Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

VSM summarizes this data for Avaya Session Managers and Avaya Session Border Controllers.


See The SIP Response codes Summary dashlet summarizes this data over a 24 hour summary in the new SIP Response Summary Dashlet (available under Network).

Image Removed

...

period, showing a break-down across

  • 15 minute intervals
  • By message type
  • By response code


Those response codes are broken down into 4 bands:

...

By default all message types are shown, but it is possible to toggle based on specific message types, for example, to assess whether there are any unusual security breaches occurring, toggle off all but Registration and review the amber for authorization errors.


From this view it is possible to identify system outages, configuration or implementation problems, or external security attacks. 



Section


Column
width33%

SIP Response Summary dashlet showing a system outage at 8amImage Added

Example 1: In

...

this example, everything looks normal - the vast majority of responses are 2xx, or successful responses with only a small percentage of authorization errors, which is to be expected.  Then at 8am there is an outage, causing a rapid spike of Internal Server Errors on Invites.



Column
width33%

Image Added


Example 2: This traffic was observed on an external facing SBC - 3/4 of all Invites were met with a Authorization 401, or 403 response code, indicating heavy security attacks requiring further input from engineers


Column
width33%

Image Added

Example 3: When filtering by message type, it can be seen that a large percentage of service messages are returning a 'Bad Request' error.  This is likely caused by an internal implementation error where something is querying the SIP server for a service response, but has been misconfigured. 






Example 2



Troubleshooting



Not seeing any SIP response code data? 

...