According with you maxfwd log you have a loop Nov 28 15:19:00 MYCALL-500-73 /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:maxfwd:is_maxfwd_present: value = 70
and if user 342 is not a real user so you have somebody trying to login on your server 2013/11/28 hualong....@busap.com <hualong....@busap.com> > hello all, > my opensips server can`t registered and call , I saw this > information in the log file: > > 0-73 /usr/local/opensips_proxy/sbin/opensips[28992]: > DBG:core:receive_msg: cleaning up > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_msg: SIP > Request: > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_msg: > method: <REGISTER> > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_msg: > uri: <sip:172.16.100.73> > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_msg: > version: <SIP/2.0> > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_headers: > flags=2 > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_via_param: > found param type 235, <rport> = <n/a>; state=6 > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_via_param: > found param type 232, <branch> = <z9hG4bK-805371511>; state=16 > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_via: end of > header reached, state=5 > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_headers: via > found, flags=2 > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_headers: > this is the first via > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:receive_msg: After > parse_msg... > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:receive_msg: > preparing to run routing scripts... > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:check_ip_address: > params 178.162.199.65, 127.0.0.1, 0 > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_headers: > flags=100 > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_to: end of > header reached, state=10 > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_to: > display={"342"}, ruri={sip:342@172.16.100.73} > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:get_hdr_field: > <To> [31]; uri=[sip:342@172.16.100.73] > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:get_hdr_field: to > body ["342" <sip:342@172.16.100.73>#015#012] > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:get_hdr_field: > cseq <CSeq>: <1> <REGISTER> > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: > DBG:maxfwd:is_maxfwd_present: value = 70 > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:uri:has_totag: no totag > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_headers: > flags=78 > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:tm:t_lookup_request: > start searching: hash=49499, isACK=0 > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:tm:matching_3261: > RFC3261 transaction matching failed > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:tm:t_lookup_request: no > transaction found > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_headers: > flags=200 > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:get_hdr_field: > content_length=0 > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:get_hdr_field: > found end of header > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:rr:find_first_route: No > Route headers found > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:rr:loose_route: There > is no Route HF > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:grep_sock_info: > checking if host==us: 13==13 && [172.16.100.73] == [172.16.100.73] > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:grep_sock_info: > checking if port 5060 matches port 5060 > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_to: end of > header reached, state=10 > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_to: > display={"342"}, ruri={sip:342@172.16.100.73} > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:comp_scriptvar: > str 20 : 342 > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:cachedb_fetch: > from script [redis] - no grp > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: > DBG:cachedb_redis:redis_get: no such key - PHUID_342 > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:parse_headers: > flags=ffffffffffffffff > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:destroy_avp_list: > destroying list 0x7ff593bcf348 > Nov 28 15:19:00 MYCALL-500-73 > /usr/local/opensips_proxy/sbin/opensips[28994]: DBG:core:receive_msg: > cleaning up > > the username 342(sip:342@172.16.100.73) are not in our system,but constantly > have such registration information to my server. It is being attacked? what > should i can do from here…… > Regards, > YIN > > ------------------------------ > > > > 尹华龙��Hualong Yin > > 技术中心后台研发部��Techlology Department Server-Side > > java工程师�� JAVA engineer > > > > 中麦通信网络有限公司 > > China MCommunication Co.,Ltd > > 北京市朝阳区建外大街12号楼后小楼(100022) > > TEL:(8610) 53208866-8865 > > FAX:(8610) 53208860 > > CELL:(86)186 1019 1892 > > E-MAIL:hualong.yin <hualong....@busap.com>@busap.com > > www.busap.com > > _______________________________________________ > Users mailing list > Users@lists.opensips.org > http://lists.opensips.org/cgi-bin/mailman/listinfo/users > >
<<4368_wps_clip_image-12901.png>>
<<346_wps_clip_image-9196.png>>
_______________________________________________ Users mailing list Users@lists.opensips.org http://lists.opensips.org/cgi-bin/mailman/listinfo/users