May 23 00:36:36.031: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received: 
INVITE sip:90445555555513@x.x.x.2:5060 SIP/2.0
Via: SIP/2.0/TCP x.x.x.10:5060;branch=z9hG4bK11c767720a4517
From: "Bad guy" <sip:5555551766@x.x.x.10>;tag=31317045~1dc4156f-4615-462a-b72f-d8295387ae98-25414028
To: <sip:90445555555513@x.x.x.2>
Date: Wed, 23 May 2018 00:34:31 GMT
Call-ID: d944b00-b041b717-67b6c-a1411ac@x.x.x.10
Supported: timer,resource-priority,replaces
Min-SE:  1800
User-Agent: Cisco-CUCM11.0
Allow: INVITE, OPTIONS, INFO, BYE, CANCEL, ACK, PRACK, UPDATE, REFER, SUBSCRIBE, NOTIFY
CSeq: 101 INVITE
Expires: 180
Allow-Events: presence, kpml
Supported: X-cisco-srtp-fallback,X-cisco-original-called
Call-Info: <sip:x.x.x.10:5060>;method="NOTIFY;Event=telephone-event;Duration=500"
Session-ID: 40d97f7c00105000a0000041d2929536;remote=00000000000000000000000000000000
Cisco-Guid: 0227822336-0000065536-0000074230-0169087404
Session-Expires:  1800
P-Asserted-Identity: "Bad guy" <sip:5555551766@x.x.x.10>
Remote-Party-ID: "Bad guy" <sip:5555551766@x.x.x.10>;party=calling;screen=yes;privacy=off
Contact: <sip:5555551766@x.x.x.10:5060;transport=tcp>;+u.sip!devicename.ccm.cisco.com="SEP0041D2666666"
Max-Forwards: 69
Content-Type: application/sdp
Content-Length: 204

v=0
o=CiscoSystemsCCM-SIP 31317045 1 IN IP4 x.x.x.10
s=SIP Call
c=IN IP4 x.x.x.10
t=0 0
m=audio 30856 RTP/AVP 0 101
a=rtpmap:0 PCMU/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15

May 23 00:36:36.035: //-1/0D944B000001/CCAPI/cc_api_display_ie_subfields:
   cc_api_call_setup_ind_common:
   cisco-username=5555551766
   ----- ccCallInfo IE subfields -----
   cisco-ani=5555551766
   cisco-anitype=0
   cisco-aniplan=0
   cisco-anipi=0
   cisco-anisi=0
   dest=90445555555513
   cisco-desttype=0
   cisco-destplan=0
   cisco-rdie=FFFFFFFF
   cisco-rdn=
   cisco-rdntype=0
   cisco-rdnplan=0
   cisco-rdnpi=-1
   cisco-rdnsi=-1
   cisco-redirectreason=-1   fwd_final_type =0
   final_redirectNumber =
   hunt_group_timeout =0

May 23 00:36:36.035: //-1/0D944B000001/CCAPI/cc_api_call_setup_ind_common:
   Interface=0x3F90A818, Call Info(
   Calling Number=5555551766,(Calling Name=)(TON=Unknown, NPI=Unknown, Screening=Not Screened, Presentation=Allowed),
   Called Number=90445555555513(TON=Unknown, NPI=Unknown),
   Calling Translated=FALSE, Subscriber Type Str=Unknown, FinalDestinationFlag=TRUE,
   Incoming Dial-peer=10, Progress Indication=NULL(0), Calling IE Present=TRUE,
   Source Trkgrp Route Label=, Target Trkgrp Route Label=, CLID Transparent=FALSE), Call Id=1914896
May 23 00:36:36.035: //-1/0D944B000001/CCAPI/ccCheckClipClir:
   In: Calling Number=5555551766(TON=Unknown, NPI=Unknown, Screening=Not Screened, Presentation=Allowed)
May 23 00:36:36.035: //-1/0D944B000001/CCAPI/ccCheckClipClir:
   Out: Calling Number=5555551766(TON=Unknown, NPI=Unknown, Screening=Not Screened, Presentation=Allowed)
May 23 00:36:36.035: //-1/xxxxxxxxxxxx/CCAPI/cc_get_feature_vsa:
   
May 23 00:36:36.035: :cc_get_feature_vsa malloc success
May 23 00:36:36.035: //-1/xxxxxxxxxxxx/CCAPI/cc_get_feature_vsa:
   
May 23 00:36:36.035:  cc_get_feature_vsa count is 3
May 23 00:36:36.035: //-1/xxxxxxxxxxxx/CCAPI/cc_get_feature_vsa:
   
