| 00:01.22 | *** join/#asterisk chris349 (~office@2601:583:c200:180f::1b63) |
| 00:02.27 | chris349 | I am using the h extension to send a notification at the end of the call. Is there any way to get a detailed status about the queue like if the caller dropped out of the queue or what agent answered the call? |
| 00:02.31 | *** join/#asterisk anthm (~anthm@freeswitch/developer/anthm) |
| 00:12.23 | Samot | Knowing what agent answered the call should happen before the h extension. |
| 00:20.35 | *** join/#asterisk ludic (ac381cfb@gateway/web/cgi-irc/kiwiirc.com/ip.172.56.28.251) |
| 00:21.17 | *** part/#asterisk ludic (ac381cfb@gateway/web/cgi-irc/kiwiirc.com/ip.172.56.28.251) |
| 00:25.06 | *** join/#asterisk bubbagumpshrimpc (HydraIRC@wsip-184-180-163-60.ks.ks.cox.net) |
| 00:28.49 | chris349 | Samot, But I am not sure how I can get it in a variable. All I get is QUEUESTATUS = TIMEOUT if the call timed out of the queue, otherwise that variable is null |
| 00:29.13 | *** join/#asterisk eric_hill (eric_hill@wsip-184-180-163-60.ks.ks.cox.net) |
| 00:29.46 | *** join/#asterisk xnaron (~xnaron@S0106b4750e5de3b2.ed.shawcable.net) |
| 00:34.14 | Samot | I would get on the wiki and read up on app_queue |
| 00:41.28 | chris349 | I have read the documentation but I do not see anything that seems relevant |
| 00:51.30 | [TK]D-Fender | You mean like the fact there is an entire LOG FILE dedicated to providing the full detail of the life of all queue calls? |
| 01:00.33 | *** join/#asterisk fstd_ (~fstd@unaffiliated/fisted) |
| 01:01.30 | chris349 | The problem with the queue log is it has multiple entries per call. What I would like to do is send one email notification for call with the status like ABANDON or the queue member the call was connected to |
| 01:04.30 | [TK]D-Fender | So it has multiple entires. You can grep or query (if DB'd) for the uniqueid to mat and search for those results |
| 01:05.09 | [TK]D-Fender | Or flag the call when answered. |
| 01:05.24 | chris349 | ... and the queue log doesnt record the caller ID. I would have to do multiple complex queries to get a list of abandoned calls, all which could be avoided if I could get the status in a variable in the h extension |
| 01:05.45 | [TK]D-Fender | the CURRENT channel was the one in the queue |
| 01:05.57 | [TK]D-Fender | Hardly complex, there's already a channel variable for it |
| 01:06.25 | [TK]D-Fender | You didn't ask about a list. You asked about THAT call |
| 01:06.25 | chris349 | What is the channel variable to show the call was abandoned from the queue? I do DumpChan in my h extension and I do not see it |
| 01:06.39 | [TK]D-Fender | Use the variable. grep the log |
| 01:06.57 | chris349 | Unless the call times out of the queue my QUEUESTATUS variable is null |
| 01:07.16 | chris349 | I dont understand what this means: Use the variable. grep the log. Which variable am I looking for? |
| 01:08.08 | [TK]D-Fender | UNIQUEID |
| 01:08.14 | [TK]D-Fender | the same as the QUEUE LOG uses |
| 01:08.38 | [TK]D-Fender | [TK]D-Fender> So it has multiple entires. You can grep or query (if DB'd) for the uniqueid to mat and search for those results |
| 01:09.16 | chris349 | That could work! |
| 01:10.31 | WIMPy | Standard answer: It might be more efficient to listen on AMI. |
| 01:11.26 | [TK]D-Fender | That's another idea if you're good with an outside daemon to monitor it |
| 01:12.46 | *** join/#asterisk matrix1233 (~matrix123@197.0.225.227) |
| 01:14.26 | *** join/#asterisk SeiGGy (~zway@74.203.105.194) |
| 01:20.04 | *** join/#asterisk zway (~zway@74.203.105.194) |
| 01:24.11 | *** join/#asterisk webguynow (~webguynow@c-73-22-239-213.hsd1.il.comcast.net) |
| 01:29.34 | *** join/#asterisk seiggy (~seiggy@cpe-71-76-159-67.triad.res.rr.com) |
| 01:30.38 | *** join/#asterisk seiggy (~seiggy@cpe-71-76-159-67.triad.res.rr.com) |
| 01:32.56 | *** join/#asterisk jab416171 (~jab416171@c-76-27-96-12.hsd1.ut.comcast.net) |
| 01:35.22 | *** join/#asterisk klow (~textual@c-98-247-49-57.hsd1.wa.comcast.net) |
| 01:36.33 | *** join/#asterisk [NC] (~nc@rv1.sabius.net) |
| 01:37.38 | *** join/#asterisk danjenkins (danjenkins@gateway/shell/firrre/x-suobzdhcgouwlzud) |
| 01:54.23 | *** join/#asterisk shootbird (~quassel@beepbeep.serverpit.com) |
| 02:06.51 | *** join/#asterisk matrix1233 (~matrix123@197.1.150.52) |
| 02:49.53 | *** join/#asterisk Y04NN (~y04nn@nayon.fr) |
| 03:00.58 | *** join/#asterisk matrix1233 (~matrix123@197.1.150.52) |
| 03:09.59 | *** join/#asterisk klow (~textual@c-67-161-106-89.hsd1.wa.comcast.net) |
