Curious PJSIP entries in CLI

Asterisk Asterisk SIP
1

I’m seeing lots of entries fly by all day long coming from one of my customer’s IP. The IP address is known to me, so I know it’s a customer. I changed their IP to 9.9.9.9 to protect the innocent :slight_smile:

Any idea what’s going on here? It’s constant… Are they trying to login and getting rejected? I am less familiar with PJ SIP than the old Chan SIP so, looking for a little insight on these. I know something isn’t right and need the customer to fix their config so this stops or slows down but I don’t really know what’s happening so it’s tough to advise them.

Thanks in advance for any help.

Here is what I’m seeing tons of, all day long from their IP:

    -- Added contact 'sip:520@9.9.9.9:2449' to AOR '520' with expiration of 60 seconds
    -- Removed contact 'sip:520@9.9.9.9:2445' from AOR '520' due to remove existing
  == Contact 520/sip:520@9.9.9.9:2445 has been deleted
    -- Added contact 'sip:518@9.9.9.9:2449' to AOR '518' with expiration of 60 seconds
    -- Removed contact 'sip:518@9.9.9.9:2445' from AOR '518' due to remove existing
  == Contact 518/sip:518@9.9.9.9:2445 has been deleted
    -- Added contact 'sip:519@9.9.9.9:2450' to AOR '519' with expiration of 60 seconds
    -- Removed contact 'sip:519@9.9.9.9:2449' from AOR '519' due to remove existing
  == Contact 519/sip:519@9.9.9.9:2449 has been deleted
    -- Added contact 'sip:520@9.9.9.9:2448' to AOR '520' with expiration of 60 seconds
    -- Removed contact 'sip:520@9.9.9.9:2449' from AOR '520' due to remove existing
  == Contact 520/sip:520@9.9.9.9:2449 has been deleted
    -- Added contact 'sip:521@9.9.9.9:2450' to AOR '521' with expiration of 60 seconds
    -- Removed contact 'sip:521@9.9.9.9:2445' from AOR '521' due to remove existing
  == Contact 521/sip:521@9.9.9.9:2445 has been deleted
    -- Added contact 'sip:518@9.9.9.9:2448' to AOR '518' with expiration of 60 seconds
    -- Removed contact 'sip:518@9.9.9.9:2449' from AOR '518' due to remove existing
  == Contact 518/sip:518@9.9.9.9:2449 has been deleted
    -- Added contact 'sip:521@9.9.9.9:2447' to AOR '521' with expiration of 60 seconds
    -- Removed contact 'sip:521@9.9.9.9:2450' from AOR '521' due to remove existing
  == Contact 521/sip:521@9.9.9.9:2450 has been deleted
    -- Added contact 'sip:520@9.9.9.9:2450' to AOR '520' with expiration of 60 seconds
    -- Removed contact 'sip:520@9.9.9.9:2448' from AOR '520' due to remove existing
  == Contact 520/sip:520@9.9.9.9:2448 has been deleted
2

You need to show your pjsip configuration. Your messages could be related to max_contacts and remove_existing.

3

Figured it out… This was a customer registering 4 different SIP accounts on 7 different phones with low keep alive interval set. Told them to remove all the multiple SIP accounts from all the phones and have each SIP account on one phone only. Also had them increase the keep alive. All good now, thanks.

4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.