Home
  •  

LC:SIP - 09 - Access Edge Server Messages\SIP - 061 - External Messages/sec Dropped Due To Unauthorized IM Service Provider Domain\

LC_SIP___09___Access_Edge_Server_Messages_SIP___061___External_Messages_sec_Dropped_Due_To_Unauthorized_IM_Service_Provider_Domain____AP (Rule)

The per-second rate of messages dropped at the external edge because the domain did not resolve by DNS SRV to the connection peer FQDN.

Knowledge Base article:

Summary

The per-second rate of messages dropped at the external edge because the domain did not resolve by DNS SRV to the connection peer FQDN.

Causes

The Access Edge Server received SIP messages from an IM Service Provider with a domain that is not supported by that provider, according to DNS SRV query.

Resolutions

Verify that all IM Service Providers are configured correctly. If the number is high then the Access Edge Server may be under attack.

Element properties:

TargetMicrosoft_Office_Communications_Server_2007_R2_Access_Edge_Server
CategoryPerformanceCollection
EnabledFalse
Instance NameLC:SIP - 09 - Access Edge Server Messages
Counter NameSIP - 061 - External Messages/sec Dropped Due To Unauthorized IM Service Provider Domain
Frequency900
Alert GenerateFalse
RemotableTrue

Member Modules:

ID Module Type TypeId RunAs 
CollectPerfCounter DataSource System.Performance.OptimizedDataProvider Default
WriteToDB WriteAction Microsoft.SystemCenter.CollectPerformanceData Default
WriteToDW WriteAction Microsoft.SystemCenter.DataWarehouse.PublishPerformanceData Default

Source Code:

<Rule ID="LC_SIP___09___Access_Edge_Server_Messages_SIP___061___External_Messages_sec_Dropped_Due_To_Unauthorized_IM_Service_Provider_Domain____AP" Enabled="false" Target="Microsoft_Office_Communications_Server_2007_R2_Access_Edge_Server" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>PerformanceCollection</Category>

  <DataSources>

    <DataSource ID="CollectPerfCounter" TypeID="SCPerformance!System.Performance.OptimizedDataProvider">

      <ComputerName>$Target/Host/Property[Type="SCWindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <CounterName>SIP - 061 - External Messages/sec Dropped Due To Unauthorized IM Service Provider Domain</CounterName>

      <ObjectName>LC:SIP - 09 - Access Edge Server Messages</ObjectName>

      <InstanceName/>

      <AllInstances>false</AllInstances>

      <Frequency>900</Frequency>

      <Tolerance>5</Tolerance>

      <ToleranceType>Absolute</ToleranceType>

      <MaximumSampleSeparation>4</MaximumSampleSeparation>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="WriteToDB" TypeID="SCSystemLibrary!Microsoft.SystemCenter.CollectPerformanceData"/>

    <WriteAction ID="WriteToDW" TypeID="SCDataWarehouseLibrary!Microsoft.SystemCenter.DataWarehouse.PublishPerformanceData"/>

  </WriteActions>

</Rule>