<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p><tt>Hi, Deniz!</tt></p>
<p><span style=" font-family:'Times New Roman'; font-size: 12pt;"></span><tt>Answers
below.</tt></p>
<p><tt>Regards,</tt><br>
<span style=" font-family:'Times New Roman'; font-size: 12pt;"></span></p>
<pre class="moz-signature" cols="72">Liviu Chircu
OpenSIPS Developer
<a class="moz-txt-link-freetext" href="http://www.opensips-solutions.com">http://www.opensips-solutions.com</a></pre>
<div class="moz-cite-prefix">On 10.11.2016 15:18, Denis wrote:<br>
</div>
<blockquote cite="mid:714079455.20161110161807@ptl.ru" type="cite">
<title>Re: Fraud_detection modul</title>
<table>
<tbody>
<tr>
<td bgcolor="#0000ff" width="2"><br>
</td>
<td><span style=" font-family:'times new roman'; font-size:
12pt;">Hello!<br>
<br>
Opensips 2.2.1<br>
<br>
A couple of questions about fraud_detection:<br>
<br>
1) In documentation says "<span style=" font-size: 10pt;
color: #666666;"><b>consecutive calls</b> to the same
destination <span style=" font-size: 12pt; color:
#000000;">". Same destination = same number, or
prefix?<br>
</span></span></span></td>
</tr>
</tbody>
</table>
</blockquote>
<tt><span style="font-size: 12pt; font-family: "times new
roman";"><span style=" font-size: 10pt; color: #666666;"><span
style=" font-size: 12pt; color: #000000;">Same prefix, taken
from the fraud detection rule</span></span></span></tt>
<blockquote cite="mid:714079455.20161110161807@ptl.ru" type="cite">
<table>
<tbody>
<tr>
<td><span style=" font-family:'times new roman'; font-size:
12pt;"><span style=" font-size: 10pt; color: #666666;"><span
style=" font-size: 12pt; color: #000000;">
2) At the beginning of the next period, a counts of
events begin 0?<br>
</span></span></span></td>
</tr>
</tbody>
</table>
</blockquote>
<tt><span style="font-size: 12pt; font-family: "times new
roman";"><span style=" font-size: 10pt; color: #666666;"><span
style=" font-size: 12pt; color: #000000;">The module uses a
gliding window of 60 seconds, in order to keep track of
"calls per minute". When changing time intervals, hence
putting new thresholds in place, the "calls per minute" will
not reset. In other words, when switching intervals, the new
"calls per minute" thresholds will initially work with calls
placed during the last minute when the old thresholds were
in place.</span></span></span></tt>
<blockquote cite="mid:714079455.20161110161807@ptl.ru" type="cite">
<table>
<tbody>
<tr>
<td><span style=" font-family:'times new roman'; font-size:
12pt;"><span style=" font-size: 10pt; color: #666666;"><span
style=" font-size: 12pt; color: #000000;">
3) is there any method to reset counts of events for
certain user?<br>
</span></span></span></td>
</tr>
</tbody>
</table>
</blockquote>
<span style=" font-family:'times new roman'; font-size: 12pt;"><span
style=" font-size: 10pt; color: #666666;"><span style="
font-size: 12pt; color: #000000;">Currently there is no way of
doing this.</span></span></span><br>
<br>
<blockquote cite="mid:714079455.20161110161807@ptl.ru" type="cite">
<table>
<tbody>
<tr>
<td><span style=" font-family:'times new roman'; font-size:
12pt;"><span style=" font-size: 10pt; color: #666666;"><span
style=" font-size: 12pt; color: #000000;">
4) </span></span></span><span style="
font-family:'Times New Roman'; font-size: 12pt;">what is
the value used to calculate duration in fraud_module,
minutes or seconds?</span></td>
</tr>
</tbody>
</table>
</blockquote>
<span style=" font-family:'times new roman'; font-size: 12pt;"><span
style=" font-size: 10pt; color: #666666;"><span style="
font-size: 12pt; color: #000000;"></span></span></span><span
style=" font-family:'Times New Roman'; font-size: 12pt;">It should
be "seconds", I will fix the misleading example in the tutorial.</span>
<blockquote cite="mid:714079455.20161110161807@ptl.ru" type="cite">______________________________________________
<pre wrap="">Users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Users@lists.opensips.org">Users@lists.opensips.org</a>
<a class="moz-txt-link-freetext" href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a>
</pre>
</blockquote>
<br>
</body>
</html>