| 03:17.02 | *** join/#asterisk luckman212 (~luckman21@unaffiliated/luckman212) |
| 03:18.23 | *** join/#asterisk eric_hill (eric_hill@wsip-184-180-163-60.ks.ks.cox.net) |
| 03:55.12 | *** join/#asterisk matrix1233 (~matrix123@197.1.150.52) |
| 03:57.29 | *** join/#asterisk Y04NN (~y04nn@nayon.fr) |
| 04:49.03 | *** join/#asterisk matrix1233 (~matrix123@197.1.150.52) |
| 05:06.55 | OldHoster | Anyone know where I can find firmware for the Cisco phones? |
| 05:07.18 | OldHoster | Specifically the 7970G's |
| 05:15.42 | *** join/#asterisk Jesterboxboy (~Thunderbi@80-109-194-26.cable.dynamic.surfer.at) |
| 05:18.16 | drmessano | cisco.com |
| 05:22.58 | OldHoster | drmessano: I don't have a login that will give it to me... |
| 05:23.03 | OldHoster | No smart net |
| 05:28.38 | drmessano | My account has access to download it |
| 05:28.45 | drmessano | and I dont have any privledge |
| 05:30.54 | OldHoster | I jsut tried again and it won't let me |
| 05:32.56 | drmessano | Did you really just PM me without asking, and ask me to download it and put it somewhere you can get it? |
| 05:33.01 | drmessano | Anything else I can do for you? |
| 05:36.04 | OldHoster | drmessano: yes I did... and your an ass, don't worry about it /ignore dri am a bitch |
| 05:36.26 | OldHoster | lol |
| 05:38.01 | Samot | Uncool. |
| 05:38.20 | Samot | How could you just not automatically fulfill the strangers request?! |
| 05:39.00 | drmessano | Yep, and upgrade it to expedited processing |
| 05:39.13 | OldHoster | Samot: I was just asking for a favor, he could have said no thanks... I have helped people out, isn't that what IRC is usually about, why don't we close all of the source up and make it so that people can't use it |
| 05:39.54 | OldHoster | If you don't want to help just close the window or what ever... I tried to download it. |
| 05:39.54 | *** join/#asterisk shootbird (~quassel@beepbeep.serverpit.com) |
| 05:40.04 | drmessano | Rule #1 of IRC: If you have to explain yourself, you're the ass |
| 05:41.21 | drmessano | Also, "No Thanks" is reserved for when something is being offered. I don't need to refuse with a "Thanks" when I am being PM'ed and asked to do something |
| 05:41.53 | drmessano | But I feel ya, bro |
| 05:42.10 | drmessano | #DontHasselTheHoff |
| 05:42.26 | Samot | Plus there's no actual firmware type or version in the request. |
| 05:42.31 | Samot | SIP or SCCP? |
| 05:42.36 | Samot | Which release? |
| 05:43.09 | *** join/#asterisk matrix1233 (~matrix123@197.1.150.52) |
| 05:43.44 | OldHoster | Samot: I am looking for the latest stable version of SIP that is good for the 7970G's |
| 05:44.06 | Samot | Well according to the website one was just released a few months ago. |
| 05:44.22 | OldHoster | Samot: Right, but it says I don't have rights to download it |
| 05:44.57 | Samot | Then that would be something to talk to cisco.com about. |
| 05:45.23 | drmessano | or Craigslist |
| 05:45.49 | Samot | But considering it's an EOL phone.. |
| 05:45.59 | drmessano | VEOL |
| 05:46.05 | Samot | And the firmware updates are probably for those with PAID support. |
| 05:46.06 | drmessano | EOL+++ |
| 05:46.12 | Samot | That gets the extended support. |
| 05:46.18 | Samot | Since they are releasing updates. |
| 05:46.50 | Samot | But Joe Schmoo who bought it off ebay because it was a "cheap" option...probably can't get the firmware. |
| 05:46.51 | drmessano | I have no TACs on this account, and I could freely download it |
| 05:47.04 | drmessano | Its user error |
| 05:47.33 | robmal | Ye, me too. |
| 05:47.48 | drmessano | robmal to the rescue |
| 05:48.13 | drmessano | Hey, robmal can you download it for me, paint it green, and post it to a drop site of my choosing, NOW PLEASE? |
| 05:48.26 | robmal | Ok. |
| 05:48.29 | drmessano | lol |
| 05:49.58 | Samot | I'm in the mood for something distasteful and disgusting but I don't want to wait for the debate tomorrow night... |
| 05:50.27 | robmal | https://i.imgur.com/Yrj5hji.png |
| 05:50.48 | Samot | rofl |
| 05:50.55 | drmessano | lol |
| 05:50.58 | OldHoster | Samot: Yep, we will are already having to put up with that POS bunch of hillary supporters here in Vegas, and I found out what was wrong with my account. At Cisco. |
| 05:51.13 | Samot | Oh hear we go. |
| 05:51.24 | Samot | It's because Cisco was rigged against you, wasn't it? |
| 05:51.42 | Samot | It was part of the big global conspiracy. |
| 05:51.44 | OldHoster | Nope... Because my account was associated with a company that I used to work with that is in bad standing. |
| 05:52.02 | robmal | Is it because of you? |
