Freeswitch is consuming bandwidth continously since upgrade to Build 799

119 views
Skip to first unread message

Kirk Pathumanun

unread,
Jan 23, 2018, 12:29:03 PM1/23/18
to BigBlueButton-dev
Hello,

Since I updated BBB 2.0 to the latest build 799 as there was problem on the webcam issue stated by Fred. Now my development server is exhibiting an unusual consumption of bandwidth on freeswitch. I'm 100% sure that no one else is using this server for BBB communication since this is a pure Dev server that we use to check list the stability of latest build before upgrading our production servers. Have a look at the picture the freeswitch process has been doing since the upgrade an non stop for well over 10 hours. So is this a bug ? but this is definite waste of my VPS bandwidth. Thank you on your advice in advance.

Regards,

Kirk
freeswitch.png

Kirk Pathumanun

unread,
Jan 23, 2018, 12:41:28 PM1/23/18
to BigBlueButton-dev


100% definite confirmed by nethogs on freeswitch is aimlessly trasmitting out packets for no reason please look at the screen cap
nethog.png

Chad Pilkey

unread,
Jan 23, 2018, 12:54:43 PM1/23/18
to BigBlueButton-dev
This is out of my knowledge space, but if you open the FreeSWITCH command line interface you might find something useful.

cd /opt/freeswitch/bin/
./fs_cli

There's also commands that you can use to make the output more verbose. I think running "/log <level>" in the CLI will change it. The starting is "default" and I think "8" or "9" is the highest.

Kirk Pathumanun

unread,
Jan 23, 2018, 12:59:15 PM1/23/18
to BigBlueButton-dev
Hello Chad,

I will give this a try since I've been using BBB since 2011 this is probably the first time I have to dive into the actual freeswitch command line for debug. Definitely kinda out of my knowledge space too.

Regards,

Kirk

Kirk Pathumanun

unread,
Jan 23, 2018, 1:05:54 PM1/23/18
to BigBlueButton-dev
Hello

I did ran the debug command on Freeswitch as Chad suggested and this is the output which is GREEK to me since I'm not proficient on freeswitch pasted below. Please advised thank you



2018-01-23 18:02:15.722565 [NOTICE] switch_channel.c:1104 New Channel sofia/external/10...@198.199.105.11 [6c92c4ef-9c5c-4154-be76-9ccb54ecdc0b]
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:584 (sofia/external/10...@198.199.105.11) Running State Change CS_NEW (Cur 1 Tot 6)
2018-01-23 18:02:15.722565 [DEBUG] sofia.c:10070 sofia/external/10...@198.199.105.11 receiving invite from 149.202.95.24:5076 version: 1.9.0 git 503db7b 2017-09-18 22:2                                        3:45Z 64bit
2018-01-23 18:02:15.722565 [DEBUG] sofia.c:7283 Channel sofia/external/10...@198.199.105.11 entering state [received][100]
2018-01-23 18:02:15.722565 [DEBUG] sofia.c:7293 Remote SDP:
v=0
o=sipcli-Session 450607443 1611526647 IN IP4 149.202.95.24
s=sipcli
c=IN IP4 149.202.95.24
t=0 0
m=audio 5078 RTP/AVP 18 0 8 101
a=rtpmap:18 G729/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:8 PCMA/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=ptime:20

