<html><head><style>body{font-family:Helvetica,Arial;font-size:13px}</style></head><body><div style="font-family:Helvetica,Arial;font-size:13px">Hello all,</div><div style="font-family:Helvetica,Arial;font-size:13px"><br></div><div style="font-family:Helvetica,Arial;font-size:13px">I need some help to sort a problem I have recently: I receive a call from a local number directed to a subscriber with a spa122 TA that is immediately diverted to a 007940… I don’t understand if the call diversion is done on spce or on the SPA. I think it’s exploiting the SPA somehow but I already wiped the SPA, updated firmware and changed pwd of both Cisco user and admin user as well as sip account the problem re-appeared.</div><div style="font-family:Helvetica,Arial;font-size:13px"><br></div><div style="font-family:Helvetica,Arial;font-size:13px">Any suggestions on how to find out where the diversion is happening?</div><div style="font-family:Helvetica,Arial;font-size:13px"><br></div><div style="font-family:Helvetica,Arial;font-size:13px">Thanks</div><div style="font-family:Helvetica,Arial;font-size:13px"><br></div><div style="font-family:Helvetica,Arial;font-size:13px">Stefano</div><div style="font-family:Helvetica,Arial;font-size:13px"><br></div><div style="font-family:Helvetica,Arial;font-size:13px"><br></div><div style="font-family:Helvetica,Arial;font-size:13px"><br><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:37 centrale proxy[32579]: NOTICE: <script>: New request on proxy - M=ACK R=«sip:017499074@94.125.XXXXX» F=«sip:0691516096@213.204.xxxxx;user=phone» T=«sip:017499074@94.125.XXXXX» IP=«127.0.0.1»:«5060» («127.0.0.1»:«5060») ID=«<a href="mailto:0e15e0000ef5-604985ef-369313ae-16affbc0-c2710a1@127.0.0.1">0e15e0000ef5-604985ef-369313ae-16affbc0-c2710a1@127.0.0.1</a>» UA='<null>' DESTIP=«127.0.0.1»:«5062»</div><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:40 centrale proxy[32580]: NOTICE: <script>: New request on proxy - M=INVITE R=«sip:017499074@94.125.XXXXX» F=«sip:0691516096@213.204.xxxxx;user=phone» T=«sip:017499074@94.125.XXXXX» IP=«213.204.xxxxx»:«5060» («127.0.0.1»:«5060») ID=«<a href="mailto:0e15e0000ef5-604985f3-7ce5df47-b5c8dd8-c2710a2@127.0.0.1">0e15e0000ef5-604985f3-7ce5df47-b5c8dd8-c2710a2@127.0.0.1</a>» UA='TELES-SBC' DESTIP=«127.0.0.1»:«5062»</div><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:40 centrale proxy[32580]: NOTICE: <script>: User-Provided CLI '«0691516096»' taken from From-User as fallback, should be from 'pai_user' - R=«sip:017499074@94.125.XXXXX» ID=«<a href="mailto:0e15e0000ef5-604985f3-7ce5df47-b5c8dd8-c2710a2@127.0.0.1">0e15e0000ef5-604985f3-7ce5df47-b5c8dd8-c2710a2@127.0.0.1</a>» UA='TELES-SBC'</div><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:40 centrale proxy[32580]: NOTICE: <script>: Network-Provided CLI '«0691516096»' taken from From-User as fallback, should be from 'pai_user' - R=«sip:017499074@94.125.XXXXX» ID=«<a href="mailto:0e15e0000ef5-604985f3-7ce5df47-b5c8dd8-c2710a2@127.0.0.1">0e15e0000ef5-604985f3-7ce5df47-b5c8dd8-c2710a2@127.0.0.1</a>» UA='TELES-SBC'</div><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:40 centrale proxy[32580]: NOTICE: <script>: Setting '«0691516096»@«213.204.xxxxx»' as initiating user-provided CLI - R=«sip:017499074@94.125.XXXXX» ID=«<a href="mailto:0e15e0000ef5-604985f3-7ce5df47-b5c8dd8-c2710a2@127.0.0.1">0e15e0000ef5-604985f3-7ce5df47-b5c8dd8-c2710a2@127.0.0.1</a>» UA='TELES-SBC'</div><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:40 