[OpenSIPS-Users] Fraud detection module queries

[John Quick]

About time intervals:
* Are the stats for Total calls counted from the start hour to the end hour
for the given rule?
* Must overnight time intervals always be defined using two records - one
for start time thro' to 23:59 and other for 00:00 thro' to end time?
* Can rules applying to the same prefix have time intervals that overlap -
so matching more than one rule at the same time?
* If a new call hits thresholds on more than one rule OR more than one
variable within a rule, does the check_fraud function only trigger events
for the first rule or the first variable that reached the threshold or for
all of them?

About performance where a large number of rules are defined:
* Are the rules from the table cached and, if so, what are the constrains on
the maximum number of rules you can define? (Package/shared memory?)
* Have any tests been done on performance with large sets of rules?
* Would performance be badly impaired if you created, say, 24 rules for each
prefix covering the 24 hours of the day? (..to allow total calls per hour to
be monitored)

About Sequential call counting:
* Are sequential calls counted based on destination prefix only or does it
store stats against the full destination number?

About reporting fraud stats using "opensipsctl fifo show_fraud_stats":
* I always get "400 Bad parameter" when I try to report fraud stats. Please
can you give an example with a more detailed explanation (especially what is
the "number" parameter)?

Thanks.

John Quick
Smartvox Limited
Web: www.smartvox.co.uk