2018-01-23 18:02:15.722565 [DEBUG] sofia.c:7685 (sofia/external/10...@198.199.105.11) State Change CS_NEW -> CS_INIT
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:603 (sofia/external/10...@198.199.105.11) State NEW
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:584 (sofia/external/10...@198.199.105.11) Running State Change CS_INIT (Cur 1 Tot 6)
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:627 (sofia/external/10...@198.199.105.11) State INIT
2018-01-23 18:02:15.722565 [DEBUG] mod_sofia.c:93 sofia/external/10...@198.199.105.11 SOFIA INIT
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:40 sofia/external/10...@198.199.105.11 Standard INIT
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:48 (sofia/external/10...@198.199.105.11) State Change CS_INIT -> CS_ROUTING
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:627 (sofia/external/10...@198.199.105.11) State INIT going to sleep
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:584 (sofia/external/10...@198.199.105.11) Running State Change CS_ROUTING (Cur 1 Tot 6)
2018-01-23 18:02:15.722565 [DEBUG] switch_channel.c:2249 (sofia/external/10...@198.199.105.11) Callstate Change DOWN -> RINGING
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:643 (sofia/external/10...@198.199.105.11) State ROUTING
2018-01-23 18:02:15.722565 [DEBUG] mod_sofia.c:154 sofia/external/10...@198.199.105.11 SOFIA ROUTING
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:236 sofia/external/10...@198.199.105.11 Standard ROUTING
2018-01-23 18:02:15.722565 [INFO] mod_dialplan_xml.c:637 Processing 1001 <1001>->011972598437832 in context public
Dialplan: sofia/external/10...@198.199.105.11 parsing [public->unloop] continue=false
Dialplan: sofia/external/10...@198.199.105.11 Regex (PASS) [unloop] ${unroll_loops}(true) =~ /^true$/ break=on-false
Dialplan: sofia/external/10...@198.199.105.11 Regex (FAIL) [unloop] ${sip_looped_call}() =~ /^true$/ break=on-false
Dialplan: sofia/external/10...@198.199.105.11 parsing [public->outside_call] continue=true
Dialplan: sofia/external/10...@198.199.105.11 Absolute Condition [outside_call]
Dialplan: sofia/external/10...@198.199.105.11 Action set(outside_call=true)
Dialplan: sofia/external/10...@198.199.105.11 Action export(RFC2822_DATE=${strftime(%a, %d %b %Y %T %z)})
Dialplan: sofia/external/10...@198.199.105.11 parsing [public->bbb_sp_call] continue=true
Dialplan: sofia/external/10...@198.199.105.11 Regex (FAIL) [bbb_sp_call] network_addr(149.202.95.24) =~ /198.199.105.11/ break=on-false
Dialplan: sofia/external/10...@198.199.105.11 parsing [public->bbb_webrtc_call] continue=true
Dialplan: sofia/external/10...@198.199.105.11 Regex (FAIL) [bbb_webrtc_call] ${sip_via_protocol}(udp) =~ /^wss?$/ break=on-false
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:286 (sofia/external/10...@198.199.105.11) State Change CS_ROUTING -> CS_EXECUTE
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:643 (sofia/external/10...@198.199.105.11) State ROUTING going to sleep
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:584 (sofia/external/10...@198.199.105.11) Running State Change CS_EXECUTE (Cur 1 Tot 6)
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:650 (sofia/external/10...@198.199.105.11) State EXECUTE
2018-01-23 18:02:15.722565 [DEBUG] mod_sofia.c:209 sofia/external/10...@198.199.105.11 SOFIA EXECUTE
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:328 sofia/external/10...@198.199.105.11 Standard EXECUTE
EXECUTE sofia/external/10...@198.199.105.11 set(outside_call=true)
2018-01-23 18:02:15.722565 [DEBUG] mod_dptools.c:1588 SET sofia/external/10...@198.199.105.11 [outside_call]=[true]
EXECUTE sofia/external/10...@198.199.105.11 export(RFC2822_DATE=Tue, 23 Jan 2018 18:02:15 +0000)
2018-01-23 18:02:15.722565 [DEBUG] switch_channel.c:1296 EXPORT (export_vars) [RFC2822_DATE]=[Tue, 23 Jan 2018 18:02:15 +0000]
