Yealink phones recently constantly regenerating profiles.

[crayfield]

See below.

The 9972 MAC is the ethernet MAC of the phone that has the 225 number and 0.227 IP address.

I have no idea why a different number and MAC from a different phone (these do match) would have been requested from the IP address of my phone though.

Also note that my phone is on wifi with a different MAC of that I matched up to it's ethernet address in our DHCP server so our DHCP is not handing out that address to the other phones.

 

[OlegR_3CX]

Looks like some kind of a networking thing there. The only way to see this will be to run the captures on the NIC of the server and see if those requests were arriving, as shown in the 3CX System from the same IP, if that's the case, then you could look at the networking level on how did this happen.

 

[crayfield]

Well this is occuring sporadically so perhaps I can catch a log of this occurring.

 

[crayfield]

I did do a little experiment. These two entries correspond to rebooting my phone.

Which is is the top entry (matching Ethernet MAC, # and IP)

 

[OlegR_3CX]

You could use tshark/tcpdump to see and inspect the packets to confirm if that's indeed what arrives at the NIC of the 3CX System.

 

[crayfield]

Here is tcpdump | grep SIP. I closed tcpdump just as my phone got provisioned so it should be towards the end.

Also changed the host address since I'd rather not post that in public.

 

[OlegR_3CX]

We won't be able to provide you with troubleshooting support here, and the log you send is not enough just for you to know. You will need a .pcap file and analyze each packets in there.

 

[crayfield]

Ok is there a good place I can send that info rather than posting publicly?

Also this is a licensed instance but I am not the person that bought the license just one of the admins. Wasn't sure how to include that info when creating my account.