Re: [Freeswitch-users] repeated registration messages in logs
Hi, Thanks. If there is no activity for a while then calls drops out and I need to re-start the FS. I also see these messages frequently after each call and after registration and while FS is idle. Am not sure why is this happening. Regards, Archana From: Mick Stevens [mailto:mick.stevens@smartipx.com] Sent: 27 December 2012 12:49 To: Archana Venugopan Subject: Re: [Freeswitch-users] repeated registration messages in logs Hi Archana, This is just your SIP client (softphone etc) sending keep alive/SIP re-register messages. You can normally adjust this in the settings of your client. I find setting "reregister every 300 seconds" normally works ok for me. Rgds, Mick On 27 December 2012 12:40, Archana Venugopan <a.venugopan@mundio.com<mailto:a.venugopan@mundio.com>> wrote: Hi, After registering the phones successfully I am getting the below message continuously every few seconds in my logs and this is filling up the logs and freeswitch goes down sometimes. Can someone please tell me why I keep getting this message every few seconds? I have another server and there I don’t see this issue. 2012-12-27 12:37:44.714558 [WARNING] sofia_reg.c:1484 SIP auth challenge (REGISTER) on sofia profile 'internal' for [Abarajit@vectonecloud.com<mailto:Abarajit@vectonecloud.com>] from ip 192.168.2.205 2012-12-27 12:41:58.744557 [WARNING] sofia_reg.c:1484 SIP auth challenge (REGISTER) on sofia profile 'internal' for [sana@vectonecloud.com<mailto:sana@vectonecloud.com>] from ip 192.168.2.48 Regards, Archana _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org<mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org -- Regards Mick Stevens Communications Technologist Smart IPX Ltd Tel/Fax. +44(0)20 7001 6869 Email. mick.stevens@smartipx.com<mailto:mick.stevens@smartipx.com> Skype. mick.smartipx.com<http://mick.gno247.com/> www.smartipx.com<http://www.smartipx.com/>
Hi, Thanks. If there is no activity for a while then calls drops out and I need to re-start the FS. I also see these messages frequently after each call and after registration and while FS is idle. Am not sure why is this happening. I keep getting those messages every 5 mins. Regards, Archana From: Mick Stevens [mailto:mick.stevens@smartipx.com] Sent: 27 December 2012 12:49 To: Archana Venugopan Subject: Re: [Freeswitch-users] repeated registration messages in logs Hi Archana, This is just your SIP client (softphone etc) sending keep alive/SIP re-register messages. You can normally adjust this in the settings of your client. I find setting "reregister every 300 seconds" normally works ok for me. Rgds, Mick On 27 December 2012 12:40, Archana Venugopan <a.venugopan@mundio.com<mailto:a.venugopan@mundio.com>> wrote: Hi, After registering the phones successfully I am getting the below message continuously every few seconds in my logs and this is filling up the logs and freeswitch goes down sometimes. Can someone please tell me why I keep getting this message every few seconds? I have another server and there I don’t see this issue. 2012-12-27 12:37:44.714558 [WARNING] sofia_reg.c:1484 SIP auth challenge (REGISTER) on sofia profile 'internal' for [Abarajit@vectonecloud.com<mailto:Abarajit@vectonecloud.com>] from ip 192.168.2.205 2012-12-27 12:41:58.744557 [WARNING] sofia_reg.c:1484 SIP auth challenge (REGISTER) on sofia profile 'internal' for [sana@vectonecloud.com<mailto:sana@vectonecloud.com>] from ip 192.168.2.48 Regards, Archana _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org<mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org -- Regards Mick Stevens Communications Technologist Smart IPX Ltd Tel/Fax. +44(0)20 7001 6869 Email. mick.stevens@smartipx.com<mailto:mick.stevens@smartipx.com> Skype. mick.smartipx.com<http://mick.gno247.com/> www.smartipx.com<http://www.smartipx.com/>
Registrations work by the client sending a REGISTER to the server, which returns 401 to challenge and client resends REGISTER with the authentication details. The register has an expiry time. To remain registered the client must reREGISTER within this time, and each REGISTER has its own 401 authentication (to prevent replay attacks). What you're seeing is a log message each time the registration is renewed. That's why you still see it even though FS is apparently idle. The log message really is only informative. It logs at WARNING level so that you can use fail2ban while only logging serious messages so you don't get massive log files. FS will log both the initial REGISTER/401 then at the 2nd REGISTER whether it succeeds or fails. Both are required to detect bots looking to break into an insecure or DDOS a SIP server, since the client might never send the 2nd REGISTER. If you are not using fail2ban and want quieter logs, set the log-auth-failures param to false on the relevant Sofia profile. Add it if it doesn't exist. mod_fail2ban provides native integration without having to log these messages for fail2ban to detect. If you use it you'll probably still need to set the above param. (Disclaimer: I haven't used the module). Steve On 27 Dec 2012, at 14:44, Archana Venugopan <a.venugopan@mundio.com> wrote:
Hi, Thanks. If there is no activity for a while then calls drops out and I need to re-start the FS. I also see these messages frequently after each call and after registration and while FS is idle. Am not sure why is this happening.