2018-01-23 18:02:15.722565 [NOTICE] switch_core_state_machine.c:385 sofia/external/10...@198.199.105.11 has executed the last dialplan instruction, hanging up.
2018-01-23 18:02:15.722565 [NOTICE] switch_core_state_machine.c:387 Hangup sofia/external/10...@198.199.105.11 [CS_EXECUTE] [NORMAL_CLEARING]
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:650 (sofia/external/10...@198.199.105.11) State EXECUTE going to sleep
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:584 (sofia/external/10...@198.199.105.11) Running State Change CS_HANGUP (Cur 1 Tot 6)
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:850 (sofia/external/10...@198.199.105.11) Callstate Change RINGING -> HANGUP
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:852 (sofia/external/10...@198.199.105.11) State HANGUP
2018-01-23 18:02:15.722565 [DEBUG] mod_sofia.c:449 Channel sofia/external/10...@198.199.105.11 hanging up, cause: NORMAL_CLEARING
2018-01-23 18:02:15.722565 [DEBUG] mod_sofia.c:588 Responding to INVITE with: 480
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:60 sofia/external/10...@198.199.105.11 Standard HANGUP, cause: NORMAL_CLEARING
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:852 (sofia/external/10...@198.199.105.11) State HANGUP going to sleep
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:619 (sofia/external/10...@198.199.105.11) State Change CS_HANGUP -> CS_REPORTING
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:584 (sofia/external/10...@198.199.105.11) Running State Change CS_REPORTING (Cur 1 Tot 6)
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:938 (sofia/external/10...@198.199.105.11) State REPORTING
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:174 sofia/external/10...@198.199.105.11 Standard REPORTING, cause: NORMAL_CLEARING
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:938 (sofia/external/10...@198.199.105.11) State REPORTING going to sleep
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:610 (sofia/external/10...@198.199.105.11) State Change CS_REPORTING -> CS_DESTROY
2018-01-23 18:02:15.722565 [DEBUG] switch_core_session.c:1713 Session 6 (sofia/external/10...@198.199.105.11) Locked, Waiting on external entities
2018-01-23 18:02:15.722565 [NOTICE] switch_core_session.c:1731 Session 6 (sofia/external/10...@198.199.105.11) Ended
2018-01-23 18:02:15.722565 [NOTICE] switch_core_session.c:1735 Close Channel sofia/external/10...@198.199.105.11 [CS_DESTROY]
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:741 (sofia/external/10...@198.199.105.11) Running State Change CS_DESTROY (Cur 0 Tot 6)
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:751 (sofia/external/10...@198.199.105.11) State DESTROY
2018-01-23 18:02:15.722565 [DEBUG] mod_sofia.c:354 sofia/external/10...@198.199.105.11 SOFIA DESTROY
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:181 sofia/external/10...@198.199.105.11 Standard DESTROY
2018-01-23 18:02:15.722565 [DEBUG] switch_core_state_machine.c:751 (sofia/external/10...@198.199.105.11) State DESTROY going to sleep
2018-01-23 18:02:16.282520 [NOTICE] switch_channel.c:1104 New Channel sofia/external/80...@198.199.105.11 [bf43ed4c-5203-45ad-a976-552d3f494334]
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:584 (sofia/external/80...@198.199.105.11) Running State Change CS_NEW (Cur 1 Tot 7)
2018-01-23 18:02:16.282520 [DEBUG] sofia.c:10070 sofia/external/80...@198.199.105.11 receiving invite from 192.99.101.211:55378 version: 1.9.0 git 503db7b 2017-09-18 22                                        :23:45Z 64bit
2018-01-23 18:02:16.282520 [DEBUG] sofia.c:7283 Channel sofia/external/80...@198.199.105.11 entering state [received][100]
2018-01-23 18:02:16.282520 [DEBUG] sofia.c:7293 Remote SDP:
v=0
o=8019 16264 18299 IN IP4 192.168.1.83
s=call
c=IN IP4 192.168.1.83
t=0 0
m=audio 25282 RTP/AVP 0 101
a=rtpmap:0 pcmu/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-11