| 05:52.10 | Samot | Crooked Email hacked your cisco account and deleted your ability to get firmware like the FBI to her email. |
| 05:52.19 | OldHoster | Nope... I wish... they got it transfered over to me currently. |
| 05:53.21 | OldHoster | I used to work contract for a reseller that went tits up a while ago, and they had my account associated with that, just had to get it changed. |
| 05:53.37 | drmessano | Maybe CiscoLeaks will publish the firmware |
| 05:53.53 | *** join/#asterisk rexwin_ (~rexwin@163.47.13.125) |
| 05:55.07 | Samot | So take a look at this... |
| 05:55.20 | Samot | http://img.huffingtonpost.com/asset/crop_29_94_1507_1779,scalefit_630_noupscale/5804efdc1a000067145b9f07.jpeg |
| 05:55.25 | Samot | If that link works. |
| 05:55.43 | Samot | It's not the "Pre-Hillary Sale" heading I find funny.. |
| 05:55.45 | Samot | It's the * |
| 05:56.19 | Samot | That the $699.99 sale price is only good to "legal firearm purchasers" |
| 05:56.38 | OldHoster | Samot: THey can't sell it to anyone illegal anyway... |
| 05:56.40 | Samot | So I guess if you're an illegal one you gotta pay full tag price. |
| 05:57.22 | Samot | You just can't grab a women in the vajayjay either, but it happens. |
| 05:57.47 | OldHoster | There are some states/areas that you must print langage like that, but I don't know if Nevada is one, we used to own pawn shops etc. |
| 05:58.33 | OldHoster | I have about 30 built up lowers(what is actually the firearm part) without a serial number and if hillary is elected i will build another 30 to 50 more before she is in office |
| 05:58.37 | drmessano | Oh hell yes.. 13.12 rc1 is up |
| 05:59.56 | Samot | You realize you are threatening a possible future president? |
| 06:00.01 | Samot | No, probably not. |
| 06:00.13 | OldHoster | I am not threatening her in any way... |
| 06:00.31 | OldHoster | I am just saying I am building more lowers... Your IQ is quite low. |
| 06:00.42 | Samot | Ouch. |
| 06:00.42 | OldHoster | They are called 80% firearms. |
| 06:00.48 | drmessano | He sounds just like Trump |
| 06:00.50 | Samot | Coming from a Trump supporter. |
| 06:01.11 | OldHoster | Samot: Why should someone not have a concealed carry permit and as many firearms as they like? |
| 06:01.15 | drmessano | Samot: You have small hands, low IQ.. Youre a lightweight |
| 06:01.37 | OldHoster | I am a Trump supporter, donated money to him more than once! |
| 06:02.07 | Samot | OldHoster: At any point did I suggest anything to say otherwise to that statement? |
| 06:02.07 | drmessano | Small hands |
| 06:02.18 | Samot | I mentioned nothing about a CCP. |
| 06:02.26 | Samot | Or a limit on firearm ownership. |
| 06:02.42 | Samot | I don't mind guns at all. |
| 06:02.46 | OldHoster | Samot: I figured you would want to limit, that is what Hillary does and I threatened her in no way. |
| 06:03.00 | Samot | OK, I'll give you that. |
| 06:03.42 | OldHoster | All I said is that if she is elected my CNC mill will be running full time to build lowers for personal use for me mywife my wifes kids and my son |
| 06:03.44 | Samot | You just implied that you were going to stock up on untraceable guns. |
| 06:04.01 | Samot | And what? |
| 06:04.08 | OldHoster | No need to imply! I WILL! |
| 06:04.13 | Samot | OK. |
| 06:04.14 | Samot | See.. |
| 06:04.34 | Samot | This is how sensible people have a hard time making logical gun laws. |
| 06:05.02 | OldHoster | FYI: I already have the ATF up my arse over the fact of my NFA firearms which I have over 100 of. |
| 06:05.17 | OldHoster | I have a bunch more that are cash bought private sales, personally built etc. |
| 06:05.24 | Samot | Heaven forbid they do their jobs. |
| 06:05.29 | Samot | Like enforce gun laws. |
| 06:05.38 | OldHoster | Perfectly legal, I am just going to build them up before they are banned |
| 06:05.46 | Samot | Or keep an eye on someone with a small cache of unmarked weapons. |
| 06:05.54 | Samot | They are not going to be banned. |
| 06:05.55 | Samot | FFS. |
| 06:05.57 | Samot | Not at all. |
| 06:06.22 | OldHoster | Samot: Because when they try to enforce gun laws on the people that are actually committing crimes you get this BLM bullshit going on. |
| 06:06.49 | Samot | I'm more of an ALM person. |
| 06:06.50 | OldHoster | You reach for an officers weapon, you steal from my house, you threaten my family my friends you need to be put down! |
| 06:06.53 | Samot | All Lives Matter. |
| 06:07.12 | OldHoster | Yeah and the BLM shits protest the ALM signs. |
| 06:07.37 | Samot | OK, you can have crazy gun talk. |
| 06:07.46 | Samot | Or crazy government talk.. |
