RTMT Phone Summary shows many failed registration attempts

[gfolens]

The RTMT > Phone Summary shows many "failed registration attempts" for a specific CUCM node. How can I find which registration attempts are failing?
I've tried some tools such as Collaboration Analyzer and TranslatorX but could not filter them.

[Andrew Skelly]

Have you tried capturing PCAP from the offending subscriber?