CDR Output 1

[klmnop]

We're running ASA 2.1. I would like to output our call data to either a file or database SQL server if possible. We do not have any sort of Call Analyzer solution set up. I am assuming I will be able to import from the file on a regular basis into a SQL database.

When I check, my CDR link status is down:
status cdr-link
CDR LINK STATUS
Primary Secondary

Link State: down CDR not administered
Number of Retries: 52
Maintenance Busy? no

Here is my setup: Note that the IP Address for CDR is currently pointing to my local workstation.

ch node-names ip Page 1 of 1
IP NODE NAMES
Name IP Address Name IP Address
BLSP 172.16 .82 .220 . . .
C-lan1 172.16 .52 .234 . . .
C-lan3 172.16 .52 .239 . . .
C-lanLX 172.16 .52 .238 . . .
C-lancms 192.168.2 .2 . . .
CCE 172.16 .52 .181 . . .
CC_Printer 172.16 .42 .210 . . .
CDR 172.16 .32 .55 . . .
ECAS 172.16 .52 .181 . . .
R1LSP 172.16 .55 .27 . . .
VAL 172.16 .52 .237 . . .
cms 192.168.2 .3 . . .
default 0 .0 .0 .0 . . .
medpro 172.16 .52 .235 . . .
procr 172.16 .52 .232 . . .
. . . . . .

change system-parameters cdr Page 1 of 1
CDR SYSTEM PARAMETERS

Node Number (Local PBX ID): 1 CDR Date Format: month/day
Primary Output Format: expanded Primary Output Endpoint: CDR1
Secondary Output Format:
Use ISDN Layouts? n
Use Enhanced Formats? n Condition Code 'T' For Redirected Calls? n
Modified Circuit ID Display? n Remove # From Called Number? n
Record Outgoing Calls Only? n Intra-switch CDR? y
Suppress CDR for Ineffective Call Attempts? y Outg Trk Call Splitting? y
Disconnect Information in Place of FRL? n Outg Attd Call Record? y
Interworking Feat-flag? n
Force Entry of Acct Code for Calls Marked on Toll Analysis Form? n
Calls to Hunt Group - Record: member-ext
Record Called Vector Directory Number Instead of Group or Member? n
Record Agent ID on Incoming? y Record Agent ID on Outgoing? y
Inc Trk Call Splitting? y Inc Attd Call Record? n
Record Non-Call-Assoc TSC? n Call Record Handling Option: warning
Record Call-Assoc TSC? n Digits to Record for Outgoing Calls: dialed
Privacy - Digits to Hide: 0 CDR Account Code Length: 12


change ip-services Page 1 of 4

IP SERVICES
Service Enabled Local Local Remote Remote
Type Node Port Node Port
DLG y C-lan3 5678
CDR1 C-lan1 0 CDR 5002
SYS_PRNT C-lan1 0 CC_Printer 9100


change ip-services Page 3 of 4

SESSION LAYER TIMERS
Service Reliable Packet Resp Session Connect SPDU Connectivity
Type Protocol Timer Message Cntr Cntr Timer

CDR1 n 30 3 3 60




If anyone can explain to me what I'm missing and where to find the output from this, and/or what I need to use, to collect the output from this, I would appreciate it very much.

Thanks! klmnop

 

[montyzummer]

you need some thing listening to port 5002 on the pc that is the ip address of 172.16 .32 .55 it is all set up and there for you try , kiwisyslog server its free ware install that on the .55 box and make it listen on port 5002 , but do a netstat-a to make sure nothing is already using that port as the machine is or has been on site for this purpose.

If its there find the software using that port and restart it, if there is no pc with a .55 address put kiwisyslog server on a pc assign it that IP address and off you go.

APSS (SME)
ACSS (SME)

 

[1a22ip]

Also the look at this CDR 172.16 .32 .55 and Primary Output Endpoint: CDR1 I believe this should be the same name CDR or CDR1

ED

1a2 to ip I seen it all

 

[montyzummer]

1a22ip

That is a red herring if you look at the remote node in ch ip-services and the name of the node in change node-name they are both CDR ,,, i see where you are coming from but CDR1 is the system setting it is the names set CDR that need to match and do.

hope that makes sense

APSS (SME)
ACSS (SME)

 

[klmnop]

montyzummer, you're 2 for 2 today, THANKS!

I've installed a trial version of kiwisyslog and can see what I think are calls appearing. CDR-LINK link state now shows as 'up'.

A few more questions, please. How should my kiwisyslog input be defined? UPD, TCP, Secure TCP, SNMP?

I also have the option of specifying a 'bind to address' and selecting a data encoding option (system, other, ansi, utf-8...).