May 23 00:36:36.035: :FEATURE_VSA attributes are: feature_name:0,feature_time:553666776,feature_id:151348
May 23 00:36:36.035: //1914896/0D944B000001/CCAPI/cc_api_call_setup_ind_common:
   Set Up Event Sent;
   Call Info(Calling Number=5555551766(TON=Unknown, NPI=Unknown, Screening=Not Screened, Presentation=Allowed),
   Called Number=90445555555513(TON=Unknown, NPI=Unknown))
May 23 00:36:36.035: //-1/0D944B000001/RXRULE/regxrule_stack_pop_RegXruleNumInfo: stack=0x23DAC694; count=1
May 23 00:36:36.035: //-1/0D944B000001/RXRULE/regxrule_stack_pop_callinfo_internal: numinfo=0x23E9871C
May 23 00:36:36.035: //1914896/0D944B000001/CCAPI/cc_process_call_setup_ind:
   Event=0x3FCE5150
May 23 00:36:36.035: //-1/xxxxxxxxxxxx/CCAPI/cc_setupind_match_search:
   Try with the demoted called number 90445555555513
May 23 00:36:36.035: //1914896/0D944B000001/CCAPI/ccCallSetContext:
   Context=0x2101A984
May 23 00:36:36.035: //1914896/0D944B000001/CCAPI/cc_process_call_setup_ind:
   >>>>CCAPI handed cid 1914896 with tag 10 to app "_ManagedAppProcess_Default"
May 23 00:36:36.035: //-1/0D944B000001/RXRULE/regxrule_stack_push_RegXruleNumInfo_internal: stack=0x23DAC694; count=1
May 23 00:36:36.035: //1914896/0D944B000001/CCAPI/ccCallProceeding:
   Progress Indication=NULL(0)
May 23 00:36:36.039: //-1/0D944B000001/RXRULE/regxrule_translate_exist_internal: no rule for callback-number number
May 23 00:36:36.039: //-1/0D944B000001/RXRULE/regxrule_profile_translate_internal: number=5555551766 type=unknown plan=unknown numbertype=calling
May 23 00:36:36.039: //-1/0D944B000001/RXRULE/regxrule_get_RegXrule: Invalid translation ruleset tag=0
May 23 00:36:36.039: //-1/0D944B000001/RXRULE/regxrule_profile_match_internal: Error: ruleset for calling number not found
May 23 00:36:36.039: //-1/0D944B000001/RXRULE/regxrule_profile_translate_internal: No match: number=5555551766 type=unknown plan=unknown
May 23 00:36:36.039: //-1/0D944B000001/RXRULE/regxrule_profile_translate_internal: number=90445555555513 type=unknown plan=unknown numbertype=called
May 23 00:36:36.039: //-1/0D944B000001/RXRULE/regxrule_match: No match; number=90445555555513 rule precedence=1
May 23 00:36:36.039: //-1/0D944B000001/RXRULE/regxrule_match: No match; number=90445555555513 rule precedence=2
May 23 00:36:36.039: //-1/0D944B000001/RXRULE/regxrule_profile_match_internal: Matched with rule 3 in ruleset 1000
May 23 00:36:36.039: //-1/0D944B000001/RXRULE/regxrule_match: No match; number=90445555555513 rule precedence=1
May 23 00:36:36.039: //-1/0D944B000001/RXRULE/regxrule_match: No match; number=90445555555513 rule precedence=2
May 23 00:36:36.039: //-1/0D944B000001/RXRULE/regxrule_profile_match_internal: Matched with rule 3 in ruleset 1000
May 23 00:36:36.039: //-1/0D944B000001/RXRULE/regxrule_match: No match; number=90445555555513 rule precedence=1
May 23 00:36:36.039: //-1/0D944B000001/RXRULE/regxrule_match: No match; number=90445555555513 rule precedence=2
May 23 00:36:36.039: //-1/0D944B000001/RXRULE/sed_subst: Successful substitution; pattern=90445555555513 matchPattern=(^9)(04[4-5])(..........$) replacePattern=\2\3 replaced pattern=0445555555513
May 23 00:36:36.039: //-1/0D944B000001/RXRULE/regxrule_subst_num_type: Match Type = none, Replace Type = none Input Type = unknown
May 23 00:36:36.039: //-1/0D944B000001/RXRULE/regxrule_subst_num_plan: Match Plan = none, Replace Plan = none Input Plan = unknown
May 23 00:36:36.039: //-1/0D944B000001/RXRULE/regxrule_profile_translate_internal: xlt_number=0445555555513 xlt_type=unknown xlt_plan=unknown
May 23 00:36:36.039: //-1/0D944B000001/RXRULE/regxrule_profile_translate_internal: number= type=unknown plan=unknown numbertype=redirect-target
May 23 00:36:36.039: //-1/0D944B000001/RXRULE/regxrule_get_RegXrule: Invalid translation ruleset tag=0
May 23 00:36:36.039: //-1/0D944B000001/RXRULE/regxrule_profile_match_internal: Error: ruleset for redirect-target number not found
May 23 00:36:36.039: //-1/0D944B000001/RXRULE/regxrule_profile_translate_internal: No match: number= type=unknown plan=unknown
May 23 00:36:36.039: //-1/0D944B000001/RXRULE/regxrule_profile_translate_internal: number= type=unknown plan=unknown numbertype=redirect-called
May 23 00:36:36.039: //-1/0D944B000001/RXRULE/regxrule_get_RegXrule: Invalid translation ruleset tag=0
May 23 00:36:36.039: //-1/0D944B000001/RXRULE/regxrule_profile_match_internal: Error: ruleset for redirect-called number not found
May 23 00:36:36.039: //-1/0D944B000001/RXRULE/regxrule_profile_translate_internal: No match: number= type=unknown plan=unknown
May 23 00:36:36.039: //1914896/0D944B000001/CCAPI/ccCallSetupRequest:
   Destination=, Calling IE Present=TRUE, Mode=0,
   Outgoing Dial-peer=31, Params=0x21017E74, Progress Indication=NULL(0)
May 23 00:36:36.039: //1914896/0D944B000001/CCAPI/ccCheckClipClir:
   In: Calling Number=5555551766(TON=Unknown, NPI=Unknown, Screening=Not Screened, Presentation=Allowed)
May 23 00:36:36.039: //1914896/0D944B000001/CCAPI/ccCheckClipClir:
   Out: Calling Number=5555551766(TON=Unknown, NPI=Unknown, Screening=Not Screened, Presentation=Allowed)
May 23 00:36:36.039: //1914896/0D944B000001/CCAPI/ccCallSetupRequest:
   Destination Pattern=904[4-5].........., Called Number=0445555555513, Digit Strip=FALSE
May 23 00:36:36.039: //1914896/0D944B000001/CCAPI/ccCallSetupRequest:
   Calling Number=5555551766(TON=Unknown, NPI=Unknown, Screening=Not Screened, Presentation=Allowed),
   Called Number=0445555555513(TON=Unknown, NPI=Unknown),
   Redirect Number=, Display Info=Bad guy
   Account Number=5555551766, Final Destination Flag=TRUE,
   Guid=0D944B00-0001-0000-0001-21F60A1411AC, Outgoing Dial-peer=31
May 23 00:36:36.039: //1914896/0D944B000001/CCAPI/cc_api_display_ie_subfields:
   ccCallSetupRequest:
   cisco-username=5555551766
   ----- ccCallInfo IE subfields -----
   cisco-ani=5555551766
   cisco-anitype=0
   cisco-aniplan=0
   cisco-anipi=0
   cisco-anisi=0
   dest=0445555555513
   cisco-desttype=0
   cisco-destplan=0
   cisco-rdie=FFFFFFFF
   cisco-rdn=
   cisco-rdntype=0
   cisco-rdnplan=0
   cisco-rdnpi=-1
   cisco-rdnsi=-1
   cisco-redirectreason=-1   fwd_final_type =0
   final_redirectNumber =
   hunt_group_timeout =0

May 23 00:36:36.039: //1914896/0D944B000001/CCAPI/ccIFCallSetupRequestPrivate:
   Interface=0x3F90A818, Interface Type=3, Destination=, Mode=0x0,
   Call Params(Calling Number=5555551766,(Calling Name=Bad guy)(TON=Unknown, NPI=Unknown, Screening=Not Screened, Presentation=Allowed),
   Called Number=0445555555513(TON=Unknown, NPI=Unknown), Calling Translated=FALSE,
   Subscriber Type Str=Unknown, FinalDestinationFlag=TRUE, Outgoing Dial-peer=31, Call Count On=FALSE,
   Source Trkgrp Route Label=, Target Trkgrp Route Label=, tg_label_flag=0, Application Call Id=)
May 23 00:36:36.039: //-1/xxxxxxxxxxxx/CCAPI/cc_get_feature_vsa:
   