| 06:07.54 | OldHoster | Its like here in Nevada, we can't shoot a sorry son of a bitch that has broke into your house and running down the street in the back |
| 06:07.59 | Samot | Don't bring your bigotry in here. |
| 06:08.03 | OldHoster | while in Texas and FL you can! |
| 06:08.36 | OldHoster | GA and a lot of other southern states. |
| 06:10.19 | OldHoster | Not being a bigot, I am saying BLM is bullshit it is ALM |
| 06:10.27 | OldHoster | BLM is bigotry. |
| 06:10.45 | snadge | im having trouble sending inbound calls to a peer, via tcp.. so all its outbound calls, and sip signalling appears to be tcp |
| 06:11.03 | snadge | peer shows.. Prim.Transp. : TCP Allowed.Trsp : TCP |
| 06:11.25 | snadge | sip show settings shows.. Allowed transports: UDP,TCP Outbound transport: TCP |
| 06:12.12 | Samot | Are the inbound calls actually being sent via TCP to the endpoint? |
| 06:13.47 | snadge | no.. udp for some reason |
| 06:14.00 | snadge | despite that not even being an allowable transport type for the peer, and not being the default |
| 06:16.05 | Samot | And if you change your Allowed Transports from UDP,TCP to TCP,UDP does that help? |
| 06:17.58 | snadge | yeah thats what i just tried.. doesnt seem to |
| 06:18.22 | snadge | unfortunately i cant try setting it to just tcp.. as there are other peers currently using udp on this server |
| 06:18.47 | snadge | in general section that is |
| 06:20.28 | Samot | I didn't say remove UDP |
| 06:20.34 | Samot | I said change the order. |
| 06:21.00 | snadge | i noticed you can specify the transport in the dial string |
| 06:21.10 | snadge | from the documentation |
| 06:21.17 | snadge | ; SIP/username[:password[:md5secret[:authname[:transport]]]]@host[:port] |
| 06:21.42 | snadge | i've never had to do that before though.. this is odd |
| 06:22.38 | drmessano | Is this Asterisk 11? |
| 06:22.59 | snadge | yep |
| 06:23.07 | drmessano | Ugh ok |
| 06:23.25 | snadge | 11.4.0 |
| 06:24.02 | snadge | im sure i've sent calls to this guy via tcp before from this very server.. so im wondering why its not playing ball today |
| 06:29.55 | snadge | i restarted it.. cant find any bugs relating to asterisk 11 and tcp |
| 06:30.02 | *** join/#asterisk andremar (~andremar@164.185.37.188.rev.vodafone.pt) |
| 06:30.21 | snadge | i could try updating it to a newer version of asterisk 11 maybe.. but i dont see why that would be necessary |
| 06:37.09 | *** join/#asterisk evil_gordita (robert@ip70-188-41-127.rn.hr.cox.net) |
| 06:37.27 | *** join/#asterisk matrix1233 (~matrix123@197.1.150.52) |
| 06:53.11 | snadge | if i register a different peer and send the call to that.. its tcp.. of course |
| 07:05.41 | *** join/#asterisk jploh (~textual@61.9.33.110) |
| 07:06.40 | *** join/#asterisk Freenex (501a60f8@gateway/web/freenode/ip.80.26.96.248) |
| 07:06.43 | *** join/#asterisk mirela666 (~mirkob@52D9ADEB.cm-11-1c.dynamic.ziggo.nl) |
| 07:06.49 | Freenex | hi to everyone! |
| 07:09.11 | Freenex | I'm having a weird problem connecting a NEC sv8100 to asterisk 11.23.0 |
| 07:09.46 | *** join/#asterisk mirela666 (~mirkob@52D9ADEB.cm-11-1c.dynamic.ziggo.nl) |
| 07:10.10 | Freenex | Some of the NEC REGISTER packets have a 500 Server error response |
| 07:10.33 | Freenex | could anyone help me where to look to solve it? |
| 07:10.51 | *** join/#asterisk mirela666 (~mirkob@52D9ADEB.cm-11-1c.dynamic.ziggo.nl) |
| 07:13.07 | *** join/#asterisk mirela666 (~mirkob@52D9ADEB.cm-11-1c.dynamic.ziggo.nl) |
| 07:18.08 | *** join/#asterisk mirela666 (~mirkob@52D9ADEB.cm-11-1c.dynamic.ziggo.nl) |
| 07:20.11 | *** join/#asterisk klow (~textual@c-98-247-49-57.hsd1.wa.comcast.net) |
| 07:20.19 | *** join/#asterisk hehol (~hehol@gatekeeper.loca.net) |
| 07:22.43 | *** join/#asterisk pchero_work (~pchero@109.70.54.56) |
| 07:31.20 | *** join/#asterisk matrix1233 (~matrix123@197.1.150.52) |
| 07:44.30 | *** join/#asterisk war9407 (war@static-72-73-18-14.clppva.fios.verizon.net) |
| 07:55.23 | *** join/#asterisk defswork (~aporter@212.38.66.116) |
| 07:55.49 | *** join/#asterisk Tiffon (~name@unaffiliated/tiff0n) |
| 07:59.22 | *** join/#asterisk evil_gordita (robert@ip70-188-41-127.rn.hr.cox.net) |
| 08:05.33 | *** join/#asterisk andremar (~andremar@164.185.37.188.rev.vodafone.pt) |
| 08:06.55 | *** join/#asterisk matrix1233 (~matrix123@197.1.150.52) |
| 08:18.20 | *** join/#asterisk Dovid (~dovid@ool-4573a525.dyn.optonline.net) |
| 08:30.30 | *** join/#asterisk mirela666 (~mirkob@2a00:1950:400:0:dd1b:24e4:22b6:3d70) |
| 08:43.59 | *** join/#asterisk klow (~textual@c-98-247-49-57.hsd1.wa.comcast.net) |