If I select TCP, I seem to get data, but I only randomly get what appears to be call data. In the below example, there seems to be only 1 record with data:

Ex:
04-17-2012 15:39:08
04-17-2012 15:39:08
04-17-2012 15:39:08
04-17-2012 15:39:08
04-17-2012 15:39:08
04-17-2012 15:39:08
04-17-2012 15:39:08 1539 0071 7 3 904 13236382790 8199 6 006 4 1 0 0 0

Optimally, I'd like date, time, port, station, trunk, number dialed, etc., key fields broken out. If it's a fixed width output file, then I can break it out myself.

I'm still don't have a feel for where the output is being written, on my local system.

 

[montyzummer]

ingnore bind to address , if you are seeing calls that is all good, the info you are seeing is the break down on page 2 of change sys cdr there are many different ways of formatting this , i suggested kiwi just to get you running what you need is some decent software that will report on CDR and give decent data, there are many different companys out there (mine included) that can sort this out for you ,,, that said i need to know what you want to see report on etc , as CDR is not going to show calls waiting etc , give me your requirements and i will sort you out with a soloution that fits your needs .

thanks for the * *= :0)

APSS (SME)
ACSS (SME)

 

[montyzummer]

sorry its tcp you need , type cha sys cdr , play with the settings on that page to see what you can change on youre output, then its all about page two, try the below settings on page two and you should start to see how to manipulate the data.


Field Description Size Field Description Size
01 Date 6 17 In-Trk-Code 4
02 Space 1 18 Space 1
03 Time 4 19 In-Crt-Id 3
04 Space 1 20 Space 1
05 Sec-Dur 5 21 Out-Crt-Id 3
06 Space 1 22 Space 1
07 Cond-Code 1 23 Ppm 5
08 Space 1 24 Space 1
09 Code-Dial 4 25 Isdn-cc 11


10 Space 1 26 Space 1
11 Code-used 4 27 Attn-Console 2
12 Space 1 28 Space 1
13 Dailled-Num 18 29 Vdn 5
14 Space 1 30 Space 1
15 Calling Number 10 31 Acct-Code 15
16 Space 1 32 Return 1
33 Line-Feed 1


APSS (SME)
ACSS (SME)

 

[klmnop]

In order to get a page 2, I had to select 'customized' as the primary output. When I do this, I stop seeing the calls in kiwi syslog. Any suggestions?

On the other hand, I figured out where the output file is and do see call data being recorded here; this, perhaps, we can use.

 

[montyzummer]

hmmm strange try but you should need to be customized , but if that stops it working obviously there is a problem, try ticking Y to use enhanced formats on page one

APSS (SME)
ACSS (SME)

 

[klmnop]

It doesn't allow me to save this change; when I select 'customized' (and fill in options as you specified earlier), I am unable to save and the message 'There is no Enhanced format for this layout' appears in the status bar.

change system-parameters cdr Page 1 of 2
CDR SYSTEM PARAMETERS

Node Number (Local PBX ID): 1 CDR Date Format: month/day
Primary Output Format: customized Primary Output Endpoint: CDR1
Secondary Output Format:
Use ISDN Layouts? y
Use Enhanced Formats? y Condition Code 'T' For Redirected Calls? n
Modified Circuit ID Display? n Remove # From Called Number? n
Record Outgoing Calls Only? n Intra-switch CDR? y
Suppress CDR for Ineffective Call Attempts? y Outg Trk Call Splitting? y
Disconnect Information in Place of FRL? n Outg Attd Call Record? y
Interworking Feat-flag? n
Force Entry of Acct Code for Calls Marked on Toll Analysis Form? n
Calls to Hunt Group - Record: member-ext
Record Called Vector Directory Number Instead of Group or Member? n
Record Agent ID on Incoming? y Record Agent ID on Outgoing? y
Inc Trk Call Splitting? y Inc Attd Call Record? y
Record Non-Call-Assoc TSC? n Call Record Handling Option: warning
Record Call-Assoc TSC? n Digits to Record for Outgoing Calls: dialed
Privacy - Digits to Hide: 0 CDR Account Code Length: 12

There is no Enhanced format for this layout

 

[montyzummer]

ok forget that and change the type to unformatted and see if you can see raw data

APSS (SME)
ACSS (SME)

 

[montyzummer]

This will not allow you to change any settings on page two as it will not be a option but may give you the in fo you require.

APSS (SME)
ACSS (SME)

 

[klmnop]

It gives me a slightly different format; I think I can probably use either.

