<html>
  <head>
    <meta content="text/html; charset=windows-1251"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <p><tt>Upon looking through the source code, it seems that
        calls_per_min / total_calls / concurrent_calls are also reset to
        0 every time a new rule is matched, or if the day has changed
        since we last matched the current rule.<br>
      </tt></p>
    <p><tt>I will make sure this info ^ is more easily accessible:
        either in a new tutorial section or the module doc.<br>
      </tt></p>
    <p><tt>Regards,<br>
      </tt></p>
    <tt></tt>
    <pre class="moz-signature" cols="72">Liviu Chircu
OpenSIPS Developer
<a class="moz-txt-link-freetext" href="http://www.opensips-solutions.com">http://www.opensips-solutions.com</a></pre>
    <div class="moz-cite-prefix">On 10.11.2016 16:29, Denis wrote:<br>
    </div>
    <blockquote cite="mid:136401369.20161110172927@ptl.ru" type="cite">
      <title>Re: [OpenSIPS-Users] Fraud_detection module</title>
      <table>
        <tbody>
          <tr>
            <td bgcolor="#0000ff" width="2"><br>
            </td>
            <td><span style=" font-family:'times new roman'; font-size:
                12pt;">Hello, Liviu!<br>
                <br>
                Thank you for your answer.<br>
                <br>
                About 2)<br>
                <br>
                "Calls per minute" - ok, but what about other
                parameters?<br>
                For example, "total calls"?<br>
                Suppose we have 09:00 - 17:00, Mon-Fri, and "total
                calls" = 30.<br>
                If in Mon user makes 25 calls, on Tue since 09:00 counts
                of  "total calls" begin from 0 or 25?<br>
                <br>
              </span><a moz-do-not-send="true" style="
                font-family:'arial'; font-size: 10pt;"
                href="mailto:d.putyato@ptl.ru">mailto:denis7979@mail.ru</a><br>
              <br>
              <table bgcolor="#ffffff">
                <tbody>
                  <tr>
                    <td bgcolor="#0000ff" width="2"><br>
                    </td>
                    <td><span style=" font-family:'courier new';
                        font-size: 12pt;">Hi, Deniz!<br>
                        Answers below.<br>
                        Regards,<br>
                        Liviu Chircu<br>
                        OpenSIPS Developer<br>
                      </span><a moz-do-not-send="true" style="
                        font-family:'courier new'; font-size: 12pt;"
                        href="http://www.opensips-solutions.com">http://www.opensips-solutions.com</a><br>
                      <span style=" font-family:'times new roman';
                        font-size: 12pt;">On 10.11.2016 15:18, Denis
                        wrote:<br>
                      </span>
                      <table>
                        <tbody>
                          <tr>
                            <td bgcolor="#3200ff" width="2"><br>
                            </td>
                            <td><span style=" font-family:'times new
                                roman'; font-size: 12pt;">Re:
                                Fraud_detection modul <br>
                              </span>
                              <table>
                                <tbody>
                                  <tr>
                                    <td bgcolor="#0000ff" width="2"><br>
                                    </td>
                                    <td><span style=" font-family:'times
                                        new roman'; font-size: 12pt;">Hello!<br>
                                        <br>
                                        Opensips 2.2.1<br>
                                        <br>
                                        A couple of questions about
                                        fraud_detection:<br>
                                        <br>
                                        1) In documentation says "<span
                                          style=" font-size: 10pt;
                                          color: #666666;"><b>consecutive
                                            calls</b> to the same
                                          destination <span style="
                                            font-size: 12pt; color:
                                            #000000;">". Same
                                            destination = same number,
                                            or prefix?</span></span></span></td>
                                  </tr>
                                </tbody>
                              </table>
                            </td>
                          </tr>
                        </tbody>
                      </table>
                      <span style=" font-family:'courier new';
                        font-size: 12pt;">Same prefix, taken from the
                        fraud detection rule <br>
                      </span>
                      <table>
                        <tbody>
                          <tr>
                            <td bgcolor="#6400ff" width="2"><br>
                            </td>
                            <td>
                              <table>
                                <tbody>
                                  <tr>
                                    <td><span style=" font-family:'times
                                        new roman'; font-size: 12pt;">2)
                                        At the beginning of the next
                                        period, a counts of events begin
                                        0?</span></td>
                                  </tr>
                                </tbody>
                              </table>
                            </td>
                          </tr>
                        </tbody>
                      </table>
                      <span style=" font-family:'courier new';
                        font-size: 12pt;">The module uses a gliding
                        window of 60 seconds, in order to keep track of
                        "calls per minute". When changing time
                        intervals, hence putting new thresholds in
                        place, the "calls per minute" will not reset. In
                        other words, when switching intervals, the new
                        "calls per minute" thresholds will initially
                        work with calls placed during the last minute
                        when the old thresholds were in place. <br>
                      </span>
                      <table>
                        <tbody>
                          <tr>
                            <td bgcolor="#9600ff" width="2"><br>
                            </td>
                            <td>
                              <table>
                                <tbody>
                                  <tr>
                                    <td><span style=" font-family:'times
                                        new roman'; font-size: 12pt;">3)
                                        is there any method to reset
                                        counts of events for certain
                                        user?</span></td>
                                  </tr>
                                </tbody>
                              </table>
                            </td>
                          </tr>
                        </tbody>
                      </table>
                      <span style=" font-family:'times new roman';
                        font-size: 12pt;">Currently there is no way of
                        doing this.<br>
                        <br>
                      </span>
                      <table>
                        <tbody>
                          <tr>
                            <td bgcolor="#c800ff" width="2"><br>
                            </td>
                            <td>
                              <table>
                                <tbody>
                                  <tr>
                                    <td><span style=" font-family:'times
                                        new roman'; font-size: 12pt;">4)
                                         what is the value used to
                                        calculate duration in
                                        fraud_module, minutes or
                                        seconds?</span></td>
                                  </tr>
                                </tbody>
                              </table>
                            </td>
                          </tr>
                        </tbody>
                      </table>
                      <span style=" font-family:'times new roman';
                        font-size: 12pt;">It should be "seconds", I will
                        fix the misleading example in the tutorial. <br>
                      </span>
                      <table>
                        <tbody>
                          <tr>
                            <td bgcolor="#fa00ff" width="2"><br>
                            </td>
                            <td><span style=" font-family:'times new
                                roman'; font-size: 12pt;">______________________________________________
                                <br>
                                <span style=" font-family:'courier
                                  new';">Users mailing list<br>
                                </span></span><a moz-do-not-send="true"
                                style=" font-family:'courier new';
                                font-size: 12pt;"
                                href="mailto:Users@lists.opensips.org">Users@lists.opensips.org</a><br>
                              <a moz-do-not-send="true" style="
                                font-family:'courier new'; font-size:
                                12pt;"
                                href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a></td>
                          </tr>
                        </tbody>
                      </table>
                    </td>
                  </tr>
                </tbody>
              </table>
            </td>
          </tr>
        </tbody>
      </table>
    </blockquote>
    <br>
  </body>
</html>