log format change breaking fail2ban? percentage added to logs? how to revert?
Hello everybody, The log format seem to have changed, how can I get it back to what it used to without the percentage thing? A search on Google failed me to provide an answer... # fs_cli -x version FreeSWITCH Version 1.10.7-release-19-883d2cb662~64bit (-release-19-883d2cb662 64bit) # grep pref_line /etc/fail2ban/filter.d/freeswitch.conf _pref_line = ^%(__prefix_line)s(?:\d+-\d+-\d+ \d+:\d+:\d+\.\d+)? failregex = %(_pref_line)s \[WARNING\] sofia_reg\.c:\d+ SIP auth (failure|challenge) \((REGISTER|INVITE)\) on sofia profile \'[^']+\' for \[[^\]]*\] from ip <HOST>$ %(_pref_line)s \[WARNING\] sofia_reg\.c:\d+ Can't find user \[[^@]+@[^\]]+\] from <HOST>$ 2021-10-28 12:28:55.736515 99.20% [WARNING] sofia_reg.c:1806 SIP auth failure (REGISTER) on sofia profile 'internal' for [30640@82.94.245.xxx] from ip 217.138.220.158 2021-05-20 16:44:54.159814 [WARNING] sofia_reg.c:1740 SIP auth failure (REGISTER) on sofia profile 'internal' for [123456@82.94.245.xxx] from ip 193.107.216.182 # fgrep percentage /etc/freeswitch/ -R What is the use case of this new percentage in the log files? Kind regards, Jelle de Jong
It adds idle cpu to log lines. check commits 03d5730ffcdd0dc69247693c58239757623b9319 and 241d397e39fad336c13b0f43fecfa697182a4a3b if you wish to revert. On Thu, Oct 28, 2021 at 1:42 PM Jelle de Jong <jelledejong@powercraft.nl> wrote:
Hello everybody,
The log format seem to have changed, how can I get it back to what it used to without the percentage thing? A search on Google failed me to provide an answer...
# fs_cli -x version FreeSWITCH Version 1.10.7-release-19-883d2cb662~64bit (-release-19-883d2cb662 64bit)
# grep pref_line /etc/fail2ban/filter.d/freeswitch.conf _pref_line = ^%(__prefix_line)s(?:\d+-\d+-\d+ \d+:\d+:\d+\.\d+)? failregex = %(_pref_line)s \[WARNING\] sofia_reg\.c:\d+ SIP auth (failure|challenge) \((REGISTER|INVITE)\) on sofia profile \'[^']+\' for \[[^\]]*\] from ip <HOST>$ %(_pref_line)s \[WARNING\] sofia_reg\.c:\d+ Can't find user \[[^@]+@[^\]]+\] from <HOST>$
2021-10-28 12:28:55.736515 99.20% [WARNING] sofia_reg.c:1806 SIP auth failure (REGISTER) on sofia profile 'internal' for [30640@82.94.245.xxx] from ip 217.138.220.158
2021-05-20 16:44:54.159814 [WARNING] sofia_reg.c:1740 SIP auth failure (REGISTER) on sofia profile 'internal' for [123456@82.94.245.xxx] from ip 193.107.216.182
# fgrep percentage /etc/freeswitch/ -R
What is the use case of this new percentage in the log files?
Kind regards,
Jelle de Jong
_________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
Thank you Dragos, looking at the commits there is no configure option to change the new behaviour. I tried creating a new regex line based on the added percentage _pref_line = ^%(__prefix_line)s(?:\d+-\d+-\d+ \d+:\d+:\d+\.\d+ \d+\.\d+%%)? I can not get it to work successfully any-more, if someone has a updated fail2ban filter for the new log format please share. Kind regards, Jelle de Jong On 10/29/21 12:20 PM, Dragos Oancea wrote:
It adds idle cpu to log lines. check commits 03d5730ffcdd0dc69247693c58239757623b9319 and 241d397e39fad336c13b0f43fecfa697182a4a3b if you wish to revert.
On Thu, Oct 28, 2021 at 1:42 PM Jelle de Jong <jelledejong@powercraft.nl <mailto:jelledejong@powercraft.nl>> wrote:
Hello everybody,
The log format seem to have changed, how can I get it back to what it used to without the percentage thing? A search on Google failed me to provide an answer...
