The traces NTAC is asking for will tell them what is causing the lock ups, as you already know. Getting the Whireshark trace when the system locks up is the problem, if you don't have a spare laptop try to borrow one. You won't have to knock the Netlink or the IP terminals off line (only for a short time for setup) to perform the trace.
Have the customer call you as soon as the system locks up and have them stop the trace after the 9100 boots up.
Good luck.


We get old too soon, smart too late