[asterisk-users] Under heavy attack

[Jeff LaCoursiere]

On Sat, 30 Oct 2010, Joel Maslak wrote:

>
> For me, monitoring outbound call volume makes a lot more sense.  I would 
> love to see an easy to use, out of the box method to alert me if more 
> than "x" number of erlangs* are exceeded within a five minute, sixty 
> minute, and one day time period. For me, I would want alerting on more 
> than 10 erlangs over five minutes, 8 over an hour, and 2 over a day. 
> Exceeding these would likely indicate fraud for my installation. 
> Smaller sites would use smaller numbers, larger ones would use bigger 
> ones.
>

This only tells you after it is way too late that you now have upstream 
bills to wrangle with your carriers about, or (like in my case) that your 
balance is now depeleted, if it trips anything at all.

In my very recent case only FIVE calls, all placed at the same time, 
caused charges of over US$8K as they stayed connected for over two days. 
This would not have tripped any erlang threshold, and you don't even know 
that it is affecting your balance until the calls cease.

j