No. Time Source Destination Protocol Info 1 0.000000 209.114.219.98 209.114.219.69 SIP/SDP Request: INVITE sip:1001@209.114.219.69;user=phone, with session description Frame 1 (854 bytes on wire, 854 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.070308000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 854 bytes Capture Length: 854 bytes Ethernet II, Src: 00:48:54:6f:8a:d2, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:48:54:6f:8a:d2 (209.114.219.98) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.98 (209.114.219.98), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 840 Identification: 0x01ba (442) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (0x11) Header checksum: 0x635d (correct) Source: 209.114.219.98 (209.114.219.98) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 820 Checksum: 0xe071 (correct) Session Initiation Protocol Request-Line: INVITE sip:1001@209.114.219.69;user=phone SIP/2.0 Method: INVITE Resent Packet: False Message Header Via: SIP/2.0/UDP 192.168.200.169:5060 From: 3213084003 ;tag=3518047997 SIP Display info: 3213084003 SIP from address: sip:3213084003@209.114.219.69 SIP tag: 3518047997 To: SIP to address: sip:1001@209.114.219.69 Call-ID: 1314847947@192.168.200.169 CSeq: 1 INVITE Contact: 3213084003 User-Agent: Cisco ATA 186 v3.1.0 atasip (040211A) Expires: 300 Allow: ACK, BYE, CANCEL, INVITE, NOTIFY, OPTIONS, REFER, REGISTER Content-Length: 280 Content-Type: application/sdp Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): 3213084003 2325 2325 IN IP4 192.168.200.169 Owner Username: 3213084003 Session ID: 2325 Session Version: 2325 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 192.168.200.169 Session Name (s): ATA186 Call Connection Information (c): IN IP4 192.168.200.169 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 192.168.200.169 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 16384 RTP/AVP 18 8 0 101 Media Type: audio Media Port: 16384 Media Proto: RTP/AVP Media Format: ITU-T G.729 Media Format: ITU-T G.711 PCMA Media Format: ITU-T G.711 PCMU Media Format: 101 Media Attribute (a): rtpmap:18 G729/8000/1 Media Attribute Fieldname: rtpmap Media Attribute Value: 18 G729/8000/1 Media Attribute (a): fmtp:18 annexb=no Media Attribute Fieldname: fmtp Media Attribute Value: 18 annexb=no Media Attribute (a): rtpmap:8 PCMA/8000/1 Media Attribute Fieldname: rtpmap Media Attribute Value: 8 PCMA/8000/1 Media Attribute (a): rtpmap:0 PCMU/8000/1 Media Attribute Fieldname: rtpmap Media Attribute Value: 0 PCMU/8000/1 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-15 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-15 0000 00 11 43 58 7a 18 00 48 54 6f 8a d2 08 00 45 00 ..CXz..HTo....E. 0010 03 48 01 ba 00 00 f9 11 63 5d d1 72 db 62 d1 72 .H......c].r.b.r 0020 db 45 13 c4 13 c4 03 34 e0 71 49 4e 56 49 54 45 .E.....4.qINVITE 0030 20 73 69 70 3a 31 30 30 31 40 32 30 39 2e 31 31 sip:1001@209.11 0040 34 2e 32 31 39 2e 36 39 3b 75 73 65 72 3d 70 68 4.219.69;user=ph 0050 6f 6e 65 20 53 49 50 2f 32 2e 30 0d 0a 56 69 61 one SIP/2.0..Via 0060 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 31 39 : SIP/2.0/UDP 19 0070 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 3a 35 30 2.168.200.169:50 0080 36 30 0d 0a 46 72 6f 6d 3a 20 33 32 31 33 30 38 60..From: 321308 0090 34 30 30 33 20 3c 73 69 70 3a 33 32 31 33 30 38 4003 ; 00c0 74 61 67 3d 33 35 31 38 30 34 37 39 39 37 0d 0a tag=3518047997.. 00d0 54 6f 3a 20 3c 73 69 70 3a 31 30 30 31 40 32 30 To: ..Call-I 0100 44 3a 20 31 33 31 34 38 34 37 39 34 37 40 31 39 D: 1314847947@19 0110 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 0d 0a 43 2.168.200.169..C 0120 53 65 71 3a 20 31 20 49 4e 56 49 54 45 0d 0a 43 Seq: 1 INVITE..C 0130 6f 6e 74 61 63 74 3a 20 33 32 31 33 30 38 34 30 ontact: 32130840 0140 30 33 20 3c 73 69 70 3a 33 32 31 33 30 38 34 30 03 ..User-Agent: C 0190 69 73 63 6f 20 41 54 41 20 31 38 36 20 20 76 33 isco ATA 186 v3 01a0 2e 31 2e 30 20 61 74 61 73 69 70 20 28 30 34 30 .1.0 atasip (040 01b0 32 31 31 41 29 0d 0a 45 78 70 69 72 65 73 3a 20 211A)..Expires: 01c0 33 30 30 0d 0a 41 6c 6c 6f 77 3a 20 41 43 4b 2c 300..Allow: ACK, 01d0 20 42 59 45 2c 20 43 41 4e 43 45 4c 2c 20 49 4e BYE, CANCEL, IN 01e0 56 49 54 45 2c 20 4e 4f 54 49 46 59 2c 20 4f 50 VITE, NOTIFY, OP 01f0 54 49 4f 4e 53 2c 20 52 45 46 45 52 2c 20 52 45 TIONS, REFER, RE 0200 47 49 53 54 45 52 0d 0a 43 6f 6e 74 65 6e 74 2d GISTER..Content- 0210 4c 65 6e 67 74 68 3a 20 32 38 30 0d 0a 43 6f 6e Length: 280..Con 0220 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 tent-Type: appli 0230 63 61 74 69 6f 6e 2f 73 64 70 0d 0a 0d 0a 76 3d cation/sdp....v= 0240 30 0d 0a 6f 3d 33 32 31 33 30 38 34 30 30 33 20 0..o=3213084003 0250 32 33 32 35 20 32 33 32 35 20 49 4e 20 49 50 34 2325 2325 IN IP4 0260 20 31 39 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 192.168.200.169 0270 0d 0a 73 3d 41 54 41 31 38 36 20 43 61 6c 6c 0d ..s=ATA186 Call. 0280 0a 63 3d 49 4e 20 49 50 34 20 31 39 32 2e 31 36 .c=IN IP4 192.16 0290 38 2e 32 30 30 2e 31 36 39 0d 0a 74 3d 30 20 30 8.200.169..t=0 0 02a0 0d 0a 6d 3d 61 75 64 69 6f 20 31 36 33 38 34 20 ..m=audio 16384 02b0 52 54 50 2f 41 56 50 20 31 38 20 38 20 30 20 31 RTP/AVP 18 8 0 1 02c0 30 31 0d 0a 61 3d 72 74 70 6d 61 70 3a 31 38 20 01..a=rtpmap:18 02d0 47 37 32 39 2f 38 30 30 30 2f 31 0d 0a 61 3d 66 G729/8000/1..a=f 02e0 6d 74 70 3a 31 38 20 61 6e 6e 65 78 62 3d 6e 6f mtp:18 annexb=no 02f0 0d 0a 61 3d 72 74 70 6d 61 70 3a 38 20 50 43 4d ..a=rtpmap:8 PCM 0300 41 2f 38 30 30 30 2f 31 0d 0a 61 3d 72 74 70 6d A/8000/1..a=rtpm 0310 61 70 3a 30 20 50 43 4d 55 2f 38 30 30 30 2f 31 ap:0 PCMU/8000/1 0320 0d 0a 61 3d 72 74 70 6d 61 70 3a 31 30 31 20 74 ..a=rtpmap:101 t 0330 65 6c 65 70 68 6f 6e 65 2d 65 76 65 6e 74 2f 38 elephone-event/8 0340 30 30 30 0d 0a 61 3d 66 6d 74 70 3a 31 30 31 20 000..a=fmtp:101 0350 30 2d 31 35 0d 0a 0-15.. No. Time Source Destination Protocol Info 2 0.000334 209.114.219.69 209.114.219.98 SIP Status: 100 Trying Frame 2 (458 bytes on wire, 458 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.070642000 Time delta from previous packet: 0.000334000 seconds Time since reference or first frame: 0.000334000 seconds Frame Number: 2 Packet Length: 458 bytes Capture Length: 458 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:48:54:6f:8a:d2 Destination: 00:48:54:6f:8a:d2 (209.114.219.98) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.98 (209.114.219.98) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00) 0001 10.. = Differentiated Services Codepoint: Unknown (0x06) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 444 Identification: 0x0aa1 (2721) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xd4ea (correct) Source: 209.114.219.69 (209.114.219.69) Destination: 209.114.219.98 (209.114.219.98) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 424 Checksum: 0x5b47 (incorrect, should be 0xe76a) Session Initiation Protocol Status-Line: SIP/2.0 100 Trying Status-Code: 100 Resent Packet: False Message Header Via: SIP/2.0/UDP 192.168.200.169:5060;received=209.114.219.98;rport=5060 From: 3213084003 ;tag=3518047997 SIP Display info: 3213084003 SIP from address: sip:3213084003@209.114.219.69 SIP tag: 3518047997 To: ;tag=as6a4d6dad SIP to address: sip:1001@209.114.219.69 SIP tag: as6a4d6dad Call-ID: 1314847947@192.168.200.169 CSeq: 1 INVITE User-Agent: HCC Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER Contact: Content-Length: 0 0000 00 48 54 6f 8a d2 00 11 43 58 7a 18 08 00 45 18 .HTo....CXz...E. 0010 01 bc 0a a1 40 00 40 11 d4 ea d1 72 db 45 d1 72 ....@.@....r.E.r 0020 db 62 13 c4 13 c4 01 a8 5b 47 53 49 50 2f 32 2e .b......[GSIP/2. 0030 30 20 31 30 30 20 54 72 79 69 6e 67 0d 0a 56 69 0 100 Trying..Vi 0040 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 31 a: SIP/2.0/UDP 1 0050 39 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 3a 35 92.168.200.169:5 0060 30 36 30 3b 72 65 63 65 69 76 65 64 3d 32 30 39 060;received=209 0070 2e 31 31 34 2e 32 31 39 2e 39 38 3b 72 70 6f 72 .114.219.98;rpor 0080 74 3d 35 30 36 30 0d 0a 46 72 6f 6d 3a 20 33 32 t=5060..From: 32 0090 31 33 30 38 34 30 30 33 20 3c 73 69 70 3a 33 32 13084003 ;tag=35180479 00d0 39 37 0d 0a 54 6f 3a 20 3c 73 69 70 3a 31 30 30 97..To: ;tag 0100 3d 61 73 36 61 34 64 36 64 61 64 0d 0a 43 61 6c =as6a4d6dad..Cal 0110 6c 2d 49 44 3a 20 31 33 31 34 38 34 37 39 34 37 l-ID: 1314847947 0120 40 31 39 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 @192.168.200.169 0130 0d 0a 43 53 65 71 3a 20 31 20 49 4e 56 49 54 45 ..CSeq: 1 INVITE 0140 0d 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 48 43 ..User-Agent: HC 0150 43 20 41 73 74 65 72 69 73 6b 20 50 42 58 0d 0a C Asterisk PBX.. 0160 41 6c 6c 6f 77 3a 20 49 4e 56 49 54 45 2c 20 41 Allow: INVITE, A 0170 43 4b 2c 20 43 41 4e 43 45 4c 2c 20 4f 50 54 49 CK, CANCEL, OPTI 0180 4f 4e 53 2c 20 42 59 45 2c 20 52 45 46 45 52 0d ONS, BYE, REFER. 0190 0a 43 6f 6e 74 61 63 74 3a 20 3c 73 69 70 3a 31 .Contact: ..Content-Len 01c0 67 74 68 3a 20 30 0d 0a 0d 0a gth: 0.... No. Time Source Destination Protocol Info 3 0.069784 209.114.219.69 209.114.219.90 SIP/SDP Request: INVITE sip:003214093773@209.114.219.90, with session description Frame 3 (836 bytes on wire, 836 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.140092000 Time delta from previous packet: 0.069450000 seconds Time since reference or first frame: 0.069784000 seconds Frame Number: 3 Packet Length: 836 bytes Capture Length: 836 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00 Destination: 00:b0:8e:35:44:00 (209.114.219.90) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00) 0001 10.. = Differentiated Services Codepoint: Unknown (0x06) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 822 Identification: 0x0aa2 (2722) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xd377 (correct) Source: 209.114.219.69 (209.114.219.69) Destination: 209.114.219.90 (209.114.219.90) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 802 Checksum: 0x5cb9 (incorrect, should be 0x6ac3) Session Initiation Protocol Request-Line: INVITE sip:003214093773@209.114.219.90 SIP/2.0 Method: INVITE Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK63f185c9 From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: SIP to address: sip:003214093773@209.114.219.90 Contact: Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 CSeq: 102 INVITE User-Agent: HCC Asterisk PBX Date: Wed, 05 Jan 2005 21:54:12 GMT Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER Content-Type: application/sdp Content-Length: 291 Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): root 3032 3032 IN IP4 209.114.219.69 Owner Username: root Session ID: 3032 Session Version: 3032 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 209.114.219.69 Session Name (s): session Connection Information (c): IN IP4 209.114.219.69 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 209.114.219.69 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 10770 RTP/AVP 0 8 3 18 101 Media Type: audio Media Port: 10770 Media Proto: RTP/AVP Media Format: ITU-T G.711 PCMU Media Format: ITU-T G.711 PCMA Media Format: GSM 06.10 Media Format: ITU-T G.729 Media Format: 101 Media Attribute (a): rtpmap:0 PCMU/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 0 PCMU/8000 Media Attribute (a): rtpmap:8 PCMA/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 8 PCMA/8000 Media Attribute (a): rtpmap:3 GSM/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 3 GSM/8000 Media Attribute (a): rtpmap:18 G729/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 18 G729/8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-16 Media Attribute (a): silenceSupp:off - - - - Media Attribute Fieldname: silenceSupp Media Attribute Value: off - - - - 0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E. 0010 03 36 0a a2 40 00 40 11 d3 77 d1 72 db 45 d1 72 .6..