I’m asking them to run tcdump on their router. My understanding is that they are currently running sngrep on the PBX.
tcdump
sngrep