[asterisk-users] Asterisk executable suddenly about 40KB larger - modules not working

2015-01-07 Thread Stefan Viljoen
Hi all I have a strange issue with 1.8.11.0 on a production Asterisk machine at our head office, and the same issue with a production machine at a branch office. Every now and then, on the head office machine, ODBC CEL and CDR logging will stop working. On examination in the CLI, Asterisk

Re: [asterisk-users] Asterisk executable suddenly about 40KB larger - modules not working

2015-01-07 Thread A J Stiles
On Wednesday 07 Jan 2015, Stefan Viljoen wrote: Hi all I have a strange issue with 1.8.11.0 on a production Asterisk machine at our head office, and the same issue with a production machine at a branch office. Every now and then, on the head office machine, ODBC CEL and CDR logging will

Re: [asterisk-users] Asterisk executable suddenly about 40KB larger - modules

2015-01-07 Thread Stefan Viljoen
Hi guys Thanks for the pointers - I'll look into the possible compromise scenario though I've got no idea how I'll counter it -if- I manage to detect it...! I've disabled prelinking (thanks Tony!) and I'll see if that helps. Interesting thing I've now discovered (had this failure again at the

[asterisk-users] Adding an Event on chan_sip.c (asterisk 1.8.22)

2015-01-07 Thread Valter Nogueira
In some situations I got the following message on asterisk console: * Autodestruct on dialog '857128833@192.168.2.129 857128833@192.168.2.129' with owner SIP/1015-0002 in place (Method: BYE). Rescheduling destruction for 1 ms* I would like to raise a manager event, to take some action

Re: [asterisk-users] Asterisk executable suddenly about 40KB larger - modules not working

2015-01-07 Thread Doug Lytle
Anybody encountered this growing executable error before? I would guess that those systems have been compromised. You should review the logs. http://serverfault.com/questions/2783/how-do-i-know-if-my-linux-server-has-been-hacked You can also try making the Asterisk executable immutable with