Versions Compared

Old Version 23

changes.mady.by.user Glenda Williams

Saved on

compared with

New Version Current

changes.mady.by.user Glenda Williams

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

For each message type, there is a Response code similar to HTTP, with 1xx being informational, 2xx/3xx being success, and 4xx, 5xx, 6xx indicating a failure.

Supported Equipment

VSM summarizes this data for

  • Session Managers
  • Session Border Controllers
    • Audio Codes
    • Ribbon Edge Series (SWe Lite,1000,2000)
    • Cisco Unified Border Element (CUBE) coming soon


The SIP Response Summary dashlet summarizes this data over a 24 hour period, showing a break-down across

...

When the dashet is set to Huge size then the view includes anomaly detection by Response.

Supported Equipment

VSM summarizes this data for

  • Session Managers
  • Session Border Controllers
    • Audio Codes
    • Avaya 
    • Cisco Unified Border Element (CUBE) 
    • Ribbon Edge Series (SWe Lite,1000,2000)

Dashboard examples


Section


Column
width33%

Example 1 - System Outage: In this example, everything looks normal - the vast majority of responses are 2xx, or successful responses with only a small percentage of authorization errors, which is to be expected.  Then at 8am there is an outage, causing a rapid spike of Internal Server Errors on Invites.

SIP Response Summary dashlet showing a system outage at 8am



Column
width33%

Example 2 - Security issue: This traffic was observed on an external facing SBC - 3/4 of all Invites were met with a Authorization 401, or 403 response code, indicating heavy security attacks requiring further input from engineers




Column
width33%

Example 3 - Configuration issue: When filtering by message type, it can be seen that a large percentage of service messages are returning a 'Bad Request' error.  This is likely caused by an internal implementation error where something is querying the SIP server for a service response, but has been misconfigured. 



Anomaly Detection on Huge size

Info

Anomaly detection requires 31 days of continuous data to produce the upper and lower margins required to determine if current data is outside normal ranges.


Image AddedImage Removed

SIP Response Summary (Huge) with anomaly detection

...