November 2010 - VoiceOps - lists.voiceops.org

High latency to WDC2 @ Global Crossing - Bad SIP voice quality
by paul＠timmins.net Nov. 10, 2010

Nov. 10, 2010

Anyone else seeing this? Opening a ticket right now, wanted to give a heads up.

1 0

Calls coming into our LRN
by lists＠iamchriswallace.com Nov. 9, 2010

Nov. 9, 2010

Years ago our switch tech decided to make our main company number the same as our LRN. We have had an ongoing issue where calls to an LNP'd number do not come into our switch with the original called number and they are routed into our company PBX and we end up becoming the switchboard for people trying to reach our customers. It seems as though we have been more and more of these calls lately. Has anyone dealt with a similar issue? If so, what was your resolution? ---Chris

4 13

Verizon Business inbound SIP issues?
by jradel＠vantage.com Nov. 3, 2010

Nov. 3, 2010

Attached find Verizon notice of 10/20 about 2 additional network servers that went into effect today. --Jon Radel -------- Original Message -------- Subject: CU - Important Network Support Updates Date: Wed, 20 Oct 2010 16:22:14 -0400 From: Wholesale-Service-Delivery-No-Replies <wholesale-service-delivery at verizonbusiness.com> To: SIP_Gateway at lists.verizonbusiness.com <SIP_Gateway at lists.verizonbusiness.com> Attached is a Communications Update from Verizon. Please do not reply to this email. Incoming messages are not read. If you no longer wish to receive these communications or would like to add someone else, please send an email with your request to owner-SIP_Gateway at lists.verizonbusiness.com.

1 0

Verizon Business inbound SIP issues?
by compuwizz＠gmail.com Nov. 3, 2010

Nov. 3, 2010

Is anyone seeing problems with VZB's inbound DIDs? We're getting about 1 out of every 6 calls failing with a message "This number has been disconnected". It started yesterday and is ongoing today. We opened a ticket but haven't heard back yet. ~Jared

3 4

Question about Packet Jitter
by David_Hiers＠adp.com Nov. 2, 2010

Nov. 2, 2010

Before you get down into the weeds with the math... All the ITU docs that I've read portray the "network" as set of "non-rtp-aware, forward-as-fast-as-you-can router-type-things that probably have some qos capability". The "edge" is implicitly defined as the first occurrence of a jitter buffer. As near as I can tell, there are no rtp jitter buffers in an ITU "network" for which all this fancy math applies. If you transcode, scrub media with a ditech pvp, or otherwise implement anything that knows it should generate an rtp stream by sending a packet every X milliseconds, the ITU math is bounded by that device. If the SBC in your example transcodes or has a jitter/loss-concealment buffer, it *is* the edge, and you cannot average the link jitters as described in the ITU docs. David Hiers CCIE (R/S, V), CISSP ADP Dealer Services 2525 SW 1st Ave. Suite 300W Portland, OR 97201 o: 503-205-4467 f: 503-402-3277 -----Original Message----- From: voiceops-bounces at voiceops.org [mailto:voiceops-bounces at voiceops.org] On Behalf Of Jim Dalton Sent: Friday, October 29, 2010 6:43 AM To: 'Schwarz, Albrecht (Albrecht)'; voiceops at voiceops.org Subject: Re: [VoiceOps] Question about Packet Jitter > VoIP performance experts should be familiar with > > - ITU-T Y.1541 concerning IPDV (IP packet delay variation = jitter); > there are many sections on IPDV, particularily also on "aggregated > PDV"; > [JD wrote:] ITU-T Y.1541 "Amendment 1: New Appendix X - An example showing how to calculate IPDV across multiple sections" addresses my question. Thank you, Jim D. _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops This message and any attachments are intended only for the use of the addressee and may contain information that is privileged and confidential. If the reader of the message is not the intended recipient or an authorized representative of the intended recipient, you are hereby notified that any dissemination of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by e-mail and delete the message and any attachments from your system.

2 1

Strange attacks over the weekend
by sjur＠usken.no Nov. 1, 2010

Nov. 1, 2010

Hi, We in the Honeynet Project has been following this for the last 4-5 months. We call it sundayddr because of the User-Agent. Ben in Australia has written more about it here: http://honeynet.org.au/ I have also written about it here (back in July) http://www.usken.no/2010/07/using-botnets-to-do-sip-scanning/ It is a botnet client with both a SSH and a SIP scanner (based on SIPVicious by Sandro Gauci) (www.sipvicious.org) Most infected machines doing this scanning are located in China contact me if you need any more information. cheers sjur www.usken.no

1 0

Strange attacks over the weekend
by sil＠infiltrated.net Nov. 1, 2010

Nov. 1, 2010

Sorry for the cross posting to two lists, but I thought everyone on both lists might benefit from the message(*cough*rambling*) So yesterday, I had a honeypot host "open to the world." Not one "block this country" rule on the machine. Normally throughout the past months I've seen maybe 1 or 2 attacks in parallel, but yesterday was different. I butchered up a perl script to block on the fly as opposed to blocking out entire countries and was surprised to see I managed to accumulate 1600+ hosts. Not *that* big of a deal until I started going through some of the logs... I'm a bit puzzled because I see hundreds of attacks in parallel (literally 100-200 connections from different netblocks at the same time) so I'm thinking... "VoIP Based Botnet?" Anyhow, still parsing through the wonderful bucketload of logs this morning. Anyone else see massive activity begininng 10/31? -- =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ J. Oquendo SGFA, SGFE, C|EH, CNDA, CHFI, OSCP, CPT "It takes 20 years to build a reputation and five minutes to ruin it. If you think about that, you'll do things differently." - Warren Buffett 227C 5D35 7DCB 0893 95AA 4771 1DCE 1FD1 5CCD 6B5E http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x5CCD6B5E

5 12

Fraud
by zavoid＠gmail.com Nov. 1, 2010

Nov. 1, 2010

Has anyone ever run into this international fraud before or have any idea who runs it? The various numbers(blocks of numbers) in various countries being called all answered by an IVR with the following message. "Thank you for calling dial to win application, where you can win fabulous prizes every week. The long you hold the line the bigger is your chance to win. For every minute you hold the line you will collect one lucky hit. The more lucky hits the bigger chance to win. Now we will generate a unique pin code for you, your unique pin code is Xxxxxxxxxx Please note down you have collected one lucky hit for this one minute so please hold on and you will get a lucky hit for every minutes. This is a international lottery running successfully in 50 countries of the world. Please hold the line to get next lucky hit and continues????????? Any leads are appreciated. We've blocked all the offending numbers of course. Sent from my iPhone.

3 2