@.@..w.r.E.r 0020 db 5a 13 c4 13 c4 03 22 5c b9 49 4e 56 49 54 45 .Z....."\.INVITE 0030 20 73 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 sip:00321409377 0040 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3@209.114.219.90 0050 20 53 49 50 2f 32 2e 30 0d 0a 56 69 61 3a 20 53 SIP/2.0..Via: S 0060 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 2e 31 IP/2.0/UDP 209.1 0070 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 3b 62 14.219.69:5060;b 0080 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 36 33 66 ranch=z9hG4bK63f 0090 31 38 35 63 39 0d 0a 46 72 6f 6d 3a 20 22 33 32 185c9..From: "32 00a0 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3a 33 13084003" ;tag=as 00d0 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 3c 73 721c22c4..To: . 0100 0a 43 6f 6e 74 61 63 74 3a 20 3c 73 69 70 3a 33 .Contact: ..Call- 0130 49 44 3a 20 35 33 37 62 32 66 38 38 32 36 38 61 ID: 537b2f88268a 0140 33 62 66 34 31 63 39 32 61 65 65 39 34 38 38 65 3bf41c92aee9488e 0150 38 35 35 33 40 32 30 39 2e 31 31 34 2e 32 31 39 8553@209.114.219 0160 2e 36 39 0d 0a 43 53 65 71 3a 20 31 30 32 20 49 .69..CSeq: 102 I 0170 4e 56 49 54 45 0d 0a 55 73 65 72 2d 41 67 65 6e NVITE..User-Agen 0180 74 3a 20 48 43 43 20 41 73 74 65 72 69 73 6b 20 t: HCC Asterisk 0190 50 42 58 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 PBX..Date: Wed, 01a0 30 35 20 4a 61 6e 20 32 30 30 35 20 32 31 3a 35 05 Jan 2005 21:5 01b0 34 3a 31 32 20 47 4d 54 0d 0a 41 6c 6c 6f 77 3a 4:12 GMT..Allow: 01c0 20 49 4e 56 49 54 45 2c 20 41 43 4b 2c 20 43 41 INVITE, ACK, CA 01d0 4e 43 45 4c 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 NCEL, OPTIONS, B 01e0 59 45 2c 20 52 45 46 45 52 0d 0a 43 6f 6e 74 65 YE, REFER..Conte 01f0 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 nt-Type: applica 0200 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f 6e 74 65 6e tion/sdp..Conten 0210 74 2d 4c 65 6e 67 74 68 3a 20 32 39 31 0d 0a 0d t-Length: 291... 0220 0a 76 3d 30 0d 0a 6f 3d 72 6f 6f 74 20 33 30 33 .v=0..o=root 303 0230 32 20 33 30 33 32 20 49 4e 20 49 50 34 20 32 30 2 3032 IN IP4 20 0240 39 2e 31 31 34 2e 32 31 39 2e 36 39 0d 0a 73 3d 9.114.219.69..s= 0250 73 65 73 73 69 6f 6e 0d 0a 63 3d 49 4e 20 49 50 session..c=IN IP 0260 34 20 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 4 209.114.219.69 0270 0d 0a 74 3d 30 20 30 0d 0a 6d 3d 61 75 64 69 6f ..t=0 0..m=audio 0280 20 31 30 37 37 30 20 52 54 50 2f 41 56 50 20 30 10770 RTP/AVP 0 0290 20 38 20 33 20 31 38 20 31 30 31 0d 0a 61 3d 72 8 3 18 101..a=r 02a0 74 70 6d 61 70 3a 30 20 50 43 4d 55 2f 38 30 30 tpmap:0 PCMU/800 02b0 30 0d 0a 61 3d 72 74 70 6d 61 70 3a 38 20 50 43 0..a=rtpmap:8 PC 02c0 4d 41 2f 38 30 30 30 0d 0a 61 3d 72 74 70 6d 61 MA/8000..a=rtpma 02d0 70 3a 33 20 47 53 4d 2f 38 30 30 30 0d 0a 61 3d p:3 GSM/8000..a= 02e0 72 74 70 6d 61 70 3a 31 38 20 47 37 32 39 2f 38 rtpmap:18 G729/8 02f0 30 30 30 0d 0a 61 3d 72 74 70 6d 61 70 3a 31 30 000..a=rtpmap:10 0300 31 20 74 65 6c 65 70 68 6f 6e 65 2d 65 76 65 6e 1 telephone-even 0310 74 2f 38 30 30 30 0d 0a 61 3d 66 6d 74 70 3a 31 t/8000..a=fmtp:1 0320 30 31 20 30 2d 31 36 0d 0a 61 3d 73 69 6c 65 6e 01 0-16..a=silen 0330 63 65 53 75 70 70 3a 6f 66 66 20 2d 20 2d 20 2d ceSupp:off - - - 0340 20 2d 0d 0a -.. No. Time Source Destination Protocol Info 4 0.079014 209.114.219.90 209.114.219.69 SIP Status: 100 Trying Frame 4 (445 bytes on wire, 445 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.149322000 Time delta from previous packet: 0.009230000 seconds Time since reference or first frame: 0.079014000 seconds Frame Number: 4 Packet Length: 445 bytes Capture Length: 445 bytes Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:b0:8e:35:44:00 (209.114.219.90) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00) 0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 431 Identification: 0x351a (13594) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x2b36 (correct) Source: 209.114.219.90 (209.114.219.90) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060) Source port: 56262 (56262) Destination port: 5060 (5060) Length: 411 Checksum: 0x4416 (correct) Session Initiation Protocol Status-Line: SIP/2.0 100 Trying Status-Code: 100 Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK63f185c9 From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Date: Wed, 05 Jan 2005 23:34:43 GMT Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 Server: Cisco-SIPGateway/IOS-12.x CSeq: 102 INVITE Allow-Events: telephone-event Content-Length: 0 0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh 0010 01 af 35 1a 00 00 ff 11 2b 36 d1 72 db 5a d1 72 ..5.....+6.r.Z.r 0020 db 45 db c6 13 c4 01 9b 44 16 53 49 50 2f 32 2e .E......D.SIP/2. 0030 30 20 31 30 30 20 54 72 79 69 6e 67 0d 0a 56 69 0 100 Trying..Vi 0040 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 a: SIP/2.0/UDP 2 0050 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 09.114.219.69:50 0060 36 30 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 60;branch=z9hG4b 0070 4b 36 33 66 31 38 35 63 39 0d 0a 46 72 6f 6d 3a K63f185c9..From: 0080 20 22 33 32 31 33 30 38 34 30 30 33 22 20 3c 73 "3213084003" ;ta 00b0 67 3d 61 73 37 32 31 63 32 32 63 34 0d 0a 54 6f g=as721c22c4..To 00c0 3a 20 3c 73 69 70 3a 30 30 33 32 31 34 30 39 33 : ;tag=4D099280 00f0 2d 37 41 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 -7A..Date: Wed, 0100 30 35 20 4a 61 6e 20 32 30 30 35 20 32 33 3a 33 05 Jan 2005 23:3 0110 34 3a 34 33 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 4:43 GMT..Call-I 0120 44 3a 20 35 33 37 62 32 66 38 38 32 36 38 61 33 D: 537b2f88268a3 0130 62 66 34 31 63 39 32 61 65 65 39 34 38 38 65 38 bf41c92aee9488e8 0140 35 35 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 553@209.114.219. 0150 36 39 0d 0a 53 65 72 76 65 72 3a 20 43 69 73 63 69..Server: Cisc 0160 6f 2d 53 49 50 47 61 74 65 77 61 79 2f 49 4f 53 o-SIPGateway/IOS 0170 2d 31 32 2e 78 0d 0a 43 53 65 71 3a 20 31 30 32 -12.x..CSeq: 102 0180 20 49 4e 56 49 54 45 0d 0a 41 6c 6c 6f 77 2d 45 INVITE..Allow-E 0190 76 65 6e 74 73 3a 20 74 65 6c 65 70 68 6f 6e 65 vents: telephone 01a0 2d 65 76 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d -event..Content- 01b0 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Length: 0.... No. Time Source Destination Protocol Info 5 0.337549 209.114.219.90 209.114.219.69 SIP/SDP Status: 183 Session Progress, with session description Frame 5 (954 bytes on wire, 954 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.407857000 Time delta from previous packet: 0.258535000 seconds Time since reference or first frame: 0.337549000 seconds Frame Number: 5 Packet Length: 954 bytes Capture Length: 954 bytes Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:b0:8e:35:44:00 (209.114.219.90) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00) 0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 940 Identification: 0x351b (13595) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x2938 (correct) Source: 209.114.219.90 (209.114.219.90) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060) Source port: 56262 (56262) Destination port: 5060 (5060) Length: 920 Checksum: 0xe79c (correct) Session Initiation Protocol Status-Line: SIP/2.0 183 Session Progress Status-Code: 183 Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK63f185c9 From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Date: Wed, 05 Jan 2005 23:34:43 GMT Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 Server: Cisco-SIPGateway/IOS-12.x CSeq: 102 INVITE Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER Allow-Events: telephone-event Contact: Content-Disposition: session;handling=required Content-Type: application/sdp Content-Length: 263 Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): CiscoSystemsSIP-GW-UserAgent 614 7259 IN IP4 209.114.219.90 Owner Username: CiscoSystemsSIP-GW-UserAgent Session ID: 614 Session Version: 7259 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 209.114.219.90 Session Name (s): SIP Call Connection Information (c): IN IP4 209.114.219.90 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 209.114.219.90 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 17302 RTP/AVP 18 101 Media Type: audio Media Port: 17302 Media Proto: RTP/AVP Media Format: ITU-T G.729 Media Format: 101 Connection Information (c): IN IP4 209.114.219.90 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 209.114.219.90 Media Attribute (a): rtpmap:18 G729/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 18 G729/8000 Media Attribute (a): fmtp:18 annexb=no Media Attribute Fieldname: fmtp Media Attribute Value: 18 annexb=no Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-16 0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh 0010 03 ac 35 1b 00 00 ff 11 29 38 d1 72 db 5a d1 72 ..5.....)8.r.Z.r 0020 db 45 db c6 13 c4 03 98 e7 9c 53 49 50 2f 32 2e .E........SIP/2. 