2018-01-23 18:02:16.282520 [DEBUG] sofia.c:7685 (sofia/external/80...@198.199.105.11) State Change CS_NEW -> CS_INIT
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:603 (sofia/external/80...@198.199.105.11) State NEW
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:584 (sofia/external/80...@198.199.105.11) Running State Change CS_INIT (Cur 1 Tot 7)
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:627 (sofia/external/80...@198.199.105.11) State INIT
2018-01-23 18:02:16.282520 [DEBUG] mod_sofia.c:93 sofia/external/80...@198.199.105.11 SOFIA INIT
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:40 sofia/external/80...@198.199.105.11 Standard INIT
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:48 (sofia/external/80...@198.199.105.11) State Change CS_INIT -> CS_ROUTING
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:627 (sofia/external/80...@198.199.105.11) State INIT going to sleep
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:584 (sofia/external/80...@198.199.105.11) Running State Change CS_ROUTING (Cur 1 Tot 7)
2018-01-23 18:02:16.282520 [DEBUG] switch_channel.c:2249 (sofia/external/80...@198.199.105.11) Callstate Change DOWN -> RINGING
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:643 (sofia/external/80...@198.199.105.11) State ROUTING
2018-01-23 18:02:16.282520 [DEBUG] mod_sofia.c:154 sofia/external/80...@198.199.105.11 SOFIA ROUTING
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:236 sofia/external/80...@198.199.105.11 Standard ROUTING
2018-01-23 18:02:16.282520 [INFO] mod_dialplan_xml.c:637 Processing 8019 <8019>->901148486858013 in context public
Dialplan: sofia/external/80...@198.199.105.11 parsing [public->unloop] continue=false
Dialplan: sofia/external/80...@198.199.105.11 Regex (PASS) [unloop] ${unroll_loops}(true) =~ /^true$/ break=on-false
Dialplan: sofia/external/80...@198.199.105.11 Regex (FAIL) [unloop] ${sip_looped_call}() =~ /^true$/ break=on-false
Dialplan: sofia/external/80...@198.199.105.11 parsing [public->outside_call] continue=true
Dialplan: sofia/external/80...@198.199.105.11 Absolute Condition [outside_call]
Dialplan: sofia/external/80...@198.199.105.11 Action set(outside_call=true)
Dialplan: sofia/external/80...@198.199.105.11 Action export(RFC2822_DATE=${strftime(%a, %d %b %Y %T %z)})
Dialplan: sofia/external/80...@198.199.105.11 parsing [public->bbb_sp_call] continue=true
Dialplan: sofia/external/80...@198.199.105.11 Regex (FAIL) [bbb_sp_call] network_addr(192.99.101.211) =~ /198.199.105.11/ break=on-false
Dialplan: sofia/external/80...@198.199.105.11 parsing [public->bbb_webrtc_call] continue=true
Dialplan: sofia/external/80...@198.199.105.11 Regex (FAIL) [bbb_webrtc_call] ${sip_via_protocol}(udp) =~ /^wss?$/ break=on-false
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:286 (sofia/external/80...@198.199.105.11) State Change CS_ROUTING -> CS_EXECUTE
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:643 (sofia/external/80...@198.199.105.11) State ROUTING going to sleep
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:584 (sofia/external/80...@198.199.105.11) Running State Change CS_EXECUTE (Cur 1 Tot 7)
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:650 (sofia/external/80...@198.199.105.11) State EXECUTE
2018-01-23 18:02:16.282520 [DEBUG] mod_sofia.c:209 sofia/external/80...@198.199.105.11 SOFIA EXECUTE
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:328 sofia/external/80...@198.199.105.11 Standard EXECUTE
EXECUTE sofia/external/80...@198.199.105.11 set(outside_call=true)
2018-01-23 18:02:16.282520 [DEBUG] mod_dptools.c:1588 SET sofia/external/80...@198.199.105.11 [outside_call]=[true]
EXECUTE sofia/external/80...@198.199.105.11 export(RFC2822_DATE=Tue, 23 Jan 2018 18:02:16 +0000)
2018-01-23 18:02:16.282520 [DEBUG] switch_channel.c:1296 EXPORT (export_vars) [RFC2822_DATE]=[Tue, 23 Jan 2018 18:02:16 +0000]
