kenmirrors/asterisk
1
0
Fork 0
mirror of https://github.com/asterisk/asterisk.git synced 2025-10-10 06:49:40 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge "res_srtp: lower log level of auth failures" into 13

Browse Source
This commit is contained in:
Jenkins2
2017-09-21 11:35:06 -05:00
committed by Gerrit Code Review
parent 2f8e7be0d1 99a08eb7ab
commit fef8b6efec
1 changed files with 18 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
res/res_srtp.c
View File

@@ -418,12 +418,26 @@ tryagain:
}
if (res != err_status_ok && res != err_status_replay_fail ) {
if ((srtp->warned >= 10) && !((srtp->warned - 10) % 100)) {
ast_log(AST_LOG_WARNING, "SRTP unprotect failed with: %s %d\n", srtp_errstr(res), srtp->warned);
/*
* Authentication failures happen when an active attacker tries to
* insert malicious RTP packets. Furthermore, authentication failures
* happen, when the other party encrypts the sRTP data in an unexpected
* way. This happens quite often with RTCP. Therefore, when you see
* authentication failures, try to identify the implementation
* (author and product name) used by your other party. Try to investigate
* whether they use a custom library or an outdated version of libSRTP.
*/
if (rtcp) {
ast_verb(2, "SRTCP unprotect failed because of %s\n", srtp_errstr(res));
} else {
if ((srtp->warned >= 10) && !((srtp->warned - 10) % 150)) {
ast_verb(2, "SRTP unprotect failed because of %s %d\n",
srtp_errstr(res), srtp->warned);
srtp->warned = 11;
} else {
srtp->warned++;
}
}
errno = EAGAIN;
return -1;
}