[OpenSIPS-Users] Fraud_detection module

[Liviu Chircu]

Upon looking through the source code, it seems that calls_per_min / 
total_calls / concurrent_calls are also reset to 0 every time a new rule 
is matched, or if the day has changed since we last matched the current 
rule.

I will make sure this info ^ is more easily accessible: either in a new 
tutorial section or the module doc.

Regards,

Liviu Chircu
OpenSIPS Developer
http://www.opensips-solutions.com

On 10.11.2016 16:29, Denis wrote:
> Re: [OpenSIPS-Users] Fraud_detection module
>
> 	Hello, Liviu!
>
> Thank you for your answer.
>
> About 2)
>
> "Calls per minute" - ok, but what about other parameters?
> For example, "total calls"?
> Suppose we have 09:00 - 17:00, Mon-Fri, and "total calls" = 30.
> If in Mon user makes 25 calls, on Tue since 09:00 counts of  "total 
> calls" begin from 0 or 25?
>
> mailto:denis7979 at mail.ru <mailto:d.putyato at ptl.ru>
>
>
> 	Hi, Deniz!
> Answers below.
> Regards,
> Liviu Chircu
> OpenSIPS Developer
> http://www.opensips-solutions.com
> On 10.11.2016 15:18, Denis wrote:
>
> 	Re: Fraud_detection modul
>
> 	Hello!
>
> Opensips 2.2.1
>
> A couple of questions about fraud_detection:
>
> 1) In documentation says "*consecutive calls* to the same destination 
> ". Same destination = same number, or prefix?
>
> Same prefix, taken from the fraud detection rule
>
> 	
> 2) At the beginning of the next period, a counts of events begin 0?
>
> The module uses a gliding window of 60 seconds, in order to keep track 
> of "calls per minute". When changing time intervals, hence putting new 
> thresholds in place, the "calls per minute" will not reset. In other 
> words, when switching intervals, the new "calls per minute" thresholds 
> will initially work with calls placed during the last minute when the 
> old thresholds were in place.
>
> 	
> 3) is there any method to reset counts of events for certain user?
>
> Currently there is no way of doing this.
>
>
> 	
> 4)  what is the value used to calculate duration in fraud_module, 
> minutes or seconds?
>
> It should be "seconds", I will fix the misleading example in the 
> tutorial.
>
> 	______________________________________________
> Users mailing list
> Users at lists.opensips.org <mailto:Users at lists.opensips.org>
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20161110/fa34cc8a/attachment-0001.htm>