[asterisk-users] Identify scripts connecting to the asterisk manager

[Tzafrir Cohen]

On Wed, Mar 03, 2010 at 04:41:49PM -0600, Jason Marble wrote:
> Is there any easy way to identify which script or service is
> connecting to the Asterisk manager? Somewhere on my system a script or
> service is trying to connect with a bad user name or password. I get
> the following error: connect attempt from '127.0.0.1' unable to
> authenticate
> 
> I thought maybe I could do a tcpdump on port 5038 and try to fish out
> the bad username or password but I wasn't able to see any passwords or
> usernames in plain text.
> 
> Any way I could maybe change the logging in Asterisk to show me the
> username that is not able to authenticate?

If you can capture the connection attempt in time, use:

  netstat -ntp

-- 
               Tzafrir Cohen
icq#16849755              jabber:tzafrir.cohen at xorcom.com
+972-50-7952406           mailto:tzafrir.cohen at xorcom.com
http://www.xorcom.com  iax:guest at local.xorcom.com/tzafrir