login as: root

SYSTEM HARDENED
|-----------------------------------------------------------------|
| This system is for the use of authorized users only. |
| Individuals using this computer system without authority, or in |
| excess of their authority, are subject to having all of their |
| activities on this system monitored and recorded by system |
| personnel. |
| Anyone using this system expressly consents to such monitoring |
| and is advised that if such monitoring reveals possible |
| evidence of criminal activity, system personnel may provide the |
| evidence of such monitoring to law enforcement officials. |
|-----------------------------------------------------------------|
root@[Link]'s password:
Last login: Wed Jan 30 [Link] 2019 from [Link]
root@ims12lb1> the password is yt_xk39b
-bash: the: command not found
root@ims12lb1>

root@ims12lb1> ifconfig
dummy0: flags=195<UP,BROADCAST,RUNNING,NOARP> mtu 1500
inet6 fe80::a05a:2dff:feda:3ed5 prefixlen 64 scopeid 0x20<link>
ether [Link] txqueuelen 1000 (Ethernet)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 3 bytes 210 (210.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500

inet [Link] netmask [Link] broadcast [Link]
inet6 fe80::f816:3eff:fecb:f08a prefixlen 64 scopeid 0x20<link>
ether [Link] txqueuelen 1000 (Ethernet)
RX packets 6645562 bytes 679081983 (647.6 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 6516884 bytes 471431842 (449.5 MiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

eth1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500

inet [Link] netmask [Link] broadcast [Link]
inet6 fe80::f816:3eff:fe07:1ff3 prefixlen 64 scopeid 0x20<link>
ether [Link] txqueuelen 1000 (Ethernet)
RX packets 2660406 bytes 1007621378 (960.9 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 3157024 bytes 643678703 (613.8 MiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

eth2: flags=195<UP,BROADCAST,RUNNING,NOARP> mtu 1500

inet [Link] netmask [Link] broadcast [Link]
inet6 fe80::5468:6dff:fe03:36f prefixlen 64 scopeid 0x20<link>
ether [Link] txqueuelen 1000 (Ethernet)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 6473 bytes 748702 (731.1 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

eth3: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500

inet [Link] netmask [Link] broadcast [Link]
inet6 fe80::f816:3eff:fe47:7c83 prefixlen 64 scopeid 0x20<link>
 ether [Link] txqueuelen 1000 (Ethernet)
RX packets 431096 bytes 26493172 (25.2 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 20275 bytes 1823286 (1.7 MiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

eth4: flags=195<UP,BROADCAST,RUNNING,NOARP> mtu 1500

inet [Link] netmask [Link] broadcast [Link]
inet6 fe80::94c9:92ff:feca:3934 prefixlen 64 scopeid 0x20<link>
ether [Link] txqueuelen 1000 (Ethernet)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 5198 bytes 696304 (679.9 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

eth5: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500

inet [Link] netmask [Link] broadcast [Link]
inet6 fe80::f816:3eff:fe2e:e1a5 prefixlen 64 scopeid 0x20<link>
ether [Link] txqueuelen 1000 (Ethernet)
RX packets 78715 bytes 4670490 (4.4 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 4052 bytes 170460 (166.4 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

eth6: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500

inet [Link] netmask [Link] broadcast [Link]
inet6 fe80::f816:3eff:fe36:3c1d prefixlen 64 scopeid 0x20<link>
ether [Link] txqueuelen 1000 (Ethernet)
RX packets 72382 bytes 4343064 (4.1 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 4051 bytes 170418 (166.4 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536

inet [Link] netmask [Link]
inet6 ::1 prefixlen 128 scopeid 0x10<host>
loop txqueuelen 1 (Local Loopback)
RX packets 9804743 bytes 1585097030 (1.4 GiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 9804743 bytes 1585097030 (1.4 GiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

tap0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500

inet [Link] netmask [Link] broadcast [Link]
inet6 fe80::88a8:7ff:fe39:ba5b prefixlen 64 scopeid 0x20<link>
ether [Link] txqueuelen 1000 (Ethernet)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 7 bytes 570 (570.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

root@ims12lb1>

root@ims12lb1> cat /etc/hosts

# /etc/hosts
# Generated on 2018-01-12 [Link]

# TBD: previous entries are not maintained ([Link]['custom']['hosts_PREVIOUS'])

[Link] localhost [Link] localhost4 localhost4.localdomain4
::1 localhost [Link] localhost6 localhost6.localdomain6