| 08:46.47 | *** join/#asterisk troyt (~troyt@2601:681:4600:7641:44dd:acff:fe85:9c8e) |
| 08:50.35 | *** join/#asterisk ruied (~ruied@192.61.136.95.rev.vodafone.pt) |
| 09:33.35 | *** join/#asterisk jkroon (~jkroon@154.73.35.201) |
| 09:34.11 | *** join/#asterisk andremar (~andremar@105.211.54.77.rev.vodafone.pt) |
| 10:09.13 | *** join/#asterisk andremar (~andremar@105.211.54.77.rev.vodafone.pt) |
| 10:09.47 | *** join/#asterisk J0hnSteel (~J0hnSteel@92.55.116.125) |
| 10:14.16 | *** join/#asterisk thiagoc (~thiagoc@unaffiliated/thiagoc) |
| 10:42.14 | *** join/#asterisk dunderproto (~dunderpro@125-230-77-69.dynamic.hinet.net) |
| 10:42.39 | *** join/#asterisk zloidemon (~zloidemon@212.154.136.98) |
| 10:47.02 | zloidemon | Why asterisk when using AGI write hangup to death socket http://dpaste.com/2CNYZYH ? |
| 10:47.38 | zloidemon | Twice HANGUP\n to the remote socket. First time after hangup, and second after end connection by remote server |
| 11:08.45 | *** join/#asterisk Iamnach0 (~Iamnacho@ip24-252-4-195.om.om.cox.net) |
| 11:17.33 | WIMPy | Better syntax checks for the dialplan could be really helpfull. |
| 11:19.07 | wdoekes | WIMPy: an asterisklint? |
| 11:20.30 | WIMPy | The ones on loading the dialplan can help, but they could be better. |
| 11:24.13 | *** join/#asterisk puzzled (~puzzled@2001:982:1097:1::1:3) |
| 11:25.07 | *** join/#asterisk dandann00dle (uid120491@gateway/web/irccloud.com/x-haeflextlnhqanas) |
| 11:57.30 | *** join/#asterisk sekil (~sekil@nat-73.net011.net) |
| 12:28.08 | *** join/#asterisk avb (~avb@45.55.203.176) |
| 12:28.47 | avb | hey guys, any asterisk devs here? seems i been hacked using some 0day exploit on res_odbc |
| 12:29.43 | WIMPy | define "hacked". |
| 12:30.39 | avb | attacker got access to one of the extensions without even doing any bruteforce attacks |
| 12:30.53 | avb | ext had a strong password set |
| 12:32.49 | WIMPy | Your description is extremely vague and the link to res_odbc even more so. |
| 12:33.02 | wdoekes | first thought is that the password is obtained through some other means, e.g. from the device where it was used |
| 12:33.30 | avb | [Oct 14 23:45:02] NOTICE[7100][C-00001ec8] chan_sip.c: Failed to authenticate device a'or'3=3--<sip:a'or'3=3--@52.62.8.168>;tag=91099915 |
| 12:33.32 | avb | [Oct 14 23:47:04] NOTICE[7100][C-00001ec9] chan_sip.c: Call from '1001' (199.48.164.242:5070) to extension '011441224928268' rejected because extension not found in context 'outgoing'. |
| 12:33.42 | WIMPy | Or Provisioning. |
| 12:33.46 | avb | thats what I got in the logs |
| 12:33.53 | WIMPy | That's normal attacks. |
| 12:33.58 | avb | there is no provisioning and nobody were using this account yet |
| 12:34.25 | *** join/#asterisk [TK]D-Fender (~joe@216-191-106-165.dedicated.allstream.net) |
| 12:34.46 | WIMPy | Are you sure the account is set up correctly? |
| 12:34.50 | avb | normal attacks are going into default context without a correct auth :) |
| 12:35.00 | avb | yes, I am |
| 12:35.14 | *** join/#asterisk mirela666 (~mirkob@2a00:1950:400:0:70f9:6495:474c:698d) |
| 12:35.22 | WIMPy | Did you get sip debug? |
| 12:36.01 | avb | ive tried to catch second attempt, but attacker havent retried yet |
| 12:45.21 | *** join/#asterisk beardy (~beardy@unaffiliated/beardy) |
| 12:49.26 | Kunsi | a'or'3=3-- looks like sql injection atack |
| 12:50.01 | Kunsi | but res_odbc should prevent that ... |
| 12:50.10 | WIMPy | It looks like a broken attacker script. |
| 12:51.51 | WIMPy | has also seen sip:'or''='@... |
| 12:54.43 | file | if anyone ever feels there's a security vulnerability then https://wiki.asterisk.org/wiki/display/AST/Asterisk+Security+Vulnerabilities has the email address and what would be good to see to determine it |
| 12:54.58 | WIMPy | just notices that before those alls unauthenticated calls came from sip:sip@... |
| 13:03.05 | *** join/#asterisk slav3_sergal (~frankthet@unaffiliated/slav3-kitten/x-0866809) |
| 13:08.28 | *** join/#asterisk bounceman (~bounceman@185.32.9.250) |
| 13:09.22 | bounceman | Hi Asterisk and Samot( I know you are here ). What are the reasons for Asterisk to send 401 on a REGISTER? The asterisk CLI doesn't say much even on core debug 9. |
| 13:09.36 | bounceman | The sip credentials work from office A but not from office B, which is odd |
| 13:10.04 | Samot | A 401 reply is part of the auth process. |
| 13:10.16 | Samot | Endpoint sends REGISTER, no auth details.. |
| 13:10.31 | Samot | Asterisk replies with 401 with digest details.. |
| 13:10.47 | Samot | Endpoint replies with REGISTER with auth digest data |
