Jump to navigation Jump to search
- this feature is disabled by default because it can overload the database or storage
- you need to enable its processing in the sensor's /etc/voipmonitor.conf
See this part of the voipmonitor.conf and adjust/add it.
# analyze sip OPTION messages, default NO sip-options = no # store OPTIONS to disk (in extreme traffic it might overload file system), default NO save-sip-options = no # analyze sip SUBSCRIBE messages, default NO sip-subscribe = no # store SUBSCRIBE to disk (in extreme traffic it might overload file system), default NO save-sip-subscribe = no # analyze sip NOTIFY messages, default NO sip-notify = no # store NOTIFY to disk (in extreme traffic it might overload file system), default NO save-sip-notify = no
The GUI Usage
- in the GUI->SIP Opt.,Subsc.,Notify you can see/filter/delete these types of the SIP OPTIONS/SUBSCRIBE/NOTIFY messages