I keep getting those messages every 5 mins.
Regards, Archana
From: Mick Stevens [mailto:mick.stevens@smartipx.com] Sent: 27 December 2012 12:49 To: Archana Venugopan Subject: Re: [Freeswitch-users] repeated registration messages in logs
Hi Archana,
This is just your SIP client (softphone etc) sending keep alive/SIP re-register messages. You can normally adjust this in the settings of your client.
I find setting "reregister every 300 seconds" normally works ok for me.
Rgds, Mick
On 27 December 2012 12:40, Archana Venugopan <a.venugopan@mundio.com> wrote: Hi,
After registering the phones successfully I am getting the below message continuously every few seconds in my logs and this is filling up the logs and freeswitch goes down sometimes. Can someone please tell me why I keep getting this message every few seconds? I have another server and there I don’t see this issue.
2012-12-27 12:37:44.714558 [WARNING] sofia_reg.c:1484 SIP auth challenge (REGISTER) on sofia profile 'internal' for [Abarajit@vectonecloud.com] from ip 192.168.2.205 2012-12-27 12:41:58.744557 [WARNING] sofia_reg.c:1484 SIP auth challenge (REGISTER) on sofia profile 'internal' for [sana@vectonecloud.com] from ip 192.168.2.48
Regards, Archana
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Regards
Mick Stevens Communications Technologist Smart IPX Ltd Tel/Fax. +44(0)20 7001 6869 Email. mick.stevens@smartipx.com Skype. mick.smartipx.com www.smartipx.com _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Hi, Thanks. I initially thought these logs might have caused time out of freeswitch. Now I am not sure why freeswitch is timing out. I have no entries in logs for any errors on this time out. But after few hours am not able to make calls and when I open fs_cli, and give show registrations its just hanging and I need to re-start FS to bring back to normal. I have 1 other production machine where FS(1.0.head) does not hang or time out and I have set everything similar to that except for the FS version(1.2.3) difference. Can you please let me know why FS behaves like this? Regards, Archana From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Steven Ayre Sent: 27 December 2012 19:21 To: FreeSWITCH Users Help Cc: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] repeated registration messages in logs Registrations work by the client sending a REGISTER to the server, which returns 401 to challenge and client resends REGISTER with the authentication details. The register has an expiry time. To remain registered the client must reREGISTER within this time, and each REGISTER has its own 401 authentication (to prevent replay attacks). What you're seeing is a log message each time the registration is renewed. That's why you still see it even though FS is apparently idle. The log message really is only informative. It logs at WARNING level so that you can use fail2ban while only logging serious messages so you don't get massive log files. FS will log both the initial REGISTER/401 then at the 2nd REGISTER whether it succeeds or fails. Both are required to detect bots looking to break into an insecure or DDOS a SIP server, since the client might never send the 2nd REGISTER. If you are not using fail2ban and want quieter logs, set the log-auth-failures param to false on the relevant Sofia profile. Add it if it doesn't exist. mod_fail2ban provides native integration without having to log these messages for fail2ban to detect. If you use it you'll probably still need to set the above param. (Disclaimer: I haven't used the module). Steve On 27 Dec 2012, at 14:44, Archana Venugopan <a.venugopan@mundio.com<mailto:a.venugopan@mundio.com>> wrote: Hi, Thanks. If there is no activity for a while then calls drops out and I need to re-start the FS. I also see these messages frequently after each call and after registration and while FS is idle. Am not sure why is this happening. I keep getting those messages every 5 mins. Regards, Archana From: Mick Stevens [mailto:mick.stevens@smartipx.com] Sent: 27 December 2012 12:49 To: Archana Venugopan Subject: Re: [Freeswitch-users] repeated registration messages in logs Hi Archana, This is just your SIP client (softphone etc) sending keep alive/SIP re-register messages. You can normally adjust this in the settings of your client. I find setting "reregister every 300 seconds" normally works ok for me. Rgds, Mick On 27 December 2012 12:40, Archana Venugopan <a.venugopan@mundio.com<mailto:a.venugopan@mundio.com>> wrote: Hi, After registering the phones successfully I am getting the below message continuously every few seconds in my logs and this is filling up the logs and freeswitch goes down sometimes. Can someone please tell me why I keep getting this message every few seconds? I have another server and there I don’t see this issue. 2012-12-27 12:37:44.714558 [WARNING] sofia_reg.c:1484 SIP auth challenge (REGISTER) on sofia profile 'internal' for [Abarajit@vectonecloud.com<mailto:Abarajit@vectonecloud.com>] from ip 192.168.2.205 2012-12-27 12:41:58.744557 [WARNING] sofia_reg.c:1484 SIP auth challenge (REGISTER) on sofia profile 'internal' for [sana@vectonecloud.com<mailto:sana@vectonecloud.com>] from ip 192.168.2.48 Regards, Archana _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org<mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org -- Regards Mick Stevens Communications Technologist Smart IPX Ltd Tel/Fax. +44(0)20 7001 6869 Email. mick.stevens@smartipx.com<mailto:mick.stevens@smartipx.com> Skype. mick.smartipx.com<http://mick.gno247.com/> www.smartipx.com<http://www.smartipx.com/> _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org<mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org<mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users<http://lists.freeswitch.org/mailman/options/freeswitch-users> http://www.freeswitch.org
