I have a couple Grandstream HT502s that occasionally get stuck with the detected NAT type of 
Warning: 399 ip.address "Detected NAT type is UDP Blocked". When that happens the device is never able to complete a call until it is restarted. Where should I start looking to create a monitor that will parse those messages and send a reboot (i.e. sofia profile [profile] flush_inbound_reg [call_id] reboot)

Thanks, 
Nick

Sample SIP Message
SIP/2.0 200 OK
   Via: SIP/2.0/TCP XXX.XXX.XXX.XXX:PORT;branch=z9hG4bK2N9vy7BmyF40B
   From: <sip:22521002@DOMAIN.COM>;tag=3yNZa6ZNv6K6g
   To: <sip:22521002@DOMAIN.COM>;tag=1662499825
   Call-ID: 3901be5e-db58-1230-109f-bc764e103a41
   CSeq: 38881081 NOTIFY
   Supported: replaces, path, timer, eventlist
   User-Agent: Grandstream HT-502  V1.2A 1.0.8.4  chip V2.2
   Warning: 399 XXX.XXX.XXX.XXX "Detected NAT type is UDP Blocked"
   Allow: INVITE, ACK, OPTIONS, CANCEL, BYE, SUBSCRIBE, NOTIFY, INFO, REFER, UPDATE
   Content-Length: 0