debug ccsip and toll fraud

Unanswered Question
Oct 1st, 2010

cisco 2651xm router

IOS: c2600-adventerprisek9-mz.124-15.T9.bin

running sip trunk with 7940 phone

my sip provider has written to me complaining of multiple call attempts being made on my sip line. It's not me, my call log is fine showing only single-file calls that I recognise, there's been no toll fraud so I want to find out what is going on. My sip provider won't lift a finger to co-operate or provide further info so I need to run a debug on the sip trunk and output it to syslog. But I'm puzzled which debug command I should use, there are so many of them and I don't want to overload the router with unnecessary processing. Which debug command will show up toll fraud/concurrent call attempts? thanks for any advice.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (3 ratings)
tonyspcrepairs Fri, 10/01/2010 - 08:19

thanks for your response steve, I have been toll-frauded before so I have config in place which seems to be brick-walling it. Interestingly enough in the last few minutes my syslog from paulo's debug command shows:

From: "sipvicious"; tag=3532343534663138313363340132393332353930373831

Accept: application/sdp

User-Agent: friendly-scanner

To: "sipvicious"

Contact: sip:[email protected]:5071

looks quite naughty....

Steven Holl Fri, 10/01/2010 - 08:41

It's a 'friendly-scanner,' so you don't need to worry about that, right? 

Kidding, of course.


This Discussion