centrale proxy[32580]: NOTICE: <script>: Setting '«0691516096»@«213.204.xxxxx»' as initiating network-provided CLI - R=«sip:017499074@94.125.XXXXX» ID=«<a href="mailto:0e15e0000ef5-604985f3-7ce5df47-b5c8dd8-c2710a2@127.0.0.1">0e15e0000ef5-604985f3-7ce5df47-b5c8dd8-c2710a2@127.0.0.1</a>» UA='TELES-SBC'</div><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:40 centrale proxy[32580]: NOTICE: <script>: Setting acc source-leg for uuid '«0»': '«0|0691516096|213.204.xxxxx|0691516096|||0|||0|call|213.204.xxxxx|1615431460.728281||||||||||||0691516096||||||8|»' - R=«sip:017499074@172.16.5.235:5060» ID=«<a href="mailto:0e15e0000ef5-604985f3-7ce5df47-b5c8dd8-c2710a2@127.0.0.1">0e15e0000ef5-604985f3-7ce5df47-b5c8dd8-c2710a2@127.0.0.1</a>» UA='TELES-SBC'</div><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:40 centrale proxy[32580]: NOTICE: <script>: Setting caller_cli_userprov/caller_domain_userprov '«0691516096»@«<a href="http://d.voceblu.it">d.voceblu.it</a>»' for upn - R=«sip:017499074@172.16.5.235:5060» ID=«<a href="mailto:0e15e0000ef5-604985f3-7ce5df47-b5c8dd8-c2710a2@127.0.0.1">0e15e0000ef5-604985f3-7ce5df47-b5c8dd8-c2710a2@127.0.0.1</a>» UA='TELES-SBC'</div><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:40 centrale proxy[32580]: NOTICE: <script>: Setting From to '<«<a href="mailto:sip%3A0691516096@d.voceblu.it">sip:0691516096@d.voceblu.it</a>»>' - R=«sip:017499074@172.16.5.235:5060» ID=«<a href="mailto:0e15e0000ef5-604985f3-7ce5df47-b5c8dd8-c2710a2@127.0.0.1">0e15e0000ef5-604985f3-7ce5df47-b5c8dd8-c2710a2@127.0.0.1</a>» UA='TELES-SBC'</div><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:40 centrale proxy[32584]: NOTICE: <script>: Load gws matching calling part '«<a href="mailto:sip%3A0691516096@d.voceblu.it">sip:0691516096@d.voceblu.it</a>»' and called user '«0079409078357»' and called part '«<a href="mailto:sip%3A0079409078357@d.voceblu.it">sip:0079409078357@d.voceblu.it</a>;transport=udp»' - R=«<a href="mailto:sip%3A0079409078357@d.voceblu.it">sip:0079409078357@d.voceblu.it</a>;transport=udp» ID=«<a href="mailto:0e15e0000ef5-604985f3-7ce5df47-b5c8dd8-c2710a2@127.0.0.1">0e15e0000ef5-604985f3-7ce5df47-b5c8dd8-c2710a2@127.0.0.1</a>» UA='TELES-SBC'</div><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:41 centrale proxy[32584]: NOTICE: <script>: Setting caller_cli_userprov/caller_domain_userprov '«0691516096»@«213.204.xxxxx»' for upn - R=«<a href="mailto:sip%3A0079409078357@213.204.30.51">sip:0079409078357@213.204.30.51</a>» ID=«<a href="mailto:0e15e0000ef5-604985f3-7ce5df47-b5c8dd8-c2710a2@127.0.0.1">0e15e0000ef5-604985f3-7ce5df47-b5c8dd8-c2710a2@127.0.0.1</a>» UA='TELES-SBC'</div><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:41 centrale proxy[32584]: NOTICE: <script>: Setting From to '<«sip:0691516096@213.204.xxxxx»>' - R=«<a href="mailto:sip%3A0079409078357@213.204.30.51">sip:0079409078357@213.204.30.51</a>» ID=«<a href="mailto:0e15e0000ef5-604985f3-7ce5df47-b5c8dd8-c2710a2@127.0.0.1">0e15e0000ef5-604985f3-7ce5df47-b5c8dd8-c2710a2@127.0.0.1</a>» UA='TELES-SBC'</div><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:41 centrale proxy[32584]: NOTICE: <script>: Setting caller_cli_userprov/caller_domain_userprov '«0691516096»@«213.204.xxxxx»' for upn - R=«<a href="mailto:sip%3A0079409078357@213.204.30.51">sip:0079409078357@213.204.30.51</a>» ID=«<a href="mailto:0e15e0000ef5-604985f3-7ce5df47-b5c8dd8-c2710a2@127.0.0.1">0e15e0000ef5-604985f3-7ce5df47-b5c8dd8-c2710a2@127.0.0.1</a>» UA='TELES-SBC'</div><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:41 