<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p><tt>Hi Benjamin,</tt></p>
<p><tt><br>
</tt></p>
<p><tt>As I've told you before [1], I haven't lost track of this
one, rather I haven't found any time for it.<br>
</tt></p>
<p><tt><br>
</tt></p>
<p><tt>[1]:
<a class="moz-txt-link-freetext" href="http://lists.opensips.org/pipermail/users/2018-October/040093.html">http://lists.opensips.org/pipermail/users/2018-October/040093.html</a><br>
</tt></p>
<pre class="moz-signature" cols="72">Liviu Chircu
OpenSIPS Developer
<a class="moz-txt-link-freetext" href="http://www.opensips-solutions.com">http://www.opensips-solutions.com</a></pre>
<div class="moz-cite-prefix">On 07.11.2018 17:27, Benjamin Pasquet
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:AM6PR10MB1909930E0CBF108978076B5ED8C40@AM6PR10MB1909.EURPRD10.PROD.OUTLOOK.COM">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
<div id="divtagdefaultwrapper"
style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;"
dir="ltr">
<div>Hello,</div>
<div><br>
</div>
<div>I have some questions about fraud detection module and more
particulary about the sequential call statistics.</div>
<div>I am actualy in opensips version 2.2.2 but I tried in 2.2.4
and 2.2.7, and I don't understand well behavior what I see on
each version.</div>
<div><br>
</div>
<div>1) First, in relation to the behavior of the sequential
call statistics, I will give you an exemple to try to explain
what I expected and what I found.</div>
<div><br>
</div>
<div>I have this following rules :</div>
<div><br>
</div>
<div>ruleid profileid prefix ...</div>
<div>1 10000 0033</div>
<div>2 10000 0044</div>
<div>3 20000 0033</div>
<div>4 20000 0044</div>
<div><br>
</div>
<div>User 10000 call the 0033123456789, I do check_fraud(10000,
0033123456789, 10000), who match with the rule 1, the
sequential call counter of the rule 1 goes from 0 to 1.</div>
<div>User 10000 call the 0033123456789, I do check_fraud(10000,
0033123456789, 10000), who match with the rule 1, the
sequential call counter of the rule 1 goes from 1 to 2.</div>
<div>User 10000 call the 0044123456789, I do check_fraud(10000,
0044123456789, 10000), who match with the rule 2, the
sequential call counter of the rule 2 goes from 0 to 1.</div>
<div>User 10000 call the 0033123456789, I do check_fraud(10000,
0033123456789, 10000), who match with the rule 1, the
sequential call counter of the rule 1 goes from 2 to 3 -->
I was expecting that the counter to go back to 1 cause the
last number called by this user is different.</div>
<div>User 10000 call the 0033987654321, I do check_fraud(10000,
0033987654321, 10000), who match with the rule 1, the
sequential call counter of the rule 1 goes from 3 to 4 -->
I was expecting that the counter to go back to 1 for the same
reasons than the previously case, and further, for this rule
and prefix, le number called is different, that's why I was
expecting even more that the counter to go back to 1</div>
<div><br>
</div>
<div>User 20000 call the 0033123456789, I do check_fraud(20000,
0033123456789, 20000), who match with the rule 1, the
sequential call counter of the rule 3 goes from 0 to 1.</div>
<div>User 20000 call the 0033123456789, I do check_fraud(20000,
0033123456789, 20000), who match with the rule 1, the
sequential call counter of the rule 3 goes from 1 to 2.</div>
<div><br>
</div>
<div>User 10000 call the 0033123456789, I do check_fraud(10000,
0033123456789, 10000), who match with the rule 1, the
sequential call counter of the rule 1 goes from 4 to 5 -->
For this user, this prefix, le called number is different than
the previous one called, I was expected that the counter to go
back to 1 even if another user have called this number just
previously.</div>
<div><br>
</div>
<div>For summarize, I was expected that the counter is reset per
user for all its rules, from the time the number called by the
user is different from the previous one.</div>
<div><br>
</div>
<div>2) Secondly, the FRAUD statistics are daily reset, but
which parameter are concerned?</div>
<div>Total calls</div>
<div>Calls per minute</div>
<div>Concurrent calls</div>
<div>Number of sequential calls</div>
<div>Call duration</div>
<div><br>
</div>
<div>3) Thirdly and the last point, is it possible to set a
value for a parameter rule who permit to don't check this one?
Like set the warning and critical parameter values of the
sequential call to -1 for a rule for exemple (I have find this
supposition into the mailing list).</div>
<div><br>
</div>
<div>Thank you in advance for your answer,</div>
<div>Best regards, Benjamin</div>
<div><br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Users@lists.opensips.org">Users@lists.opensips.org</a>
<a class="moz-txt-link-freetext" href="http://lists.opensips.org/cgi-bin/mailman/listinfo/users">http://lists.opensips.org/cgi-bin/mailman/listinfo/users</a>
</pre>
</blockquote>
</body>
</html>