HI All, Saw something new today and I am kind of worried that something has been hacked. What does this mean in the console, it is during an incoming fax to rxfax: DICK 6890 DICK 6896 WTFX Replaces=49ed5a45-dcb3bb11%40192.168.0.24%3Bfrom-tag%3D3e5df0b5191e9761o3%3B to-tag%3Djac81BFj6rF7e DICK 6890 DICK 6896 WTFX Replaces=7ad19169-23089a56%40192.168.0.16%3Bfrom-tag%3D82d8de4d189d12c2o3%3B to-tag%3DN15FBmN0yyt6Q DICK 6890 DICK 6896 WTFX Replaces=200b9844-d8cf82cc%40192.168.0.24%3Bfrom-tag%3Daf559e4ebc7adaco3%3Bt o-tag%3DUtBZUyQF90etQ DICK 6890 DICK 6896 WTFX Replaces=f89a0068-6396bf3c%40192.168.0.16%3Bfrom-tag%3Df9aaee7897c4286co3%3B to-tag%3D6Bg2yD8j8jjeH DICK 6890 DICK 6896 WTFX Replaces=3d6e5fdd-a0216b6d%40192.168.0.16%3Bfrom-tag%3D5517551d4feaf72do3%3B to-tag%3DXB17S1pHp3X8a DICK 6890 DICK 6896 WTFX Replaces=f7ddd747-59b1035b%40192.168.0.16%3Bfrom-tag%3D717fa657bf1aff8bo3%3B to-tag%3DjN1c6c27027Sr DICK 6890 DICK 6896 WTFX Replaces=e5fff425-65d08882%40192.168.0.24%3Bfrom-tag%3D716f37c97bdf792eo3%3B to-tag%3DjcjZXKNDF7ZQg DICK 6890 DICK 6896 WTFX Replaces=798498b-60fe2ae9%40192.168.0.24%3Bfrom-tag%3Df86b8923d68e3031o3%3Bt o-tag%3DHcyymrUy2a0Za DICK 6890 DICK 6896 WTFX Replaces=49ed5a45-dcb3bb11%40192.168.0.24%3Bfrom-tag%3D3e5df0b5191e9761o3%3B to-tag%3Djac81BFj6rF7e DICK 6890 DICK 6896 WTFX Replaces=7ad19169-23089a56%40192.168.0.16%3Bfrom-tag%3D82d8de4d189d12c2o3%3B to-tag%3DN15FBmN0yyt6Q DICK 6890 DICK 6896 WTFX Replaces=200b9844-d8cf82cc%40192.168.0.24%3Bfrom-tag%3Daf559e4ebc7adaco3%3Bt o-tag%3DUtBZUyQF90etQ DICK 6890 DICK 6896 WTFX Replaces=f89a0068-6396bf3c%40192.168.0.16%3Bfrom-tag%3Df9aaee7897c4286co3%3B to-tag%3D6Bg2yD8j8jjeH DICK 6890 DICK 6896 WTFX Replaces=3d6e5fdd-a0216b6d%40192.168.0.16%3Bfrom-tag%3D5517551d4feaf72do3%3B to-tag%3DXB17S1pHp3X8a DICK 6890 DICK 6896 WTFX Replaces=f7ddd747-59b1035b%40192.168.0.16%3Bfrom-tag%3D717fa657bf1aff8bo3%3B to-tag%3DjN1c6c27027Sr DICK 6890 DICK 6896 WTFX Replaces=e5fff425-65d08882%40192.168.0.24%3Bfrom-tag%3D716f37c97bdf792eo3%3B to-tag%3DjcjZXKNDF7ZQg DICK 6890 DICK 6896 WTFX Replaces=798498b-60fe2ae9%40192.168.0.24%3Bfrom-tag%3Df86b8923d68e3031o3%3Bt o-tag%3DHcyymrUy2a0Za 2012-08-04 11:13:46.491588 [DEBUG] switch_core_state_machine.c:416 (sofia/external_noauth/. Anyone seen those before? Sean
Run make current and update your code. William King Senior Engineer Quentus Technologies, INC 1037 NE 65th St Suite 273 Seattle, WA 98115 Main: (877) 211-9337 Office: (206) 388-4772 Cell: (253) 686-5518 william.king@quentustech.com On 08/04/2012 01:22 PM, Sean Devoy wrote:
HI All,
Saw something new today and I am kind of worried that something has been hacked.
