Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

From this view it is possible to identify system outages, configuration or implementation problems, or external security attacks. 

When the dashet is set to Huge size then the view includes anomaly detction by Response.



Section


Column
width33%

Example 1 - System Outage: In this example, everything looks normal - the vast majority of responses are 2xx, or successful responses with only a small percentage of authorization errors, which is to be expected.  Then at 8am there is an outage, causing a rapid spike of Internal Server Errors on Invites.

SIP Response Summary dashlet showing a system outage at 8am



Column
width33%

Example 2 - Security issue: This traffic was observed on an external facing SBC - 3/4 of all Invites were met with a Authorization 401, or 403 response code, indicating heavy security attacks requiring further input from engineers




Column
width33%

Example 3 - Configuration issue: When filtering by message type, it can be seen that a large percentage of service messages are returning a 'Bad Request' error.  This is likely caused by an internal implementation error where something is querying the SIP server for a service response, but has been misconfigured. 




Image Added

SIP Response Summary (Huge) with anomaly detection


Troubleshooting



Not seeing any SIP response code data? 

...