[SR-Users] SIP Router 3.03 topoh

[dotnetdub]

Hi All,

Kamailio had just started to get SIP attacked and it looked like they were
sending a bad header and Kamailio died..


Nov 20 19:48:51 sipproxy sip[3383]: INFO: <script>: [R-MAIN =>] Request
method OPTIONS is to our domain (212.124.123.170)

Nov 20 19:48:51 sipproxy sip[3378]: INFO: <script>: [ROUTE-1] Received
registration from sip:1368250498 at sipproxy (212.124.123.170)

Nov 20 19:48:51 sipproxy sip[3378]: INFO: <script>: [ROUTE-1 !] Credentials
invalid; issuing challenge

Nov 20 19:48:51 sipproxy sip[3381]: INFO: <script>: [ROUTE-1] Received
registration from sip:100 at sipproxy (212.124.123.170)

Nov 20 19:48:51 sipproxy sip[3381]: INFO: <script>: [ROUTE-1 !] Credentials
invalid; issuing challenge

Nov 20 19:48:51 sipproxy sip[3374]: INFO: <core> [parser/msg_parser.c:339]:
ERROR: bad header field [CSeq: 1 REGISTER ACK]

Nov 20 19:48:51 sipproxy kernel: [1033573.401446] kamailio[3374]: segfault
at 18 ip b70070d9 sp bf916118 error 4 in topoh.so[b7004000+c000]

Nov 20 19:48:51 sipproxy sip[3373]: INFO: <core> [parser/msg_parser.c:339]:
ERROR: bad header field [CSeq: 1 REGISTER ACK]

Nov 20 19:48:51 sipproxy kernel: [1033573.636774] kamailio[3373]: segfault
at 18 ip b70070d9 sp bf916118 error 4 in topoh.so[b7004000+c000]

Nov 20 19:48:51 sipproxy sip[3388]: INFO: <core> [parser/msg_parser.c:339]:
ERROR: bad header field [CSeq: 1 REGISTER ACK]

Nov 20 19:48:51 sipproxy kernel: [1033573.680305] kamailio[3388]: segfault
at 18 ip b70070d9 sp bf916118 error 4 in topoh.so[b7004000+c000]

Nov 20 19:48:51 sipproxy sip[3390]: INFO: <core> [parser/msg_parser.c:339]:
ERROR: bad header field [CSeq: 1 REGISTER ACK]

Nov 20 19:48:51 sipproxy kernel: [1033573.710444] kamailio[3390]: segfault
at 18 ip b70070d9 sp bf916118 error 4 in topoh.so[b7004000+c000]

Nov 20 19:48:51 sipproxy sip[3383]: INFO: <script>: [ROUTE-1] Received
registration from sip:2478223614 at sipproxy (212.124.123.170)

Nov 20 19:48:51 sipproxy sip[3383]: INFO: <script>: [ROUTE-1 !] Credentials
invalid; issuing challenge

Nov 20 19:48:51 sipproxy sip[3378]: INFO: <core> [parser/msg_parser.c:339]:
ERROR: bad header field [CSeq: 1 REGISTER ACK]

Nov 20 19:48:51 sipproxy kernel: [1033573.753334] kamailio[3378]: segfault
at 18 ip b70070d9 sp bf916118 error 4 in topoh.so[b7004000+c000]

Nov 20 19:48:51 sipproxy sip[3379]: INFO: <script>: [ROUTE-1] Received
registration from sip:noauth at sipproxy (212.124.123.170)

Nov 20 19:48:51 sipproxy sip[3379]: INFO: <script>: [ROUTE-1 !] Credentials
invalid; issuing challenge

Nov 20 19:48:51 sipproxy sip[3375]: INFO: <core> [parser/msg_parser.c:339]:
ERROR: bad header field [CSeq: 1 REGISTER ACK]

Nov 20 19:48:51 sipproxy kernel: [1033573.768137] kamailio[3375]: segfault
at 18 ip b70070d9 sp bf916118 error 4 in topoh.so[b7004000+c000]

Nov 20 19:48:51 sipproxy sip[3383]: INFO: <core> [parser/msg_parser.c:339]:
ERROR: bad header field [CSeq: 1 REGISTER ACK]

Nov 20 19:48:51 sipproxy kernel: [1033573.775628] kamailio[3383]: segfault
at 18 ip b70070d9 sp bf916118 error 4 in topoh.so[b7004000+c000]

Nov 20 19:48:51 sipproxy sip[3386]: INFO: <core> [parser/msg_parser.c:339]:
ERROR: bad header field [CSeq: 1 REGISTER ACK]

Nov 20 19:48:51 sipproxy kernel: [1033573.790925] kamailio[3386]: segfault
at 18 ip b70070d9 sp bf916118 error 4 in topoh.so[b7004000+c000]

Nov 20 19:48:51 sipproxy sip[3379]: INFO: <core> [parser/msg_parser.c:339]:
ERROR: bad header field [CSeq: 1 REGISTER ACK]

Nov 20 19:48:51 sipproxy kernel: [1033573.798926] kamailio[3379]: segfault
at 18 ip b70070d9 sp bf916118 error 4 in topoh.so[b7004000+c000]

Nov 20 19:48:51 sipproxy sip[3381]: INFO: <core> [parser/msg_parser.c:339]:
ERROR: bad header field [CSeq: 1 REGISTER ACK]

Nov 20 19:48:51 sipproxy kernel: [1033573.815493] kamailio[3381]: segfault
at 18 ip b70070d9 sp bf916118 error 4 in topoh.so[b7004000+c000]

Nov 20 19:48:54 sipproxy sip[3344]: INFO: <core> [main.c:737]: INFO:
terminating due to SIGCHLD

Nov 20 19:48:54 sipproxy sip[3399]: INFO: <core> [main.c:788]: INFO: signal
15 received

Nov 20 19:48:54 sipproxy sip[3396]: INFO: <core> [main.c:788]: INFO: signal
15 received

Nov 20 19:48:54 sipproxy sip[3400]: INFO: <core> [main.c:788]: INFO: signal
15 received

Nov 20 19:48:54 sipproxy sip[3392]: INFO: <core> [main.c:788]: INFO: signal
15 received

Nov 20 19:48:54 sipproxy sip[3401]: INFO: <core> [main.c:788]: INFO: signal
15 received

Nov 20 19:48:54 sipproxy sip[3394]: INFO: <core> [main.c:788]: INFO: signal
15 received

Nov 20 19:48:54 sipproxy sip[3402]: INFO: <core> [main.c:788]: INFO: signal
15 received

Thanks
Brian
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20101124/7dd25089/attachment-0001.htm>