What does this mean in the console, it is during an incoming fax to rxfax:
DICK 6890
DICK 6896
WTFX Replaces=49ed5a45-dcb3bb11%40192.168.0.24%3Bfrom-tag%3D3e5df0b5191e9761o3%3Bto-tag%3Djac81BFj6rF7e
DICK 6890
DICK 6896
WTFX Replaces=7ad19169-23089a56%40192.168.0.16%3Bfrom-tag%3D82d8de4d189d12c2o3%3Bto-tag%3DN15FBmN0yyt6Q
DICK 6890
DICK 6896
WTFX Replaces=200b9844-d8cf82cc%40192.168.0.24%3Bfrom-tag%3Daf559e4ebc7adaco3%3Bto-tag%3DUtBZUyQF90etQ
DICK 6890
DICK 6896
WTFX Replaces=f89a0068-6396bf3c%40192.168.0.16%3Bfrom-tag%3Df9aaee7897c4286co3%3Bto-tag%3D6Bg2yD8j8jjeH
DICK 6890
DICK 6896
WTFX Replaces=3d6e5fdd-a0216b6d%40192.168.0.16%3Bfrom-tag%3D5517551d4feaf72do3%3Bto-tag%3DXB17S1pHp3X8a
DICK 6890
DICK 6896
WTFX Replaces=f7ddd747-59b1035b%40192.168.0.16%3Bfrom-tag%3D717fa657bf1aff8bo3%3Bto-tag%3DjN1c6c27027Sr
DICK 6890
DICK 6896
WTFX Replaces=e5fff425-65d08882%40192.168.0.24%3Bfrom-tag%3D716f37c97bdf792eo3%3Bto-tag%3DjcjZXKNDF7ZQg
DICK 6890
DICK 6896
WTFX Replaces=798498b-60fe2ae9%40192.168.0.24%3Bfrom-tag%3Df86b8923d68e3031o3%3Bto-tag%3DHcyymrUy2a0Za
DICK 6890
DICK 6896
WTFX Replaces=49ed5a45-dcb3bb11%40192.168.0.24%3Bfrom-tag%3D3e5df0b5191e9761o3%3Bto-tag%3Djac81BFj6rF7e
DICK 6890
DICK 6896
WTFX Replaces=7ad19169-23089a56%40192.168.0.16%3Bfrom-tag%3D82d8de4d189d12c2o3%3Bto-tag%3DN15FBmN0yyt6Q
DICK 6890
DICK 6896
WTFX Replaces=200b9844-d8cf82cc%40192.168.0.24%3Bfrom-tag%3Daf559e4ebc7adaco3%3Bto-tag%3DUtBZUyQF90etQ
DICK 6890
DICK 6896
WTFX Replaces=f89a0068-6396bf3c%40192.168.0.16%3Bfrom-tag%3Df9aaee7897c4286co3%3Bto-tag%3D6Bg2yD8j8jjeH
DICK 6890
DICK 6896
WTFX Replaces=3d6e5fdd-a0216b6d%40192.168.0.16%3Bfrom-tag%3D5517551d4feaf72do3%3Bto-tag%3DXB17S1pHp3X8a
DICK 6890
DICK 6896
WTFX Replaces=f7ddd747-59b1035b%40192.168.0.16%3Bfrom-tag%3D717fa657bf1aff8bo3%3Bto-tag%3DjN1c6c27027Sr
DICK 6890
DICK 6896
WTFX Replaces=e5fff425-65d08882%40192.168.0.24%3Bfrom-tag%3D716f37c97bdf792eo3%3Bto-tag%3DjcjZXKNDF7ZQg
DICK 6890
DICK 6896
WTFX Replaces=798498b-60fe2ae9%40192.168.0.24%3Bfrom-tag%3Df86b8923d68e3031o3%3Bto-tag%3DHcyymrUy2a0Za
2012-08-04 11:13:46.491588 [DEBUG] switch_core_state_machine.c:416 (sofia/external_noauth/...
