سلام دوستان ، من توی سازمانم یه cucm و cme داریم که تا حالا خیلی ایده آل کار می کرده. ولی حالا دچار مشکلات مشکوکی شده . حالا خروجی کامند sh sip connections udp detail رو این پایین ببینید . یه سری کانکشن ها هست که مشکوکه و از آدرس های public مثل 185.53.88.101 در کشور های دیگه هستن . لطفا بهم بگید که جریان چیه. ممنونم
TCO-RTR#sh sip connections udp detail
Total active connections : 52
No. of send failures : 189
No. of remote closures : 0
No. of conn. failures : 0
No. of inactive conn. ageouts : 1072
---------Printing Detailed Connection Report---------
Note:
** Tuples with no matching socket entry
- Do 'clear sip conn t ipv4::'
to overcome this error condition
++ Tuples with mismatched address/port entry
- Do 'clear sip conn t ipv4:: id '
to overcome this error condition
Remote-Agent:69.172.200.109, Connections-Count:1
Remote-Port Conn-Id Conn-State WriteQ-Size Local-Address
=========== ======= =========== =========== ===========
5060 4 Established 0 -
Remote-Agent:94.23.27.164, Connections-Count:3
Remote-Port Conn-Id Conn-State WriteQ-Size Local-Address
=========== ======= =========== =========== ===========
61713 58 Established 0 -
59795 35 Established 0 -
52949 9 Established 0 -
Remote-Agent:54.36.17.110, Connections-Count:1
Remote-Port Conn-Id Conn-State WriteQ-Size Local-Address
=========== ======= =========== =========== ===========
62483 37 Established 0 -
Remote-Agent:172.30.90.253, Connections-Count:1
Remote-Port Conn-Id Conn-State WriteQ-Size Local-Address
=========== ======= =========== =========== ===========
5060 17 Established 0 -
Remote-Agent:185.53.88.101, Connections-Count:5
Remote-Port Conn-Id Conn-State WriteQ-Size Local-Address
=========== ======= =========== =========== ===========
5075 12 Established 0 -
5076 50 Established 0 -
5070 7 Established 0 -
5071 30 Established 0 -
5074 22 Established 0 -
Remote-Agent:145.239.206.216, Connections-Count:1
Remote-Port Conn-Id Conn-State WriteQ-Size Local-Address
=========== ======= =========== =========== ===========
57451 48 Established 0 -
Remote-Agent:185.40.4.28, Connections-Count:5
Remote-Port Conn-Id Conn-State WriteQ-Size Local-Address
=========== ======= =========== =========== ===========
58619 31 Established 0 -
64472 21 Established 0 -
65235 16 Established 0 -
52791 45 Established 0 -
63004 74 Established 0 -
Remote-Agent:172.30.20.40, Connections-Count:1
Remote-Port Conn-Id Conn-State WriteQ-Size Local-Address
=========== ======= =========== =========== ===========
5060 24 Established 0 -
Remote-Agent:10.140.1.245, Connections-Count:1
Remote-Port Conn-Id Conn-State WriteQ-Size Local-Address
=========== ======= =========== =========== ===========
5060 3 Established 0 -
Remote-Agent:158.69.126.203, Connections-Count:29
Remote-Port Conn-Id Conn-State WriteQ-Size Local-Address
=========== ======= =========== =========== ===========
56112 44 Established 0 -
57639 13 Established 0 -
62119 71 Established 0 -
55883 2 Established 0 -
61308 20 Established 0 -
65354 43 Established 0 -
56296 6 Established 0 -
54652 10 Established 0 -
60266 25 Established 0 -
55905 59 Established 0 -
54995 15 Established 0 -
57753 68 Established 0 -
60644 56 Established 0 -
58922 19 Established 0 -
64011 18 Established 0 -
60015 14 Established 0 -
59609 33 Established 0 -
64593 70 Established 0 -
57789 11 Established 0 -
63551 69 Established 0 -
60016 73 Established 0 -
49579 76 Established 0 -
59099 23 Established 0 -
63006 41 Established 0 -
53325 38 Established 0 -
58428 46 Established 0 -
62397 75 Established 0 -
52562 77 Established 0 -
55516 8 Established 0 -
Remote-Agent:172.30.99.1, Connections-Count:1
Remote-Port Conn-Id Conn-State WriteQ-Size Local-Address
=========== ======= =========== =========== ===========
5060 5 Established 0 -
Remote-Agent:158.69.241.198, Connections-Count:3
Remote-Port Conn-Id Conn-State WriteQ-Size Local-Address
=========== ======= =========== =========== ===========
64736 40 Established 0 -
56332 72 Established 0 -
49999 54 Established 0 -
-------------- SIP Transport Layer Listen Sockets ---------------
Conn-Id Local-Address
=========== =============================
0 [0.0.0.0]:5060:
#cme #مشکل_cme #هک_شدن_cme