Not sure if it availible for 4.x Version but for 5.x There is a tcp connection closed event route

https://kamailio.org/docs/modules/4.4.x/modules/tcpops.html#tcpops.f.tcp_enable_closed_event

You can try to play around it to get ip that distorbs you.

Probably these will be a lot of attempts during small period of time from the same ip.

On Wed, 16 Oct 2019, 08:55 Juha Heinanen, <jh@tutpro.com> wrote:

Yuriy Gorlichenko writes:

> Looks no, because connection must be established for handling it in the
> config file. This error fired by ssl library during Negotiation process.
>
> But you can try tcpdump, at least you will see Who tries to established
> connection

Yes, I could do that, but I would rather get the IP address to syslog so
that I could fail2ban it.

-- Juha

_______________________________________________
Kamailio (SER) - Users Mailing List
sr-users@lists.kamailio.org
https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users