<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Hello,</p>
<p>maybe you can make some filtering based on the path of the files
printing the error messages, so if you want to "ignore" parsing
errors, then skip alerts what have "core/parser/" in the path.</p>
<p>Otherwise, it is not that easy to add so many options to be able
to control every errors/warnings/... when to print them.</p>
<p>There could be also solutions to block traffic from devices
sending broken SIP packages continuously/for long interval of
time.</p>
<p>Cheers,<br>
Daniel<br>
</p>
<div class="moz-cite-prefix">On 14.02.19 03:58, Daniel Greenwald
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAOsHgtutKUTNYC8u6tzzJBZk+pEY5iM7fMXWYPKNbnDK2ufX4w@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">Curious how other folks are dealing with the volume
of logs that Kamailio generates. We are currently sending them
to syslog and alerting on WARN and above but the amount of alert
noise is unbearable. For example (there are many variations):
<div><span style="font-family:monospace"><span
style="color:rgb(0,0,0)">ERROR: <core>
[core/tcp_read.c:297]: tcp_read_data(): error reading:
Connection reset by peer</span><br>
</span></div>
<div><span style="font-family:monospace"><span
style="color:rgb(0,0,0)">INVITE:WARNING: sanity
[sanity.c:776]: check_parse_uris(): failed to parse</span><br>
From header<br>
</span></div>
<div><span style="font-family:monospace"><span
style="color:rgb(0,0,0)"> INVITE:ERROR: <core>
[core/parser/parse_from.c:75]: parse_from_header(): b</span><br>
ad From header<br>
</span></div>
<div><span style="font-family:monospace"><br>
</span></div>
<div><span style="font-family:monospace">The fact that these are
WARN/ERROR level and from core makes me wonder how we can
possibly make alerts relevant. Any input would be
appreciated.</span></div>
<div><span style="font-family:monospace"><br>
</span></div>
<div><span style="font-family:monospace">Thanks,</span></div>
<div><span style="font-family:monospace"><br>
</span></div>
<div><span style="font-family:monospace">Daniel G</span></div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Kamailio (SER) - Users Mailing List
<a class="moz-txt-link-abbreviated" href="mailto:sr-users@lists.kamailio.org">sr-users@lists.kamailio.org</a>
<a class="moz-txt-link-freetext" href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a>
</pre>
</blockquote>
<pre class="moz-signature" cols="72">--
Daniel-Constantin Mierla -- <a class="moz-txt-link-abbreviated" href="http://www.asipto.com">www.asipto.com</a>
<a class="moz-txt-link-abbreviated" href="http://www.twitter.com/miconda">www.twitter.com/miconda</a> -- <a class="moz-txt-link-abbreviated" href="http://www.linkedin.com/in/miconda">www.linkedin.com/in/miconda</a>
Kamailio World Conference - May 6-8, 2019 -- <a class="moz-txt-link-abbreviated" href="http://www.kamailioworld.com">www.kamailioworld.com</a>
Kamailio Advanced Training - Mar 4-6, 2019 in Berlin; Mar 25-27, 2019, in Washington, DC, USA -- <a class="moz-txt-link-abbreviated" href="http://www.asipto.com">www.asipto.com</a></pre>
</body>
</html>