How to squelch some pjproject logging? (SSL_ERROR_ZERO_RETURN)

Asterisk Asterisk SIP
1

Hi – I get numerous log lines in my logs re: SSL_ERROR_ZERO_RETURN, for example:

[Feb 14 13:49:18] WARNING[1170155] pjproject: SSL 6 [SSL_ERROR_ZERO_RETURN] (Read) ret: 0 len: 65535

…these appear (?) to be due to probers/scanners connecting and disconnecting. (Our devices all work fine and don’t generate these errors as far as I can tell.)

I’ve tried /etc/asterisk/pjproject.conf:

[startup]
log_level = 0

…followed by asterisk -rx “module reload res_pjproject.so”.

My logger.conf looks like this:

[general]
[logfiles]
console = verbose,notice,warning,error
full = verbose,notice,warning,error,debug
security = security,notice,warning,error

I thought that those messages were coming from pjproject and that the pjproject.conf would solve it, but no… what am I doing wrong? What’s the proper way to approach this?

(I do already have various firewalls and fail2ban going and such.)

Thanks!

2

Ok, learning a little… finally figured this out.

The only solution I found was to not log pjproject warnings. The way I chose to do this:

logger.conf now excludes “debug” logging:

[general]
[logfiles]
console = warning,error
; no longer lists debug:
full = verbose,notice,warning,error
security = security,notice,warning,error

pjproject.conf is:

[log_mappings]
type=log_mappings
asterisk_error = 0,1
; warning used to have 2 but moving it to debug to clean up logs
asterisk_warning=
;asterisk_notice=
asterisk_debug = 2,3,4
;asterisk_verbose=
asterisk_trace = 5,6

Then I had to stop/start asterisk. systemctl restart asterisk borked the service somehow, so I had to “stop”, then “start”.