2018-01-23 18:02:16.282520 [NOTICE] switch_core_state_machine.c:385 sofia/external/80...@198.199.105.11 has executed the last dialplan instruction, hanging up.
2018-01-23 18:02:16.282520 [NOTICE] switch_core_state_machine.c:387 Hangup sofia/external/80...@198.199.105.11 [CS_EXECUTE] [NORMAL_CLEARING]
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:650 (sofia/external/80...@198.199.105.11) State EXECUTE going to sleep
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:584 (sofia/external/80...@198.199.105.11) Running State Change CS_HANGUP (Cur 1 Tot 7)
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:850 (sofia/external/80...@198.199.105.11) Callstate Change RINGING -> HANGUP
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:852 (sofia/external/80...@198.199.105.11) State HANGUP
2018-01-23 18:02:16.282520 [DEBUG] mod_sofia.c:449 Channel sofia/external/80...@198.199.105.11 hanging up, cause: NORMAL_CLEARING
2018-01-23 18:02:16.282520 [DEBUG] mod_sofia.c:588 Responding to INVITE with: 480
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:60 sofia/external/80...@198.199.105.11 Standard HANGUP, cause: NORMAL_CLEARING
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:852 (sofia/external/80...@198.199.105.11) State HANGUP going to sleep
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:619 (sofia/external/80...@198.199.105.11) State Change CS_HANGUP -> CS_REPORTING
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:584 (sofia/external/80...@198.199.105.11) Running State Change CS_REPORTING (Cur 1 Tot 7)
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:938 (sofia/external/80...@198.199.105.11) State REPORTING
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:174 sofia/external/80...@198.199.105.11 Standard REPORTING, cause: NORMAL_CLEARING
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:938 (sofia/external/80...@198.199.105.11) State REPORTING going to sleep
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:610 (sofia/external/80...@198.199.105.11) State Change CS_REPORTING -> CS_DESTROY
2018-01-23 18:02:16.282520 [DEBUG] switch_core_session.c:1713 Session 7 (sofia/external/80...@198.199.105.11) Locked, Waiting on external entities
2018-01-23 18:02:16.282520 [NOTICE] switch_core_session.c:1731 Session 7 (sofia/external/80...@198.199.105.11) Ended
2018-01-23 18:02:16.282520 [NOTICE] switch_core_session.c:1735 Close Channel sofia/external/80...@198.199.105.11 [CS_DESTROY]
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:741 (sofia/external/80...@198.199.105.11) Running State Change CS_DESTROY (Cur 0 Tot 7)
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:751 (sofia/external/80...@198.199.105.11) State DESTROY
2018-01-23 18:02:16.282520 [DEBUG] mod_sofia.c:354 sofia/external/80...@198.199.105.11 SOFIA DESTROY
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:181 sofia/external/80...@198.199.105.11 Standard DESTROY
2018-01-23 18:02:16.282520 [DEBUG] switch_core_state_machine.c:751 (sofia/external/80...@198.199.105.11) State DESTROY going to sleep
2018-01-23 18:03:42.022513 [NOTICE] switch_channel.c:1104 New Channel sofia/external/80...@198.199.105.11 [36bd7777-08fc-4566-aa37-06c185965df7]
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:584 (sofia/external/80...@198.199.105.11) Running State Change CS_NEW (Cur 1 Tot 8)
2018-01-23 18:03:42.022513 [DEBUG] sofia.c:10070 sofia/external/80...@198.199.105.11 receiving invite from 192.99.101.211:58740 version: 1.9.0 git 503db7b 2017-09-18 22:23:45Z 64bit
2018-01-23 18:03:42.022513 [DEBUG] sofia.c:7283 Channel sofia/external/80...@198.199.105.11 entering state [received][100]
2018-01-23 18:03:42.022513 [DEBUG] sofia.c:7293 Remote SDP:
v=0
o=8019 16264 18299 IN IP4 192.168.1.83
s=call
c=IN IP4 192.168.1.83
t=0 0
m=audio 25282 RTP/AVP 0 101
a=rtpmap:0 pcmu/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-11

