tracing calls that have already been made in Nortel Option 81/11c...

[ChrisKnerr2010]

OK! here is one for you all...

I received an e-mail tonight (from our department supervisor) requesting a call trace to be conducted on a number that is unknown... by this I mean that the inbound calling number was received by one receptionist, not logged manually, transferred to another receptionist... where this receptionist received a social engineering hacking attempt where the caller was asking for internal IP information. Now, the conversation itself is not what I am extremely worried about. What I would like to know is if it is possible to trace this call back even though call logging was not initialized on the originating recipient's DN. We would like to trace the originating caller's telephony ID (eg: country code, area code, prefix, and DN) although the call has already taken place. Is it possible to run such a trace? I am running Nortel Option11C V.3 at the campus level and the Option 81c V.3 at our core data center. Any information to attempt to retrieve information on this call would be highly appreciated!

Thanks!

 

[cmawbey]

No sorry......call data is in real time and only recorded if you are running CDR & collecting the data,,, but if the number is being withheld then no....Call data is generally outgoing so itemised billing can be used, also quite often if the incoming calls are international then the number will not be passed through.... if it is and is shown on the receptionist display then they can make a note of it...thats all really.

 

[trvlr1]

If you can give your phone company the time the call was made, the number they called, they may be able to get something for you. However, if the caller had any form of organized scam going on, the likelyhood is that they were not sending out their correct number anyway.
You need to persue this quickly as some C.O.'s do not retain records like this for too long, at least locally. The more work they have to do to get this information, the less likely they are to want to do it!

 

[bignose21]

Was you DCH trace enabled in LD 96 and the log file turned on (Later Releases about 5 onwards) this is an example of what i mean:

LD 96

.stat mon
TRACE OUTPUT
DCH LOG : ON /U/TRACE/DCH.LOG
DCH TTY : OFF
ACTIVE TRACES
DCH 010 : MSGI - ENBL MSGO - ENBL
DCH 011 : MSGI - ENBL MSGO - ENBL (UIPE)