0030 30 20 31 38 33 20 53 65 73 73 69 6f 6e 20 50 72 0 183 Session Pr 0040 6f 67 72 65 73 73 0d 0a 56 69 61 3a 20 53 49 50 ogress..Via: SIP 0050 2f 32 2e 30 2f 55 44 50 20 32 30 39 2e 31 31 34 /2.0/UDP 209.114 0060 2e 32 31 39 2e 36 39 3a 35 30 36 30 3b 62 72 61 .219.69:5060;bra 0070 6e 63 68 3d 7a 39 68 47 34 62 4b 36 33 66 31 38 nch=z9hG4bK63f18 0080 35 63 39 0d 0a 46 72 6f 6d 3a 20 22 33 32 31 33 5c9..From: "3213 0090 30 38 34 30 30 33 22 20 3c 73 69 70 3a 33 32 31 084003" ;tag=as72 00c0 31 63 32 32 63 34 0d 0a 54 6f 3a 20 3c 73 69 70 1c22c4..To: ;ta 00f0 67 3d 34 44 30 39 39 32 38 30 2d 37 41 0d 0a 44 g=4D099280-7A..D 0100 61 74 65 3a 20 57 65 64 2c 20 30 35 20 4a 61 6e ate: Wed, 05 Jan 0110 20 32 30 30 35 20 32 33 3a 33 34 3a 34 33 20 47 2005 23:34:43 G 0120 4d 54 0d 0a 43 61 6c 6c 2d 49 44 3a 20 35 33 37 MT..Call-ID: 537 0130 62 32 66 38 38 32 36 38 61 33 62 66 34 31 63 39 b2f88268a3bf41c9 0140 32 61 65 65 39 34 38 38 65 38 35 35 33 40 32 30 2aee9488e8553@20 0150 39 2e 31 31 34 2e 32 31 39 2e 36 39 0d 0a 53 65 9.114.219.69..Se 0160 72 76 65 72 3a 20 43 69 73 63 6f 2d 53 49 50 47 rver: Cisco-SIPG 0170 61 74 65 77 61 79 2f 49 4f 53 2d 31 32 2e 78 0d ateway/IOS-12.x. 0180 0a 43 53 65 71 3a 20 31 30 32 20 49 4e 56 49 54 .CSeq: 102 INVIT 0190 45 0d 0a 41 6c 6c 6f 77 3a 20 49 4e 56 49 54 45 E..Allow: INVITE 01a0 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 59 45 2c 20 , OPTIONS, BYE, 01b0 43 41 4e 43 45 4c 2c 20 41 43 4b 2c 20 50 52 41 CANCEL, ACK, PRA 01c0 43 4b 2c 20 43 4f 4d 45 54 2c 20 52 45 46 45 52 CK, COMET, REFER 01d0 2c 20 53 55 42 53 43 52 49 42 45 2c 20 4e 4f 54 , SUBSCRIBE, NOT 01e0 49 46 59 2c 20 49 4e 46 4f 2c 20 55 50 44 41 54 IFY, INFO, UPDAT 01f0 45 2c 20 52 45 47 49 53 54 45 52 0d 0a 41 6c 6c E, REGISTER..All 0200 6f 77 2d 45 76 65 6e 74 73 3a 20 74 65 6c 65 70 ow-Events: telep 0210 68 6f 6e 65 2d 65 76 65 6e 74 0d 0a 43 6f 6e 74 hone-event..Cont 0220 61 63 74 3a 20 3c 73 69 70 3a 30 30 33 32 31 34 act: ..Con 0250 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e tent-Disposition 0260 3a 20 73 65 73 73 69 6f 6e 3b 68 61 6e 64 6c 69 : session;handli 0270 6e 67 3d 72 65 71 75 69 72 65 64 0d 0a 43 6f 6e ng=required..Con 0280 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 tent-Type: appli 0290 63 61 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f 6e 74 cation/sdp..Cont 02a0 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 36 33 0d ent-Length: 263. 02b0 0a 0d 0a 76 3d 30 0d 0a 6f 3d 43 69 73 63 6f 53 ...v=0..o=CiscoS 02c0 79 73 74 65 6d 73 53 49 50 2d 47 57 2d 55 73 65 ystemsSIP-GW-Use 02d0 72 41 67 65 6e 74 20 36 31 34 20 37 32 35 39 20 rAgent 614 7259 02e0 49 4e 20 49 50 34 20 32 30 39 2e 31 31 34 2e 32 IN IP4 209.114.2 02f0 31 39 2e 39 30 0d 0a 73 3d 53 49 50 20 43 61 6c 19.90..s=SIP Cal 0300 6c 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 39 2e l..c=IN IP4 209. 0310 31 31 34 2e 32 31 39 2e 39 30 0d 0a 74 3d 30 20 114.219.90..t=0 0320 30 0d 0a 6d 3d 61 75 64 69 6f 20 31 37 33 30 32 0..m=audio 17302 0330 20 52 54 50 2f 41 56 50 20 31 38 20 31 30 31 0d RTP/AVP 18 101. 0340 0a 63 3d 49 4e 20 49 50 34 20 32 30 39 2e 31 31 .c=IN IP4 209.11 0350 34 2e 32 31 39 2e 39 30 0d 0a 61 3d 72 74 70 6d 4.219.90..a=rtpm 0360 61 70 3a 31 38 20 47 37 32 39 2f 38 30 30 30 0d ap:18 G729/8000. 0370 0a 61 3d 66 6d 74 70 3a 31 38 20 61 6e 6e 65 78 .a=fmtp:18 annex 0380 62 3d 6e 6f 0d 0a 61 3d 72 74 70 6d 61 70 3a 31 b=no..a=rtpmap:1 0390 30 31 20 74 65 6c 65 70 68 6f 6e 65 2d 65 76 65 01 telephone-eve 03a0 6e 74 2f 38 30 30 30 0d 0a 61 3d 66 6d 74 70 3a nt/8000..a=fmtp: 03b0 31 30 31 20 30 2d 31 36 0d 0a 101 0-16.. No. Time Source Destination Protocol Info 6 0.337934 209.114.219.69 209.114.219.98 SIP/SDP Status: 183 Session Progress, with session description Frame 6 (792 bytes on wire, 792 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.408242000 Time delta from previous packet: 0.000385000 seconds Time since reference or first frame: 0.337934000 seconds Frame Number: 6 Packet Length: 792 bytes Capture Length: 792 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:48:54:6f:8a:d2 Destination: 00:48:54:6f:8a:d2 (209.114.219.98) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.98 (209.114.219.98) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00) 0001 10.. = Differentiated Services Codepoint: Unknown (0x06) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 778 Identification: 0x0aa3 (2723) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xd39a (correct) Source: 209.114.219.69 (209.114.219.69) Destination: 209.114.219.98 (209.114.219.98) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 758 Checksum: 0x5c95 (incorrect, should be 0x7936) Session Initiation Protocol Status-Line: SIP/2.0 183 Session Progress Status-Code: 183 Resent Packet: False Message Header Via: SIP/2.0/UDP 192.168.200.169:5060;received=209.114.219.98;rport=5060 From: 3213084003 ;tag=3518047997 SIP Display info: 3213084003 SIP from address: sip:3213084003@209.114.219.69 SIP tag: 3518047997 To: ;tag=as6a4d6dad SIP to address: sip:1001@209.114.219.69 SIP tag: as6a4d6dad Call-ID: 1314847947@192.168.200.169 CSeq: 1 INVITE User-Agent: HCC Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER Contact: Content-Type: application/sdp Content-Length: 291 Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): root 3032 3032 IN IP4 209.114.219.69 Owner Username: root Session ID: 3032 Session Version: 3032 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 209.114.219.69 Session Name (s): session Connection Information (c): IN IP4 209.114.219.69 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 209.114.219.69 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 10204 RTP/AVP 0 8 3 18 101 Media Type: audio Media Port: 10204 Media Proto: RTP/AVP Media Format: ITU-T G.711 PCMU Media Format: ITU-T G.711 PCMA Media Format: GSM 06.10 Media Format: ITU-T G.729 Media Format: 101 Media Attribute (a): rtpmap:0 PCMU/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 0 PCMU/8000 Media Attribute (a): rtpmap:8 PCMA/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 8 PCMA/8000 Media Attribute (a): rtpmap:3 GSM/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 3 GSM/8000 Media Attribute (a): rtpmap:18 G729/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 18 G729/8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-16 Media Attribute (a): silenceSupp:off - - - - Media Attribute Fieldname: silenceSupp Media Attribute Value: off - - - - 0000 00 48 54 6f 8a d2 00 11 43 58 7a 18 08 00 45 18 .HTo....CXz...E. 0010 03 0a 0a a3 40 00 40 11 d3 9a d1 72 db 45 d1 72 ....@.@....r.E.r 0020 db 62 13 c4 13 c4 02 f6 5c 95 53 49 50 2f 32 2e .b......\.SIP/2. 0030 30 20 31 38 33 20 53 65 73 73 69 6f 6e 20 50 72 0 183 Session Pr 0040 6f 67 72 65 73 73 0d 0a 56 69 61 3a 20 53 49 50 ogress..Via: SIP 0050 2f 32 2e 30 2f 55 44 50 20 31 39 32 2e 31 36 38 /2.0/UDP 192.168 0060 2e 32 30 30 2e 31 36 39 3a 35 30 36 30 3b 72 65 .200.169:5060;re 0070 63 65 69 76 65 64 3d 32 30 39 2e 31 31 34 2e 32 ceived=209.114.2 0080 31 39 2e 39 38 3b 72 70 6f 72 74 3d 35 30 36 30 19.98;rport=5060 0090 0d 0a 46 72 6f 6d 3a 20 33 32 31 33 30 38 34 30 ..From: 32130840 00a0 30 33 20 3c 73 69 70 3a 33 32 31 33 30 38 34 30 03 ;ta 00d0 67 3d 33 35 31 38 30 34 37 39 39 37 0d 0a 54 6f g=3518047997..To 00e0 3a 20 3c 73 69 70 3a 31 30 30 31 40 32 30 39 2e : ;tag=as6a4 0110 64 36 64 61 64 0d 0a 43 61 6c 6c 2d 49 44 3a 20 d6dad..Call-ID: 0120 31 33 31 34 38 34 37 39 34 37 40 31 39 32 2e 31 1314847947@192.1 0130 36 38 2e 32 30 30 2e 31 36 39 0d 0a 43 53 65 71 68.200.169..CSeq 0140 3a 20 31 20 49 4e 56 49 54 45 0d 0a 55 73 65 72 : 1 INVITE..User 0150 2d 41 67 65 6e 74 3a 20 48 43 43 20 41 73 74 65 -Agent: HCC Aste 0160 72 69 73 6b 20 50 42 58 0d 0a 41 6c 6c 6f 77 3a risk PBX..Allow: 0170 20 49 4e 56 49 54 45 2c 20 41 43 4b 2c 20 43 41 INVITE, ACK, CA 0180 4e 43 45 4c 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 NCEL, OPTIONS, B 0190 59 45 2c 20 52 45 46 45 52 0d 0a 43 6f 6e 74 61 YE, REFER..Conta 01a0 63 74 3a 20 3c 73 69 70 3a 31 30 30 31 40 32 30 ct: ..C 01c0 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 ontent-Type: app 01d0 6c 69 63 61 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f lication/sdp..Co 01e0 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 39 ntent-Length: 29 01f0 31 0d 0a 0d 0a 76 3d 30 0d 0a 6f 3d 72 6f 6f 74 1....v=0..o=root 0200 20 33 30 33 32 20 33 30 33 32 20 49 4e 20 49 50 3032 3032 IN IP 0210 34 20 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 4 209.114.219.69 0220 0d 0a 73 3d 73 65 73 73 69 6f 6e 0d 0a 63 3d 49 ..s=session..c=I 0230 4e 20 49 50 34 20 32 30 39 2e 31 31 34 2e 32 31 N IP4 209.114.21 0240 39 2e 36 39 0d 0a 74 3d 30 20 30 0d 0a 6d 3d 61 9.69..t=0 0..m=a 0250 75 64 69 6f 20 31 30 32 30 34 20 52 54 50 2f 41 udio 10204 RTP/A 0260 56 50 20 30 20 38 20 33 20 31 38 20 31 30 31 0d VP 0 8 3 18 101. 0270 0a 61 3d 72 74 70 6d 61 70 3a 30 20 50 43 4d 55 .a=rtpmap:0 PCMU 0280 2f 38 30 30 30 0d 0a 61 3d 72 74 70 6d 61 70 3a /8000..a=rtpmap: 0290 38 20 50 43 4d 41 2f 38 30 30 30 0d 0a 61 3d 72 8 PCMA/8000..a=r 02a0 74 70 6d 61 70 3a 33 20 47 53 4d 2f 38 30 30 30 tpmap:3 GSM/8000 02b0 0d 0a 61 3d 72 74 70 6d 61 70 3a 31 38 20 47 37 ..a=rtpmap:18 G7 02c0 32 39 2f 38 30 30 30 0d 0a 61 3d 72 74 70 6d 61 29/8000..a=rtpma 02d0 70 3a 31 30 31 20 74 65 6c 65 70 68 6f 6e 65 2d p:101 telephone- 02e0 65 76 65 6e 74 2f 38 30 30 30 0d 0a 61 3d 66 6d event/8000..a=fm 02f0 74 70 3a 31 30 31 20 30 2d 31 36 0d 0a 61 3d 73 tp:101 0-16..a=s 0300 69 6c 65 6e 63 65 53 75 70 70 3a 6f 66 66 20 2d ilenceSupp:off - 0310 20 2d 20 2d 20 2d 0d 0a - - -.. No. Time Source Destination Protocol Info 7 0.390425 209.114.219.90 209.114.219.69 SIP/SDP Status: 200 OK, with session description Frame 7 (892 bytes on wire, 892 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.460733000 Time delta from previous packet: 0.052491000 seconds Time since reference or first frame: 0.390425000 seconds Frame Number: 7 Packet Length: 892 bytes Capture Length: 892 bytes Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:b0:8e:35:44:00 (209.114.219.90) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00) 0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 878 Identification: 0x351c (13596) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x2975 (correct) Source: 209.114.219.90 (209.114.219.90) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060) Source port: 56262 (56262) Destination port: 5060 (5060) Length: 858 Checksum: 0x32df (correct) Session Initiation Protocol Status-Line: SIP/2.0 200 OK Status-Code: 200 Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK63f185c9 From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Date: Wed, 05 Jan 2005 23:34:43 GMT Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 Server: Cisco-SIPGateway/IOS-12.x CSeq: 102 INVITE Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER Allow-Events: telephone-event Contact: Content-Type: application/sdp Content-Length: 263 Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): CiscoSystemsSIP-GW-UserAgent 614 7259 IN IP4 209.114.219.90 Owner Username: CiscoSystemsSIP-GW-UserAgent Session ID: 614 Session Version: 7259 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 209.114.219.90 Session Name (s): SIP Call Connection Information (c): IN IP4 209.114.219.90 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 209.114.219.90 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 17302 RTP/AVP 18 101 Media Type: audio Media Port: 17302 Media Proto: RTP/AVP Media Format: ITU-T G.729 Media Format: 101 Connection Information (c): IN IP4 209.114.219.90 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 209.114.219.90 Media Attribute (a): rtpmap:18 G729/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 18 G729/8000 Media Attribute (a): fmtp:18 annexb=no Media Attribute Fieldname: fmtp Media Attribute Value: 18 annexb=no Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-16 0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh 0010 03 6e 35 1c 00 00 ff 11 29 75 d1 72 db 5a d1 72 .n5.....)u.r.Z.r 0020 db 45 db c6 13 c4 03 5a 32 df 53 49 50 2f 32 2e .E.....Z2.SIP/2. 