May 23 00:36:36.039: :cc_get_feature_vsa malloc success
May 23 00:36:36.039: //-1/xxxxxxxxxxxx/CCAPI/cc_get_feature_vsa:
   
May 23 00:36:36.039:  cc_get_feature_vsa count is 4
May 23 00:36:36.039: //-1/xxxxxxxxxxxx/CCAPI/cc_get_feature_vsa:
   
May 23 00:36:36.039: :FEATURE_VSA attributes are: feature_name:0,feature_time:553664312,feature_id:151349
May 23 00:36:36.039: //1914896/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:36.039: cc_api_get_xcode_stream : 4983
May 23 00:36:36.039: //1914896/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:36.039: cc_api_get_xcode_stream : 4983
May 23 00:36:36.039: //1914896/0D944B000001/CCAPI/cc_api_event_indication:
   Event=101, Call Id=1914896
May 23 00:36:36.039: //1914896/0D944B000001/CCAPI/cc_api_event_indication:
   Event Is Sent To Conferenced SPI(s) Directly
May 23 00:36:36.039: //1914897/0D944B000001/CCAPI/ccIFCallSetupRequestPrivate:
   SPI Call Setup Request Is Success; Interface Type=3, FlowMode=1
May 23 00:36:36.039: //1914897/0D944B000001/CCAPI/ccCallSetContext:
   Context=0x21017E24
May 23 00:36:36.039: //1914896/0D944B000001/CCAPI/ccSaveDialpeerTag:
   Outgoing Dial-peer=31
May 23 00:36:36.039: //1914897/0D944B000001/CCAPI/ccGetMediaClassTag:
   media class tag 0
May 23 00:36:36.039: //1914897/0D944B000001/CCAPI/ccSetMediaclassIp2ipTags:
   media class tags set: NR 0, ASP 0
May 23 00:36:36.039: //1914896/0D944B000001/CCAPI/ccGetMediaClassTag:
   media class tag 0
May 23 00:36:36.039: //1914896/0D944B000001/CCAPI/ccSetMediaclassIp2ipTags:
   media class tags set: NR 0, ASP 0
May 23 00:36:36.039: //1914897/0D944B000001/CCAPI/ccGet_xc_nr_asp_info:
   media class tags: NR 0, ASP 0
May 23 00:36:36.039: //1914896/0D944B000001/CCAPI/ccGet_xc_nr_asp_info:
   media class tags: NR 0, ASP 0
May 23 00:36:36.039: //-1/xxxxxxxxxxxx/CCAPI/cc_is_cng_fax_detect_active:
   Call Id 1914896
May 23 00:36:36.039: //-1/0D944B000001/RXRULE/regxrule_stack_pop_RegXruleNumInfo: stack=0x23DAC694; count=1
May 23 00:36:36.039: //-1/0D944B000001/RXRULE/regxrule_stack_pop_callinfo_internal: numinfo=0x23E9A5C0
May 23 00:36:36.043: //-1/0D944B000001/RXRULE/regxrule_stack_push_RegXruleNumInfo_internal: stack=0x23DAC694; count=1
May 23 00:36:36.043: //1914897/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:36.043: cc_api_get_xcode_stream : 4983
May 23 00:36:36.043: //-1/xxxxxxxxxxxx/RXRULE/sed_subst: No match! number= matchPattern=id; |[; ]*id$ replacePattern=
May 23 00:36:36.043: //1914897/0D944B000001/CCAPI/cc_api_call_proceeding:
   Interface=0x3F90A818, Progress Indication=NULL(0)
May 23 00:36:36.043: //1914897/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:36.043: cc_api_get_xcode_stream : 4983
May 23 00:36:36.043: //1914897/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:36.043: cc_api_get_xcode_stream : 4983
May 23 00:36:36.043: //1914897/0D944B000001/SIP/Msg/ccsipDisplayMsg:
Sent: 
INVITE sip:0445555555513@X.X.X.27:5060 SIP/2.0
Via: SIP/2.0/UDP X.X.X.226:5060;branch=z9hG4bK4223F941
From: "Bad guy" <sip:5555551766@X.X.X.226>;tag=4FF17C20-15D3
To: <sip:0445555555513@X.X.X.27>
Date: Wed, 23 May 2018 00:36:36 GMT
Call-ID: 2EEAA79F-5D5811E8-BE97A33D-347B5593@X.X.X.226
Supported: 100rel,timer,resource-priority,replaces,sdp-anat
Min-SE:  1800
Cisco-Guid: 0227822336-0000065536-0000074230-0169087404
User-Agent: Cisco-SIPGateway/IOS-15.5.3.M3
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, UPDATE, REFER, SUBSCRIBE, NOTIFY, INFO, REGISTER
CSeq: 101 INVITE
Timestamp: 1527035796
Contact: <sip:5555551766@X.X.X.226:5060>
Expires: 180
Allow-Events: telephone-event
Max-Forwards: 68
Session-Expires:  1800
Content-Type: application/sdp
Content-Disposition: session;handling=required
Content-Length: 277

v=0
o=CiscoSystemsSIP-GW-UserAgent 6671 7054 IN IP4 X.X.X.226
s=SIP Call
c=IN IP4 X.X.X.226
t=0 0
m=audio 28026 RTP/AVP 0 101 19
c=IN IP4 X.X.X.226
a=rtpmap:0 PCMU/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=rtpmap:19 CN/8000
a=ptime:20

May 23 00:36:36.047: //1914896/0D944B000001/SIP/Msg/ccsipDisplayMsg:
Sent: 
SIP/2.0 100 Trying
Via: SIP/2.0/TCP x.x.x.10:5060;branch=z9hG4bK11c767720a4517
From: "Bad guy" <sip:5555551766@x.x.x.10>;tag=31317045~1dc4156f-4615-462a-b72f-d8295387ae98-25414028
To: <sip:90445555555513@x.x.x.2>
Date: Wed, 23 May 2018 00:36:36 GMT
Call-ID: d944b00-b041b717-67b6c-a1411ac@x.x.x.10
CSeq: 101 INVITE
Allow-Events: kpml, telephone-event
Server: Cisco-SIPGateway/IOS-15.5.3.M3
Content-Length: 0