# fs_cli -x version FreeSWITCH Version 1.10.7-release-19-883d2cb662~64bit (-release-19-883d2cb662 64bit)
# grep pref_line /etc/fail2ban/filter.d/freeswitch.conf _pref_line = ^%(__prefix_line)s(?:\d+-\d+-\d+ \d+:\d+:\d+\.\d+)? failregex = %(_pref_line)s \[WARNING\] sofia_reg\.c:\d+ SIP auth (failure|challenge) \((REGISTER|INVITE)\) on sofia profile \'[^']+\' for \[[^\]]*\] from ip <HOST>$ %(_pref_line)s \[WARNING\] sofia_reg\.c:\d+ Can't find user \[[^@]+@[^\]]+\] from <HOST>$
2021-10-28 12:28:55.736515 99.20% [WARNING] sofia_reg.c:1806 SIP auth failure (REGISTER) on sofia profile 'internal' for [30640@82.94.245.xxx] from ip 217.138.220.158
2021-05-20 16:44:54.159814 [WARNING] sofia_reg.c:1740 SIP auth failure (REGISTER) on sofia profile 'internal' for [123456@82.94.245.xxx] from ip 193.107.216.182
# fgrep percentage /etc/freeswitch/ -R
What is the use case of this new percentage in the log files?
Kind regards,
Jelle de Jong
_________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com <https://signalwire.com> Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community <https://signalwire.community>
Professional FreeSWITCH Services sales@freeswitch.com <mailto:sales@freeswitch.com> https://freeswitch.com <https://freeswitch.com>
Official FreeSWITCH Sites https://freeswitch.com/oss <https://freeswitch.com/oss> https://freeswitch.org/confluence <https://freeswitch.org/confluence> https://cluecon.com <https://cluecon.com>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> https://freeswitch.com <https://freeswitch.com>
_________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
_pref_line = ^%(__prefix_line)s(?:\d+-\d+-\d+ \d+:\d+:\d+\.\d+)?( \d+\.\d\d%%)? works for me. Martin Paterson, Pattersong Music Reduced orchestrations of G&S On Fri, 29 Oct 2021 at 21:21, Jelle de Jong <jelledejong@powercraft.nl> wrote:
Thank you Dragos, looking at the commits there is no configure option to change the new behaviour.
I tried creating a new regex line based on the added percentage
_pref_line = ^%(__prefix_line)s(?:\d+-\d+-\d+ \d+:\d+:\d+\.\d+ \d+\.\d+%%)?
I can not get it to work successfully any-more, if someone has a updated fail2ban filter for the new log format please share.
Kind regards,
Jelle de Jong
On 10/29/21 12:20 PM, Dragos Oancea wrote:
It adds idle cpu to log lines. check commits 03d5730ffcdd0dc69247693c58239757623b9319 and 241d397e39fad336c13b0f43fecfa697182a4a3b if you wish to revert.
On Thu, Oct 28, 2021 at 1:42 PM Jelle de Jong <jelledejong@powercraft.nl <mailto:jelledejong@powercraft.nl>> wrote:
Hello everybody,
The log format seem to have changed, how can I get it back to what it used to without the percentage thing? A search on Google failed me to provide an answer...
# fs_cli -x version FreeSWITCH Version 1.10.7-release-19-883d2cb662~64bit (-release-19-883d2cb662 64bit)
# grep pref_line /etc/fail2ban/filter.d/freeswitch.conf _pref_line = ^%(__prefix_line)s(?:\d+-\d+-\d+ \d+:\d+:\d+\.\d+)? failregex = %(_pref_line)s \[WARNING\] sofia_reg\.c:\d+ SIP auth (failure|challenge) \((REGISTER|INVITE)\) on sofia profile \'[^']+\' for \[[^\]]*\] from ip <HOST>$ %(_pref_line)s \[WARNING\] sofia_reg\.c:\d+ Can't find user \[[^@]+@[^\]]+\] from <HOST>$
2021-10-28 12:28:55.736515 99.20% [WARNING] sofia_reg.c:1806 SIP auth failure (REGISTER) on sofia profile 'internal' for [30640@82.94.245.xxx] from ip 217.138.220.158
2021-05-20 16:44:54.159814 [WARNING] sofia_reg.c:1740 SIP auth failure (REGISTER) on sofia profile 'internal' for [123456@82.94.245.xxx] from ip 193.107.216.182
# fgrep percentage /etc/freeswitch/ -R
What is the use case of this new percentage in the log files?