Anyone seen those before?
Sean
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Sorry, that sounds a little too generic for me. Besides this is a production server and with the instability of the head in recent weeks I cannot do that without SOME testing on another server. Do you have a reason to make current, or is that just a catch all? Sean From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of William King Sent: Saturday, August 04, 2012 1:29 PM To: freeswitch-users@lists.freeswitch.org Subject: Re: [Freeswitch-users] Odd console messages Run make current and update your code. William King Senior Engineer Quentus Technologies, INC 1037 NE 65th St Suite 273 Seattle, WA 98115 Main: (877) 211-9337 Office: (206) 388-4772 Cell: (253) 686-5518 william.king@quentustech.com On 08/04/2012 01:22 PM, Sean Devoy wrote: HI All, Saw something new today and I am kind of worried that something has been hacked. What does this mean in the console, it is during an incoming fax to rxfax: DICK 6890 DICK 6896 WTFX Replaces=49ed5a45-dcb3bb11%40192.168.0.24%3Bfrom-tag%3D3e5df0b5191e9761o3%3B to-tag%3Djac81BFj6rF7e DICK 6890 DICK 6896 WTFX Replaces=7ad19169-23089a56%40192.168.0.16%3Bfrom-tag%3D82d8de4d189d12c2o3%3B to-tag%3DN15FBmN0yyt6Q DICK 6890 DICK 6896 WTFX Replaces=200b9844-d8cf82cc%40192.168.0.24%3Bfrom-tag%3Daf559e4ebc7adaco3%3Bt o-tag%3DUtBZUyQF90etQ DICK 6890 DICK 6896 WTFX Replaces=f89a0068-6396bf3c%40192.168.0.16%3Bfrom-tag%3Df9aaee7897c4286co3%3B to-tag%3D6Bg2yD8j8jjeH DICK 6890 DICK 6896 WTFX Replaces=3d6e5fdd-a0216b6d%40192.168.0.16%3Bfrom-tag%3D5517551d4feaf72do3%3B to-tag%3DXB17S1pHp3X8a DICK 6890 DICK 6896 WTFX Replaces=f7ddd747-59b1035b%40192.168.0.16%3Bfrom-tag%3D717fa657bf1aff8bo3%3B to-tag%3DjN1c6c27027Sr DICK 6890 DICK 6896 WTFX Replaces=e5fff425-65d08882%40192.168.0.24%3Bfrom-tag%3D716f37c97bdf792eo3%3B to-tag%3DjcjZXKNDF7ZQg DICK 6890 DICK 6896 WTFX Replaces=798498b-60fe2ae9%40192.168.0.24%3Bfrom-tag%3Df86b8923d68e3031o3%3Bt o-tag%3DHcyymrUy2a0Za DICK 6890 DICK 6896 WTFX Replaces=49ed5a45-dcb3bb11%40192.168.0.24%3Bfrom-tag%3D3e5df0b5191e9761o3%3B to-tag%3Djac81BFj6rF7e DICK 6890 DICK 6896 WTFX Replaces=7ad19169-23089a56%40192.168.0.16%3Bfrom-tag%3D82d8de4d189d12c2o3%3B to-tag%3DN15FBmN0yyt6Q DICK 6890 DICK 6896 WTFX Replaces=200b9844-d8cf82cc%40192.168.0.24%3Bfrom-tag%3Daf559e4ebc7adaco3%3Bt o-tag%3DUtBZUyQF90etQ DICK 6890 DICK 6896 WTFX Replaces=f89a0068-6396bf3c%40192.168.0.16%3Bfrom-tag%3Df9aaee7897c4286co3%3B to-tag%3D6Bg2yD8j8jjeH DICK 