May 23 00:36:36.047: //1914897/0D944B000001/SIP/Msg/ccsipDisplayMsg:
Received: 
SIP/2.0 100 Trying
Call-ID: 2EEAA79F-5D5811E8-BE97A33D-347B5593@X.X.X.226
CSeq: 101 INVITE
From: "Bad guy" <sip:5555551766@X.X.X.226>;tag=4FF17C20-15D3
To: <sip:0445555555513@X.X.X.27>;tag=sip+1+7aba0028+b2b3076c
Via: SIP/2.0/UDP X.X.X.226:5060;branch=z9hG4bK4223F941
Server: SIP/2.0
Timestamp: 1527035796
Content-Length: 0

May 23 00:36:38.531: //1914897/0D944B000001/SIP/Msg/ccsipDisplayMsg:
Received: 
SIP/2.0 183 Session Progress
Call-ID: 2EEAA79F-5D5811E8-BE97A33D-347B5593@X.X.X.226
CSeq: 101 INVITE
From: "Bad guy" <sip:5555551766@X.X.X.226>;tag=4FF17C20-15D3
To: <sip:0445555555513@X.X.X.27>;tag=sip+1+7aba0028+b2b3076c
Via: SIP/2.0/UDP X.X.X.226:5060;branch=z9hG4bK4223F941
Require: 100rel
RSeq: 884348789
Content-Length: 191
Contact: <sip:5555551766@X.X.X.27:5060;transport=udp>
Content-Type: application/sdp
Server: DC-SIP/2.0
Organization: Metaswitch Networks
Allow: INVITE, ACK, CANCEL, BYE, REGISTER, OPTIONS, PRACK, UPDATE, SUBSCRIBE, NOTIFY, REFER, INFO, PUBLISH

v=0
o=- 87806324508219 87806324508219 IN IP4 X.X.X.27
s=-
c=IN IP4 X.X.X.27
t=0 0
m=audio 61804 RTP/AVP 0 101
a=rtpmap:0 PCMU/8000
a=rtpmap:101 telephone-event/8000
a=ptime:20

May 23 00:36:38.531: //1914897/0D944B000001/CCAPI/cc_api_caps_ind:
   Destination Interface=0x0, Destination Call Id=-1, Source Call Id=1914897,
   Caps(Codec=0x1, Fax Rate=0x2, Fax Version:=0, Vad=0x2,
   Modem=0x0, Codec Bytes=160, Signal Type=2)
May 23 00:36:38.531: //1914897/0D944B000001/CCAPI/cc_api_caps_ind:
   Caps(Playout Mode=1, Playout Initial=60(ms), Playout Min=40(ms),
   Playout Max=1000(ms), Fax Nom=300(ms))
May 23 00:36:38.531: //1914896/0D944B000001/CCAPI/cc_api_caps_ack:
   Destination Interface=0x0, Destination Call Id=-1, Source Call Id=1914896,
   Caps(Codec=g711ulaw(0x1), Fax Rate=FAX_RATE_VOICE(0x2), Fax Version:=0, Vad=OFF(0x1),
   Modem=OFF(0x0), Codec Bytes=160, Signal Type=2, Seq Num Start=5575)
May 23 00:36:38.531: //1914896/0D944B000001/CCAPI/cc_api_caps_ack:
   Destination Interface=0x0, Destination Call Id=-1, Source Call Id=1914896,
   Caps(Codec=g711ulaw(0x1), Fax Rate=FAX_RATE_VOICE(0x2), Fax Version:=0, Vad=OFF(0x1),
   Modem=OFF(0x0), Codec Bytes=160, Signal Type=2, Seq Num Start=5575)
May 23 00:36:38.531: //1914897/0D944B000001/CCAPI/cc_api_event_indication:
   Event=103, Call Id=1914897
May 23 00:36:38.531: //1914897/0D944B000001/CCAPI/cc_api_event_indication:
   Event Is Sent To Conferenced SPI(s) Directly
May 23 00:36:38.531: //1914897/0D944B000001/CCAPI/cc_api_event_indication:
   Event=100, Call Id=1914897
May 23 00:36:38.531: //1914897/0D944B000001/CCAPI/cc_api_event_indication:
   Event Is Sent To Conferenced SPI(s) Directly
May 23 00:36:38.531: //1914897/0D944B000001/CCAPI/cc_api_call_cut_progress:
   Interface=0x3F90A818, Progress Indication=INBAND(8), Signal Indication=SIGNAL RINGBACK(1),
   Cause Value=0
May 23 00:36:38.531: //1914897/0D944B000001/CCAPI/cc_api_call_cut_progress:
   Call Entry(Responsed=TRUE)
May 23 00:36:38.531: //1914897/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:38.531: cc_api_get_xcode_stream : 4983
May 23 00:36:38.531: //1914896/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:38.531: cc_api_get_xcode_stream : 4983
May 23 00:36:38.531: //1914896/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:38.531: cc_api_get_xcode_stream : 4983
May 23 00:36:38.535: //1914897/0D944B000001/SIP/Msg/ccsipDisplayMsg:
Sent: 
PRACK sip:5555551766@X.X.X.27:5060;transport=udp SIP/2.0
Via: SIP/2.0/UDP X.X.X.226:5060;branch=z9hG4bK422401D3A
From: "Bad guy" <sip:5555551766@X.X.X.226>;tag=4FF17C20-15D3
To: <sip:0445555555513@X.X.X.27>;tag=sip+1+7aba0028+b2b3076c
Date: Wed, 23 May 2018 00:36:36 GMT
Call-ID: 2EEAA79F-5D5811E8-BE97A33D-347B5593@X.X.X.226
CSeq: 102 PRACK
RAck: 884348789 101 INVITE
Allow-Events: telephone-event
Max-Forwards: 70
Content-Length: 0

