voicemail tracing

[mitelmania]

Hi all,

anyone have any idea if its possible to run a trace on a mailbox that someone is attempting to hack, since enableing mailbox lockout I have a site with a mailbox locked out just about every morning and have to keep resetting the pin. Would be interested to know if there is anything deeper than a CCS trace/SMDR which will only let see calls into the voicemail rather than what was dialled once the connection to voicemail was established.

Cheers

 

[kwbMitel]

Not sure if unsuccessful logs appear in the VM.Log file but you might check. Access to the log is via FTP or extract from Sys-Diag report.

*******************************************************
Occam's Razor - All things being equal, the simplest solution is the right one.

 

[mitelmmaniac]

there's also an fcos bit you can enable to trace an indivdual (or all but this will create a massive lock) mailbox.

Desk Jockey Lunacy

 

[kwbMitel]

Mitelmaniac's response is for a Nupoint.

I assumed embedded on a 3300 as you did not supply system info.

*******************************************************
Occam's Razor - All things being equal, the simplest solution is the right one.

 

[IrwinMFletcher]

Check the diag.dat file within voicemail.

 

[mitelmmaniac]

Sorry thought he meant NuPoint.

Desk Jockey Lunacy

 

[mitelmania]

Hi all,

sorry I should have mentioned this is embedded 3300 VM. I have the SD logs, KWB you mentioned a VM.log file that should be in the SD logs, do I need to extract that from another file or would it be easier to get via ftp from the controller ?

Thanks for the input everyone.

 

[kwbMitel]

I find it easier to obtain via ftp. I can't give you the exact steps as it has been a while. I use Filezilla. I'm sketchy on the filename as well. I think it might be diag.log IrwinFletcher knows for sure.

*******************************************************
Occam's Razor - All things being equal, the simplest solution is the right one.

 

[IrwinMFletcher]

I've taken a look at some logs I have here and the digits are not shown, for security reasons obviously, so that won't work.

Any chance it's an IP or SIP trunk coming in? You could always sniff the calls.