You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Current »

1. Introduction

PrivateServer logs three types of security events that can be accessed trough a read-only SQL view:

  • auditing events: users of administration console can change (insert/update/delete) configuration objects. Their actions are logged.
  • authentication events: administration services are provided only to authenticated users. Login and logout (successful or not) are logged.
  • SIP sessions: VoIP clients are always connected to PrivateServer and periodically register to SIP server. Activity related to stay always connected is logged 

 

These informations are viewable through administration console and could also be exported through read-only SQL views.

2. Auditing events

 

View: V_AUDIT_EVENT

 

Field

Type

Description

id

bigint(20)

PK - autoincrement

date_created

datetime

event timestamp

event_type

varchar(255)

type of object change

actor

varchar(255)

user’s login

class_name

varchar(255)

type of object changed

object_id

varchar(255)

ID of changed object

 

3. Authentication events

View: V_AUTH_EVENT

 

Field

Type

Description

id

bigint(20)

PK - autoincrement

date_created

datetime

event timestamp

event_type

varchar(255)

login/logout/login failed

ip_address

varchar(255)

IP address of remote client

principal

varchar(255)

username used for authentication event

 

4. SIP sessions

View: V_SIP_SESSION

 

Field

Type

Description

id

bigint(20)

PK - autincrement

date_created

datetime

event timestamp

event_type

varchar(10)

type of network event 

username

varchar(80)

SIP peername

useragent

varchar(255)

SIP useragent when applicable

remoteaddr

varchar(150)

IP and port of client

tlscipher

varchar(100)

Negotiated TLS cipher cuite

 

5. Call Detail Record

View: V_CDR

 

Field

Type

Description

id

bigint(20)

PK - autincrement

calldate

datetime

event timestamp

src

varchar(80)

caller number

src_user_agent

varchar(80)

caller useragent

dst

varchar(80)

called number

dst_user_agent

varchar(80)

called useragent

duration

int(11)

call duration (counting from dialing)

billsec

int(11)

call duration (counting from answer)

 

 


  • No labels