May 23 00:36:38.535: //1914896/0D944B000001/CCAPI/ccCallCutProgress:
   Progress Indication=INBAND(8), Signal Indication=SIGNAL RINGBACK(1), Cause Value=0
   Voice Call Send Alert=FALSE, Call Entry(Alert Sent=FALSE)
May 23 00:36:38.535: //1914896/0D944B000001/CCAPI/ccCallCutProgress:
   Call Entry(Responsed=TRUE)
May 23 00:36:38.535: //1914896/0D944B000001/CCAPI/ccConferenceCreate:
   (confID=0xFFFFFFFF, callID1=0x1D3810, gcid=2EE96EB7-5D5811E8-BE94A33D-347B5593, tag=0x0)
May 23 00:36:38.535: //1914897/0D944B000001/CCAPI/ccConferenceCreate:
   (confID=0xFFFFFFFF, callID2=0x1D3811, gcid=2EE96EB7-5D5811E8-BE94A33D-347B5593, tag=0x0)
May 23 00:36:38.535: //1914896/0D944B000001/CCAPI/ccConferenceCreate:
   Conference Id=0xFFFFFFFF, Call Id1=1914896, Call Id2=1914897, Tag=0x0
May 23 00:36:38.535: //1914896/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:38.535: cc_api_get_xcode_stream : 4983
May 23 00:36:38.535: //1914897/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:38.535: cc_api_get_xcode_stream : 4983
May 23 00:36:38.535: //1914896/0D944B000001/CCAPI/ccConferenceCreate:
   
May 23 00:36:38.535: ccConferenceCreate: ret1=0, codecMask1=1, bytes1=160, negot1=1, dtmf1=6
                    ret2=0, codecMask2=1, bytes2=160, negot2=1, dtmf2=6,
                    tx_dynamic_pt1=0, rx_dynamic_pt1=0, codec_mode1=0, params_bitmap1 =0
                    tx_dynamic_pt2=0, rx_dynamic_pt2=0, codec_mode2=0, params_bitmap2 =0
May 23 00:36:38.535: //1914896/0D944B000001/CCAPI/ccGetMediaClassTag:
   media class tag 0
May 23 00:36:38.535: //1914896/0D944B000001/CCAPI/ccSetMediaclassIp2ipTags:
   media class tags set: NR 0, ASP 0
May 23 00:36:38.535: //1914897/0D944B000001/CCAPI/ccGetMediaClassTag:
   media class tag 0
May 23 00:36:38.535: //1914897/0D944B000001/CCAPI/ccSetMediaclassIp2ipTags:
   media class tags set: NR 0, ASP 0
May 23 00:36:38.535: //1914896/0D944B000001/CCAPI/ccGet_xc_nr_asp_info:
   media class tags: NR 0, ASP 0
May 23 00:36:38.535: //1914897/0D944B000001/CCAPI/ccGet_xc_nr_asp_info:
   media class tags: NR 0, ASP 0
May 23 00:36:38.535: //-1/xxxxxxxxxxxx/CCAPI/cc_is_cng_fax_detect_active:
   Call Id 1914896
May 23 00:36:38.535: //1914896/xxxxxxxxxxxx/CCAPI/ccConferenceCreate:
   xcoder inserted for preferred features w/ mask 0x0
May 23 00:36:38.535: //1914896/0D944B000001/CCAPI/ccConferenceCreate:
   delay media to slow start case, codec negotation is not done
May 23 00:36:38.535: //1914896/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:38.535: cc_api_get_xcode_stream : 4983
May 23 00:36:38.535: //1914896/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:38.535: cc_api_get_xcode_stream : 4983
May 23 00:36:38.535: //1914896/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:38.535: cc_api_get_xcode_stream : 4983
May 23 00:36:38.535: //1914896/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:38.535: cc_api_get_xcode_stream : 4983
May 23 00:36:38.535: //1914896/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:38.535: cc_api_get_xcode_stream : 4983
May 23 00:36:38.535: //1914896/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:38.535: cc_api_get_xcode_stream : 4983
May 23 00:36:38.535: //1914896/0D944B000001/CCAPI/cc_api_bridge_done:
   Conference Id=0x112F9, Source Interface=0x3F90A818, Source Call Id=1914896,
   Destination Call Id=1914897, Disposition=0x0, Tag=0x0
May 23 00:36:38.535: //1914897/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:38.535: cc_api_get_xcode_stream : 4983
May 23 00:36:38.535: //1914897/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:38.535: cc_api_get_xcode_stream : 4983
May 23 00:36:38.535: //1914897/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:38.535: cc_api_get_xcode_stream : 4983
May 23 00:36:38.535: //1914897/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:38.535: cc_api_get_xcode_stream : 4983
May 23 00:36:38.535: //1914897/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:38.535: cc_api_get_xcode_stream : 4983
May 23 00:36:38.535: //1914897/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:38.535: cc_api_get_xcode_stream : 4983
May 23 00:36:38.535: //1914897/0D944B000001/CCAPI/cc_api_bridge_done:
   Conference Id=0x112F9, Source Interface=0x3F90A818, Source Call Id=1914897,
   Destination Call Id=1914896, Disposition=0x0, Tag=0x0
May 23 00:36:38.535: //1914896/0D944B000001/CCAPI/cc_generic_bridge_done:
   Conference Id=0x112F9, Source Interface=0x3F90A818, Source Call Id=1914897,
   Destination Call Id=1914896, Disposition=0x0, Tag=0x0
May 23 00:36:38.535: //1914896/0D944B000001/CCAPI/ccConferenceCreate:
   Call Entry(Conference Id=0x112F9, Destination Call Id=1914897)
May 23 00:36:38.535: //1914897/0D944B000001/CCAPI/ccConferenceCreate:
   Call Entry(Conference Id=0x112F9, Destination Call Id=1914896)
May 23 00:36:38.535: //1914896/0D944B000001/CCAPI/ccConferenceCreate:
   
May 23 00:36:38.535: confID:0x112F9; callEntry1 callID1:0x1D3810, type:3; callEntry2 callID2:0x1D3811, type:3

May 23 00:36:38.539: //1914896/0D944B000001/CCAPI/ccCallNotify:
   Data Bitmask=0x7, Call Id=1914896
May 23 00:36:38.539: //1914896/0D944B000001/CCAPI/cc_process_notify_bridge_done:
   Conference Id=0x112F9, Call Id1=1914896, Call Id2=1914897
May 23 00:36:38.539: //1914896/0D944B000001/SIP/Msg/ccsipDisplayMsg:
Sent: 
SIP/2.0 183 Session Progress
Via: SIP/2.0/TCP x.x.x.10:5060;branch=z9hG4bK11c767720a4517
From: "Bad guy" <sip:5555551766@x.x.x.10>;tag=31317045~1dc4156f-4615-462a-b72f-d8295387ae98-25414028
To: <sip:90445555555513@x.x.x.2>;tag=4FF185E0-1B41
Date: Wed, 23 May 2018 00:36:36 GMT
Call-ID: d944b00-b041b717-67b6c-a1411ac@x.x.x.10
CSeq: 101 INVITE
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, UPDATE, REFER, SUBSCRIBE, NOTIFY, INFO, REGISTER
Allow-Events: kpml, telephone-event
Contact: <sip:90445555555513@x.x.x.2:5060;transport=tcp>
Supported: sdp-anat
Server: Cisco-SIPGateway/IOS-15.5.3.M3
Content-Type: application/sdp
Content-Disposition: session;handling=required
Content-Length: 244

v=0
o=CiscoSystemsSIP-GW-UserAgent 3795 8403 IN IP4 x.x.x.2
s=SIP Call
c=IN IP4 x.x.x.2
t=0 0
m=audio 28050 RTP/AVP 0 101
c=IN IP4 x.x.x.2
a=rtpmap:0 PCMU/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=ptime:20

