Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
New Member

debug ccsip and toll fraud

cisco 2651xm router

IOS: c2600-adventerprisek9-mz.124-15.T9.bin

running sip trunk with 7940 phone

my sip provider has written to me complaining of multiple call attempts being made on my sip line. It's not me, my call log is fine showing only single-file calls that I recognise, there's been no toll fraud so I want to find out what is going on. My sip provider won't lift a finger to co-operate or provide further info so I need to run a debug on the sip trunk and output it to syslog. But I'm puzzled which debug command I should use, there are so many of them and I don't want to overload the router with unnecessary processing. Which debug command will show up toll fraud/concurrent call attempts? thanks for any advice.

Hall of Fame Super Gold

Re: debug ccsip and toll fraud

debug ccsip message

New Member

Re: debug ccsip and toll fraud

thanks paulo, I am using your suggestion now

Cisco Employee
New Member

Re: debug ccsip and toll fraud

thanks for your response steve, I have been toll-frauded before so I have config in place which seems to be brick-walling it. Interestingly enough in the last few minutes my syslog from paulo's debug command shows:

From: "sipvicious"<100>; tag=3532343534663138313363340132393332353930373831

Accept: application/sdp

User-Agent: friendly-scanner

To: "sipvicious"<100>

Contact: sip:100@

looks quite naughty....

Cisco Employee

Re: debug ccsip and toll fraud

It's a 'friendly-scanner,' so you don't need to worry about that, right? 

Kidding, of course.

CreatePlease to create content