A quick update on my situation. I found out that there was a cache of 10 days worth of recordings on the server in rotation. I set it up to only hold onto the past two days since all of our recordings is on the S3 bucket I set up.
Also, I was able to get a fair amount of TCPdumps during a trouble issue of a call cutting out.
My question on this now, is what exactly would I be looking for in wireshark?
(I’m no network administartor :P)