May 23 00:36:38.539: //1914897/0D944B000001/SIP/Msg/ccsipDisplayMsg:
Received: 
SIP/2.0 200 OK
Call-ID: 2EEAA79F-5D5811E8-BE97A33D-347B5593@X.X.X.226
CSeq: 102 PRACK
From: "Bad guy" <sip:5555551766@X.X.X.226>;tag=4FF17C20-15D3
To: <sip:0445555555513@X.X.X.27>;tag=sip+1+7aba0028+b2b3076c
Via: SIP/2.0/UDP X.X.X.226:5060;branch=z9hG4bK422401D3A
Content-Length: 0
Supported: resource-priority, siprec, 100rel
Contact: <sip:d0a63d98a2f42f3230f88ec340c09add@X.X.X.27:5060;transport=udp>
Server: DC-SIP/2.0
Organization: Metaswitch Networks
Allow-Events: message-summary, refer, dialog, line-seize, presence, call-info, as-feature-event, calling-name
Allow: INVITE, ACK, CANCEL, BYE, REGISTER, OPTIONS, PRACK, UPDATE, SUBSCRIBE, NOTIFY, REFER, INFO, PUBLISH

May 23 00:36:42.499: //1914897/0D944B000001/SIP/Msg/ccsipDisplayMsg:
Received: 
SIP/2.0 200 OK
Call-ID: 2EEAA79F-5D5811E8-BE97A33D-347B5593@X.X.X.226
CSeq: 101 INVITE
From: "Bad guy" <sip:5555551766@X.X.X.226>;tag=4FF17C20-15D3
To: <sip:0445555555513@X.X.X.27>;tag=sip+1+7aba0028+b2b3076c
Via: SIP/2.0/UDP X.X.X.226:5060;branch=z9hG4bK4223F941
Content-Length: 0
Supported: resource-priority, siprec, 100rel
Contact: <sip:5555551766@X.X.X.27:5060;transport=udp>
Server: DC-SIP/2.0
Organization: Metaswitch Networks
Allow-Events: message-summary, refer, dialog, line-seize, presence, call-info, as-feature-event, calling-name
Allow: INVITE, ACK, CANCEL, BYE, REGISTER, OPTIONS, PRACK, UPDATE, SUBSCRIBE, NOTIFY, REFER, INFO, PUBLISH
Accept-Encoding: identity
Accept: application/sdp, application/simple-message-summary, multipart/mixed, application/broadsoft, application/hook-flash,text/plain, application/x-as-feature-event+xml

May 23 00:36:42.499: //1914897/0D944B000001/CCAPI/cc_api_call_connected:
   Interface=0x3F90A818, Data Bitmask=0x1, Progress Indication=NULL(0),
   Connection Handle=0
May 23 00:36:42.499: //1914897/0D944B000001/CCAPI/cc_api_call_connected:
   Call Entry(Connected=TRUE, Responsed=TRUE, Retry Count=0)
May 23 00:36:42.499: //1914897/xxxxxxxxxxxx/CCAPI/cc_api_ha_call_active_notify:
   
May 23 00:36:42.499: call_info mainst_callID:0x1D3811, peer_callID:0x1D3810, confID:0x112F9, spi_type:4, media_flo_thru:1,num_streams:1, swmtpmsp_present:0

May 23 00:36:42.499: //1914897/xxxxxxxxxxxx/CCAPI/cc_api_ha_call_active_notify:
   
May 23 00:36:42.499:   stream[0]: callid:0x1D3811, media_passthrough:1
May 23 00:36:42.499: //1914897/0D944B000001/CCAPI/cc_api_event_indication:
   Event=111, Call Id=1914897
May 23 00:36:42.499: //1914897/0D944B000001/CCAPI/cc_api_event_indication:
   Event Is Sent To Conferenced SPI(s) Directly
May 23 00:36:42.503: //1914897/0D944B000001/CCAPI/cc_api_event_indication:
   Event=213, Call Id=1914897
May 23 00:36:42.503: //1914897/0D944B000001/CCAPI/cc_api_event_indication:
   Event Is Sent To Conferenced SPI(s) Directly
May 23 00:36:42.503: //1914896/0D944B000001/CCAPI/ccCallConnect:
   Progress Indication=NULL(0), Data Bitmask=0x1
May 23 00:36:42.503: //1914896/0D944B000001/CCAPI/ccCallConnect:
   Call Entry(Connected=TRUE, Responsed=TRUE)
May 23 00:36:42.503: //1914896/0D944B000001/SIP/Msg/ccsipDisplayMsg:
Sent: 
SIP/2.0 200 OK
Via: SIP/2.0/TCP x.x.x.10:5060;branch=z9hG4bK11c767720a4517
From: "Bad guy" <sip:5555551766@x.x.x.10>;tag=31317045~1dc4156f-4615-462a-b72f-d8295387ae98-25414028
To: <sip:90445555555513@x.x.x.2>;tag=4FF185E0-1B41
Date: Wed, 23 May 2018 00:36:36 GMT
Call-ID: d944b00-b041b717-67b6c-a1411ac@x.x.x.10
CSeq: 101 INVITE
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, UPDATE, REFER, SUBSCRIBE, NOTIFY, INFO, REGISTER
Allow-Events: kpml, telephone-event
Contact: <sip:90445555555513@x.x.x.2:5060;transport=tcp>
Supported: replaces
Supported: sdp-anat
Server: Cisco-SIPGateway/IOS-15.5.3.M3
Supported: timer
Content-Type: application/sdp
Content-Disposition: session;handling=required
Content-Length: 244

v=0
o=CiscoSystemsSIP-GW-UserAgent 3795 8403 IN IP4 x.x.x.2
s=SIP Call
c=IN IP4 x.x.x.2
t=0 0
m=audio 28050 RTP/AVP 0 101
c=IN IP4 x.x.x.2
a=rtpmap:0 PCMU/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-15
a=ptime:20