2018-01-23 18:03:42.022513 [DEBUG] sofia.c:7685 (sofia/external/80...@198.199.105.11) State Change CS_NEW -> CS_INIT
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:603 (sofia/external/80...@198.199.105.11) State NEW
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:584 (sofia/external/80...@198.199.105.11) Running State Change CS_INIT (Cur 1 Tot 8)
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:627 (sofia/external/80...@198.199.105.11) State INIT
2018-01-23 18:03:42.022513 [DEBUG] mod_sofia.c:93 sofia/external/80...@198.199.105.11 SOFIA INIT
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:40 sofia/external/80...@198.199.105.11 Standard INIT
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:48 (sofia/external/80...@198.199.105.11) State Change CS_INIT -> CS_ROUTING
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:627 (sofia/external/80...@198.199.105.11) State INIT going to sleep
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:584 (sofia/external/80...@198.199.105.11) Running State Change CS_ROUTING (Cur 1 Tot 8)
2018-01-23 18:03:42.022513 [DEBUG] switch_channel.c:2249 (sofia/external/80...@198.199.105.11) Callstate Change DOWN -> RINGING
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:643 (sofia/external/80...@198.199.105.11) State ROUTING
2018-01-23 18:03:42.022513 [DEBUG] mod_sofia.c:154 sofia/external/80...@198.199.105.11 SOFIA ROUTING
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:236 sofia/external/80...@198.199.105.11 Standard ROUTING
2018-01-23 18:03:42.022513 [INFO] mod_dialplan_xml.c:637 Processing 8019 <8019>->801148486858013 in context public
Dialplan: sofia/external/80...@198.199.105.11 parsing [public->unloop] continue=false
Dialplan: sofia/external/80...@198.199.105.11 Regex (PASS) [unloop] ${unroll_loops}(true) =~ /^true$/ break=on-false
Dialplan: sofia/external/80...@198.199.105.11 Regex (FAIL) [unloop] ${sip_looped_call}() =~ /^true$/ break=on-false
Dialplan: sofia/external/80...@198.199.105.11 parsing [public->outside_call] continue=true
Dialplan: sofia/external/80...@198.199.105.11 Absolute Condition [outside_call]
Dialplan: sofia/external/80...@198.199.105.11 Action set(outside_call=true)
Dialplan: sofia/external/80...@198.199.105.11 Action export(RFC2822_DATE=${strftime(%a, %d %b %Y %T %z)})
Dialplan: sofia/external/80...@198.199.105.11 parsing [public->bbb_sp_call] continue=true
Dialplan: sofia/external/80...@198.199.105.11 Regex (FAIL) [bbb_sp_call] network_addr(192.99.101.211) =~ /198.199.105.11/ break=on-false
Dialplan: sofia/external/80...@198.199.105.11 parsing [public->bbb_webrtc_call] continue=true
Dialplan: sofia/external/80...@198.199.105.11 Regex (FAIL) [bbb_webrtc_call] ${sip_via_protocol}(udp) =~ /^wss?$/ break=on-false
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:286 (sofia/external/80...@198.199.105.11) State Change CS_ROUTING -> CS_EXECUTE
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:643 (sofia/external/80...@198.199.105.11) State ROUTING going to sleep
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:584 (sofia/external/80...@198.199.105.11) Running State Change CS_EXECUTE (Cur 1 Tot 8)
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:650 (sofia/external/80...@198.199.105.11) State EXECUTE
2018-01-23 18:03:42.022513 [DEBUG] mod_sofia.c:209 sofia/external/80...@198.199.105.11 SOFIA EXECUTE
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:328 sofia/external/80...@198.199.105.11 Standard EXECUTE
EXECUTE sofia/external/80...@198.199.105.11 set(outside_call=true)
2018-01-23 18:03:42.022513 [DEBUG] mod_dptools.c:1588 SET sofia/external/80...@198.199.105.11 [outside_call]=[true]