# Core LAN #1
[Link] ims12lb1

# Admin LAN #1
[Link] ims12lb1-oam pub-ims12lb1-v4 ims12lb1. loghost [Link]
[Link] ims12lb1-icmgw

# BEGIN_CM_REPO_ENTRIES
[Link] sigtran-internallan-ims12lb1
[Link] sigtran-internallan2-lb-ims12lb1
[Link] sigtran-defaultlan-ims12lb1
[Link] sigtran-ims-lan-2-ims12lb1
[Link] sigtran-accesscontrol-lan-ims12lb1
[Link] sigtran-ims-lan-ims12lb1
[Link] sigtran-sctp-lan-1-secondary-ims12lb1
# END_CM_REPO_ENTRIES
# BEGIN_IMS_AUTOCONFIG
# Do not edit anything between # BEGIN_IMS_AUTOCONFIG and # END_IMS_AUTOCONFIG
# The definitions are derived from the current customizing

# END_IMS_AUTOCONFIG
root@ims12lb1>

//////////////////////////////////////////////

-bash-4.2$ [Link] -i ims12v01.int1@[Link]

================================================================================
Reganalyser called: /opt/SMAW/INTP/bin64/reganalyser -i
ims12v01.int1@[Link]
================================================================================
=== PCSCF Registration(s)
================================================================================
Registration:
Private id/IMPI: ims12v01.int1@[Link]
IP Address: [Link]
Port Number: 49653
Gm Ip Address: [Link]
Derived IMPI: No
RX Session: No
Signaling bearer: No
Service route: <sip:originating@[Link];reg-
id=ZT1548757307551284;lskpmc=SZT;lr;ms_rest_id=SZT5c50293b>
Expires: 2019-01-30 [Link] (CET)
Emergency: No
Logical name: IMS_PCSCF02
PPI name: PZT
Access info: direct
 Authentication method: Unknown (0)
Private contact:
<sip:ims12v01@[Link]:49653;rinstance=9c1f9b9a9cfad58e;transport=tcp>;expires=3
600
Far end NAT flag: No
TLS port: 0
PANI RAT type: N/A
C-MSISDN: N/A
ATU-STI: N/A
PGW host: N/A
PGW realm: N/A
IBCF URI: N/A
IMSI: N/A
RAT type: (2006) - INVALID_RAT_TYPE
IPCAN type: TGPP
Charging term ioi: N/A
SCSCF failover support: No
SRTP: No
MSRP: No
User Agent: X-Lite release 5.4.0 stamp 94388
P-Access-Network-Info: N/A
PCRF Subscription Status: FAILED
PCRF Policy server Address: N/A
PCRF Session ID: N/A
Cellular Network Info: N/A
Public user id(s)/IMPU(s):
IMPU(default) sip:ims12v01@[Link]
Group user id(s)/IMPU(s):
Group IMPU: N/A
Wildcarded id(s)/IMPU(s):
Wildcarded IMPU: N/A
Line Identifier(s):
Line Identifier: N/A
================================================================================
================================================================================
Reganalyser called: /opt/SMAW/INTP/bin64/reganalyser -i
ims12v01.int1@[Link]
================================================================================
=== SCSCF Registration(s)
================================================================================
Registration:
Private ID: ims12v01.int1@[Link]
Default IMPU: sip:ims12v01@[Link]
Explicit IMPU: sip:ims12v01@[Link]
Registration state: 300000 - Registered
Path: sip:pcscf1-
[Link];lr;lskpmc=PZT;3pdrp=36e963e8fc5fba0e
Contact:
<sip:ims12v01@[Link]:49653;rinstance=9c1f9b9a9cfad58e;transport=tcp>
Expiration time: 2019-01-30 [Link] (CET)
IP address: [Link]
Port: 0
Authentication data:
Authentication scheme: Digest authentication
Quality of protection: Response Digest is computed from method and
uri
Digest realm: N/A
Digest algorithm: N/A
Logical name: IMS_SCSCF06
 PPI name: SZT
Charging data:
Acc session id: N/A
Charging id: N/A
Charging group id: N/A
CCF primary: N/A
CCF secondary: N/A
ECF primary: N/A
ECF secondary: N/A
Charging orig ioi: N/A
PGW host: N/A
PGW realm: N/A
Emergency: No
GRUU gr: N/A
MSISDN: 498971201
IMSI: N/A
Call ID:
94388NmYwZjMzODM0NzliOTEyYjdhZDg3ZDA3NDE5NzBlYjc
Cseq: 68
P-CSCF address: [Link]
GGSN address: N/A
SGSN address: N/A
Loose routing: No
Access network: direct
HSS restoration: Yes
Roaming: No
Visited network id: [Link]
User Agent : X-Lite release 5.4.0 stamp 94388
P-Access-Network-Info: N/A
Service profile(s):
Service profile:
Public user id(s)/IMPU(s):
IMPU(default):
Public user id: sip:ims12v01@[Link]
Identity type: 0
Wildcarded IMPU/PSI: N/A
Display name: N/A
Barred: No
Profile id: No profile ID
Shared iFC id: N/A
3rd Party Register: Yes
Registrations: 1
Initial Filter Criteria:
iFC:
Application server: sip:tas@[Link]
Priority: 25
Trigger points: #qM0008REGISTER
Service information: N/A
Default handling: Continued
Profile_indicator: DEFAULT
Include reg request: No
Include reg response: No
Line Identifier(s):
Line Identifier: N/A
Reference Location Information:
Refloc access type: N/A
Refloc access info: N/A
Refloc access value: N/A
Cellular Network Info: N/A
================================================================================
================================================================================
Reganalyser called: /opt/SMAW/INTP/bin64/reganalyser -i
ims12v01.int1@[Link]
================================================================================
=== SCSCF AS Pool mappings
================================================================================
No AS mapping found!
-bash-4.2$
-bash-4.2$
-bash-4.2$
-bash-4.2$
-bash-4.2$
-bash-4.2$
-bash-4.2$
-bash-4.2$
-bash-4.2$
-bash-4.2$
-bash-4.2$
-bash-4.2$
-bash-4.2$
-bash-4.2$
-bash-4.2$
-bash-4.2$
-bash-4.2$
-bash-4.2$ [Link] -i ims12v01.int1@[Link]