0030 30 20 32 30 30 20 4f 4b 0d 0a 56 69 61 3a 20 53 0 200 OK..Via: S 0040 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 2e 31 IP/2.0/UDP 209.1 0050 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 3b 62 14.219.69:5060;b 0060 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 36 33 66 ranch=z9hG4bK63f 0070 31 38 35 63 39 0d 0a 46 72 6f 6d 3a 20 22 33 32 185c9..From: "32 0080 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3a 33 13084003" ;tag=as 00b0 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 3c 73 721c22c4..To: ; 00e0 74 61 67 3d 34 44 30 39 39 32 38 30 2d 37 41 0d tag=4D099280-7A. 00f0 0a 44 61 74 65 3a 20 57 65 64 2c 20 30 35 20 4a .Date: Wed, 05 J 0100 61 6e 20 32 30 30 35 20 32 33 3a 33 34 3a 34 33 an 2005 23:34:43 0110 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 44 3a 20 35 GMT..Call-ID: 5 0120 33 37 62 32 66 38 38 32 36 38 61 33 62 66 34 31 37b2f88268a3bf41 0130 63 39 32 61 65 65 39 34 38 38 65 38 35 35 33 40 c92aee9488e8553@ 0140 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 0d 0a 209.114.219.69.. 0150 53 65 72 76 65 72 3a 20 43 69 73 63 6f 2d 53 49 Server: Cisco-SI 0160 50 47 61 74 65 77 61 79 2f 49 4f 53 2d 31 32 2e PGateway/IOS-12. 0170 78 0d 0a 43 53 65 71 3a 20 31 30 32 20 49 4e 56 x..CSeq: 102 INV 0180 49 54 45 0d 0a 41 6c 6c 6f 77 3a 20 49 4e 56 49 ITE..Allow: INVI 0190 54 45 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 59 45 TE, OPTIONS, BYE 01a0 2c 20 43 41 4e 43 45 4c 2c 20 41 43 4b 2c 20 50 , CANCEL, ACK, P 01b0 52 41 43 4b 2c 20 43 4f 4d 45 54 2c 20 52 45 46 RACK, COMET, REF 01c0 45 52 2c 20 53 55 42 53 43 52 49 42 45 2c 20 4e ER, SUBSCRIBE, N 01d0 4f 54 49 46 59 2c 20 49 4e 46 4f 2c 20 55 50 44 OTIFY, INFO, UPD 01e0 41 54 45 2c 20 52 45 47 49 53 54 45 52 0d 0a 41 ATE, REGISTER..A 01f0 6c 6c 6f 77 2d 45 76 65 6e 74 73 3a 20 74 65 6c llow-Events: tel 0200 65 70 68 6f 6e 65 2d 65 76 65 6e 74 0d 0a 43 6f ephone-event..Co 0210 6e 74 61 63 74 3a 20 3c 73 69 70 3a 30 30 33 32 ntact: ..C 0240 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 ontent-Type: app 0250 6c 69 63 61 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f lication/sdp..Co 0260 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 36 ntent-Length: 26 0270 33 0d 0a 0d 0a 76 3d 30 0d 0a 6f 3d 43 69 73 63 3....v=0..o=Cisc 0280 6f 53 79 73 74 65 6d 73 53 49 50 2d 47 57 2d 55 oSystemsSIP-GW-U 0290 73 65 72 41 67 65 6e 74 20 36 31 34 20 37 32 35 serAgent 614 725 02a0 39 20 49 4e 20 49 50 34 20 32 30 39 2e 31 31 34 9 IN IP4 209.114 02b0 2e 32 31 39 2e 39 30 0d 0a 73 3d 53 49 50 20 43 .219.90..s=SIP C 02c0 61 6c 6c 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 all..c=IN IP4 20 02d0 39 2e 31 31 34 2e 32 31 39 2e 39 30 0d 0a 74 3d 9.114.219.90..t= 02e0 30 20 30 0d 0a 6d 3d 61 75 64 69 6f 20 31 37 33 0 0..m=audio 173 02f0 30 32 20 52 54 50 2f 41 56 50 20 31 38 20 31 30 02 RTP/AVP 18 10 0300 31 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 39 2e 1..c=IN IP4 209. 0310 31 31 34 2e 32 31 39 2e 39 30 0d 0a 61 3d 72 74 114.219.90..a=rt 0320 70 6d 61 70 3a 31 38 20 47 37 32 39 2f 38 30 30 pmap:18 G729/800 0330 30 0d 0a 61 3d 66 6d 74 70 3a 31 38 20 61 6e 6e 0..a=fmtp:18 ann 0340 65 78 62 3d 6e 6f 0d 0a 61 3d 72 74 70 6d 61 70 exb=no..a=rtpmap 0350 3a 31 30 31 20 74 65 6c 65 70 68 6f 6e 65 2d 65 :101 telephone-e 0360 76 65 6e 74 2f 38 30 30 30 0d 0a 61 3d 66 6d 74 vent/8000..a=fmt 0370 70 3a 31 30 31 20 30 2d 31 36 0d 0a p:101 0-16.. No. Time Source Destination Protocol Info 8 0.390675 209.114.219.69 209.114.219.90 SIP Request: ACK sip:003214093773@209.114.219.90 Frame 8 (436 bytes on wire, 436 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.460983000 Time delta from previous packet: 0.000250000 seconds Time since reference or first frame: 0.390675000 seconds Frame Number: 8 Packet Length: 436 bytes Capture Length: 436 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00 Destination: 00:b0:8e:35:44:00 (209.114.219.90) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00) 0001 10.. = Differentiated Services Codepoint: Unknown (0x06) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 422 Identification: 0x0aa4 (2724) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xd505 (correct) Source: 209.114.219.69 (209.114.219.69) Destination: 209.114.219.90 (209.114.219.90) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 402 Checksum: 0x5b29 (incorrect, should be 0x0283) Session Initiation Protocol Request-Line: ACK sip:003214093773@209.114.219.90 SIP/2.0 Method: ACK Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK3b36abf0 From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Contact: Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 CSeq: 102 ACK User-Agent: HCC Asterisk PBX Content-Length: 0 0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E. 0010 01 a6 0a a4 40 00 40 11 d5 05 d1 72 db 45 d1 72 ....@.@....r.E.r 0020 db 5a 13 c4 13 c4 01 92 5b 29 41 43 4b 20 73 69 .Z......[)ACK si 0030 70 3a 30 30 33 32 31 34 30 39 33 37 37 33 40 32 p:003214093773@2 0040 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 20 53 49 09.114.219.90 SI 0050 50 2f 32 2e 30 0d 0a 56 69 61 3a 20 53 49 50 2f P/2.0..Via: SIP/ 0060 32 2e 30 2f 55 44 50 20 32 30 39 2e 31 31 34 2e 2.0/UDP 209.114. 0070 32 31 39 2e 36 39 3a 35 30 36 30 3b 62 72 61 6e 219.69:5060;bran 0080 63 68 3d 7a 39 68 47 34 62 4b 33 62 33 36 61 62 ch=z9hG4bK3b36ab 0090 66 30 0d 0a 46 72 6f 6d 3a 20 22 33 32 31 33 30 f0..From: "32130 00a0 38 34 30 30 33 22 20 3c 73 69 70 3a 33 32 31 33 84003" ;tag=as721 00d0 63 32 32 63 34 0d 0a 54 6f 3a 20 3c 73 69 70 3a c22c4..To: ;tag 0100 3d 34 44 30 39 39 32 38 30 2d 37 41 0d 0a 43 6f =4D099280-7A..Co 0110 6e 74 61 63 74 3a 20 3c 73 69 70 3a 33 32 31 33 ntact: ..Call-ID: 0140 20 35 33 37 62 32 66 38 38 32 36 38 61 33 62 66 537b2f88268a3bf 0150 34 31 63 39 32 61 65 65 39 34 38 38 65 38 35 35 41c92aee9488e855 0160 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3@209.114.219.69 0170 0d 0a 43 53 65 71 3a 20 31 30 32 20 41 43 4b 0d ..CSeq: 102 ACK. 0180 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 48 43 43 .User-Agent: HCC 0190 20 41 73 74 65 72 69 73 6b 20 50 42 58 0d 0a 43 Asterisk PBX..C 01a0 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 ontent-Length: 0 01b0 0d 0a 0d 0a .... No. Time Source Destination Protocol Info 9 0.390992 209.114.219.69 209.114.219.98 SIP/SDP Status: 200 OK, with session description Frame 9 (778 bytes on wire, 778 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.461300000 Time delta from previous packet: 0.000317000 seconds Time since reference or first frame: 0.390992000 seconds Frame Number: 9 Packet Length: 778 bytes Capture Length: 778 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:48:54:6f:8a:d2 Destination: 00:48:54:6f:8a:d2 (209.114.219.98) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.98 (209.114.219.98) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00) 0001 10.. = Differentiated Services Codepoint: Unknown (0x06) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 764 Identification: 0x0aa5 (2725) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xd3a6 (correct) Source: 209.114.219.69 (209.114.219.69) Destination: 209.114.219.98 (209.114.219.98) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 744 Checksum: 0x5c87 (incorrect, should be 0x7029) Session Initiation Protocol Status-Line: SIP/2.0 200 OK Status-Code: 200 Resent Packet: False Message Header Via: SIP/2.0/UDP 192.168.200.169:5060;received=209.114.219.98;rport=5060 From: 3213084003 ;tag=3518047997 SIP Display info: 3213084003 SIP from address: sip:3213084003@209.114.219.69 SIP tag: 3518047997 To: ;tag=as6a4d6dad SIP to address: sip:1001@209.114.219.69 SIP tag: as6a4d6dad Call-ID: 1314847947@192.168.200.169 CSeq: 1 INVITE User-Agent: HCC Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER Contact: Content-Type: application/sdp Content-Length: 291 Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): root 3032 3033 IN IP4 209.114.219.69 Owner Username: root Session ID: 3032 Session Version: 3033 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 209.114.219.69 Session Name (s): session Connection Information (c): IN IP4 209.114.219.69 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 209.114.219.69 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 10204 RTP/AVP 0 8 3 18 101 Media Type: audio Media Port: 10204 Media Proto: RTP/AVP Media Format: ITU-T G.711 PCMU Media Format: ITU-T G.711 PCMA Media Format: GSM 06.10 Media Format: ITU-T G.729 Media Format: 101 Media Attribute (a): rtpmap:0 PCMU/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 0 PCMU/8000 Media Attribute (a): rtpmap:8 PCMA/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 8 PCMA/8000 Media Attribute (a): rtpmap:3 GSM/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 3 GSM/8000 Media Attribute (a): rtpmap:18 G729/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 18 G729/8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-16 Media Attribute (a): silenceSupp:off - - - - Media Attribute Fieldname: silenceSupp Media Attribute Value: off - - - - 0000 00 48 54 6f 8a d2 00 11 43 58 7a 18 08 00 45 18 .HTo....CXz...E. 0010 02 fc 0a a5 40 00 40 11 d3 a6 d1 72 db 45 d1 72 ....@.@....r.E.r 0020 db 62 13 c4 13 c4 02 e8 5c 87 53 49 50 2f 32 2e .b......\.SIP/2. 0030 30 20 32 30 30 20 4f 4b 0d 0a 56 69 61 3a 20 53 0 200 OK..Via: S 0040 49 50 2f 32 2e 30 2f 55 44 50 20 31 39 32 2e 31 IP/2.0/UDP 192.1 0050 36 38 2e 32 30 30 2e 31 36 39 3a 35 30 36 30 3b 68.200.169:5060; 0060 72 65 63 65 69 76 65 64 3d 32 30 39 2e 31 31 34 received=209.114 0070 2e 32 31 39 2e 39 38 3b 72 70 6f 72 74 3d 35 30 .219.98;rport=50 0080 36 30 0d 0a 46 72 6f 6d 3a 20 33 32 31 33 30 38 60..From: 321308 0090 34 30 30 33 20 3c 73 69 70 3a 33 32 31 33 30 38 4003 ; 00c0 74 61 67 3d 33 35 31 38 30 34 37 39 39 37 0d 0a tag=3518047997.. 00d0 54 6f 3a 20 3c 73 69 70 3a 31 30 30 31 40 32 30 To: ;tag=as6 0100 61 34 64 36 64 61 64 0d 0a 43 61 6c 6c 2d 49 44 a4d6dad..Call-ID 0110 3a 20 31 33 31 34 38 34 37 39 34 37 40 31 39 32 : 1314847947@192 0120 2e 31 36 38 2e 32 30 30 2e 31 36 39 0d 0a 43 53 .168.200.169..CS 0130 65 71 3a 20 31 20 49 4e 56 49 54 45 0d 0a 55 73 eq: 1 INVITE..Us 0140 65 72 2d 41 67 65 6e 74 3a 20 48 43 43 20 41 73 er-Agent: HCC As 0150 74 65 72 69 73 6b 20 50 42 58 0d 0a 41 6c 6c 6f terisk PBX..Allo 0160 77 3a 20 49 4e 56 49 54 45 2c 20 41 43 4b 2c 20 w: INVITE, ACK, 0170 43 41 4e 43 45 4c 2c 20 4f 50 54 49 4f 4e 53 2c CANCEL, OPTIONS, 0180 20 42 59 45 2c 20 52 45 46 45 52 0d 0a 43 6f 6e BYE, REFER..Con 0190 74 61 63 74 3a 20 3c 73 69 70 3a 31 30 30 31 40 tact: . 