Kind regards,
Jelle de Jong
_________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com <https://signalwire.com> Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community <https://signalwire.community>
Professional FreeSWITCH Services sales@freeswitch.com <mailto:sales@freeswitch.com> https://freeswitch.com <https://freeswitch.com>
Official FreeSWITCH Sites https://freeswitch.com/oss <https://freeswitch.com/oss> https://freeswitch.org/confluence <https://freeswitch.org/confluence> https://cluecon.com <https://cluecon.com>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> https://freeswitch.com <https://freeswitch.com>
_________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
_________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
Thank You Martin! _pref_line = ^%(__prefix_line)s(?:\d+-\d+-\d+ \d+:\d+:\d+\.\d+)?( \d+\.\d\d%%)? # fail2ban-client status freeswitch Status for the jail: freeswitch |- Filter | |- Currently failed: 5 | |- Total failed: 3789 | `- File list: /var/log/freeswitch/freeswitch.log `- Actions |- Currently banned: 1 |- Total banned: 114 `- Banned IP list: 217.138.199.182 Kind regards, Jelle de Jong On 11/1/21 11:46 AM, Martin Paterson wrote:
_pref_line = ^%(__prefix_line)s(?:\d+-\d+-\d+ \d+:\d+:\d+\.\d+)?( \d+\.\d\d%%)? works for me.
Martin Paterson, Pattersong Music Reduced orchestrations of G&S
On Fri, 29 Oct 2021 at 21:21, Jelle de Jong <jelledejong@powercraft.nl> wrote:
Thank you Dragos, looking at the commits there is no configure option to change the new behaviour.
I tried creating a new regex line based on the added percentage
_pref_line = ^%(__prefix_line)s(?:\d+-\d+-\d+ \d+:\d+:\d+\.\d+ \d+\.\d+%%)?
I can not get it to work successfully any-more, if someone has a updated fail2ban filter for the new log format please share.
Kind regards,
Jelle de Jong
On 10/29/21 12:20 PM, Dragos Oancea wrote:
It adds idle cpu to log lines. check commits 03d5730ffcdd0dc69247693c58239757623b9319 and 241d397e39fad336c13b0f43fecfa697182a4a3b if you wish to revert.
On Thu, Oct 28, 2021 at 1:42 PM Jelle de Jong <jelledejong@powercraft.nl <mailto:jelledejong@powercraft.nl>> wrote:
Hello everybody,
The log format seem to have changed, how can I get it back to what it used to without the percentage thing? A search on Google failed me to provide an answer...
# fs_cli -x version FreeSWITCH Version 1.10.7-release-19-883d2cb662~64bit (-release-19-883d2cb662 64bit)
# grep pref_line /etc/fail2ban/filter.d/freeswitch.conf _pref_line = ^%(__prefix_line)s(?:\d+-\d+-\d+ \d+:\d+:\d+\.\d+)? failregex = %(_pref_line)s \[WARNING\] sofia_reg\.c:\d+ SIP auth (failure|challenge) \((REGISTER|INVITE)\) on sofia profile \'[^']+\' for \[[^\]]*\] from ip <HOST>$ %(_pref_line)s \[WARNING\] sofia_reg\.c:\d+ Can't find user \[[^@]+@[^\]]+\] from <HOST>$
2021-10-28 12:28:55.736515 99.20% [WARNING] sofia_reg.c:1806 SIP auth failure (REGISTER) on sofia profile 'internal' for [30640@82.94.245.xxx] from ip 217.138.220.158
2021-05-20 16:44:54.159814 [WARNING] sofia_reg.c:1740 SIP auth failure (REGISTER) on sofia profile 'internal' for [123456@82.94.245.xxx] from ip 193.107.216.182
# fgrep percentage /etc/freeswitch/ -R
What is the use case of this new percentage in the log files?