--Expanded format
2012-04-18 11:28:08 Local7.Debug 172.16.52.234 1129 0002 7 3 904 17242389663 8211 6 018 4 1 0 0 0
2012-04-18 11:28:11 Local7.Debug 172.16.52.234 1129 0005 7 3 904 15042781238 8308 6 019 4 1 0 0 0
2012-04-18 11:28:28 Local7.Debug 172.16.52.234 1129 0044 9 8418 4179670202 0 001 0 904 1 0 0 0
2012-04-18 11:28:47 Local7.Debug 172.16.52.234 1130 0006 7 3 904 18187803881 8319 6 020 4 1 0 0 0
2012-04-18 11:29:08 Local7.Debug 172.16.52.234 1130 0158 9 8331 8593335060 0 035 0 905 1 0 0 0
2012-04-18 11:29:30 Local7.Debug 172.16.52.234 1130 0006 9 8193 6785898297 1 001 0 907 1 0 0 0
2012-04-18 11:30:00 Local7.Debug 172.16.52.234 1131 0083 9 8305 8139862226 0 030 0 905 1 0 0 0

--Here's the unformatted format....
2012-04-18 11:30:21 Local7.Debug 172.16.52.234 113100029 81006785898297 1001 0 907 1 000
2012-04-18 11:30:22 Local7.Debug 172.16.52.234 113100609 83225416783421 0034 0 905 1 000
2012-04-18 11:30:34 Local7.Debug 172.16.52.234 113200499 83296024772271 0002 0 904 1 000
2012-04-18 11:30:35 Local7.Debug 172.16.52.234 113200097 3 907 18006724399 8173 6 0070 1 000
2012-04-18 11:30:45 Local7.Debug 172.16.52.234 113200049 06785898297 1001 0 907 1 000
2012-04-18 11:30:50 Local7.Debug 172.16.52.234 113200009 81936785898297 1001 0 907 1 000
2012-04-18 11:30:56 Local7.Debug 172.16.52.234 113200857 3 907 18003337400 8411 6 0040 1 000
2012-04-18 11:31:22 Local7.Debug 172.16.52.234 113200057 3 904 19545618111 8265 6 0034 1 000
2012-04-18 11:31:32 Local7.Debug 172.16.52.234 113300117 3 904 18453615100 8141 6 0244 1 000
2012-04-18 11:31:36 Local7.Debug 172.16.52.234 113300137 3 907 17813166877 8205 6 0084 1 000
2012-04-18 11:32:02 Local7.Debug 172.16.52.234 113300067 3 904 15704245330 8326 6 0114 1 000
2012-04-18 11:32:11 Local7.Debug 172.16.52.234 113300039 25676093488076 0029 0 905 1 000
2012-04-18 11:32:14 Local7.Debug 172.16.52.234 113300069 81009783631344 1001 0 907 1 000
2012-04-18 11:32:19 Local7.Debug 172.16.52.234 113300077 3 904 19257524750 8319 6 0094 1 000


Still one more follow up question. I am not seeing calls from my ISDN PRI line on this. Trunk group is set to measured, both. Any ideas?

TRUNK GROUP

Group Number: 7 Group Type: isdn CDR Reports: y
Group Name: Trunk7- XO PRI COR: 1 TN: 1 TAC: 907
Direction: two-way Outgoing Display? n Carrier Medium: PRI/BRI
Dial Access? n Busy Threshold: 255 Night Service:
Queue Length: 0
Service Type: cbc Auth Code? n TestCall ITC: rest
Usage Alloc? n Far End Test Line No:
TestCall BCC: 4 TestCall Service:
TRUNK PARAMETERS
Codeset to Send Display: 6 Codeset to Send National IEs: 6
Max Message Size to Send: 260 Charge Advice: none
Supplementary Service Protocol: a Digit Handling (in/out): enbloc/enbloc

Trunk Hunt: cyclical QSIG Value-Added? n
Digital Loss Group: 13
Incoming Calling Number - Delete: Insert: Format:
Bit Rate: 1200 Synchronization: async Duplex: full
Disconnect Supervision - In? y Out? n
Answer Supervision Timeout: 0

TRUNK FEATURES
ACA Assignment? n Measured: both Wideband Support? n
Maintenance Tests? y
Data Restriction? n NCA-TSC Trunk Member:
Send Name: y Send Calling Number: y
Used for DCS? n
Suppress # Outpulsing? n Format: public
Outgoing Channel ID Encoding: preferred UUI IE Treatment: service-provider

Replace Restricted Numbers? n
Replace Unavailable Numbers? n
Send Connected Number: n
Network Call Redirection: none Modify Tandem Calling Number? n
Send UUI IE? y
Send UCID? n
Send Codeset 6/7 LAI IE? y Ds1 Echo Cancellation? n

US NI Delayed Calling Name Update? n

SBS? n Network (Japan) Needs Connect Before Disconnect? n

 

[montyzummer]

errrm your trunk is set to give CDR maybe try busy group then release , then save trans also you have record agent ID on out going calls are youre pri calls being made by agents or simply stations.

APSS (SME)
ACSS (SME)

 

[klmnop]

PRI calls are made by both agents and stations.

Either some change I made fixed the issue or there was no issue in the first place. I am now seeing I/B and O/B calls from this trunk group.

Montyzummer, I don't have a big budget for any software but would appreciate any recommendations.

 

[montyzummer]

Yes Maybe Microcare systems can help they are based in the uk and would be able to recomend some soloutions for you.

APSS (SME)
ACSS (SME)