-bash-4.2$ reganalyser -i ims12v01.int1@[Link]

================================================================================
Reganalyser called: reganalyser -i ims12v01.int1@[Link]
================================================================================
=== PCSCF Registration(s)
================================================================================
Registration:
Private id/IMPI: ims12v01.int1@[Link]
IP Address: [Link]
Port Number: 50786
Gm Ip Address: [Link]
Derived IMPI: No
RX Session: No
Signaling bearer: No
Service route: <sip:originating@[Link];r
eg-id=ZT1548866593711651;lskpmc=SZT;lr;ms_rest_id=SZT5c51d421>
Expires: 2019-01-31 [Link] (CET)
Emergency: No
Logical name: IMS_PCSCF02
PPI name: PZT
 Access info: direct
Authentication method: Unknown (0)
Private contact: <sip:ims12v01@[Link]:50786;rinstanc
e=5b19282ac413d98a;transport=tcp>;expires=3600
Far end NAT flag: No
TLS port: 0
PANI RAT type: N/A
C-MSISDN: N/A
ATU-STI: N/A
PGW host: N/A
PGW realm: N/A
IBCF URI: N/A
IMSI: N/A
RAT type: (2006) - INVALID_RAT_TYPE
IPCAN type: TGPP
Charging term ioi: N/A
SCSCF failover support: No
SRTP: No
MSRP: No
User Agent: X-Lite release 5.4.0 stamp 94388
P-Access-Network-Info: N/A
PCRF Subscription Status: FAILED
PCRF Policy server Address: N/A
PCRF Session ID: N/A
Cellular Network Info: N/A
Public user id(s)/IMPU(s):
IMPU(default) sip:ims12v01@[Link]
Group user id(s)/IMPU(s):
Group IMPU: N/A
Wildcarded id(s)/IMPU(s):
Wildcarded IMPU: N/A
Line Identifier(s):
Line Identifier: N/A
================================================================================
================================================================================
Reganalyser called: reganalyser -i ims12v01.int1@[Link]
================================================================================
=== SCSCF Registration(s)
================================================================================
Registration:
Private ID: ims12v01.int1@[Link]
Default IMPU: sip:ims12v01@[Link]
Explicit IMPU: sip:ims12v01@[Link]
Registration state: 300000 - Registered
Path: sip:[Link];lr;lskpmc=P
ZT;3pdrp=36e963e8fc5fba0e
Contact: <sip:ims12v01@[Link]:50786;rinstanc
e=5b19282ac413d98a;transport=tcp>
Expiration time: 2019-01-31 [Link] (CET)
IP address: [Link]
Port: 0
Authentication data:
Authentication scheme: Digest authentication
Quality of protection: Response Digest is computed from method
and uri
Digest realm: N/A
Digest algorithm: N/A
Logical name: IMS_SCSCF06
PPI name: SZT
 Charging data:
Acc session id: N/A
Charging id: N/A
Charging group id: N/A
CCF primary: N/A
CCF secondary: N/A
ECF primary: N/A
ECF secondary: N/A
Charging orig ioi: N/A
PGW host: N/A
PGW realm: N/A
Emergency: No
GRUU gr: N/A
MSISDN: 498971201
IMSI: N/A
Call ID: 94388M2IyNWFhYWZmYzU5MDNiZDc2ZmMzMjNjMmN
mNGYzMzQ
Cseq: 52
P-CSCF address: [Link]
GGSN address: N/A
SGSN address: N/A
Loose routing: No
Access network: direct
HSS restoration: Yes
Roaming: No
Visited network id: [Link]
User Agent : X-Lite release 5.4.0 stamp 94388
P-Access-Network-Info: N/A
Service profile(s):
Service profile:
Public user id(s)/IMPU(s):
IMPU(default):
Public user id: sip:ims12v01@[Link]
Identity type: 0
Wildcarded IMPU/PSI: N/A
Display name: N/A
Barred: No
Profile id: No profile ID
Shared iFC id: N/A
3rd Party Register: Yes
Registrations: 1
Initial Filter Criteria:
iFC:
Application server: sip:tas@[Link]
Priority: 25
Trigger points: #qM0008REGISTER
Service information: N/A
Default handling: Continued
Profile_indicator: DEFAULT
Include reg request: No
Include reg response: No
Line Identifier(s):
Line Identifier: N/A
Reference Location Information:
Refloc access type: N/A
Refloc access info: N/A
Refloc access value: N/A
Cellular Network Info: N/A
================================================================================
================================================================================
Reganalyser called: reganalyser -i ims12v01.int1@[Link]
================================================================================
=== SCSCF AS Pool mappings
================================================================================
No AS mapping found!
-bash-4.2$ ^C
-bash-4.2$
exit

