This monitoring technique detects a number of calls with short holding times or a single call with a long holding time. Such calls could indicate hacker activity. Long holding times on trunk-to-trunk calls can be a warning sign. The Automatic Circuit Assurance (ACA) feature allows you to set time limit thresholds that define what is considered a short holding time and a long holding time. When a violation occurs, a designated station is visually notified.
When an alarm occurs, determine if the call is still active. If toll fraud is suspected (for example, if a long holding time alarm occurs on a trunk-to-trunk call), you might want to use the busy verification feature (see Busy Verification for more information) to monitor the call in progress.