May 23 00:36:42.503: //1914897/0D944B000001/SIP/Msg/ccsipDisplayMsg:
Sent: 
ACK sip:5555551766@X.X.X.27:5060;transport=udp SIP/2.0
Via: SIP/2.0/UDP X.X.X.226:5060;branch=z9hG4bK42241D91
From: "Bad guy" <sip:5555551766@X.X.X.226>;tag=4FF17C20-15D3
To: <sip:0445555555513@X.X.X.27>;tag=sip+1+7aba0028+b2b3076c
Date: Wed, 23 May 2018 00:36:36 GMT
Call-ID: 2EEAA79F-5D5811E8-BE97A33D-347B5593@X.X.X.226
Max-Forwards: 70
CSeq: 101 ACK
Allow-Events: telephone-event
Content-Length: 0

May 23 00:36:42.507: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received: 
ACK sip:90445555555513@x.x.x.2:5060;transport=tcp SIP/2.0
Via: SIP/2.0/TCP x.x.x.10:5060;branch=z9hG4bK11c76946da3de0
From: "Bad guy" <sip:5555551766@x.x.x.10>;tag=31317045~1dc4156f-4615-462a-b72f-d8295387ae98-25414028
To: <sip:90445555555513@x.x.x.2>;tag=4FF185E0-1B41
Date: Wed, 23 May 2018 00:34:31 GMT
Call-ID: d944b00-b041b717-67b6c-a1411ac@x.x.x.10
User-Agent: Cisco-CUCM11.0
Max-Forwards: 70
CSeq: 101 ACK
Allow-Events: presence, kpml
Content-Length: 0

May 23 00:36:42.507: //1914896/xxxxxxxxxxxx/CCAPI/cc_api_ha_call_active_notify:
   
May 23 00:36:42.507: call_info mainst_callID:0x1D3810, peer_callID:0x1D3811, confID:0x112F9, spi_type:4, media_flo_thru:1,num_streams:1, swmtpmsp_present:0

May 23 00:36:42.507: //1914896/xxxxxxxxxxxx/CCAPI/cc_api_ha_call_active_notify:
   
May 23 00:36:42.507:   stream[0]: callid:0x1D3810, media_passthrough:1
May 23 00:36:42.507: //1914896/0D944B000001/CCAPI/cc_api_event_indication:
   Event=111, Call Id=1914896
May 23 00:36:42.507: //1914896/0D944B000001/CCAPI/cc_api_event_indication:
   Event Is Sent To Conferenced SPI(s) Directly
May 23 00:36:42.507: //1914896/0D944B000001/CCAPI/cc_api_event_indication:
   Event=213, Call Id=1914896
May 23 00:36:42.507: //1914896/0D944B000001/CCAPI/cc_api_event_indication:
   Event Is Sent To Conferenced SPI(s) Directly
May 23 00:36:48.435: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received: 
BYE sip:90445555555513@x.x.x.2:5060;transport=tcp SIP/2.0
Via: SIP/2.0/TCP x.x.x.10:5060;branch=z9hG4bK11c76a46a74ca7
From: "Bad guy" <sip:5555551766@x.x.x.10>;tag=31317045~1dc4156f-4615-462a-b72f-d8295387ae98-25414028
To: <sip:90445555555513@x.x.x.2>;tag=4FF185E0-1B41
Date: Wed, 23 May 2018 00:34:31 GMT
Call-ID: d944b00-b041b717-67b6c-a1411ac@x.x.x.10
User-Agent: Cisco-CUCM11.0
Max-Forwards: 70
P-Asserted-Identity: "Bad guy" <sip:5555551766@x.x.x.10>
CSeq: 102 BYE
Reason: Q.850;cause=16
Session-ID: 40d97f7c00105000a0000041d2929536;remote=6800c7b5a057e274930100ab31317045
Content-Length: 0

May 23 00:36:48.435: //1914897/0D944B000001/CCAPI/ccGenerateToneInfo:
   Stop Tone On Digit=FALSE, Tone=Null,
   Tone Direction=Sum Network, Params=0x0, Call Id=1914897
May 23 00:36:48.435: //1914896/0D944B000001/CCAPI/cc_api_call_disconnected:
   Cause Value=16, Interface=0x3F90A818, Call Id=1914896
May 23 00:36:48.435: //1914896/0D944B000001/CCAPI/cc_api_call_disconnected:
   Call Entry(Responsed=TRUE, Cause Value=16, Retry Count=0)
May 23 00:36:48.435: //1914896/0D944B000001/CCAPI/ccConferenceDestroy:
   Conference Id=0x112F9, Tag=0x0
May 23 00:36:48.435: //1914896/0D944B000001/CCAPI/ccConferenceDestroy:
   
May 23 00:36:48.435: confID:0x112F9; callEntry1 callID1:0x1D3810, type:3; callEntry2 callID2:0x1D3811, type:3

May 23 00:36:48.435: //1914896/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:48.435: cc_api_get_xcode_stream : 4983
May 23 00:36:48.435: //1914897/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:48.435: cc_api_get_xcode_stream : 4983
May 23 00:36:48.435: //1914896/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:48.435: cc_api_get_xcode_stream : 4983
May 23 00:36:48.435: //1914896/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:48.435: cc_api_get_xcode_stream : 4983
May 23 00:36:48.435: //1914896/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:48.435: cc_api_get_xcode_stream : 4983
May 23 00:36:48.435: //1914896/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:48.435: cc_api_get_xcode_stream : 4983
May 23 00:36:48.435: //1914896/0D944B000001/CCAPI/cc_api_bridge_drop_done:
   Conference Id=0x112F9, Source Interface=0x3F90A818, Source Call Id=1914896,
   Destination Call Id=1914897, Disposition=0x0, Tag=0x0
May 23 00:36:48.435: //1914897/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:48.435: cc_api_get_xcode_stream : 4983
May 23 00:36:48.435: //1914896/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:48.435: cc_api_get_xcode_stream : 4983
May 23 00:36:48.435: //1914897/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:48.435: cc_api_get_xcode_stream : 4983
May 23 00:36:48.435: //1914897/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:48.435: cc_api_get_xcode_stream : 4983
May 23 00:36:48.435: //1914897/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:48.435: cc_api_get_xcode_stream : 4983
May 23 00:36:48.435: //1914897/xxxxxxxxxxxx/CCAPI/cc_api_get_xcode_stream:
   