01b0 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 .Content-Type: a 01c0 70 70 6c 69 63 61 74 69 6f 6e 2f 73 64 70 0d 0a pplication/sdp.. 01d0 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 Content-Length: 01e0 32 39 31 0d 0a 0d 0a 76 3d 30 0d 0a 6f 3d 72 6f 291....v=0..o=ro 01f0 6f 74 20 33 30 33 32 20 33 30 33 33 20 49 4e 20 ot 3032 3033 IN 0200 49 50 34 20 32 30 39 2e 31 31 34 2e 32 31 39 2e IP4 209.114.219. 0210 36 39 0d 0a 73 3d 73 65 73 73 69 6f 6e 0d 0a 63 69..s=session..c 0220 3d 49 4e 20 49 50 34 20 32 30 39 2e 31 31 34 2e =IN IP4 209.114. 0230 32 31 39 2e 36 39 0d 0a 74 3d 30 20 30 0d 0a 6d 219.69..t=0 0..m 0240 3d 61 75 64 69 6f 20 31 30 32 30 34 20 52 54 50 =audio 10204 RTP 0250 2f 41 56 50 20 30 20 38 20 33 20 31 38 20 31 30 /AVP 0 8 3 18 10 0260 31 0d 0a 61 3d 72 74 70 6d 61 70 3a 30 20 50 43 1..a=rtpmap:0 PC 0270 4d 55 2f 38 30 30 30 0d 0a 61 3d 72 74 70 6d 61 MU/8000..a=rtpma 0280 70 3a 38 20 50 43 4d 41 2f 38 30 30 30 0d 0a 61 p:8 PCMA/8000..a 0290 3d 72 74 70 6d 61 70 3a 33 20 47 53 4d 2f 38 30 =rtpmap:3 GSM/80 02a0 30 30 0d 0a 61 3d 72 74 70 6d 61 70 3a 31 38 20 00..a=rtpmap:18 02b0 47 37 32 39 2f 38 30 30 30 0d 0a 61 3d 72 74 70 G729/8000..a=rtp 02c0 6d 61 70 3a 31 30 31 20 74 65 6c 65 70 68 6f 6e map:101 telephon 02d0 65 2d 65 76 65 6e 74 2f 38 30 30 30 0d 0a 61 3d e-event/8000..a= 02e0 66 6d 74 70 3a 31 30 31 20 30 2d 31 36 0d 0a 61 fmtp:101 0-16..a 02f0 3d 73 69 6c 65 6e 63 65 53 75 70 70 3a 6f 66 66 =silenceSupp:off 0300 20 2d 20 2d 20 2d 20 2d 0d 0a - - - -.. No. Time Source Destination Protocol Info 10 0.391128 209.114.219.69 209.114.219.90 SIP/SDP Request: INVITE sip:003214093773@209.114.219.90:5060, with session description Frame 10 (799 bytes on wire, 799 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.461436000 Time delta from previous packet: 0.000136000 seconds Time since reference or first frame: 0.391128000 seconds Frame Number: 10 Packet Length: 799 bytes Capture Length: 799 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00 Destination: 00:b0:8e:35:44:00 (209.114.219.90) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00) 0001 10.. = Differentiated Services Codepoint: Unknown (0x06) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 785 Identification: 0x0aa6 (2726) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xd398 (correct) Source: 209.114.219.69 (209.114.219.69) Destination: 209.114.219.90 (209.114.219.90) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 765 Checksum: 0x5c94 (incorrect, should be 0x2d35) Session Initiation Protocol Request-Line: INVITE sip:003214093773@209.114.219.90:5060 SIP/2.0 Method: INVITE Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK67ecdc04 From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Contact: Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 CSeq: 103 INVITE User-Agent: HCC Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER Content-Type: application/sdp Content-Length: 270 Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): root 3032 3033 IN IP4 192.168.200.169 Owner Username: root Session ID: 3032 Session Version: 3033 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 192.168.200.169 Session Name (s): session Connection Information (c): IN IP4 192.168.200.169 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 192.168.200.169 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 16384 RTP/AVP 0 8 18 101 Media Type: audio Media Port: 16384 Media Proto: RTP/AVP Media Format: ITU-T G.711 PCMU Media Format: ITU-T G.711 PCMA Media Format: ITU-T G.729 Media Format: 101 Media Attribute (a): rtpmap:0 PCMU/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 0 PCMU/8000 Media Attribute (a): rtpmap:8 PCMA/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 8 PCMA/8000 Media Attribute (a): rtpmap:18 G729/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 18 G729/8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-16 Media Attribute (a): silenceSupp:off - - - - Media Attribute Fieldname: silenceSupp Media Attribute Value: off - - - - 0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E. 0010 03 11 0a a6 40 00 40 11 d3 98 d1 72 db 45 d1 72 ....@.@....r.E.r 0020 db 5a 13 c4 13 c4 02 fd 5c 94 49 4e 56 49 54 45 .Z......\.INVITE 0030 20 73 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 sip:00321409377 0040 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3@209.114.219.90 0050 3a 35 30 36 30 20 53 49 50 2f 32 2e 30 0d 0a 56 :5060 SIP/2.0..V 0060 69 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 ia: SIP/2.0/UDP 0070 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 209.114.219.69:5 0080 30 36 30 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 060;branch=z9hG4 0090 62 4b 36 37 65 63 64 63 30 34 0d 0a 46 72 6f 6d bK67ecdc04..From 00a0 3a 20 22 33 32 31 33 30 38 34 30 30 33 22 20 3c : "3213084003" < 00b0 73 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 sip:3213084003@2 00c0 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 3b 74 09.114.219.69>;t 00d0 61 67 3d 61 73 37 32 31 63 32 32 63 34 0d 0a 54 ag=as721c22c4..T 00e0 6f 3a 20 3c 73 69 70 3a 30 30 33 32 31 34 30 39 o: ;tag=4D09928 0110 30 2d 37 41 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 0-7A..Contact: < 0120 73 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 sip:3213084003@2 0130 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 0d 0a 09.114.219.69>.. 0140 43 61 6c 6c 2d 49 44 3a 20 35 33 37 62 32 66 38 Call-ID: 537b2f8 0150 38 32 36 38 61 33 62 66 34 31 63 39 32 61 65 65 8268a3bf41c92aee 0160 39 34 38 38 65 38 35 35 33 40 32 30 39 2e 31 31 9488e8553@209.11 0170 34 2e 32 31 39 2e 36 39 0d 0a 43 53 65 71 3a 20 4.219.69..CSeq: 0180 31 30 33 20 49 4e 56 49 54 45 0d 0a 55 73 65 72 103 INVITE..User 0190 2d 41 67 65 6e 74 3a 20 48 43 43 20 41 73 74 65 -Agent: HCC Aste 01a0 72 69 73 6b 20 50 42 58 0d 0a 41 6c 6c 6f 77 3a risk PBX..Allow: 01b0 20 49 4e 56 49 54 45 2c 20 41 43 4b 2c 20 43 41 INVITE, ACK, CA 01c0 4e 43 45 4c 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 NCEL, OPTIONS, B 01d0 59 45 2c 20 52 45 46 45 52 0d 0a 43 6f 6e 74 65 YE, REFER..Conte 01e0 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 nt-Type: applica 01f0 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f 6e 74 65 6e tion/sdp..Conten 0200 74 2d 4c 65 6e 67 74 68 3a 20 32 37 30 0d 0a 0d t-Length: 270... 0210 0a 76 3d 30 0d 0a 6f 3d 72 6f 6f 74 20 33 30 33 .v=0..o=root 303 0220 32 20 33 30 33 33 20 49 4e 20 49 50 34 20 31 39 2 3033 IN IP4 19 0230 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 0d 0a 73 2.168.200.169..s 0240 3d 73 65 73 73 69 6f 6e 0d 0a 63 3d 49 4e 20 49 =session..c=IN I 0250 50 34 20 31 39 32 2e 31 36 38 2e 32 30 30 2e 31 P4 192.168.200.1 0260 36 39 0d 0a 74 3d 30 20 30 0d 0a 6d 3d 61 75 64 69..t=0 0..m=aud 0270 69 6f 20 31 36 33 38 34 20 52 54 50 2f 41 56 50 io 16384 RTP/AVP 0280 20 30 20 38 20 31 38 20 31 30 31 0d 0a 61 3d 72 0 8 18 101..a=r 0290 74 70 6d 61 70 3a 30 20 50 43 4d 55 2f 38 30 30 tpmap:0 PCMU/800 02a0 30 0d 0a 61 3d 72 74 70 6d 61 70 3a 38 20 50 43 0..a=rtpmap:8 PC 02b0 4d 41 2f 38 30 30 30 0d 0a 61 3d 72 74 70 6d 61 MA/8000..a=rtpma 02c0 70 3a 31 38 20 47 37 32 39 2f 38 30 30 30 0d 0a p:18 G729/8000.. 02d0 61 3d 72 74 70 6d 61 70 3a 31 30 31 20 74 65 6c a=rtpmap:101 tel 02e0 65 70 68 6f 6e 65 2d 65 76 65 6e 74 2f 38 30 30 ephone-event/800 02f0 30 0d 0a 61 3d 66 6d 74 70 3a 31 30 31 20 30 2d 0..a=fmtp:101 0- 0300 31 36 0d 0a 61 3d 73 69 6c 65 6e 63 65 53 75 70 16..a=silenceSup 0310 70 3a 6f 66 66 20 2d 20 2d 20 2d 20 2d 0d 0a p:off - - - -.. No. Time Source Destination Protocol Info 11 0.393772 209.114.219.98 209.114.219.69 RTP Payload type=ITU-T G.729, SSRC=3448847109, Seq=437, Time=70960 Frame 11 (74 bytes on wire, 74 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.464080000 Time delta from previous packet: 0.002644000 seconds Time since reference or first frame: 0.393772000 seconds Frame Number: 11 Packet Length: 74 bytes Capture Length: 74 bytes Ethernet II, Src: 00:48:54:6f:8a:d2, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:48:54:6f:8a:d2 (209.114.219.98) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.98 (209.114.219.98), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x01bb (443) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (0x11) Header checksum: 0x6668 (correct) Source: 209.114.219.98 (209.114.219.98) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 16384 (16384), Dst Port: 10204 (10204) Source port: 16384 (16384) Destination port: 10204 (10204) Length: 40 Checksum: 0x3581 (correct) Real-Time Transport Protocol Stream setup by SDP (frame 9) Setup frame: 9 Setup Method: SDP 10.. .... = Version: RFC 1889 Version (2) ..0. .... = Padding: False ...0 .... = Extension: False .... 0000 = Contributing source identifiers count: 0 0... .... = Marker: False .001 0010 = Payload type: ITU-T G.729 (18) Sequence number: 437 Timestamp: 70960 Synchronization Source identifier: 3448847109 Payload: 10DFC2406733CB93425E787AEA810DC2... 0000 00 11 43 58 7a 18 00 48 54 6f 8a d2 08 00 45 00 ..CXz..HTo....E. 0010 00 3c 01 bb 00 00 f9 11 66 68 d1 72 db 62 d1 72 .<......fh.r.b.r 0020 db 45 40 00 27 dc 00 28 35 81 80 12 01 b5 00 01 .E@.'..(5....... 0030 15 30 cd 91 3b 05 10 df c2 40 67 33 cb 93 42 5e .0..;....@g3..B^ 0040 78 7a ea 81 0d c2 17 c7 98 58 xz.......X No. Time Source Destination Protocol Info 12 0.393978 209.114.219.69 209.114.219.90 RTP Payload type=ITU-T G.729, SSRC=444875168, Seq=26154, Time=80 Frame 12 (74 bytes on wire, 74 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.464286000 Time delta from previous packet: 0.000206000 seconds Time since reference or first frame: 0.393978000 seconds Frame Number: 12 Packet Length: 74 bytes Capture Length: 74 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00 Destination: 00:b0:8e:35:44:00 (209.114.219.90) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00) 0001 10.. = Differentiated Services Codepoint: Unknown (0x06) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xe113 (correct) Source: 209.114.219.69 (209.114.219.69) Destination: 209.114.219.90 (209.114.219.90) User Datagram Protocol, Src Port: 10770 (10770), Dst Port: 17302 (17302) Source port: 10770 (10770) Destination port: 17302 (17302) Length: 40 Checksum: 0x0000 (none) Real-Time Transport Protocol Stream setup by SDP (frame 56) Setup frame: 56 Setup Method: SDP 10.. .... = Version: RFC 1889 Version (2) ..0. .... = Padding: False ...0 .... = Extension: False .... 