[cisco-voip] port 2000 is getting slamed from IP phone

[Wes Sisk]

What is 'crazy amount of traffic' and what is 'the field'.  The  
CallManager SRND recommends ~8kbps for up to 20 phones or something  
that (check the srnd for specifics).  Otherwise, there is the recent  
field notice about possible DoS against port 2000, 2001,2002 on CM.

/Wes

On Feb 1, 2006, at 12:04 PM, Paul Long wrote:

James,



Besides the normal Skinny call-signaling traffic on port 2000, there  
is a heart-beat mechanism (KeepAlive/KeepAliveAck) that may be  
generating the unexpected traffic you’re seeing. The CallManager  
tells the phones how often to send KeepAlive. Maybe someone  
accidentally changed it from the default of 30 seconds to something  
like 1 second, or maybe you’re just seeing normal chattiness. Make  
sure KeepAlive frequency is set to at least 30. Setting it to 60  
probably wouldn’t hurt if the amount of traffic bothers you.



Here is where the setting is located on CCM 4.1:

Service | Service Parameters | Cisco CallManager | Station KeepAlive  
Interval



Paul



From: cisco-voip-bounces at puck.nether.net [mailto:cisco-voip- 
bounces at puck.nether.net] On Behalf Of James Grace
Sent: Monday, January 31, 2005 2:56 PM
To: cisco-voip at puck.nether.net
Subject: [cisco-voip] port 2000 is getting slamed from IP phone



We have ip phones out in the field,  and for about a week we found  
that we are getting crazy amount of traffic from these phones hitting  
port 2000



We are running  4.1.2 es41



James D. Grace

CCNP CCNA MCSE MCDBA

Sr. System Engineer / Professional Svc.

Digitel Corporation



_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://puck.nether.net/pipermail/cisco-voip/attachments/20060201/8aebc92b/attachment-0001.html