This can be changed in CCM admin -> System -> Enterprise Parameters. You might check there to see if the values have been changed. Also, make sure that these packets are not being remarked somewhere else in the network.
These are the paths to get to each CCX logs through CLI. They may be helpful if you are having issues accessing RTMT or downloading logs through it.
If you want to download them you have to prefix "file get " and you can add one of the options (re...