EXECUTE sofia/external/80...@198.199.105.11 export(RFC2822_DATE=Tue, 23 Jan 2018 18:03:42 +0000)
2018-01-23 18:03:42.022513 [DEBUG] switch_channel.c:1296 EXPORT (export_vars) [RFC2822_DATE]=[Tue, 23 Jan 2018 18:03:42 +0000]
2018-01-23 18:03:42.022513 [NOTICE] switch_core_state_machine.c:385 sofia/external/80...@198.199.105.11 has executed the last dialplan instruction, hanging up.
2018-01-23 18:03:42.022513 [NOTICE] switch_core_state_machine.c:387 Hangup sofia/external/80...@198.199.105.11 [CS_EXECUTE] [NORMAL_CLEARING]
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:650 (sofia/external/80...@198.199.105.11) State EXECUTE going to sleep
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:584 (sofia/external/80...@198.199.105.11) Running State Change CS_HANGUP (Cur 1 Tot 8)
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:850 (sofia/external/80...@198.199.105.11) Callstate Change RINGING -> HANGUP
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:852 (sofia/external/80...@198.199.105.11) State HANGUP
2018-01-23 18:03:42.022513 [DEBUG] mod_sofia.c:449 Channel sofia/external/80...@198.199.105.11 hanging up, cause: NORMAL_CLEARING
2018-01-23 18:03:42.022513 [DEBUG] mod_sofia.c:588 Responding to INVITE with: 480
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:60 sofia/external/80...@198.199.105.11 Standard HANGUP, cause: NORMAL_CLEARING
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:852 (sofia/external/80...@198.199.105.11) State HANGUP going to sleep
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:619 (sofia/external/80...@198.199.105.11) State Change CS_HANGUP -> CS_REPORTING
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:584 (sofia/external/80...@198.199.105.11) Running State Change CS_REPORTING (Cur 1 Tot 8)
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:938 (sofia/external/80...@198.199.105.11) State REPORTING
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:174 sofia/external/80...@198.199.105.11 Standard REPORTING, cause: NORMAL_CLEARING
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:938 (sofia/external/80...@198.199.105.11) State REPORTING going to sleep
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:610 (sofia/external/80...@198.199.105.11) State Change CS_REPORTING -> CS_DESTROY
2018-01-23 18:03:42.022513 [DEBUG] switch_core_session.c:1713 Session 8 (sofia/external/80...@198.199.105.11) Locked, Waiting on external entities
2018-01-23 18:03:42.022513 [NOTICE] switch_core_session.c:1731 Session 8 (sofia/external/80...@198.199.105.11) Ended
2018-01-23 18:03:42.022513 [NOTICE] switch_core_session.c:1735 Close Channel sofia/external/80...@198.199.105.11 [CS_DESTROY]
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:741 (sofia/external/80...@198.199.105.11) Running State Change CS_DESTROY (Cur 0 Tot 8)
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:751 (sofia/external/80...@198.199.105.11) State DESTROY
2018-01-23 18:03:42.022513 [DEBUG] mod_sofia.c:354 sofia/external/80...@198.199.105.11 SOFIA DESTROY
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:181 sofia/external/80...@198.199.105.11 Standard DESTROY
2018-01-23 18:03:42.022513 [DEBUG] switch_core_state_machine.c:751 (sofia/external/80...@198.199.105.11) State DESTROY going to sleep
2018-01-23 18:04:03.762517 [WARNING] sofia_reg.c:2906 Can't find user [449...@198.199.105.11] from 78.41.207.101
You must define a domain called '198.199.105.11' in your directory and add a user with the id="449449" attribute
and you must configure your device to use the proper domain in it's authentication credentials.