| 13:10.56 | avb | file: WIMPy, thanks, ill open a case there. |
| 13:11.01 | Samot | Credentials are checked then. |
| 13:11.19 | Samot | Generally Asterisk will send a 403 Forbidden on bad auths. |
| 13:11.20 | file | avb, what version of Asterisk? |
| 13:12.12 | Samot | core debug won't really show anything. You'll want at least a SIP debug to see if the auth challenge is being handled properly. |
| 13:12.55 | *** join/#asterisk Dovid (~dovid@ool-4573a525.dyn.optonline.net) |
| 13:13.16 | *** join/#asterisk Akuma (~Akuma@AYLMPQ0104W-LP130-01-1279778401.dsl.bell.ca) |
| 13:13.51 | bounceman | Samot delivers. I do not see that the INVITE changes anything after the 401. It makes me wonder if the 401 actually reaches the endpoint and all INVITES are retransmissions. |
| 13:14.18 | Samot | What INVITE? |
| 13:14.27 | Samot | INVITE != REGISTER |
| 13:17.13 | bounceman | Typo Samot... typo |
| 13:20.56 | bounceman | REGISTER, 401, REGISTER, 401, REGISTER 401 spam basically |
| 13:23.18 | Samot | Is the REGISTER following the 401 a reply? |
| 13:23.32 | Samot | Or is the endpoint sending a new REGISTER because it didn't get the 401? |
| 13:24.42 | Samot | bounceman: Actually show an attempt. |
| 13:24.44 | Samot | ~pb |
| 13:24.44 | infobot | somebody said pastebin was a web-based service where you should paste anything over 3 lines so you don't flood the channel. Here are links to a few: http://pastebin.ca, http://channels.debian.net/paste, http://paste.lisp.org, http://bin.cakephp.org/; or install pastebinit with yum or aptitude. |
| 13:24.47 | scv | they're probably retransmissions |
| 13:25.02 | scv | that symptom is pretty common when there's fragmentation and no reassembly |
| 13:25.14 | Samot | I want to see an attempt. |
| 13:25.53 | bounceman | Sure |
| 13:29.24 | bounceman | http://codepad.org/0H0edXGK |
| 13:29.50 | file | retransmission |
| 13:29.58 | bounceman | How can you tell? |
| 13:30.09 | file | CSeq |
| 13:30.19 | Samot | Yup. |
| 13:30.23 | bounceman | Great! |
| 13:30.25 | bounceman | Case closed |
| 13:30.26 | Samot | Is the PBX local to the endpoint? |
| 13:30.47 | bounceman | Samot: my responsibility just ended. |
| 13:31.09 | Samot | Are you sure? |
| 13:31.22 | bounceman | The 401 never reaches the endpoint |
| 13:31.29 | bounceman | therefor retransmission? |
| 13:32.00 | Samot | That's what it looks like. |
| 13:32.33 | bounceman | Yeah, what I mean is that I will take this information in a golden envelope and run to the other side of the internet at the source. |
| 13:33.01 | Samot | Is the PBX local to the endpoint? |
| 13:34.00 | bounceman | They are fully aware of each other, if that it what you are asking. |
| 13:34.07 | Samot | No, not at all. |
| 13:34.07 | bounceman | Local no, aware yes |
| 13:34.11 | Samot | OK |
| 13:34.28 | Samot | So you have the device peer setup to show nat=yes because the device is behind NAT? |
| 13:34.32 | [TK]D-Fender | bounceman, we need actual * SIP debug.... |
| 13:36.00 | bounceman | comedia and force_rport |
| 13:38.49 | Samot | bounceman: asterisk -rvvvvvv |
| 13:38.52 | Samot | sip set debug on |
| 13:38.59 | Samot | make the attempt and paste that. |
| 13:39.26 | bounceman | I cannot replicate it now since I do not currently have access to the setup. I have to wait for someone am afraid. |
| 13:40.00 | Samot | Then where did the other debug come from you just posted? |
| 13:40.03 | [TK]D-Fender | Pro Tip #12 : Don't ask for an autopsy when you can't provide a body |
| 13:41.28 | bounceman | Samot: dump I got earlier |
| 13:41.49 | bounceman | I already gotten plenty of autopsy for the dump I provded D-Fender, it was really helpfull. |
| 13:42.12 | [TK]D-Fender | Real proof is in the bits we don't see |
| 13:42.34 | bounceman | Well, I can just verify this theory by dumping at the endpoint and see that the 401's reaches it. |
| 13:43.32 | Samot | Well in the debug you provided. I don't see any public IP details in the SIP message from the endpoint. |
| 13:44.04 | Samot | Not even a received= tag. |
| 13:44.53 | bounceman | Isnt the point of comedia to ignore the SDP address and wait for RTP from the src and plugg that IP address instead? |
| 13:46.26 | Samot | Why would there be SDP in a REGISTER? |
| 13:49.27 | bounceman | Ah, yes. I am to smashed for these kinds of things now |
| 13:49.50 | [TK]D-Fender | that is assuming the peer rules APPLY at this point. And we don't have prrof of where things are actually coming from and going to. Packet contents are not proof of that. |
| 13:50.27 | Samot | Well I guess we have to wait for the body. |