6890 DICK 6896 WTFX Replaces=3d6e5fdd-a0216b6d%40192.168.0.16%3Bfrom-tag%3D5517551d4feaf72do3%3B to-tag%3DXB17S1pHp3X8a DICK 6890 DICK 6896 WTFX Replaces=f7ddd747-59b1035b%40192.168.0.16%3Bfrom-tag%3D717fa657bf1aff8bo3%3B to-tag%3DjN1c6c27027Sr DICK 6890 DICK 6896 WTFX Replaces=e5fff425-65d08882%40192.168.0.24%3Bfrom-tag%3D716f37c97bdf792eo3%3B to-tag%3DjcjZXKNDF7ZQg DICK 6890 DICK 6896 WTFX Replaces=798498b-60fe2ae9%40192.168.0.24%3Bfrom-tag%3Df86b8923d68e3031o3%3Bt o-tag%3DHcyymrUy2a0Za 2012-08-04 11:13:46.491588 [DEBUG] switch_core_state_machine.c:416 (sofia/external_noauth/. Anyone seen those before? Sean _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com Join Us At ClueCon - Aug 7-9, 2012 FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
It's quite funny. Can you please post all debug log to pastebin. 04.08.2012 21:24 пользователь "Sean Devoy" <sdevoy@bizfocused.com> написал:
HI All,****
** **
Saw something new today and I am kind of worried that something has been hacked.****
** **
What does this mean in the console, it is during an incoming fax to rxfax: ****
DICK 6890****
DICK 6896****
WTFX Replaces=49ed5a45-dcb3bb11%40192.168.0.24%3Bfrom-tag%3D3e5df0b5191e9761o3%3Bto-tag%3Djac81BFj6rF7e ****
DICK 6890****
DICK 6896****
WTFX Replaces=7ad19169-23089a56%40192.168.0.16%3Bfrom-tag%3D82d8de4d189d12c2o3%3Bto-tag%3DN15FBmN0yyt6Q ****
DICK 6890****
DICK 6896****
WTFX Replaces=200b9844-d8cf82cc%40192.168.0.24%3Bfrom-tag%3Daf559e4ebc7adaco3%3Bto-tag%3DUtBZUyQF90etQ ****
DICK 6890****
DICK 6896****
WTFX Replaces=f89a0068-6396bf3c%40192.168.0.16%3Bfrom-tag%3Df9aaee7897c4286co3%3Bto-tag%3D6Bg2yD8j8jjeH ****
DICK 6890****
DICK 6896****
WTFX Replaces=3d6e5fdd-a0216b6d%40192.168.0.16%3Bfrom-tag%3D5517551d4feaf72do3%3Bto-tag%3DXB17S1pHp3X8a ****
DICK 6890****
DICK 6896****
WTFX Replaces=f7ddd747-59b1035b%40192.168.0.16%3Bfrom-tag%3D717fa657bf1aff8bo3%3Bto-tag%3DjN1c6c27027Sr ****
DICK 6890****
DICK 6896****
WTFX Replaces=e5fff425-65d08882%40192.168.0.24%3Bfrom-tag%3D716f37c97bdf792eo3%3Bto-tag%3DjcjZXKNDF7ZQg ****
DICK 6890****
DICK 6896****
WTFX Replaces=798498b-60fe2ae9%40192.168.0.24%3Bfrom-tag%3Df86b8923d68e3031o3%3Bto-tag%3DHcyymrUy2a0Za ****
DICK 6890****
DICK 6896****
WTFX Replaces=49ed5a45-dcb3bb11%40192.168.0.24%3Bfrom-tag%3D3e5df0b5191e9761o3%3Bto-tag%3Djac81BFj6rF7e ****
DICK 6890****
DICK 6896****
WTFX Replaces=7ad19169-23089a56%40192.168.0.16%3Bfrom-tag%3D82d8de4d189d12c2o3%3Bto-tag%3DN15FBmN0yyt6Q ****
DICK 6890****
DICK 6896****