centrale proxy[32584]: NOTICE: <script>: Setting PAI to '<«sip:0691516096@213.204.xxxxx»>' - R=«<a href="mailto:sip%3A0079409078357@213.204.30.51">sip:0079409078357@213.204.30.51</a>» ID=«<a href="mailto:0e15e0000ef5-604985f3-7ce5df47-b5c8dd8-c2710a2@127.0.0.1">0e15e0000ef5-604985f3-7ce5df47-b5c8dd8-c2710a2@127.0.0.1</a>» UA='TELES-SBC'</div><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:41 centrale proxy[32580]: NOTICE: <script>: New request on proxy - M=ACK R=«sip:017499074@94.125.XXXXX» F=«sip:0691516096@213.204.xxxxx;user=phone» T=«sip:017499074@94.125.XXXXX» IP=«127.0.0.1»:«5060» («127.0.0.1»:«5060») ID=«<a href="mailto:0e15e0000ef5-604985f3-7ce5df47-b5c8dd8-c2710a2@127.0.0.1">0e15e0000ef5-604985f3-7ce5df47-b5c8dd8-c2710a2@127.0.0.1</a>» UA='<null>' DESTIP=«127.0.0.1»:«5062»</div><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:43 centrale proxy[32582]: NOTICE: <script>: New request on proxy - M=INVITE R=«sip:017499074@94.125.XXXXX» F=«sip:0691516096@213.204.xxxxx;user=phone» T=«sip:017499074@94.125.XXXXX» IP=«213.204.xxxxx»:«5060» («127.0.0.1»:«5060») ID=«<a href="mailto:0e15e0000ef5-604985f5-4d89703f-27f89ec8-c2710a3@127.0.0.1">0e15e0000ef5-604985f5-4d89703f-27f89ec8-c2710a3@127.0.0.1</a>» UA='TELES-SBC' DESTIP=«127.0.0.1»:«5062»</div><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:43 centrale proxy[32582]: NOTICE: <script>: User-Provided CLI '«0691516096»' taken from From-User as fallback, should be from 'pai_user' - R=«sip:017499074@94.125.XXXXX» ID=«<a href="mailto:0e15e0000ef5-604985f5-4d89703f-27f89ec8-c2710a3@127.0.0.1">0e15e0000ef5-604985f5-4d89703f-27f89ec8-c2710a3@127.0.0.1</a>» UA='TELES-SBC'</div><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:43 centrale proxy[32582]: NOTICE: <script>: Network-Provided CLI '«0691516096»' taken from From-User as fallback, should be from 'pai_user' - R=«sip:017499074@94.125.XXXXX» ID=«<a href="mailto:0e15e0000ef5-604985f5-4d89703f-27f89ec8-c2710a3@127.0.0.1">0e15e0000ef5-604985f5-4d89703f-27f89ec8-c2710a3@127.0.0.1</a>» UA='TELES-SBC'</div><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:43 centrale proxy[32582]: NOTICE: <script>: Setting '«0691516096»@«213.204.xxxxx»' as initiating user-provided CLI - R=«sip:017499074@94.125.XXXXX» ID=«<a href="mailto:0e15e0000ef5-604985f5-4d89703f-27f89ec8-c2710a3@127.0.0.1">0e15e0000ef5-604985f5-4d89703f-27f89ec8-c2710a3@127.0.0.1</a>» UA='TELES-SBC'</div><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:43 centrale proxy[32582]: NOTICE: <script>: Setting '«0691516096»@«213.204.xxxxx»' as initiating network-provided CLI - R=«sip:017499074@94.125.XXXXX» ID=«<a href="mailto:0e15e0000ef5-604985f5-4d89703f-27f89ec8-c2710a3@127.0.0.1">0e15e0000ef5-604985f5-4d89703f-27f89ec8-c2710a3@127.0.0.1</a>» UA='TELES-SBC'</div><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:43 centrale proxy[32582]: NOTICE: <script>: Setting acc source-leg for uuid '«0»': '«0|0691516096|213.204.xxxxx|0691516096|||0|||0|call|213.204.xxxxx|1615431463.236909||||||||||||0691516096||||||8|»' - R=«sip:017499074@172.16.5.235:5060» ID=«<a href="mailto:0e15e0000ef5-604985f5-4d89703f-27f89ec8-c2710a3@127.0.0.1">0e15e0000ef5-604985f5-4d89703f-27f89ec8-c2710a3@127.0.0.1</a>» UA='TELES-SBC'</div><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:43 centrale proxy[32582]: NOTICE: <script>: Setting caller_cli_userprov/caller_domain_userprov '«0691516096»@«<a