| 13:52.59 | bounceman | Wha! The info provided regarding the retransmissions are all I need currently. |
| 13:54.16 | [TK]D-Fender | And without proper source & dest proof ... the rest of the fuckup remains hidden |
| 13:55.18 | *** join/#asterisk MaliutaLap (nikolai@unaffiliated/maliuta) |
| 13:57.46 | *** join/#asterisk thiagoc_ (~thiagoc@unaffiliated/thiagoc) |
| 13:59.15 | bounceman | If the 401 reaches the correct FW, isn't that the proof? |
| 13:59.30 | bounceman | Then it would be an internal routing issue in the fw if it never reaches the endpoint. |
| 13:59.37 | bounceman | or nat fuckup |
| 14:00.28 | [TK]D-Fender | Not just the "if", but the "how" |
| 14:00.34 | [TK]D-Fender | And guessing is for chumps |
| 14:05.46 | *** join/#asterisk putnopvut (putnopvut@asterisk/master-of-queues/mmichelson) |
| 14:05.46 | *** mode/#asterisk [+o putnopvut] by ChanServ |
| 14:12.01 | bounceman | Yeah, we will investigate and find the root cause. I am sure. |
| 14:12.07 | bounceman | I need to ask what D-Fender stands for |
| 14:12.33 | bounceman | Or the D more specifically |
| 14:15.45 | *** join/#asterisk kharwell (kharwell@nat/digium/x-xpkwcwmvdhvumniu) |
| 14:18.43 | scv | ( ͡° ÍÊ Í¡Â°) |
| 14:45.14 | *** join/#asterisk rmudgett (rmudgett@nat/digium/x-hlsfqmdhzosyzfwm) |
| 14:45.48 | bounceman | Nice |
| 14:47.39 | bounceman | Anyhow, the trace on the endpoint verifies that the 401 reaches the softphone. But it does not seem to care. It sends another REGISTER with the same CSeq and without authentication as required |
| 14:58.03 | *** join/#asterisk brokensyntax (~quassel@45.62.254.31) |
| 14:58.27 | brokensyntax | Power-down and replace UPS on client site yesterday... Power up... PRI doesn't connect. Now at 14hours... still no PRI. *sighs* |
| 15:13.02 | eric_hill | brokensyntax: Have you verified power to the equipment? <wink> |
| 15:14.03 | brokensyntax | LOL Eric :P Yeah I logged on to everything on my rack. Waiting on the trunk provider. |
| 15:16.05 | eric_hill | Me: I'm logged into the router and the port is in a down/down state, no carrier. Telco: Have you verified power? Me: .... |
| 15:22.27 | brokensyntax | grins |
| 15:22.37 | brokensyntax | No, no power, I'm hallucinating my log-in ;) |
| 15:48.14 | *** join/#asterisk igcewieling (~ewieling@ip98-170-211-145.pn.at.cox.net) |
| 16:16.41 | *** join/#asterisk defsdoor (~andy@cpc35-sutt4-2-0-cust184.19-1.cable.virginm.net) |
| 16:23.11 | *** join/#asterisk shootbird (~quassel@beepbeep.serverpit.com) |
| 16:44.47 | *** join/#asterisk pchero (~pchero@109.70.54.56) |
| 16:50.59 | *** join/#asterisk Jesterboxboy (~Thunderbi@80-109-194-26.cable.dynamic.surfer.at) |
| 17:02.39 | *** join/#asterisk lnxlsck (~bruno@av3-84-90-162-98.netvisao.pt) |
| 17:03.00 | *** join/#asterisk seiggy (~seiggy@74.203.105.194) |
| 17:05.21 | ruied | Hello. I have "channel originate sip/23 application Playback hello-world", I would like to add a sip header (Call-info), is it possible? |
| 17:09.05 | ruied | I couldI want to ext 23 answers the call with no intervention and hen run an application or go to a dialplan to do something... My dificulty is getting the 23 to answer it with the originate |
| 17:11.21 | igcewieling | I cant' think of a way at the moment. Normally I'd use local channels, but you can't "sip stuff" on local channels. |
| 17:15.07 | ruied | I want to make an external cron job so when my ofice close it will send an alert info to some phones with a Playback "Store closed". Call-info:answer-after=0 |
| 17:17.42 | igcewieling | Using SNOMs? |
| 17:18.30 | ruied | grandstream |
| 17:19.12 | Kunsi | ruied: why not play sound directly by asterisk? |
| 17:20.28 | ruied | Kunsi, Asterisk is far away from the phones... and is virtualized in proxmox... no direct sound card |
| 17:21.02 | ruied | from the phones - from the persons |
| 17:21.04 | *** join/#asterisk Y04NN (~y04nn@2a01:e34:ef37:5870:85d9:dc5b:4b2d:795d) |
| 17:23.54 | Samot | Who do you want to play the recording for? |
| 17:26.58 | ruied | Samot, I want to playback("Store closing ") everyday at 18:00h to two phones (two departments) in loud speaker without human intervention. |
| 17:27.06 | Samot | OK |
| 17:27.23 | Samot | First, Originate treats the call as an inbound call once it's answered. |
| 17:27.57 | Samot | So you would do something like Local/12345@alert-phones |
| 17:28.25 | Samot | Then in [alert-phones], you answer the call, then do all the great stuff you want.. |
| 17:28.38 | Samot | then Dial(SIP/1&SIP/2) |
| 17:28.57 | Samot | When those answer, you playback the announcement. |
