RedMax EXtreme EX-LRT Anleitung zur Fehlerbehebung PDF herunterladen (Seite 97)

Oracle SBC Security Guide

Description

Raw message

A message was rejected by the SD.

The status code and reason given in

parenthesis will change based on

the type of malformation. Examples

given here include:

An INVITE received from a

forbidden endpoint. In this case,

allow-anonymous on the SIP

interface was set to agents-only, and

the INVITE was not from an agent.

An INVITE had a Max-Forwards

parameter that had decremented to

zero, and the SBC could not

forward it further

Four examples of malformed

messages that were generated from

a Protos attack (too large, missing

header, bad request URI,

unsupported URI).

Apr 1 11:26:27.603 sipd@CSE-4500-6: IDS[64]

[IDS_LOG]INVITE from source 172.41.0.3:5060 to

dest 172.41.0.2:5060[UDP] realm=access;

From=sipp

<sip:[email protected]:5060>;tag=10387SIPpTag001;

target=sip:[email protected]:5060 rejected!;

status=403 (Forbidden)

OR

Nov 28 19:52:40 172.41.3.41 CSE-4500-6

sipd[2dcc32a4] ERROR [IDS_LOG]INVITE from

source 192.168.66.54:5060 to dest

192.168.66.2:5060[UDP] realm=access;

From="hacker"<sip:[email protected]:30000>;

target=sip:[email protected] rejected!;

status=483 (Too Many Hops); error=invalid

message

OR

IDS_LOG]INVITE from source 192.168.222.1:5060

to dest 192.168.222.50:5060[UDP] realm=access;

From=227 <sip:[email protected]>;tag=227;

target=sip <omitted message> rejected!;

status=513 (Message Too Big)

OR

May 22 14:40:39.033 sipd@: IDS[64]

[IDS_LOG]INVITE from source 192.168.222.1:5060

to dest 192.168.222.50:5060[UDP] realm=access;

From=389 <sip:[email protected]>;tag=389;

target=sip:[email protected] rejected!;

status=400 (Invalid/Missing Via Header)

OR

May 22 15:08:02.015 sipd@: IDS[64]

[IDS_LOG]INVITE from source 192.168.222.1:5060

to dest 192.168.222.50:5060[UDP] realm=access;

From=206 <sip:[email protected]>;tag=206;

target=%s%s%s%s%s:[email protected]

rejected!; status=400 (Bad Request-URI)

OR

May 22 15:08:01.088 sipd@: IDS[64]

[IDS_LOG]INVITE from source 192.168.222.1:5060

to dest 192.168.222.50:5060[UDP] realm=access;

From=197 <sip:[email protected]>;tag=197;

target=aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa:noone@

sip.no.invalid rejected!; status=416

(Unsupported URI Scheme)

1 2 ... 92 93 94 95 96 97 98 99 100 101 102 ... 141 142

Kommentare zu diesen Handbüchern

Keine Kommentare