WTFX Replaces=200b9844-d8cf82cc%40192.168.0.24%3Bfrom-tag%3Daf559e4ebc7adaco3%3Bto-tag%3DUtBZUyQF90etQ ****
DICK 6890****
DICK 6896****
WTFX Replaces=f89a0068-6396bf3c%40192.168.0.16%3Bfrom-tag%3Df9aaee7897c4286co3%3Bto-tag%3D6Bg2yD8j8jjeH ****
DICK 6890****
DICK 6896****
WTFX Replaces=3d6e5fdd-a0216b6d%40192.168.0.16%3Bfrom-tag%3D5517551d4feaf72do3%3Bto-tag%3DXB17S1pHp3X8a ****
DICK 6890****
DICK 6896****
WTFX Replaces=f7ddd747-59b1035b%40192.168.0.16%3Bfrom-tag%3D717fa657bf1aff8bo3%3Bto-tag%3DjN1c6c27027Sr ****
DICK 6890****
DICK 6896****
WTFX Replaces=e5fff425-65d08882%40192.168.0.24%3Bfrom-tag%3D716f37c97bdf792eo3%3Bto-tag%3DjcjZXKNDF7ZQg ****
DICK 6890****
DICK 6896****
WTFX Replaces=798498b-60fe2ae9%40192.168.0.24%3Bfrom-tag%3Df86b8923d68e3031o3%3Bto-tag%3DHcyymrUy2a0Za ****
** **
2012-08-04 11:13:46.491588 [DEBUG] switch_core_state_machine.c:416 (sofia/external_noauth/...****
** **
Anyone seen those before?****
** **
Sean****
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Here is the complete log of that call. If you want the whole 5MB say so. http://pastebin.freeswitch.com/19639 I mean people call me that all the time, but Freeswitch never has! Thanks, Sean From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Anton Kvashenkin Sent: Saturday, August 04, 2012 4:05 PM To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] Odd console messages It's quite funny. Can you please post all debug log to pastebin. 04.08.2012 21:24 пользователь "Sean Devoy" <sdevoy@bizfocused.com> написал: HI All, Saw something new today and I am kind of worried that something has been hacked. What does this mean in the console, it is during an incoming fax to rxfax: DICK 6890 DICK 6896 WTFX Replaces=49ed5a45-dcb3bb11%40192.168.0.24%3Bfrom-tag%3D3e5df0b5191e9761o3%3B to-tag%3Djac81BFj6rF7e DICK 6890 DICK 6896 WTFX Replaces=7ad19169-23089a56%40192.168.0.16%3Bfrom-tag%3D82d8de4d189d12c2o3%3B to-tag%3DN15FBmN0yyt6Q DICK 6890 DICK 6896 WTFX Replaces=200b9844-d8cf82cc%40192.168.0.24%3Bfrom-tag%3Daf559e4ebc7adaco3%3Bt o-tag%3DUtBZUyQF90etQ DICK 6890 DICK 6896 WTFX Replaces=f89a0068-6396bf3c%40192.168.0.16%3Bfrom-tag%3Df9aaee7897c4286co3%3B to-tag%3D6Bg2yD8j8jjeH DICK 6890 DICK 6896 WTFX Replaces=3d6e5fdd-a0216b6d%40192.168.0.16%3Bfrom-tag%3D5517551d4feaf72do3%3B to-tag%3DXB17S1pHp3X8a DICK 6890 DICK 6896 WTFX Replaces=f7ddd747-59b1035b%40192.168.0.16%3Bfrom-tag%3D717fa657bf1aff8bo3%3B to-tag%3DjN1c6c27027Sr DICK 6890 DICK 6896 WTFX Replaces=e5fff425-65d08882%40192.168.0.24%3Bfrom-tag%3D716f37c97bdf792eo3%3B