0000 = Contributing source identifiers count: 0 0... .... = Marker: False .001 0010 = Payload type: ITU-T G.729 (18) Sequence number: 26154 Timestamp: 80 Synchronization Source identifier: 444875168 Payload: 10DFC2406733CB93425E787AEA810DC2... 0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E. 0010 00 3c 00 00 40 00 40 11 e1 13 d1 72 db 45 d1 72 .<..@.@....r.E.r 0020 db 5a 2a 12 43 96 00 28 00 00 80 12 66 2a 00 00 .Z*.C..(....f*.. 0030 00 50 1a 84 41 a0 10 df c2 40 67 33 cb 93 42 5e .P..A....@g3..B^ 0040 78 7a ea 81 0d c2 17 c7 98 58 xz.......X No. Time Source Destination Protocol Info 13 0.395849 209.114.219.90 209.114.219.69 RTCP Receiver Report Frame 13 (90 bytes on wire, 90 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.466157000 Time delta from previous packet: 0.001871000 seconds Time since reference or first frame: 0.395849000 seconds Frame Number: 13 Packet Length: 90 bytes Capture Length: 90 bytes Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:b0:8e:35:44:00 (209.114.219.90) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00) 0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 76 Identification: 0x0000 (0) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x61b3 (correct) Source: 209.114.219.90 (209.114.219.90) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 17303 (17303), Dst Port: 10771 (10771) Source port: 17303 (17303) Destination port: 10771 (10771) Length: 56 Checksum: 0xd582 (correct) Real-time Transport Control Protocol Stream setup by SDP (frame 54) Setup frame: 54 Setup Method: SDP 10.. .... = Version: RFC 1889 Version (2) ..0. .... = Padding: False ...0 0000 = Reception report count: 0 Packet type: Receiver Report (201) Length: 1 Sender SSRC: 387767130 Real-time Transport Control Protocol Stream setup by SDP (frame 54) Setup frame: 54 Setup Method: SDP 10.. .... = Version: RFC 1889 Version (2) ..0. .... = Padding: False ...0 0001 = Source count: 1 Packet type: Source description (202) Length: 7 Chunk 1, SSRC/CSRC 387767130 Identifier: 387767130 SDES items Type: CNAME (user and domain) (1) Length: 20 Text: 0.0.0@209.114.219.90 Real-time Transport Control Protocol Stream setup by SDP (frame 54) Setup frame: 54 Setup Method: SDP 10.. .... = Version: RFC 1889 Version (2) ..0. .... = Padding: False ...0 0001 = Source count: 1 Packet type: Goodbye (203) Length: 1 Identifier: 387767130 0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh 0010 00 4c 00 00 00 00 ff 11 61 b3 d1 72 db 5a d1 72 .L......a..r.Z.r 0020 db 45 43 97 2a 13 00 38 d5 82 80 c9 00 01 17 1c .EC.*..8........ 0030 db 5a 81 ca 00 07 17 1c db 5a 01 14 30 2e 30 2e .Z.......Z..0.0. 0040 30 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 0@209.114.219.90 0050 00 00 81 cb 00 01 17 1c db 5a .........Z No. Time Source Destination Protocol Info 14 0.396244 209.114.219.90 209.114.219.69 SIP Status: 100 Trying Frame 14 (445 bytes on wire, 445 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.466552000 Time delta from previous packet: 0.000395000 seconds Time since reference or first frame: 0.396244000 seconds Frame Number: 14 Packet Length: 445 bytes Capture Length: 445 bytes Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:b0:8e:35:44:00 (209.114.219.90) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00) 0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 431 Identification: 0x351d (13597) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x2b33 (correct) Source: 209.114.219.90 (209.114.219.90) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060) Source port: 56262 (56262) Destination port: 5060 (5060) Length: 411 Checksum: 0xe51c (correct) Session Initiation Protocol Status-Line: SIP/2.0 100 Trying Status-Code: 100 Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK67ecdc04 From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Date: Wed, 05 Jan 2005 23:34:43 GMT Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 Server: Cisco-SIPGateway/IOS-12.x CSeq: 103 INVITE Allow-Events: telephone-event Content-Length: 0 0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh 0010 01 af 35 1d 00 00 ff 11 2b 33 d1 72 db 5a d1 72 ..5.....+3.r.Z.r 0020 db 45 db c6 13 c4 01 9b e5 1c 53 49 50 2f 32 2e .E........SIP/2. 0030 30 20 31 30 30 20 54 72 79 69 6e 67 0d 0a 56 69 0 100 Trying..Vi 0040 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 a: SIP/2.0/UDP 2 0050 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 09.114.219.69:50 0060 36 30 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 60;branch=z9hG4b 0070 4b 36 37 65 63 64 63 30 34 0d 0a 46 72 6f 6d 3a K67ecdc04..From: 0080 20 22 33 32 31 33 30 38 34 30 30 33 22 20 3c 73 "3213084003" ;ta 00b0 67 3d 61 73 37 32 31 63 32 32 63 34 0d 0a 54 6f g=as721c22c4..To 00c0 3a 20 3c 73 69 70 3a 30 30 33 32 31 34 30 39 33 : ;tag=4D099280 00f0 2d 37 41 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 -7A..Date: Wed, 0100 30 35 20 4a 61 6e 20 32 30 30 35 20 32 33 3a 33 05 Jan 2005 23:3 0110 34 3a 34 33 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 4:43 GMT..Call-I 0120 44 3a 20 35 33 37 62 32 66 38 38 32 36 38 61 33 D: 537b2f88268a3 0130 62 66 34 31 63 39 32 61 65 65 39 34 38 38 65 38 bf41c92aee9488e8 0140 35 35 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 553@209.114.219. 0150 36 39 0d 0a 53 65 72 76 65 72 3a 20 43 69 73 63 69..Server: Cisc 0160 6f 2d 53 49 50 47 61 74 65 77 61 79 2f 49 4f 53 o-SIPGateway/IOS 0170 2d 31 32 2e 78 0d 0a 43 53 65 71 3a 20 31 30 33 -12.x..CSeq: 103 0180 20 49 4e 56 49 54 45 0d 0a 41 6c 6c 6f 77 2d 45 INVITE..Allow-E 0190 76 65 6e 74 73 3a 20 74 65 6c 65 70 68 6f 6e 65 vents: telephone 01a0 2d 65 76 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d -event..Content- 01b0 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Length: 0.... No. Time Source Destination Protocol Info 15 0.397469 209.114.219.90 209.114.219.69 SIP/SDP Status: 200 OK, with session description Frame 15 (892 bytes on wire, 892 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.467777000 Time delta from previous packet: 0.001225000 seconds Time since reference or first frame: 0.397469000 seconds Frame Number: 15 Packet Length: 892 bytes Capture Length: 892 bytes Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:b0:8e:35:44:00 (209.114.219.90) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00) 0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 878 Identification: 0x351e (13598) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x2973 (correct) Source: 209.114.219.90 (209.114.219.90) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060) Source port: 56262 (56262) Destination port: 5060 (5060) Length: 858 Checksum: 0xdce4 (correct) Session Initiation Protocol Status-Line: SIP/2.0 200 OK Status-Code: 200 Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK67ecdc04 From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Date: Wed, 05 Jan 2005 23:34:43 GMT Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 Server: Cisco-SIPGateway/IOS-12.x CSeq: 103 INVITE Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER Allow-Events: telephone-event Contact: Content-Type: application/sdp Content-Length: 263 Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): CiscoSystemsSIP-GW-UserAgent 614 7260 IN IP4 209.114.219.90 Owner Username: CiscoSystemsSIP-GW-UserAgent Session ID: 614 Session Version: 7260 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 209.114.219.90 Session Name (s): SIP Call Connection Information (c): IN IP4 209.114.219.90 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 209.114.219.90 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 17302 RTP/AVP 18 101 Media Type: audio Media Port: 17302 Media Proto: RTP/AVP Media Format: ITU-T G.729 Media Format: 101 Connection Information (c): IN IP4 209.114.219.90 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 209.114.219.90 Media Attribute (a): rtpmap:18 G729/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 18 G729/8000 Media Attribute (a): fmtp:18 annexb=no Media Attribute Fieldname: fmtp Media Attribute Value: 18 annexb=no Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-16 0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh 0010 03 6e 35 1e 00 00 ff 11 29 73 d1 72 db 5a d1 72 .n5.....)s.r.Z.r 0020 db 45 db c6 13 c4 03 5a dc e4 53 49 50 2f 32 2e .E.....Z..SIP/2. 0030 30 20 32 30 30 20 4f 4b 0d 0a 56 69 61 3a 20 53 0 200 OK..Via: S 0040 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 2e 31 IP/2.0/UDP 209.1 0050 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 3b 62 14.219.69:5060;b 0060 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 36 37 65 ranch=z9hG4bK67e 0070 63 64 63 30 34 0d 0a 46 72 6f 6d 3a 20 22 33 32 cdc04..From: "32 0080 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3a 33 13084003" ;tag=as 00b0 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 3c 73 721c22c4..To: ; 00e0 74 61 67 3d 34 44 30 39 39 32 38 30 2d 37 41 0d tag=4D099280-7A. 00f0 0a 44 61 74 65 3a 20 57 65 64 2c 20 30 35 20 4a .Date: Wed, 05 J 0100 61 6e 20 32 30 30 35 20 32 33 3a 33 34 3a 34 33 an 2005 23:34:43 0110 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 44 3a 20 35 GMT..Call-ID: 5 0120 33 37 62 32 66 38 38 32 36 38 61 33 62 66 34 31 37b2f88268a3bf41 0130 63 39 32 61 65 65 39 34 38 38 65 38 35 35 33 40 c92aee9488e8553@ 0140 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 0d 0a 209.114.219.69.. 0150 53 65 72 76 65 72 3a 20 43 69 73 63 6f 2d 53 49 Server: Cisco-SI 0160 50 47 61 74 65 77 61 79 2f 49 4f 53 2d 31 32 2e PGateway/IOS-12. 0170 78 0d 0a 43 53 65 71 3a 20 31 30 33 20 49 4e 56 x..CSeq: 103 INV 0180 49 54 45 0d 0a 41 6c 6c 6f 77 3a 20 49 4e 56 49 ITE..Allow: INVI 0190 54 45 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 59 45 TE, OPTIONS, BYE 01a0 2c 20 43 41 4e 43 45 4c 2c 20 41 43 4b 2c 20 50 , CANCEL, ACK, P 01b0 52 41 43 4b 2c 20 43 4f 4d 45 54 2c 20 52 45 46 RACK, COMET, REF 01c0 45 52 2c 20 53 55 42 53 43 52 49 42 45 2c 20 4e ER, SUBSCRIBE, N 01d0 4f 54 49 46 59 2c 20 49 4e 46 4f 2c 20 55 50 44 OTIFY, INFO, UPD 01e0 41 54 45 2c 20 52 45 47 49 53 54 45 52 0d 0a 41 ATE, REGISTER..A 01f0 6c 6c 6f 77 2d 45 76 65 6e 74 73 3a 20 74 65 6c llow-Events: tel 0200 65 70 68 6f 6e 65 2d 65 76 65 6e 74 0d 0a 43 6f ephone-event..Co 0210 6e 74 61 63 74 3a 20 3c 73 69 70 3a 30 30 33 32 ntact: ..C 0240 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 ontent-Type: app 0250 6c 69 63 61 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f lication/sdp..Co 0260 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 36 ntent-Length: 26 0270 33 0d 0a 0d 0a 76 3d 30 0d 0a 6f 3d 43 69 73 63 3....v=0..o=Cisc 0280 6f 53 79 73 74 65 6d 73 53 49 50 2d 47 57 2d 55 oSystemsSIP-GW-U 0290 73 65 72 41 67 65 6e 74 20 36 31 34 20 37 32 36 serAgent 614 726 02a0 30 20 49 4e 20 49 50 34 20 32 30 39 2e 31 31 34 0 IN IP4 209.114 02b0 2e 32 31 39 2e 39 30 0d 0a 73 3d 53 49 50 20 43 .219.90..s=SIP C 02c0 61 6c 6c 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 all..c=IN IP4 20 02d0 39 2e 31 31 34 2e 32 31 39 2e 39 30 0d 0a 74 3d 9.114.219.90..t= 02e0 30 20 30 0d 0a 6d 3d 61 75 64 69 6f 20 31 37 33 0 0..m=audio 173 02f0 30 32 20 52 54 50 2f 41 56 50 20 31 38 20 31 30 02 RTP/AVP 18 10 0300 31 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 39 2e 1..c=IN IP4 209. 