Kind regards,
Jelle de Jong
_________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com <https://signalwire.com> Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community <https://signalwire.community>
Professional FreeSWITCH Services sales@freeswitch.com <mailto:sales@freeswitch.com> https://freeswitch.com <https://freeswitch.com>
Official FreeSWITCH Sites https://freeswitch.com/oss <https://freeswitch.com/oss> https://freeswitch.org/confluence <https://freeswitch.org/confluence> https://cluecon.com <https://cluecon.com>
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users <http://lists.freeswitch.org/mailman/listinfo/freeswitch-users> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users <http://lists.freeswitch.org/mailman/options/freeswitch-users> https://freeswitch.com <https://freeswitch.com>
_________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
_________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
_________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
Hello everybody, I am configuring a gateway after a forced migration to new voip service provider, and I got the registration working and I can make incoming and outgoing calls, but the gateway always stops working after a while. I do not see any incoming invites any more when trying to reach the number. Does someone know how to debug or solve this? The only hint I can find in the logs is this: 2022-05-06 16:13:29.518588 91.40% [DEBUG] sofia_reg.c:2745 Missing Authenticate Header! emily:~# cat /etc/freeswitch/sip_profiles/external/provider.xml <include> <gateway name="provider"> <param name="auth-username" value="aaba37818192@ims.imscore.net" /> <param name="username" value="+31105221234" /> <param name="extension" value="0105221234" /> <param name="password" value="secret" /> <param name="realm" value="ims.imscore.net" /> <param name="register-proxy" value="voip1-ext.kpn.net" /> <!-- <param name="realm" value="ims.imscore.net" /> <param name="proxy" value="ims.imscore.net" /> <param name="outgoing-proxy" value="voip1-ext.kpn.net" /> <param name="register-proxy" value="voip1-ext.kpn.net" /> <param name="expire-seconds" value="1800"/> <param name="retry-seconds" value="30"/> <param name="ping" value="20"/> --> <param name="expire-seconds" value="1800"/> <param name="register-transport" value="udp" /> <param name="register" value="true" /> <param name="context" value="public"/> <param name="log-auth-failures" value="true"/> <param name="debug" value="1"/> </gateway> </include> emily:~# fs_cli -x "sofia status gateway provider" ================================================================================================= Name provider Profile external Scheme Digest Realm ims.imscore.net Username +31105221234 Password yes From <sip:+31105221234@ims.imscore.net> Contact <sip:gw+provider@77.169.195.30:5080;transport=udp;gw=provider> Exten 0105221234 To sip:+31105221234@ims.imscore.net Proxy sip:ims.imscore.net Context public Expires 1800 Freq 1800 Ping 0 PingFreq 0 PingTime 0.00 PingState 0/0/0 State REGED Status UP Uptime 189s CallsIN 1 CallsOUT 0 FailedCallsIN 0 FailedCallsOUT 0 =================================================================================================
Try adding <param name="extension-in-contact" value="true"/> On Fri, May 6, 2022 at 11:40 AM Jelle de Jong <jelledejong@powercraft.nl> wrote:
Hello everybody,
I am configuring a gateway after a forced migration to new voip service provider, and I got the registration working and I can make incoming and outgoing calls, but the gateway always stops working after a while.
I do not see any incoming invites any more when trying to reach the number.
Does someone know how to debug or solve this?
The only hint I can find in the logs is this:
2022-05-06 16:13:29.518588 91.40% [DEBUG] sofia_reg.c:2745 Missing Authenticate Header!
emily:~# cat /etc/freeswitch/sip_profiles/external/provider.xml <include> <gateway name="provider"> <param name="auth-username" value="aaba37818192@ims.imscore.net" /> <param name="username" value="+31105221234" /> <param name="extension" value="0105221234" /> <param name="password" value="secret" /> <param name="realm" value="ims.imscore.net" /> <param name="register-proxy" value="voip1-ext.kpn.net" /> <!-- <param name="realm" value="ims.imscore.net" /> <param name="proxy" value="ims.imscore.net" /> <param name="outgoing-proxy" value="voip1-ext.kpn.net" /> <param name="register-proxy" value="voip1-ext.kpn.net" /> <param name="expire-seconds" value="1800"/> <param name="retry-seconds" value="30"/> <param name="ping" value="20"/> --> <param name="expire-seconds" value="1800"/> <param name="register-transport" value="udp" /> <param name="register" value="true" /> <param name="context" value="public"/> <param name="log-auth-failures" value="true"/> <param name="debug" value="1"/> </gateway> </include>
emily:~# fs_cli -x "sofia status gateway provider"
================================================================================================= Name provider Profile external Scheme Digest Realm ims.imscore.net Username +31105221234 Password yes From <sip:+31105221234@ims.imscore.net> Contact <sip:gw+provider@77.169.195. 30:5080;transport=udp;gw=provider> Exten 0105221234 To sip:+31105221234@ims.imscore.net Proxy sip:ims.imscore.net Context public Expires 1800 Freq 1800 Ping 0 PingFreq 0 PingTime 0.00 PingState 0/0/0 State REGED Status UP Uptime 189s CallsIN 1 CallsOUT 0 FailedCallsIN 0 FailedCallsOUT 0
=================================================================================================
_________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
Yikes! That change silently breaks the fail2ban log line match, meaning no IP addresses will get banned any more. I've raised an issue on the fail2ban project (which holds the config files that match these - and many other products' - log lines) and added a note to the release notes in Confluence. Watch out that debian buster packages only an earlier version of fail2ban, so even when fail2ban release an updated version, you may have to fetch it manually. Martin Paterson, Pattersong Music Reduced orchestrations of G&S On Fri, 29 Oct 2021 at 11:20, Dragos Oancea <dragos@freeswitch.org> wrote:
It adds idle cpu to log lines. check commits 03d5730ffcdd0dc69247693c58239757623b9319 and 241d397e39fad336c13b0f43fecfa697182a4a3b if you wish to revert.