May 23 00:36:48.435: cc_api_get_xcode_stream : 4983
May 23 00:36:48.435: //1914897/0D944B000001/CCAPI/cc_api_bridge_drop_done:
   Conference Id=0x112F9, Source Interface=0x3F90A818, Source Call Id=1914897,
   Destination Call Id=1914896, Disposition=0x0, Tag=0x0
May 23 00:36:48.435: //1914896/0D944B000001/CCAPI/cc_generic_bridge_done:
   Conference Id=0x112F9, Source Interface=0x3F90A818, Source Call Id=1914897,
   Destination Call Id=1914896, Disposition=0x0, Tag=0x0
May 23 00:36:48.435: //1914896/0D944B000001/CCAPI/ccCallDisconnect:
   Cause Value=16, Tag=0x0, Call Entry(Previous Disconnect Cause=0, Disconnect Cause=16)
May 23 00:36:48.435: //1914896/0D944B000001/CCAPI/ccCallDisconnect:
   Cause Value=16, Call Entry(Responsed=TRUE, Cause Value=16)
May 23 00:36:48.435: //1914897/0D944B000001/CCAPI/ccCallDisconnect:
   Cause Value=16, Tag=0x0, Call Entry(Previous Disconnect Cause=0, Disconnect Cause=0)
May 23 00:36:48.435: //1914897/0D944B000001/CCAPI/ccCallDisconnect:
   Cause Value=16, Call Entry(Responsed=TRUE, Cause Value=16)
May 23 00:36:48.439: //1914896/0D944B000001/CCAPI/cc_api_call_disconnect_done:
   Disposition=0, Interface=0x3F90A818, Tag=0x0, Call Id=1914896,
   Call Entry(Disconnect Cause=16, Voice Class Cause Code=0, Retry Count=0)
May 23 00:36:48.439: //-1/0D944B000001/RXRULE/regxrule_stack_pop_RegXruleNumInfo: stack=0x23DAC694; count=1
May 23 00:36:48.439: //-1/0D944B000001/RXRULE/regxrule_stack_pop_callinfo_internal: numinfo=0x23E9A5C0
May 23 00:36:48.439: //1914896/0D944B000001/CCAPI/cc_api_call_disconnect_done:
   Call Disconnect Event Sent
May 23 00:36:48.439: //-1/xxxxxxxxxxxx/CCAPI/cc_free_feature_vsa:
   
May 23 00:36:48.439: :cc_free_feature_vsa freeing 210048D0
May 23 00:36:48.439: //-1/xxxxxxxxxxxx/CCAPI/cc_free_feature_vsa:
   
May 23 00:36:48.439:  vsacount in free is 3
May 23 00:36:48.439: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Sent: 
SIP/2.0 200 OK
Via: SIP/2.0/TCP x.x.x.10:5060;branch=z9hG4bK11c76a46a74ca7
From: "Bad guy" <sip:5555551766@x.x.x.10>;tag=31317045~1dc4156f-4615-462a-b72f-d8295387ae98-25414028
To: <sip:90445555555513@x.x.x.2>;tag=4FF185E0-1B41
Date: Wed, 23 May 2018 00:36:48 GMT
Call-ID: d944b00-b041b717-67b6c-a1411ac@x.x.x.10
Server: Cisco-SIPGateway/IOS-15.5.3.M3
CSeq: 102 BYE
Reason: Q.850;cause=16
P-RTP-Stat: PS=453,OS=72480,PR=494,OR=79040,PL=0,JI=0,LA=0,DU=5
Content-Length: 0

May 23 00:36:48.439: //1914897/0D944B000001/SIP/Msg/ccsipDisplayMsg:
Sent: 
BYE sip:5555551766@X.X.X.27:5060;transport=udp SIP/2.0
Via: SIP/2.0/UDP X.X.X.226:5060;branch=z9hG4bK422421E0D
From: "Bad guy" <sip:5555551766@X.X.X.226>;tag=4FF17C20-15D3
To: <sip:0445555555513@X.X.X.27>;tag=sip+1+7aba0028+b2b3076c
Date: Wed, 23 May 2018 00:36:36 GMT
Call-ID: 2EEAA79F-5D5811E8-BE97A33D-347B5593@X.X.X.226
User-Agent: Cisco-SIPGateway/IOS-15.5.3.M3
Max-Forwards: 70
Timestamp: 1527035808
CSeq: 103 BYE
Reason: Q.850;cause=16
P-RTP-Stat: PS=494,OS=79040,PR=453,OR=72480,PL=0,JI=0,LA=0,DU=5
Content-Length: 0

May 23 00:36:48.487: //1914897/0D944B000001/SIP/Msg/ccsipDisplayMsg:
Received: 
SIP/2.0 200 OK
Call-ID: 2EEAA79F-5D5811E8-BE97A33D-347B5593@X.X.X.226
CSeq: 103 BYE
From: "Bad guy" <sip:5555551766@X.X.X.226>;tag=4FF17C20-15D3
To: <sip:0445555555513@X.X.X.27>;tag=sip+1+7aba0028+b2b3076c
Via: SIP/2.0/UDP X.X.X.226:5060;branch=z9hG4bK422421E0D
Content-Length: 0
Supported: resource-priority, siprec, 100rel
Contact: <sip:d0a63d98a2f42f3230f88ec340c09add@X.X.X.27:5060;transport=udp>
Server: DC-SIP/2.0
Organization: Metaswitch Networks
Allow-Events: message-summary, refer, dialog, line-seize, presence, call-info, as-feature-event, calling-name
Allow: INVITE, ACK, CANCEL, BYE, REGISTER, OPTIONS, PRACK, UPDATE, SUBSCRIBE, NOTIFY, REFER, INFO, PUBLISH

May 23 00:36:48.487: //1914897/0D944B000001/CCAPI/cc_api_call_disconnect_done:
   Disposition=0, Interface=0x3F90A818, Tag=0x0, Call Id=1914897,
   Call Entry(Disconnect Cause=16, Voice Class Cause Code=0, Retry Count=0)
May 23 00:36:48.487: //-1/0D944B000001/RXRULE/regxrule_stack_pop_callinfo_internal: numinfo=0x0
May 23 00:36:48.487: //1914897/0D944B000001/CCAPI/cc_api_call_disconnect_done:
   Call Disconnect Event Sent
May 23 00:36:48.487: //-1/xxxxxxxxxxxx/CCAPI/cc_free_feature_vsa:
   
May 23 00:36:48.487: :cc_free_feature_vsa freeing 21003F30
May 23 00:36:48.487: //-1/xxxxxxxxxxxx/CCAPI/cc_free_feature_vsa:
   
May 23 00:36:48.487:  vsacount in free is 2