href="http://d.voceblu.it">d.voceblu.it</a>»' for upn - R=«sip:017499074@172.16.5.235:5060» ID=«<a href="mailto:0e15e0000ef5-604985f5-4d89703f-27f89ec8-c2710a3@127.0.0.1">0e15e0000ef5-604985f5-4d89703f-27f89ec8-c2710a3@127.0.0.1</a>» UA='TELES-SBC'</div><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:43 centrale proxy[32582]: NOTICE: <script>: Setting From to '<«<a href="mailto:sip%3A0691516096@d.voceblu.it">sip:0691516096@d.voceblu.it</a>»>' - R=«sip:017499074@172.16.5.235:5060» ID=«<a href="mailto:0e15e0000ef5-604985f5-4d89703f-27f89ec8-c2710a3@127.0.0.1">0e15e0000ef5-604985f5-4d89703f-27f89ec8-c2710a3@127.0.0.1</a>» UA='TELES-SBC'</div><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:43 centrale proxy[32579]: NOTICE: <script>: Load gws matching calling part '«<a href="mailto:sip%3A0691516096@d.voceblu.it">sip:0691516096@d.voceblu.it</a>»' and called user '«0079409078357»' and called part '«<a href="mailto:sip%3A0079409078357@d.voceblu.it">sip:0079409078357@d.voceblu.it</a>;transport=udp»' - R=«<a href="mailto:sip%3A0079409078357@d.voceblu.it">sip:0079409078357@d.voceblu.it</a>;transport=udp» ID=«<a href="mailto:0e15e0000ef5-604985f5-4d89703f-27f89ec8-c2710a3@127.0.0.1">0e15e0000ef5-604985f5-4d89703f-27f89ec8-c2710a3@127.0.0.1</a>» UA='TELES-SBC'</div><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:43 centrale proxy[32579]: NOTICE: <script>: Setting caller_cli_userprov/caller_domain_userprov '«0691516096»@«213.204.xxxxx»' for upn - R=«<a href="mailto:sip%3A0079409078357@213.204.30.51">sip:0079409078357@213.204.30.51</a>» ID=«<a href="mailto:0e15e0000ef5-604985f5-4d89703f-27f89ec8-c2710a3@127.0.0.1">0e15e0000ef5-604985f5-4d89703f-27f89ec8-c2710a3@127.0.0.1</a>» UA='TELES-SBC'</div><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:43 centrale proxy[32579]: NOTICE: <script>: Setting From to '<«sip:0691516096@213.204.xxxxx»>' - R=«<a href="mailto:sip%3A0079409078357@213.204.30.51">sip:0079409078357@213.204.30.51</a>» ID=«<a href="mailto:0e15e0000ef5-604985f5-4d89703f-27f89ec8-c2710a3@127.0.0.1">0e15e0000ef5-604985f5-4d89703f-27f89ec8-c2710a3@127.0.0.1</a>» UA='TELES-SBC'</div><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:43 centrale proxy[32579]: NOTICE: <script>: Setting caller_cli_userprov/caller_domain_userprov '«0691516096»@«213.204.xxxxx»' for upn - R=«<a href="mailto:sip%3A0079409078357@213.204.30.51">sip:0079409078357@213.204.30.51</a>» ID=«<a href="mailto:0e15e0000ef5-604985f5-4d89703f-27f89ec8-c2710a3@127.0.0.1">0e15e0000ef5-604985f5-4d89703f-27f89ec8-c2710a3@127.0.0.1</a>» UA='TELES-SBC'</div><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:43 centrale proxy[32579]: NOTICE: <script>: Setting PAI to '<«sip:0691516096@213.204.xxxxx»>' - R=«<a href="mailto:sip%3A0079409078357@213.204.30.51">sip:0079409078357@213.204.30.51</a>» ID=«<a href="mailto:0e15e0000ef5-604985f5-4d89703f-27f89ec8-c2710a3@127.0.0.1">0e15e0000ef5-604985f5-4d89703f-27f89ec8-c2710a3@127.0.0.1</a>» UA='TELES-SBC'</div><div style="margin:0px">/var/log/ngcp/kamailio-proxy.log-20210311-1615432621.gz:Mar 11 03:57:43 centrale proxy[32580]: NOTICE: <script>: New request on proxy - M=ACK R=«sip:017499074@94.125.XXXXX» F=«sip:0691516096@213.204.xxxxx;user=phone» T=«sip:017499074@94.125.XXXXX» IP=«127.0.0.1»:«5060» («127.0.0.1»:«5060») ID=«<a href="mailto:0e15e0000ef5-604985f5-4d89703f-27f89ec8-c2710a3@127.0.0.1">0e15e0000ef5-604985f5-4d89703f-27f89ec8-c2710a3@127.0.0.1</a>» UA='<null>' DESTIP=«127.0.0.1»:«5062»</div><div><br></div></div></body></html>