all 5 comments

[–]chuckbales 3 points4 points  (0 children)

Typically you'll need to install/connect with RTMT to retrieve logs (traces) from CUCM. You'll need to make sure the appropriate traces are enabled first though - here's some info on enabling/collecting the logs https://www.cisco.com/c/en/us/support/docs/unified-communications/unified-communications-manager-callmanager/200787-How-to-Collect-Traces-for-CUCM-9-x-10-x.html

[–]chasingpackets 4 points5 points  (0 children)

quick and dirty is ssh into cm and run a "file tail active /cm/trace/ccm/sdl recent" then perform whatever action(s) you wish to capture... make sure trace settings in serviceability are set accordingly

you can dump the capture to translator x as well, it's pretty self-explanatory. RTMT log collection is another way to go

[–]ihaxr 2 points3 points  (1 child)

Since two of the ways I debug SIP on CUCM were already posted, I'll post the third way: since you're probably on a UCS virtual server, you can install a Windows server on the same vNIC as the CUCM box and just install Wireshark on there to see the traffic going across the port. You might have to enable promiscuous mode on the adapter in ESXi and TAC probably won't want to look at anything other than the RTMT traces, but it's a much easier and more familiar approach to seeing what is going on without much fuss.

[–]vtbrian 0 points1 point  (0 children)

Or just do the capture in CUCM: utils network capture eth0 size all count 100000 host ip x.x.x.x(mitel IP) file capturefile01

You can use file get to download via SFTP or download using RTMT Collect Files->Choose Packet Capture Files towards bottom of 2nd page of services list.