Community,
This is a strange case, any and all insight would be appreciated! We're trying to get TAC to engage but they don't believe this situation is occurring.
The facts:
-1 office 10 different phones in this location on different floors (out of 30+ locations over 2000 phones) experiences ghost 911 calls. (We've looked at the cm logs, phone console logs, packet capture, all show the phone dialing the digits 9911 (no extra digits)). All phone lines are centralized, no lines in each office.
-The packet capture also shows no other communication to the phone (except for the call manager keepalives). So its unlikely they are being remote controlled.
-The initial packet comes from the phones ip address to initiate the call.
-The phone which makes the call is random, and rarely is the same phone twice.
-One phone is located in a locked room with door badge reader, the logs were reviewed and no access was made to the room.
-Occurrences happen once a week up to 3-4 times per week.
-The call lasts less than a second, a human could not possible initiate the call and end the call in that timeframe
-No other phone call is made to or from the phone prior to the 911 call during that day
What could cause this to happen, any possible miss configuration in routing somewhere? Bug?
Your help is greatly appreciated!