exit

*****************************************muito boa op�ao de executar via oam node.

executa e coleta de todas as VM!!!!

LER documento pdf Interface status using CLI

***********************************************************************************
*******************

-bash-4.2$ ssh [Link]

SYSTEM HARDENED
|-----------------------------------------------------------------|
| This system is for the use of authorized users only. |
| Individuals using this computer system without authority, or in |
| excess of their authority, are subject to having all of their |
| activities on this system monitored and recorded by system |
| personnel. |
| Anyone using this system expressly consents to such monitoring |
| and is advised that if such monitoring reveals possible |
| evidence of criminal activity, system personnel may provide the |
| evidence of such monitoring to law enforcement officials. |
|-----------------------------------------------------------------|
Last login: Thu Jan 31 [Link] 2019 from [Link]
-bash-4.2$ [Link] reganalyser -i ims12v01.int1@[Link]
NodeIP:[Link]
NodeName:ims12cscf1
NodeType:CSCF
================================================================================
Reganalyser called: /opt/SMAW/INTP/bin64/reganalyser -i ims1
2v01.int1@[Link] --exec_from_cli
================================================================================
=== PCSCF Registration(s)
================================================================================
Registration:
Private id/IMPI: ims12v01.int1@[Link]
IP Address: [Link]
Port Number: 50786
Gm Ip Address: [Link]
Derived IMPI: No
RX Session: No
Signaling bearer: No
 Service route: <sip:originating@[Link];r
eg-id=ZT1548866593711651;lskpmc=SZT;lr;ms_rest_id=SZT5c51d421>
Expires: 2019-01-31 [Link] (CET)
Emergency: No
Logical name: IMS_PCSCF02
PPI name: PZT
Access info: direct
Authentication method: Unknown (0)
Private contact: <sip:ims12v01@[Link]:50786;rinstanc
e=5b19282ac413d98a;transport=tcp>;expires=3600
Far end NAT flag: No
TLS port: 0
PANI RAT type: N/A
C-MSISDN: N/A
ATU-STI: N/A
PGW host: N/A
PGW realm: N/A
IBCF URI: N/A
IMSI: N/A
RAT type: (2006) - INVALID_RAT_TYPE
IPCAN type: TGPP
Charging term ioi: N/A
SCSCF failover support: No
SRTP: No
MSRP: No
User Agent: X-Lite release 5.4.0 stamp 94388
P-Access-Network-Info: N/A
PCRF Subscription Status: FAILED
PCRF Policy server Address: N/A
PCRF Session ID: N/A
Cellular Network Info: N/A
Public user id(s)/IMPU(s):
IMPU(default) sip:ims12v01@[Link]
Group user id(s)/IMPU(s):
Group IMPU: N/A
Wildcarded id(s)/IMPU(s):
Wildcarded IMPU: N/A
Line Identifier(s):
Line Identifier: N/A
================================================================================
================================================================================
Reganalyser called: /opt/SMAW/INTP/bin64/reganalyser -i ims1
2v01.int1@[Link] --exec_from_cli
================================================================================
=== SCSCF Registration(s)
================================================================================
Registration:
Private ID: ims12v01.int1@[Link]
Default IMPU: sip:ims12v01@[Link]
Explicit IMPU: sip:ims12v01@[Link]
Registration state: 300000 - Registered
Path: sip:[Link];lr;lskpmc=P
ZT;3pdrp=36e963e8fc5fba0e
Contact: <sip:ims12v01@[Link]:50786;rinstanc