You could collect a coredump when FS is hanging using using gcore. http://wiki.freeswitch.org/wiki/Reporting_Bugs#Creating_A_Backtrace_With_gdb... First I'd try updating to either the 1.2.5.3 release, or git head of the v1.2.stable or master branches. It could be a bug that's already been discovered and resolved. -Steve On 28 December 2012 15:32, Archana Venugopan <a.venugopan@mundio.com> wrote:
Hi,****
** **
Thanks. I initially thought these logs might have caused time out of freeswitch. Now I am not sure why freeswitch is timing out.****
** **
I have no entries in logs for any errors on this time out. But after few hours am not able to make calls and when I open fs_cli, and give show registrations its just hanging and I need to re-start FS to bring back to normal. ****
I have 1 other production machine where FS(1.0.head) does not hang or time out and I have set everything similar to that except for the FS version(1.2.3) difference. ****
** **
Can you please let me know why FS behaves like this?****
** **
Regards,****
Archana****
** **
*From:* freeswitch-users-bounces@lists.freeswitch.org [mailto: freeswitch-users-bounces@lists.freeswitch.org] *On Behalf Of *Steven Ayre *Sent:* 27 December 2012 19:21 *To:* FreeSWITCH Users Help *Cc:* FreeSWITCH Users Help
*Subject:* Re: [Freeswitch-users] repeated registration messages in logs** **
** **
Registrations work by the client sending a REGISTER to the server, which returns 401 to challenge and client resends REGISTER with the authentication details.****
** **
The register has an expiry time. To remain registered the client must reREGISTER within this time, and each REGISTER has its own 401 authentication (to prevent replay attacks).****
** **
What you're seeing is a log message each time the registration is renewed. That's why you still see it even though FS is apparently idle.****
** **
The log message really is only informative. It logs at WARNING level so that you can use fail2ban while only logging serious messages so you don't get massive log files.****
** **
FS will log both the initial REGISTER/401 then at the 2nd REGISTER whether it succeeds or fails. Both are required to detect bots looking to break into an insecure or DDOS a SIP server, since the client might never send the 2nd REGISTER.****
** **
If you are not using fail2ban and want quieter logs, set the log-auth-failures param to false on the relevant Sofia profile. Add it if it doesn't exist.****
****
mod_fail2ban provides native integration without having to log these messages for fail2ban to detect. If you use it you'll probably still need to set the above param. (Disclaimer: I haven't used the module).****
** **
Steve****
** **
** **
** **
On 27 Dec 2012, at 14:44, Archana Venugopan <a.venugopan@mundio.com> wrote:****
Hi,****
Thanks. If there is no activity for a while then calls drops out and I need to re-start the FS. I also see these messages frequently after each call and after registration and while FS is idle.****
Am not sure why is this happening. ****
****
I keep getting those messages every 5 mins.****
****
Regards,****
Archana****
****
*From:* Mick Stevens [mailto:mick.stevens@smartipx.com<mick.stevens@smartipx.com>]
*Sent:* 27 December 2012 12:49 *To:* Archana Venugopan *Subject:* Re: [Freeswitch-users] repeated registration messages in logs** **
****
Hi Archana,****
****
This is just your SIP client (softphone etc) sending keep alive/SIP re-register messages. You can normally adjust this in the settings of your client.****
****
I find setting "reregister every 300 seconds" normally works ok for me.*** *
****
Rgds, Mick****
****
****
On 27 December 2012 12:40, Archana Venugopan <a.venugopan@mundio.com> wrote:****
Hi,****
****
After registering the phones successfully I am getting the below message continuously every few seconds in my logs and this is filling up the logs and freeswitch goes down sometimes.****
Can someone please tell me why I keep getting this message every few seconds? I have another server and there I don’t see this issue. ****
****
2012-12-27 12:37:44.714558 [WARNING] sofia_reg.c:1484 SIP auth challenge (REGISTER) on sofia profile 'internal' for [Abarajit@vectonecloud.com] from ip 192.168.2.205****
2012-12-27 12:41:58.744557 [WARNING] sofia_reg.c:1484 SIP auth challenge (REGISTER) on sofia profile 'internal' for [sana@vectonecloud.com] from ip 192.168.2.48****
****
Regards,****
Archana****
****
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org****
****
****
-- ****
Regards
Mick Stevens *Communications Technologist** Smart IPX Ltd *Tel/Fax. +44(0)20 7001 6869****
Email. mick.stevens@smartipx.com Skype. mick.smartipx.com <http://mick.gno247.com/>****
www.smartipx.com****
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org****
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (2)
-
Archana Venugopan
-
Steven Ayre