[asterisk-users] Remote Unix Connection

[Sherwood McGowan]

On Sun, Oct 17, 2010 at 6:55 AM, <covici at ccs.covici.com> wrote:

> Do you have freepbx anywhere it always tries to connect -- via a socket
> I think and it usually uses the manager, so if you disable the manager
> it will break things.  Also take the port stanza off of the tcpdump and
> you will soon see what is connecting.  You will get other stuff, but
> this will tell you.
>
> Dan Journo <dan at keshercommunications.com> wrote:
>
> > > Some service is definitely connecting to your asterisk using AMI. Such
> services use username/password described in manager.conf. Usually its is
> some monitoring service. Although the message says 'remote UNIX connection'
> but it can be very well something from localhost. I would suggest to use
> tcpdump to find out the IP of this service. AMI uses TCP port 5038.
> >
> > I ran the following command and waited for the cli to show the "remote
> unix connection" message a few times.
> >
> > [root at sip2 ~]# tcpdump port 5038 -w tcpdump.log -s0
> >
> > tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size
> 65535 bytes
> >
> > The result was....
> >
> > 0 packets captured
> >
> > 0 packets received by filter
> >
> > 0 packets dropped by kernel
> >
> > Therefore, it seems like nothing is connecting to the AMI?
> >
> > Also, in manager.conf.... enabled=no
> >
> > Any other ideas? Is this a bug?
> >
> > Thanks
> >
> > Dan
> >
> > ----------------------------------------------------
> > Alternatives:
> >
> > ----------------------------------------------------
> > --
> > _____________________________________________________________________
> > -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> > New to Asterisk? Join us for a live introductory webinar every Thurs:
> >                http://www.asterisk.org/hello
> >
> > asterisk-users mailing list
> > To UNSUBSCRIBE or update options visit:
> >    http://lists.digium.com/mailman/listinfo/asterisk-users
> --
> Your life is like a penny.  You're going to lose it.  The question is:
> How do
> you spend it?
>
>         John Covici
>         covici at ccs.covici.com
>
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> New to Asterisk? Join us for a live introductory webinar every Thurs:
>               http://www.asterisk.org/hello
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users
>

Sounds like either FreePBX or some other script using astmanproxy or just
the AMI in general. Another possible cause is a script (or terminal)
constantly accessing "asterisk -r" or "rasterisk" (+ any other arguments) to
either run an Asterisk CLI command, or to just "watch' the console output.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20101017/0a871315/attachment-0001.htm