Hi All,
Kamailio had just started to get SIP attacked and it looked like they were
sending a bad header and Kamailio died..
Nov 20 19:48:51 sipproxy sip[3383]: INFO: <script>: [R-MAIN =>] Request
method OPTIONS is to our domain (212.124.123.170)
Nov 20 19:48:51 sipproxy sip[3378]: INFO: <script>: [ROUTE-1] Received
registration from sip:1368250498@sipproxy (212.124.123.170)
Nov 20 19:48:51 sipproxy sip[3378]: INFO: <script>: [ROUTE-1 !] Credentials
invalid; issuing challenge
Nov 20 19:48:51 sipproxy sip[3381]: INFO: <script>: [ROUTE-1] Received
registration from sip:100@sipproxy (212.124.123.170)
Nov 20 19:48:51 sipproxy sip[3381]: INFO: <script>: [ROUTE-1 !] Credentials
invalid; issuing challenge
Nov 20 19:48:51 sipproxy sip[3374]: INFO: <core> [parser/msg_parser.c:339]:
ERROR: bad header field [CSeq: 1 REGISTER ACK]
Nov 20 19:48:51 sipproxy kernel: [1033573.401446] kamailio[3374]: segfault
at 18 ip b70070d9 sp bf916118 error 4 in topoh.so[b7004000+c000]
Nov 20 19:48:51 sipproxy sip[3373]: INFO: <core> [parser/msg_parser.c:339]:
ERROR: bad header field [CSeq: 1 REGISTER ACK]
Nov 20 19:48:51 sipproxy kernel: [1033573.636774] kamailio[3373]: segfault
at 18 ip b70070d9 sp bf916118 error 4 in topoh.so[b7004000+c000]
Nov 20 19:48:51 sipproxy sip[3388]: INFO: <core> [parser/msg_parser.c:339]:
ERROR: bad header field [CSeq: 1 REGISTER ACK]
Nov 20 19:48:51 sipproxy kernel: [1033573.680305] kamailio[3388]: segfault
at 18 ip b70070d9 sp bf916118 error 4 in topoh.so[b7004000+c000]
Nov 20 19:48:51 sipproxy sip[3390]: INFO: <core> [parser/msg_parser.c:339]:
ERROR: bad header field [CSeq: 1 REGISTER ACK]
Nov 20 19:48:51 sipproxy kernel: [1033573.710444] kamailio[3390]: segfault
at 18 ip b70070d9 sp bf916118 error 4 in topoh.so[b7004000+c000]
Nov 20 19:48:51 sipproxy sip[3383]: INFO: <script>: [ROUTE-1] Received
registration from sip:2478223614@sipproxy (212.124.123.170)
Nov 20 19:48:51 sipproxy sip[3383]: INFO: <script>: [ROUTE-1 !] Credentials
invalid; issuing challenge
Nov 20 19:48:51 sipproxy sip[3378]: INFO: <core> [parser/msg_parser.c:339]:
ERROR: bad header field [CSeq: 1 REGISTER ACK]
Nov 20 19:48:51 sipproxy kernel: [1033573.753334] kamailio[3378]: segfault
at 18 ip b70070d9 sp bf916118 error 4 in topoh.so[b7004000+c000]
Nov 20 19:48:51 sipproxy sip[3379]: INFO: <script>: [ROUTE-1] Received
registration from sip:noauth@sipproxy (212.124.123.170)
Nov 20 19:48:51 sipproxy sip[3379]: INFO: <script>: [ROUTE-1 !] Credentials
invalid; issuing challenge
Nov 20 19:48:51 sipproxy sip[3375]: INFO: <core> [parser/msg_parser.c:339]:
ERROR: bad header field [CSeq: 1 REGISTER ACK]
Nov 20 19:48:51 sipproxy kernel: [1033573.768137] kamailio[3375]: segfault
at 18 ip b70070d9 sp bf916118 error 4 in topoh.so[b7004000+c000]
Nov 20 19:48:51 sipproxy sip[3383]: INFO: <core> [parser/msg_parser.c:339]:
ERROR: bad header field [CSeq: 1 REGISTER ACK]
Nov 20 19:48:51 sipproxy kernel: [1033573.775628] kamailio[3383]: segfault
at 18 ip b70070d9 sp bf916118 error 4 in topoh.so[b7004000+c000]
Nov 20 19:48:51 sipproxy sip[3386]: INFO: <core> [parser/msg_parser.c:339]:
ERROR: bad header field [CSeq: 1 REGISTER ACK]
Nov 20 19:48:51 sipproxy kernel: [1033573.790925] kamailio[3386]: segfault
at 18 ip b70070d9 sp bf916118 error 4 in topoh.so[b7004000+c000]
Nov 20 19:48:51 sipproxy sip[3379]: INFO: <core> [parser/msg_parser.c:339]:
ERROR: bad header field [CSeq: 1 REGISTER ACK]
Nov 20 19:48:51 sipproxy kernel: [1033573.798926] kamailio[3379]: segfault
at 18 ip b70070d9 sp bf916118 error 4 in topoh.so[b7004000+c000]
Nov 20 19:48:51 sipproxy sip[3381]: INFO: <core> [parser/msg_parser.c:339]:
ERROR: bad header field [CSeq: 1 REGISTER ACK]
Nov 20 19:48:51 sipproxy kernel: [1033573.815493] kamailio[3381]: segfault
at 18 ip b70070d9 sp bf916118 error 4 in topoh.so[b7004000+c000]
Nov 20 19:48:54 sipproxy sip[3344]: INFO: <core> [main.c:737]: INFO:
terminating due to SIGCHLD
Nov 20 19:48:54 sipproxy sip[3399]: INFO: <core> [main.c:788]: INFO: signal
15 received
Nov 20 19:48:54 sipproxy sip[3396]: INFO: <core> [main.c:788]: INFO: signal
15 received
Nov 20 19:48:54 sipproxy sip[3400]: INFO: <core> [main.c:788]: INFO: signal
15 received
Nov 20 19:48:54 sipproxy sip[3392]: INFO: <core> [main.c:788]: INFO: signal
15 received
Nov 20 19:48:54 sipproxy sip[3401]: INFO: <core> [main.c:788]: INFO: signal
15 received
Nov 20 19:48:54 sipproxy sip[3394]: INFO: <core> [main.c:788]: INFO: signal
15 received
Nov 20 19:48:54 sipproxy sip[3402]: INFO: <core> [main.c:788]: INFO: signal
15 received
Thanks
Brian