| 17:29.25 | Samot | When the phones answer the call, Asterisk will change the direction from Outbound to Inbound for those calls. |
| 17:30.04 | Samot | Well actually, when it answers the local channel. My mistake. |
| 17:32.14 | Samot | The Dial(SIP/1&SIP/2) would be in the context you set in the originate command. |
| 17:34.16 | ruied | ah! great! going to make some tests... :) |
| 17:42.37 | *** join/#asterisk eric_hill (eric_hill@wsip-184-180-163-60.ks.ks.cox.net) |
| 17:52.23 | *** join/#asterisk ludic (043b9762@gateway/web/freenode/ip.4.59.151.98) |
| 17:54.57 | *** join/#asterisk klow (~textual@c-98-247-49-57.hsd1.wa.comcast.net) |
| 18:01.07 | *** join/#asterisk matrix1233 (~matrix123@197.1.150.52) |
| 18:02.23 | [TK]D-Fender | That dial is not the way... |
| 18:03.30 | *** join/#asterisk seiggy (~seiggy@74.203.105.194) |
| 18:05.03 | ruied | Samot, working already. had to add "application Wait 10". Without an "application" running it stops the context... "originate local/aaa@<context> application Wait 10" |
| 18:05.19 | ruied | [TK]D-Fender, I'm using Page() |
| 18:06.16 | *** join/#asterisk pvoigt (~Linux@unaffiliated/pvoigt) |
| 18:07.09 | ruied | I'm a bit confused the need for an "aplication" so * can enter in the context.... |
| 18:07.22 | Samot | It doesn't need an application. |
| 18:08.48 | *** join/#asterisk pvoigt (~Linux@unaffiliated/pvoigt) |
| 18:13.00 | ruied | it doesn't work only with "originate local/<ext>@<context>" it needs application | extension . With that, asterisk shows to me command syntax |
| 18:18.18 | *** join/#asterisk Y04NN (~y04nn@2a01:e34:ef37:5870:7970:55ab:3d31:39d) |
| 18:18.26 | *** join/#asterisk seiggy (~seiggy@74.203.105.194) |
| 18:19.21 | igcewieling | you can also point it to the dialplan instead of an application |
| 18:20.24 | igcewieling | go read core show application originate |
| 18:26.25 | ruied | igcewieling, yes, but I'm already pointing with the local/ext@context what I need is the channel to be "open" until the extension ends at the dialplan. I've read the syntax... |
| 18:28.22 | *** join/#asterisk [NC] (~nc@rv1.sabius.net) |
| 18:30.43 | igcewieling | I was referring to you thinking an application is required. it isn't. |
| 18:58.20 | *** join/#asterisk Y04NN (~y04nn@2a01:e34:ef37:5870:611e:2cf1:ff32:bb3e) |
| 19:14.36 | *** join/#asterisk Akuma (~Akuma@AYLMPQ0104W-LP130-01-1279778401.dsl.bell.ca) |
| 19:24.36 | *** join/#asterisk tuxd00d (~tuxd00d@wsip-184-179-14-87.ph.ph.cox.net) |
| 19:27.47 | *** join/#asterisk miralin (~Thunderbi@85.115.248.15) |
| 19:29.18 | *** join/#asterisk seiggy (~seiggy@74.203.105.194) |
| 19:40.58 | *** join/#asterisk mlhess (~mlhess@drupal.org/user/102818/view) |
| 19:42.23 | *** join/#asterisk Y04NN (~y04nn@nayon.fr) |
| 19:49.47 | *** join/#asterisk klow (~textual@c-98-247-49-57.hsd1.wa.comcast.net) |
| 19:55.12 | *** join/#asterisk miralin (~Thunderbi@85.115.248.15) |
| 20:03.16 | *** join/#asterisk KaliLinuxGR (~alexandro@unaffiliated/kalilinuxgr) |
| 20:39.43 | *** join/#asterisk Oatmeal (~Suzeanne@99-103-96-198.lightspeed.iplsin.sbcglobal.net) |
| 20:47.38 | *** join/#asterisk joako (~joako@opensuse/member/joak0) |
| 21:05.25 | *** join/#asterisk Y04NN (~y04nn@2a01:e34:ef37:5870:71b1:dab7:d24:32b6) |
| 21:15.09 | *** join/#asterisk KaliLinuxGR (~alexandro@unaffiliated/kalilinuxgr) |
| 21:27.50 | *** join/#asterisk tuxd00d (~tuxd00d@wsip-184-179-14-87.ph.ph.cox.net) |
| 21:37.58 | *** join/#asterisk monsterco (~monsterco@70.50.209.133) |
| 21:38.18 | *** part/#asterisk monsterco (~monsterco@70.50.209.133) |
| 21:41.31 | *** join/#asterisk Akuma (~Akuma@AYLMPQ0104W-LP130-01-1279778401.dsl.bell.ca) |
| 21:46.43 | *** join/#asterisk tuxd00d (~tuxd00d@wsip-184-179-14-87.ph.ph.cox.net) |
| 22:11.47 | *** join/#asterisk klow (~textual@c-98-247-49-57.hsd1.wa.comcast.net) |
| 22:19.43 | *** join/#asterisk MaliutaLap (nikolai@unaffiliated/maliuta) |
| 22:20.28 | *** join/#asterisk KaliLinuxGR (~alexandro@unaffiliated/kalilinuxgr) |
| 22:38.53 | *** join/#asterisk MaliutaLap (nikolai@unaffiliated/maliuta) |
| 22:39.28 | *** join/#asterisk [TK]D-Fender (~joe@64.235.216.2) |
| 22:48.49 | *** join/#asterisk tristero (~al.f.zero@unaffiliated/transfinite) |
| 23:01.35 | *** part/#asterisk kharwell (kharwell@nat/digium/x-xpkwcwmvdhvumniu) |
| 23:08.17 | *** join/#asterisk Oatmeal (~Suzeanne@99-103-96-198.lightspeed.iplsin.sbcglobal.net) |
| 23:15.35 | *** join/#asterisk thiagoc (~thiagoc@unaffiliated/thiagoc) |
| 23:45.06 | *** join/#asterisk tuxd00d (~tuxd00d@ip68-106-11-24.ph.ph.cox.net) |