0310 31 31 34 2e 32 31 39 2e 39 30 0d 0a 61 3d 72 74 114.219.90..a=rt 0320 70 6d 61 70 3a 31 38 20 47 37 32 39 2f 38 30 30 pmap:18 G729/800 0330 30 0d 0a 61 3d 66 6d 74 70 3a 31 38 20 61 6e 6e 0..a=fmtp:18 ann 0340 65 78 62 3d 6e 6f 0d 0a 61 3d 72 74 70 6d 61 70 exb=no..a=rtpmap 0350 3a 31 30 31 20 74 65 6c 65 70 68 6f 6e 65 2d 65 :101 telephone-e 0360 76 65 6e 74 2f 38 30 30 30 0d 0a 61 3d 66 6d 74 vent/8000..a=fmt 0370 70 3a 31 30 31 20 30 2d 31 36 0d 0a p:101 0-16.. No. Time Source Destination Protocol Info 16 0.397678 209.114.219.69 209.114.219.90 SIP Request: ACK sip:003214093773@209.114.219.90:5060 Frame 16 (441 bytes on wire, 441 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.467986000 Time delta from previous packet: 0.000209000 seconds Time since reference or first frame: 0.397678000 seconds Frame Number: 16 Packet Length: 441 bytes Capture Length: 441 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00 Destination: 00:b0:8e:35:44:00 (209.114.219.90) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00) 0001 10.. = Differentiated Services Codepoint: Unknown (0x06) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 427 Identification: 0x0aa7 (2727) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xd4fd (correct) Source: 209.114.219.69 (209.114.219.69) Destination: 209.114.219.90 (209.114.219.90) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 407 Checksum: 0x5b2e (incorrect, should be 0x8611) Session Initiation Protocol Request-Line: ACK sip:003214093773@209.114.219.90:5060 SIP/2.0 Method: ACK Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK6519fbb5 From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Contact: Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 CSeq: 103 ACK User-Agent: HCC Asterisk PBX Content-Length: 0 0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E. 0010 01 ab 0a a7 40 00 40 11 d4 fd d1 72 db 45 d1 72 ....@.@....r.E.r 0020 db 5a 13 c4 13 c4 01 97 5b 2e 41 43 4b 20 73 69 .Z......[.ACK si 0030 70 3a 30 30 33 32 31 34 30 39 33 37 37 33 40 32 p:003214093773@2 0040 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3a 35 30 09.114.219.90:50 0050 36 30 20 53 49 50 2f 32 2e 30 0d 0a 56 69 61 3a 60 SIP/2.0..Via: 0060 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 SIP/2.0/UDP 209 0070 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 .114.219.69:5060 0080 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 36 ;branch=z9hG4bK6 0090 35 31 39 66 62 62 35 0d 0a 46 72 6f 6d 3a 20 22 519fbb5..From: " 00a0 33 32 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3213084003" ;tag= 00d0 61 73 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 as721c22c4..To: 00e0 3c 73 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 ;tag=4D099280-7 0110 41 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 73 69 70 A..Contact: ..Cal 0140 6c 2d 49 44 3a 20 35 33 37 62 32 66 38 38 32 36 l-ID: 537b2f8826 0150 38 61 33 62 66 34 31 63 39 32 61 65 65 39 34 38 8a3bf41c92aee948 0160 38 65 38 35 35 33 40 32 30 39 2e 31 31 34 2e 32 8e8553@209.114.2 0170 31 39 2e 36 39 0d 0a 43 53 65 71 3a 20 31 30 33 19.69..CSeq: 103 0180 20 41 43 4b 0d 0a 55 73 65 72 2d 41 67 65 6e 74 ACK..User-Agent 0190 3a 20 48 43 43 20 41 73 74 65 72 69 73 6b 20 50 : HCC Asterisk P 01a0 42 58 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 BX..Content-Leng 01b0 74 68 3a 20 30 0d 0a 0d 0a th: 0.... No. Time Source Destination Protocol Info 17 0.397768 209.114.219.69 209.114.219.90 SIP/SDP Request: INVITE sip:003214093773@209.114.219.90:5060, with session description Frame 17 (797 bytes on wire, 797 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.468076000 Time delta from previous packet: 0.000090000 seconds Time since reference or first frame: 0.397768000 seconds Frame Number: 17 Packet Length: 797 bytes Capture Length: 797 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00 Destination: 00:b0:8e:35:44:00 (209.114.219.90) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00) 0001 10.. = Differentiated Services Codepoint: Unknown (0x06) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 783 Identification: 0x0aa8 (2728) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xd398 (correct) Source: 209.114.219.69 (209.114.219.69) Destination: 209.114.219.90 (209.114.219.90) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 763 Checksum: 0x5c92 (incorrect, should be 0xe82f) Session Initiation Protocol Request-Line: INVITE sip:003214093773@209.114.219.90:5060 SIP/2.0 Method: INVITE Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK4b5867d0 From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Contact: Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 CSeq: 104 INVITE User-Agent: HCC Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER Content-Type: application/sdp Content-Length: 268 Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): root 3032 3034 IN IP4 209.114.219.98 Owner Username: root Session ID: 3032 Session Version: 3034 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 209.114.219.98 Session Name (s): session Connection Information (c): IN IP4 209.114.219.98 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 209.114.219.98 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 16384 RTP/AVP 0 8 18 101 Media Type: audio Media Port: 16384 Media Proto: RTP/AVP Media Format: ITU-T G.711 PCMU Media Format: ITU-T G.711 PCMA Media Format: ITU-T G.729 Media Format: 101 Media Attribute (a): rtpmap:0 PCMU/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 0 PCMU/8000 Media Attribute (a): rtpmap:8 PCMA/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 8 PCMA/8000 Media Attribute (a): rtpmap:18 G729/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 18 G729/8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-16 Media Attribute (a): silenceSupp:off - - - - Media Attribute Fieldname: silenceSupp Media Attribute Value: off - - - - 0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E. 0010 03 0f 0a a8 40 00 40 11 d3 98 d1 72 db 45 d1 72 ....@.@....r.E.r 0020 db 5a 13 c4 13 c4 02 fb 5c 92 49 4e 56 49 54 45 .Z......\.INVITE 0030 20 73 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 sip:00321409377 0040 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3@209.114.219.90 0050 3a 35 30 36 30 20 53 49 50 2f 32 2e 30 0d 0a 56 :5060 SIP/2.0..V 0060 69 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 ia: SIP/2.0/UDP 0070 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 209.114.219.69:5 0080 30 36 30 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 060;branch=z9hG4 0090 62 4b 34 62 35 38 36 37 64 30 0d 0a 46 72 6f 6d bK4b5867d0..From 00a0 3a 20 22 33 32 31 33 30 38 34 30 30 33 22 20 3c : "3213084003" < 00b0 73 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 sip:3213084003@2 00c0 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 3b 74 09.114.219.69>;t 00d0 61 67 3d 61 73 37 32 31 63 32 32 63 34 0d 0a 54 ag=as721c22c4..T 00e0 6f 3a 20 3c 73 69 70 3a 30 30 33 32 31 34 30 39 o: ;tag=4D09928 0110 30 2d 37 41 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 0-7A..Contact: < 0120 73 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 sip:3213084003@2 0130 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 0d 0a 09.114.219.69>.. 0140 43 61 6c 6c 2d 49 44 3a 20 35 33 37 62 32 66 38 Call-ID: 537b2f8 0150 38 32 36 38 61 33 62 66 34 31 63 39 32 61 65 65 8268a3bf41c92aee 0160 39 34 38 38 65 38 35 35 33 40 32 30 39 2e 31 31 9488e8553@209.11 0170 34 2e 32 31 39 2e 36 39 0d 0a 43 53 65 71 3a 20 4.219.69..CSeq: 0180 31 30 34 20 49 4e 56 49 54 45 0d 0a 55 73 65 72 104 INVITE..User 0190 2d 41 67 65 6e 74 3a 20 48 43 43 20 41 73 74 65 -Agent: HCC Aste 01a0 72 69 73 6b 20 50 42 58 0d 0a 41 6c 6c 6f 77 3a risk PBX..Allow: 01b0 20 49 4e 56 49 54 45 2c 20 41 43 4b 2c 20 43 41 INVITE, ACK, CA 01c0 4e 43 45 4c 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 NCEL, OPTIONS, B 01d0 59 45 2c 20 52 45 46 45 52 0d 0a 43 6f 6e 74 65 YE, REFER..Conte 01e0 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 nt-Type: applica 01f0 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f 6e 74 65 6e tion/sdp..Conten 0200 74 2d 4c 65 6e 67 74 68 3a 20 32 36 38 0d 0a 0d t-Length: 268... 0210 0a 76 3d 30 0d 0a 6f 3d 72 6f 6f 74 20 33 30 33 .v=0..o=root 303 0220 32 20 33 30 33 34 20 49 4e 20 49 50 34 20 32 30 2 3034 IN IP4 20 0230 39 2e 31 31 34 2e 32 31 39 2e 39 38 0d 0a 73 3d 9.114.219.98..s= 0240 73 65 73 73 69 6f 6e 0d 0a 63 3d 49 4e 20 49 50 session..c=IN IP 0250 34 20 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 38 4 209.114.219.98 0260 0d 0a 74 3d 30 20 30 0d 0a 6d 3d 61 75 64 69 6f ..t=0 0..m=audio 0270 20 31 36 33 38 34 20 52 54 50 2f 41 56 50 20 30 16384 RTP/AVP 0 0280 20 38 20 31 38 20 31 30 31 0d 0a 61 3d 72 74 70 8 18 101..a=rtp 0290 6d 61 70 3a 30 20 50 43 4d 55 2f 38 30 30 30 0d map:0 PCMU/8000. 02a0 0a 61 3d 72 74 70 6d 61 70 3a 38 20 50 43 4d 41 .a=rtpmap:8 PCMA 02b0 2f 38 30 30 30 0d 0a 61 3d 72 74 70 6d 61 70 3a /8000..a=rtpmap: 02c0 31 38 20 47 37 32 39 2f 38 30 30 30 0d 0a 61 3d 18 G729/8000..a= 02d0 72 74 70 6d 61 70 3a 31 30 31 20 74 65 6c 65 70 rtpmap:101 telep 02e0 68 6f 6e 65 2d 65 76 65 6e 74 2f 38 30 30 30 0d hone-event/8000. 02f0 0a 61 3d 66 6d 74 70 3a 31 30 31 20 30 2d 31 36 .a=fmtp:101 0-16 0300 0d 0a 61 3d 73 69 6c 65 6e 63 65 53 75 70 70 3a ..a=silenceSupp: 0310 6f 66 66 20 2d 20 2d 20 2d 20 2d 0d 0a off - - - -.. No. Time Source Destination Protocol Info 18 0.402634 209.114.219.90 209.114.219.69 SIP Status: 100 Trying Frame 18 (445 bytes on wire, 445 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.472942000 Time delta from previous packet: 0.004866000 seconds Time since reference or first frame: 0.402634000 seconds Frame Number: 18 Packet Length: 445 bytes Capture Length: 445 bytes Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:b0:8e:35:44:00 (209.114.219.90) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00) 0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 431 Identification: 0x351f (13599) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x2b31 (correct) Source: 209.114.219.90 (209.114.219.90) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060) Source port: 56262 (56262) Destination port: 5060 (5060) Length: 411 Checksum: 0x1548 (correct) Session Initiation Protocol Status-Line: SIP/2.0 100 Trying Status-Code: 100 Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK4b5867d0 From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Date: Wed, 05 Jan 2005 23:34:43 GMT Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 Server: Cisco-SIPGateway/IOS-12.x CSeq: 104 INVITE Allow-Events: telephone-event Content-Length: 0 0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh 0010 01 af 35 1f 00 00 ff 11 2b 31 d1 72 db 5a d1 72 ..5.....