to-tag%3DjcjZXKNDF7ZQg DICK 6890 DICK 6896 WTFX Replaces=798498b-60fe2ae9%40192.168.0.24%3Bfrom-tag%3Df86b8923d68e3031o3%3Bt o-tag%3DHcyymrUy2a0Za DICK 6890 DICK 6896 WTFX Replaces=49ed5a45-dcb3bb11%40192.168.0.24%3Bfrom-tag%3D3e5df0b5191e9761o3%3B to-tag%3Djac81BFj6rF7e DICK 6890 DICK 6896 WTFX Replaces=7ad19169-23089a56%40192.168.0.16%3Bfrom-tag%3D82d8de4d189d12c2o3%3B to-tag%3DN15FBmN0yyt6Q DICK 6890 DICK 6896 WTFX Replaces=200b9844-d8cf82cc%40192.168.0.24%3Bfrom-tag%3Daf559e4ebc7adaco3%3Bt o-tag%3DUtBZUyQF90etQ DICK 6890 DICK 6896 WTFX Replaces=f89a0068-6396bf3c%40192.168.0.16%3Bfrom-tag%3Df9aaee7897c4286co3%3B to-tag%3D6Bg2yD8j8jjeH DICK 6890 DICK 6896 WTFX Replaces=3d6e5fdd-a0216b6d%40192.168.0.16%3Bfrom-tag%3D5517551d4feaf72do3%3B to-tag%3DXB17S1pHp3X8a DICK 6890 DICK 6896 WTFX Replaces=f7ddd747-59b1035b%40192.168.0.16%3Bfrom-tag%3D717fa657bf1aff8bo3%3B to-tag%3DjN1c6c27027Sr DICK 6890 DICK 6896 WTFX Replaces=e5fff425-65d08882%40192.168.0.24%3Bfrom-tag%3D716f37c97bdf792eo3%3B to-tag%3DjcjZXKNDF7ZQg DICK 6890 DICK 6896 WTFX Replaces=798498b-60fe2ae9%40192.168.0.24%3Bfrom-tag%3Df86b8923d68e3031o3%3Bt o-tag%3DHcyymrUy2a0Za 2012-08-04 11:13:46.491588 [DEBUG] switch_core_state_machine.c:416 (sofia/external_noauth/: Anyone seen those before? Sean _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com Join Us At ClueCon - Aug 7-9, 2012 FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Sean, Those lines were debug lines that a developer was using. They have since been removed/replaced. If you want them out of your logs then update. William King Senior Engineer Quentus Technologies, INC 1037 NE 65th St Suite 273 Seattle, WA 98115 Main: (877) 211-9337 Office: (206) 388-4772 Cell: (253) 686-5518 william.king@quentustech.com On 08/04/2012 09:43 PM, Sean Devoy wrote:
Here is the complete log of that call. If you want the whole 5MB say so.
http://pastebin.freeswitch.com/19639
I mean people call me that all the time, but Freeswitch never has!
Thanks,
Sean
*From:*freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] *On Behalf Of *Anton Kvashenkin *Sent:* Saturday, August 04, 2012 4:05 PM *To:* FreeSWITCH Users Help *Subject:* Re: [Freeswitch-users] Odd console messages
It's quite funny. Can you please post all debug log to pastebin.
04.08.2012 21:24 ???????????? "Sean Devoy" <sdevoy@bizfocused.com <mailto:sdevoy@bizfocused.com>> ???????:
HI All,
Saw something new today and I am kind of worried that something has been hacked.