e=5b19282ac413d98a;transport=tcp>
Expiration time: 2019-01-31 [Link] (CET)
IP address: [Link]
Port: 0
Authentication data:
 Authentication scheme: Digest authentication
Quality of protection: Response Digest is computed from method
and uri
Digest realm: N/A
Digest algorithm: N/A
Logical name: IMS_SCSCF06
PPI name: SZT
Charging data:
Acc session id: N/A
Charging id: N/A
Charging group id: N/A
CCF primary: N/A
CCF secondary: N/A
ECF primary: N/A
ECF secondary: N/A
Charging orig ioi: N/A
PGW host: N/A
PGW realm: N/A
Emergency: No
GRUU gr: N/A
MSISDN: 498971201
IMSI: N/A
Call ID: 94388M2IyNWFhYWZmYzU5MDNiZDc2ZmMzMjNjMmN
mNGYzMzQ
Cseq: 54
P-CSCF address: [Link]
GGSN address: N/A
SGSN address: N/A
Loose routing: No
Access network: direct
HSS restoration: Yes
Roaming: No
Visited network id: [Link]
User Agent : X-Lite release 5.4.0 stamp 94388
P-Access-Network-Info: N/A
Service profile(s):
Service profile:
Public user id(s)/IMPU(s):
IMPU(default):
Public user id: sip:ims12v01@[Link]
Identity type: 0
Wildcarded IMPU/PSI: N/A
Display name: N/A
Barred: No
Profile id: No profile ID
Shared iFC id: N/A
3rd Party Register: Yes
Registrations: 1
Initial Filter Criteria:
iFC:
Application server: sip:tas@[Link]
Priority: 25
Trigger points: #qM0008REGISTER
Service information: N/A
Default handling: Continued
Profile_indicator: DEFAULT
Include reg request: No
Include reg response: No
Line Identifier(s):
 Line Identifier: N/A
Reference Location Information:
Refloc access type: N/A
Refloc access info: N/A
Refloc access value: N/A
Cellular Network Info: N/A
================================================================================
================================================================================
Reganalyser called: /opt/SMAW/INTP/bin64/reganalyser -i ims1
2v01.int1@[Link] --exec_from_cli
================================================================================
=== SCSCF AS Pool mappings
================================================================================
No AS mapping found!

********************************************************************************

-bash-4.2$

DAN analyser � para dialog analyser... nao consegui

-bash-4.2$ dananalyser -h
-bash: dananalyser: command not found
-bash-4.2$ [Link] dananalyser -h
[Link] tool usage: As Query Passed is not Proper
--------------------Registration data--------------------------
[Link] reganalyser -l IMPU | IMPI
[Link] reganalyser -u <impu id>
[Link] reganalyser -i <impi id>
--------------------Dialog data ------------------------------
[Link] danalyser -impi <impi> -role [S] [-subscribe|-invite|-delete]
[Link] danalyser -impu <impu> -role S [-subscribe|-invite|-delete]
[Link] danalyser -impu <impu> -role P [-subscribe|-invite]
[Link] danalyser -ctxid <ctxid> -role [S] -delete
[Link] danalyser -list [-subscribe|-invite]
--------------------imsFeeMrInterface --------------------------
[Link] imsFeeMrInterface -s|-d
--------------------imsFeeE911Interface ------------------------
[Link] imsFeeE911Interface -s|-d
--------------------checkVMHealth-------------------------------
[Link] checkVMHealth
----------------------------------------------------------------
NOTE: Incase of P, IMPU should be IP:PORT instead of SIP:URI
In case of P role originating side, impu may not contain port number if the default
port(5060) has been used

-bash-4.2$