North American Network Operators Group Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical Re: Denial of service attacks apparently from UUNET Netblocks
On Tue, Oct 07, 1997 at 12:47:33PM -0400, Mike Diehn wrote: > Hmmmm.... I have a few Ascend Max 400Xs using PRI T-1s for ISDN dialup > and they log ANI, DNIS and a slew of other session specific info to > LOCAL4. We don't use CallerID authentication. > > Here's an example of a single ISDN session, sanitized info is in braces. > > {Date Time FQDN} ASCEND: slot 0 port 0, line 1, channel 6, Incoming Call, {10-DIGIT-ANI} > {Date Time FQDN} ASCEND: slot 9 port 4, Assigned to port, {10-DIGIT-ANI} > {Date Time FQDN} ASCEND: call 50 AN slot 9 port 4 64K {7-DIGIT-DNIS} > {Date Time FQDN} ASCEND: slot 9 port 4, LAN session up, {USERNAME} > {Date Time FQDN} ASCEND: call 50 CL 0K u={USERNAME} c=2 p=65 > {Date Time FQDN} ASCEND: slot 9 port 4, line 1, channel 6, Call Disconnected > {Date Time FQDN} ASCEND: slot 9 port 4, Call Terminated > {Date Time FQDN} ASCEND: slot 0 port 0, LAN session down, {USERNAME} > {Date Time FQDN} ASCEND: call 50 CL 0K Here is what I get in MY syslog: {Date Time host} ASCEND: slot 0 port 0, line 1, channel 2, Incoming Call, MBID 106 {Date Time host} ASCEND: slot 4 port 1, Assigned to port, MBID 106 {Date Time host} ASCEND: slot 4 port 1, line 1, channel 2, Call Connected, MBID 106 {Date Time host} ASCEND: call 106 AN slot 4 port 1 64K {7-DIGIT-DNIS} {Date Time host} ASCEND: slot 4 port 1, LAN session up, {USERNAME} I am in BellSouth territory. Another poster to this list reported that BellSouth cannot turn off ANI/CallerID. I'll open a ticket with Ascend and post my findings. --Eric -- Eric Wieling ([email protected]), Corporate Communications Technology Sales: 504-585-7303 ([email protected]), Support: 504-525-5449 ([email protected])
|