What does this mean in the console, it is during an incoming fax to rxfax:
DICK 6890
DICK 6896
WTFX Replaces=49ed5a45-dcb3bb11%40192.168.0.24%3Bfrom-tag%3D3e5df0b5191e9761o3%3Bto-tag%3Djac81BFj6rF7e
DICK 6890
DICK 6896
WTFX Replaces=7ad19169-23089a56%40192.168.0.16%3Bfrom-tag%3D82d8de4d189d12c2o3%3Bto-tag%3DN15FBmN0yyt6Q
DICK 6890
DICK 6896
WTFX Replaces=200b9844-d8cf82cc%40192.168.0.24%3Bfrom-tag%3Daf559e4ebc7adaco3%3Bto-tag%3DUtBZUyQF90etQ
DICK 6890
DICK 6896
WTFX Replaces=f89a0068-6396bf3c%40192.168.0.16%3Bfrom-tag%3Df9aaee7897c4286co3%3Bto-tag%3D6Bg2yD8j8jjeH
DICK 6890
DICK 6896
WTFX Replaces=3d6e5fdd-a0216b6d%40192.168.0.16%3Bfrom-tag%3D5517551d4feaf72do3%3Bto-tag%3DXB17S1pHp3X8a
DICK 6890
DICK 6896
WTFX Replaces=f7ddd747-59b1035b%40192.168.0.16%3Bfrom-tag%3D717fa657bf1aff8bo3%3Bto-tag%3DjN1c6c27027Sr
DICK 6890
DICK 6896
WTFX Replaces=e5fff425-65d08882%40192.168.0.24%3Bfrom-tag%3D716f37c97bdf792eo3%3Bto-tag%3DjcjZXKNDF7ZQg
DICK 6890
DICK 6896
WTFX Replaces=798498b-60fe2ae9%40192.168.0.24%3Bfrom-tag%3Df86b8923d68e3031o3%3Bto-tag%3DHcyymrUy2a0Za
DICK 6890
DICK 6896
WTFX Replaces=49ed5a45-dcb3bb11%40192.168.0.24%3Bfrom-tag%3D3e5df0b5191e9761o3%3Bto-tag%3Djac81BFj6rF7e
DICK 6890
DICK 6896
WTFX Replaces=7ad19169-23089a56%40192.168.0.16%3Bfrom-tag%3D82d8de4d189d12c2o3%3Bto-tag%3DN15FBmN0yyt6Q
DICK 6890
DICK 6896
WTFX Replaces=200b9844-d8cf82cc%40192.168.0.24%3Bfrom-tag%3Daf559e4ebc7adaco3%3Bto-tag%3DUtBZUyQF90etQ
DICK 6890
DICK 6896
WTFX Replaces=f89a0068-6396bf3c%40192.168.0.16%3Bfrom-tag%3Df9aaee7897c4286co3%3Bto-tag%3D6Bg2yD8j8jjeH
DICK 6890
DICK 6896
WTFX Replaces=3d6e5fdd-a0216b6d%40192.168.0.16%3Bfrom-tag%3D5517551d4feaf72do3%3Bto-tag%3DXB17S1pHp3X8a
DICK 6890
DICK 6896
WTFX Replaces=f7ddd747-59b1035b%40192.168.0.16%3Bfrom-tag%3D717fa657bf1aff8bo3%3Bto-tag%3DjN1c6c27027Sr
DICK 6890
DICK 6896
WTFX Replaces=e5fff425-65d08882%40192.168.0.24%3Bfrom-tag%3D716f37c97bdf792eo3%3Bto-tag%3DjcjZXKNDF7ZQg
DICK 6890
DICK 6896
WTFX Replaces=798498b-60fe2ae9%40192.168.0.24%3Bfrom-tag%3Df86b8923d68e3031o3%3Bto-tag%3DHcyymrUy2a0Za
2012-08-04 11:13:46.491588 [DEBUG] switch_core_state_machine.c:416 (sofia/external_noauth/...
Anyone seen those before?
Sean
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (3)
-
Anton Kvashenkin
-
Sean Devoy
-
William King