NEED MORE INFO pbxray - See inside your PBX

[pbxray]

Built this because I was tired of eyeballing a full log next to a pjsip set logger on dump trying to line up a Dial() with the INVITE/BYE it actually caused.

pbxray parses Asterisk full/messages logs plus pjsip set logger on output into one correlated timeline - dialplan and SIP signalling together, queryable from the terminal. Single static binary, no runtime deps.

Install:
curl -fsSL https://raw.githubusercontent.com/pbxray/pbxray-dist/main/install.sh | sh

Free. Docs & updates: https://pbxray.dev · binaries: https://github.com/pbxray/pbxray-dist

One ask: what did you try to debug with it, and what did it fail to show you?

 

[wardmundy]

GitHub hosts thousands of legitimate installers—ranging from lightweight stubs like Web Installers to custom bootstrap scripts—that pull their actual binaries from external servers, Content Delivery Networks (CDNs), or S3 buckets.

However, because off-site downloading is a common vector for malware delivery, GitHub's enforcement relies heavily on intent, reputation, and report response.

GitHub permits your installer or script to download off-site executables if:

• The behavior is transparent: The user knows what is being downloaded and where it comes from.
• The off-site payload is clean: The executable hosted on your remote server is free from malware, spyware, ransomware, or unwanted adware.
• You own or have distribution rights to the payload: You aren't distributing pirated or unauthorized third-party software.

Enforcement Mechanism	How It Works
Static Code Analysis	GitHub automatically scans repos for known malicious downloader patterns, heavily obfuscated scripts, or hardcoded IPs/domains associated with active Command & Control (C2) servers.
User Reports & Abuse Flagging	If users or security researchers analyze your installer and find it fetching malicious payloads, they submit an abuse report. GitHub responds quickly to malicious delivery networks.
Antivirus Signatures	Windows Defender and SmartScreen routinely scan binaries hosted on GitHub or downloaded via GitHub scripts. If your off-site executable triggers an AV alert, users will be blocked from running it regardless of GitHub's hosting policies.

 

[wardmundy]

@pbxray: Please confirm your identity and Asterisk background in this thread. Thanks.

Users are cautioned to use this closed source code on non-production sandboxes until we know more about the developer(s).

 

[pbxray]

Hey, happy to! I'm Dave. I'm the one building pbxray.

On the installer question - reasonable concern, the plan is for it to be totally upfront about what it's grabbing and from where, no surprise downloads, and it'll just be pulling my own signed release binaries, nothing third-party or repackaged.

On background: Almost 7 years working with Asterisk as a software dev/support engineer, which is basically why I'm building this - I got tired of grepping raw logs by hand and wanted something that actually understands dialplan + SIP together. Happy to answer anything else.