cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3447
Views
15
Helpful
4
Replies

SIP call log analysis

Yenosh
Level 1
Level 1

Hi Friends,

 

I made a test calls to understand the SIP logs.

 

calling number : 12345XXXXX (Ex number)

called number : 56789XXXXXX(Ex number)

                             call leg 1                              call leg2

12345XXXXX  -----------------cucm---------------------sonus sbc

 

When I try to analyze the logs, i can only see call leg1 messages, i am unable to call leg2 messages. Can any one please help me how to find the call leg2 messages.

 

Thanks in advance 

 

 

1 Accepted Solution

Accepted Solutions

Ayodeji Okanlawon
VIP Alumni
VIP Alumni

+5(Anthony) One trick I have always used in a large environment to determine which cucm node sent the outbound INVITE is to look at the SBC logs. That will tell you which cucm node originated the call and it it's different to the cucm node your phones are registered to then you know which other server to get your logs from...

You may find the following documents useful..

Understanding sip traces..

https://community.cisco.com/t5/collaboration-voice-and-video/understanding-sip-traces/ta-p/3137704

 

Understanding cucm traces

https://community.cisco.com/t5/collaboration-voice-and-video/understanding-cucm-traces-end-to-end/ta-p/3161800

Please rate all useful posts

View solution in original post

4 Replies 4

Anthony Holloway
Cisco Employee
Cisco Employee
It will depend on where you collected the logs from. If you collected them from CUCM via RTMT, make sure you are selecting all servers in the cluster, less you might miss the actual server used for the outbound call. If you want to avoid using different servers for this, make sure to check the "run on all active cm nodes" check box on your route lists and sip trunks in cucm (requires RL and SIP Trunk resets to take affect).

Also, if the call failed, then the most likely scenario is the TCP handshake never happened from CUCM to SONUS, and thus no higher layer traces to be found, because they never happened. If this is a routing issue, you will need to do a packet capture on the network or just ask the route/switch guys to help. If this is a SIP issue, the SONUS might be setup to not support incoming TCP requests and instead requires you to use UDP.

You can switch from TCP to UDP in CUCM for outgoing SIP calls on the SIP Trunk Security Profile you have assigned to the SIP Trunk in CUCM (requires a SIP Trunk reset). Note that resetting a RL does not drop active calls, but resetting a SIP Trunk does.

Thank you for sharing the valuble information, i collected the logs and i can able to see

Ayodeji Okanlawon
VIP Alumni
VIP Alumni

+5(Anthony) One trick I have always used in a large environment to determine which cucm node sent the outbound INVITE is to look at the SBC logs. That will tell you which cucm node originated the call and it it's different to the cucm node your phones are registered to then you know which other server to get your logs from...

You may find the following documents useful..

Understanding sip traces..

https://community.cisco.com/t5/collaboration-voice-and-video/understanding-sip-traces/ta-p/3137704

 

Understanding cucm traces

https://community.cisco.com/t5/collaboration-voice-and-video/understanding-cucm-traces-end-to-end/ta-p/3161800

Please rate all useful posts

Thank you that works