Chad Pilkey

unread,
Jan 23, 2018, 1:39:44 PM1/23/18
to BigBlueButton-dev
It looks like someone (or multiple places) might be poking your server to try and find holes. I don't think we have any official BBB documentation on how to secure FreeSWITCH, but the FreeSWITCH official documentation seems to have a pretty good page covering best practices https://freeswitch.org/confluence/display/FREESWITCH/Security. I think fail2ban and iptables is probably enough to get you most of the way.

Kirk Pathumanun

unread,
Jan 23, 2018, 1:47:56 PM1/23/18
to bigblueb...@googlegroups.com
I’m proficient with iptables so that’s not an issue to block the ips via firewall chain but just to clarify that this happened right after upgrade to build 799 so if anyone could track this issue it would be great. This is a security issue in a way. I will do a fresh bbb build 799 install and simulate the environment to pin point potential issue or security breach is the culprit. Thank you. 

--
You received this message because you are subscribed to a topic in the Google Groups "BigBlueButton-dev" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/bigbluebutton-dev/da8ILQ-dcik/unsubscribe.
To unsubscribe from this group and all its topics, send an email to bigbluebutton-...@googlegroups.com.
To post to this group, send email to bigblueb...@googlegroups.com.
Visit this group at https://groups.google.com/group/bigbluebutton-dev.
For more options, visit https://groups.google.com/d/optout.

Richard Alam

unread,
Jan 23, 2018, 2:02:44 PM1/23/18
to BigBlueButton-dev
On Tue, Jan 23, 2018 at 1:47 PM, Kirk Pathumanun <ki...@edknovate.com> wrote:
I’m proficient with iptables so that’s not an issue to block the ips via firewall chain but just to clarify that this happened right after upgrade to build 799 so if anyone could track this issue it would be great. This is a security issue in a way. I will do a fresh bbb build 799 install and simulate the environment to pin point potential issue or security breach is the culprit. Thank you. 

There are scripts/tools out there that pings servers using SIP. I think one such tool is sipvicious. They might have found your server. I see that too in our servers and I just block manually using iptables.
You can do it automatically with fail2ban.

Richard
 

To unsubscribe from this group and all its topics, send an email to bigbluebutton-dev+unsubscribe@googlegroups.com.
To post to this group, send email to bigbluebutton-dev@googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-dev+unsubscribe@googlegroups.com.
To post to this group, send email to bigbluebutton-dev@googlegroups.com.

Kirk Pathumanun

unread,
Jan 23, 2018, 2:06:19 PM1/23/18
to bigblueb...@googlegroups.com
Hello Richard,

Thank you for the proof of implementation in advance and I will issue iptables command to block out those ip addresses. Very interesting concept on network penetration via SIP though. 

Regards,

Kirk

To unsubscribe from this group and all its topics, send an email to bigbluebutton-...@googlegroups.com.
To post to this group, send email to bigblueb...@googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "BigBlueButton-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bigbluebutton-...@googlegroups.com.

To post to this group, send email to bigblueb...@googlegroups.com.
--
You received this message because you are subscribed to a topic in the Google Groups "BigBlueButton-dev" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/bigbluebutton-dev/da8ILQ-dcik/unsubscribe.
To unsubscribe from this group and all its topics, send an email to bigbluebutton-...@googlegroups.com.
To post to this group, send email to bigblueb...@googlegroups.com.
Reply all
Reply to author
Forward
0 new messages