On Thu, Oct 28, 2021 at 1:42 PM Jelle de Jong <jelledejong@powercraft.nl> wrote:
Hello everybody,
The log format seem to have changed, how can I get it back to what it used to without the percentage thing? A search on Google failed me to provide an answer...
# fs_cli -x version FreeSWITCH Version 1.10.7-release-19-883d2cb662~64bit (-release-19-883d2cb662 64bit)
# grep pref_line /etc/fail2ban/filter.d/freeswitch.conf _pref_line = ^%(__prefix_line)s(?:\d+-\d+-\d+ \d+:\d+:\d+\.\d+)? failregex = %(_pref_line)s \[WARNING\] sofia_reg\.c:\d+ SIP auth (failure|challenge) \((REGISTER|INVITE)\) on sofia profile \'[^']+\' for \[[^\]]*\] from ip <HOST>$ %(_pref_line)s \[WARNING\] sofia_reg\.c:\d+ Can't find user \[[^@]+@[^\]]+\] from <HOST>$
2021-10-28 12:28:55.736515 99.20% [WARNING] sofia_reg.c:1806 SIP auth failure (REGISTER) on sofia profile 'internal' for [30640@82.94.245.xxx] from ip 217.138.220.158
2021-05-20 16:44:54.159814 [WARNING] sofia_reg.c:1740 SIP auth failure (REGISTER) on sofia profile 'internal' for [123456@82.94.245.xxx] from ip 193.107.216.182
# fgrep percentage /etc/freeswitch/ -R
What is the use case of this new percentage in the log files?
Kind regards,
Jelle de Jong
_________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
_________________________________________________________________________
The FreeSWITCH project is sponsored by SignalWire https://signalwire.com Enhance your FreeSWITCH install with disruptive priced SMS and PSTN services. Build your next product on our scalable cloud platform.
Join our online community to chat in real time https://signalwire.community
Professional FreeSWITCH Services sales@freeswitch.com https://freeswitch.com
Official FreeSWITCH Sites https://freeswitch.com/oss https://freeswitch.org/confluence https://cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users https://freeswitch.com
On Friday 29 October 2021 at 12:20:36, Dragos Oancea wrote:
On Thu, Oct 28, 2021 at 1:42 PM Jelle de Jong wrote:
Hello everybody,
The log format seem to have changed, how can I get it back to what it used to without the percentage thing?
What is the use case of this new percentage in the log files?
It adds idle cpu to log lines. check commits 03d5730ffcdd0dc69247693c58239757623b9319 and 241d397e39fad336c13b0f43fecfa697182a4a3b if you wish to revert.
That seems a very strange way of doing it to me - to report the *idle* percentage, instead of how *busy* the system is. I believe people generally think of disks as "how full?", memory as "how much used?", network bandwidth as "how much data?" and CPUs as "how busy?" Can anyone explain why it was chosen to report "percentage idle"? Antony. [PS: This message being sent at 16:17 UTC 2021-11-01; this is the fifth email I've sent to the list since I saw my last one get posted on 2021-10-28; I'm still trying to work out why this mailman is so slow / unreliable.] -- "In fact I wanted to be John Cleese and it took me some time to realise that the job was already taken." - Douglas Adams Please reply to the list; please *don't* CC me.
participants (5)
-
Antony Stone
-
Dragos Oancea
-
Jelle de Jong
-
Len Graham
-
Martin Paterson