I am going to do a wire shark this week.

In response to telephoneguy, the phones are already on their own switch and the switch does not have qos.

In response to ttech, I support this idea but the customer doesn't understand why we can't fix these and doesn't want to buy more stuff. The phones are all under one roof on a private network.

And to Coral Tech, that is a interesting thought... But I don't see how it could be a ping attack since the phones are on their own network that is not allowed access to or from the Internet.

On the smtp loop, I'll check into this. I don't believe the smtp settings are even configured however.

Thanks for all the replys!