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a></span><br><span><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a></span><br><span>UNSUBSCRIBE:http://<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users">lists.freeswitch.org/mailman/options/freeswitch-users</a></span><br><span><a href="http://www.freeswitch.org">http://www.freeswitch.org</a></span><br><span></span><br></div></blockquote></body></html>