+1.r.Z.r 0020 db 45 db c6 13 c4 01 9b 15 48 53 49 50 2f 32 2e .E.......HSIP/2. 0030 30 20 31 30 30 20 54 72 79 69 6e 67 0d 0a 56 69 0 100 Trying..Vi 0040 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 a: SIP/2.0/UDP 2 0050 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 09.114.219.69:50 0060 36 30 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 60;branch=z9hG4b 0070 4b 34 62 35 38 36 37 64 30 0d 0a 46 72 6f 6d 3a K4b5867d0..From: 0080 20 22 33 32 31 33 30 38 34 30 30 33 22 20 3c 73 "3213084003" ;ta 00b0 67 3d 61 73 37 32 31 63 32 32 63 34 0d 0a 54 6f g=as721c22c4..To 00c0 3a 20 3c 73 69 70 3a 30 30 33 32 31 34 30 39 33 : ;tag=4D099280 00f0 2d 37 41 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 -7A..Date: Wed, 0100 30 35 20 4a 61 6e 20 32 30 30 35 20 32 33 3a 33 05 Jan 2005 23:3 0110 34 3a 34 33 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 4:43 GMT..Call-I 0120 44 3a 20 35 33 37 62 32 66 38 38 32 36 38 61 33 D: 537b2f88268a3 0130 62 66 34 31 63 39 32 61 65 65 39 34 38 38 65 38 bf41c92aee9488e8 0140 35 35 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 553@209.114.219. 0150 36 39 0d 0a 53 65 72 76 65 72 3a 20 43 69 73 63 69..Server: Cisc 0160 6f 2d 53 49 50 47 61 74 65 77 61 79 2f 49 4f 53 o-SIPGateway/IOS 0170 2d 31 32 2e 78 0d 0a 43 53 65 71 3a 20 31 30 34 -12.x..CSeq: 104 0180 20 49 4e 56 49 54 45 0d 0a 41 6c 6c 6f 77 2d 45 INVITE..Allow-E 0190 76 65 6e 74 73 3a 20 74 65 6c 65 70 68 6f 6e 65 vents: telephone 01a0 2d 65 76 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d -event..Content- 01b0 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Length: 0.... No. Time Source Destination Protocol Info 19 0.403859 209.114.219.90 209.114.219.69 SIP/SDP Status: 200 OK, with session description Frame 19 (892 bytes on wire, 892 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.474167000 Time delta from previous packet: 0.001225000 seconds Time since reference or first frame: 0.403859000 seconds Frame Number: 19 Packet Length: 892 bytes Capture Length: 892 bytes Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:b0:8e:35:44:00 (209.114.219.90) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00) 0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 878 Identification: 0x3520 (13600) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x2971 (correct) Source: 209.114.219.90 (209.114.219.90) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060) Source port: 56262 (56262) Destination port: 5060 (5060) Length: 858 Checksum: 0x0c10 (correct) Session Initiation Protocol Status-Line: SIP/2.0 200 OK Status-Code: 200 Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK4b5867d0 From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Date: Wed, 05 Jan 2005 23:34:43 GMT Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 Server: Cisco-SIPGateway/IOS-12.x CSeq: 104 INVITE Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER Allow-Events: telephone-event Contact: Content-Type: application/sdp Content-Length: 263 Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): CiscoSystemsSIP-GW-UserAgent 614 7261 IN IP4 209.114.219.90 Owner Username: CiscoSystemsSIP-GW-UserAgent Session ID: 614 Session Version: 7261 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 209.114.219.90 Session Name (s): SIP Call Connection Information (c): IN IP4 209.114.219.90 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 209.114.219.90 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 17302 RTP/AVP 18 101 Media Type: audio Media Port: 17302 Media Proto: RTP/AVP Media Format: ITU-T G.729 Media Format: 101 Connection Information (c): IN IP4 209.114.219.90 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 209.114.219.90 Media Attribute (a): rtpmap:18 G729/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 18 G729/8000 Media Attribute (a): fmtp:18 annexb=no Media Attribute Fieldname: fmtp Media Attribute Value: 18 annexb=no Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-16 0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh 0010 03 6e 35 20 00 00 ff 11 29 71 d1 72 db 5a d1 72 .n5 ....)q.r.Z.r 0020 db 45 db c6 13 c4 03 5a 0c 10 53 49 50 2f 32 2e .E.....Z..SIP/2. 0030 30 20 32 30 30 20 4f 4b 0d 0a 56 69 61 3a 20 53 0 200 OK..Via: S 0040 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 2e 31 IP/2.0/UDP 209.1 0050 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 3b 62 14.219.69:5060;b 0060 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 34 62 35 ranch=z9hG4bK4b5 0070 38 36 37 64 30 0d 0a 46 72 6f 6d 3a 20 22 33 32 867d0..From: "32 0080 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3a 33 13084003" ;tag=as 00b0 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 3c 73 721c22c4..To: ; 00e0 74 61 67 3d 34 44 30 39 39 32 38 30 2d 37 41 0d tag=4D099280-7A. 00f0 0a 44 61 74 65 3a 20 57 65 64 2c 20 30 35 20 4a .Date: Wed, 05 J 0100 61 6e 20 32 30 30 35 20 32 33 3a 33 34 3a 34 33 an 2005 23:34:43 0110 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 44 3a 20 35 GMT..Call-ID: 5 0120 33 37 62 32 66 38 38 32 36 38 61 33 62 66 34 31 37b2f88268a3bf41 0130 63 39 32 61 65 65 39 34 38 38 65 38 35 35 33 40 c92aee9488e8553@ 0140 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 0d 0a 209.114.219.69.. 0150 53 65 72 76 65 72 3a 20 43 69 73 63 6f 2d 53 49 Server: Cisco-SI 0160 50 47 61 74 65 77 61 79 2f 49 4f 53 2d 31 32 2e PGateway/IOS-12. 0170 78 0d 0a 43 53 65 71 3a 20 31 30 34 20 49 4e 56 x..CSeq: 104 INV 0180 49 54 45 0d 0a 41 6c 6c 6f 77 3a 20 49 4e 56 49 ITE..Allow: INVI 0190 54 45 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 59 45 TE, OPTIONS, BYE 01a0 2c 20 43 41 4e 43 45 4c 2c 20 41 43 4b 2c 20 50 , CANCEL, ACK, P 01b0 52 41 43 4b 2c 20 43 4f 4d 45 54 2c 20 52 45 46 RACK, COMET, REF 01c0 45 52 2c 20 53 55 42 53 43 52 49 42 45 2c 20 4e ER, SUBSCRIBE, N 01d0 4f 54 49 46 59 2c 20 49 4e 46 4f 2c 20 55 50 44 OTIFY, INFO, UPD 01e0 41 54 45 2c 20 52 45 47 49 53 54 45 52 0d 0a 41 ATE, REGISTER..A 01f0 6c 6c 6f 77 2d 45 76 65 6e 74 73 3a 20 74 65 6c llow-Events: tel 0200 65 70 68 6f 6e 65 2d 65 76 65 6e 74 0d 0a 43 6f ephone-event..Co 0210 6e 74 61 63 74 3a 20 3c 73 69 70 3a 30 30 33 32 ntact: ..C 0240 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 ontent-Type: app 0250 6c 69 63 61 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f lication/sdp..Co 0260 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 36 ntent-Length: 26 0270 33 0d 0a 0d 0a 76 3d 30 0d 0a 6f 3d 43 69 73 63 3....v=0..o=Cisc 0280 6f 53 79 73 74 65 6d 73 53 49 50 2d 47 57 2d 55 oSystemsSIP-GW-U 0290 73 65 72 41 67 65 6e 74 20 36 31 34 20 37 32 36 serAgent 614 726 02a0 31 20 49 4e 20 49 50 34 20 32 30 39 2e 31 31 34 1 IN IP4 209.114 02b0 2e 32 31 39 2e 39 30 0d 0a 73 3d 53 49 50 20 43 .219.90..s=SIP C 02c0 61 6c 6c 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 all..c=IN IP4 20 02d0 39 2e 31 31 34 2e 32 31 39 2e 39 30 0d 0a 74 3d 9.114.219.90..t= 02e0 30 20 30 0d 0a 6d 3d 61 75 64 69 6f 20 31 37 33 0 0..m=audio 173 02f0 30 32 20 52 54 50 2f 41 56 50 20 31 38 20 31 30 02 RTP/AVP 18 10 0300 31 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 39 2e 1..c=IN IP4 209. 0310 31 31 34 2e 32 31 39 2e 39 30 0d 0a 61 3d 72 74 114.219.90..a=rt 0320 70 6d 61 70 3a 31 38 20 47 37 32 39 2f 38 30 30 pmap:18 G729/800 0330 30 0d 0a 61 3d 66 6d 74 70 3a 31 38 20 61 6e 6e 0..a=fmtp:18 ann 0340 65 78 62 3d 6e 6f 0d 0a 61 3d 72 74 70 6d 61 70 exb=no..a=rtpmap 0350 3a 31 30 31 20 74 65 6c 65 70 68 6f 6e 65 2d 65 :101 telephone-e 0360 76 65 6e 74 2f 38 30 30 30 0d 0a 61 3d 66 6d 74 vent/8000..a=fmt 0370 70 3a 31 30 31 20 30 2d 31 36 0d 0a p:101 0-16.. No. Time Source Destination Protocol Info 20 0.403996 209.114.219.69 209.114.219.90 SIP Request: ACK sip:003214093773@209.114.219.90:5060 Frame 20 (441 bytes on wire, 441 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.474304000 Time delta from previous packet: 0.000137000 seconds Time since reference or first frame: 0.403996000 seconds Frame Number: 20 Packet Length: 441 bytes Capture Length: 441 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00 Destination: 00:b0:8e:35:44:00 (209.114.219.90) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00) 0001 10.. = Differentiated Services Codepoint: Unknown (0x06) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 427 Identification: 0x0aa9 (2729) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xd4fb (correct) Source: 209.114.219.69 (209.114.219.69) Destination: 209.114.219.90 (209.114.219.90) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 407 Checksum: 0x5b2e (incorrect, should be 0x846b) Session Initiation Protocol Request-Line: ACK sip:003214093773@209.114.219.90:5060 SIP/2.0 Method: ACK Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK6734289d From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Contact: Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 CSeq: 104 ACK User-Agent: HCC Asterisk PBX Content-Length: 0 0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E. 0010 01 ab 0a a9 40 00 40 11 d4 fb d1 72 db 45 d1 72 ....@.@....r.E.r 0020 db 5a 13 c4 13 c4 01 97 5b 2e 41 43 4b 20 73 69 .Z......[.ACK si 0030 70 3a 30 30 33 32 31 34 30 39 33 37 37 33 40 32 p:003214093773@2 0040 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3a 35 30 09.114.219.90:50 0050 36 30 20 53 49 50 2f 32 2e 30 0d 0a 56 69 61 3a 60 SIP/2.0..Via: 0060 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 SIP/2.0/UDP 209 0070 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 .114.219.69:5060 0080 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 36 ;branch=z9hG4bK6 0090 37 33 34 32 38 39 64 0d 0a 46 72 6f 6d 3a 20 22 734289d..From: " 00a0 33 32 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3213084003" ;tag= 00d0 61 73 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 as721c22c4..To: 00e0 3c 73 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 ;tag=4D099280-7 0110 41 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 73 69 70 A..Contact: ..Cal 0140 6c 2d 49 44 3a 20 35 33 37 62 32 66 38 38 32 36 l-ID: 537b2f8826 0150 38 61 33 62 66 34 31 63 39 32 61 65 65 39 34 38 8a3bf41c92aee948 0160 38 65 38 35 35 33 40 32 30 39 2e 31 31 34 2e 32 8e8553@209.114.2 0170 31 39 2e 36 39 0d 0a 43 53 65 71 3a 20 31 30 34 19.69..CSeq: 104 0180 20 41 43 4b 0d 0a 55 73 65 72 2d 41 67 65 6e 74 ACK..User-Agent 0190 3a 20 48 43 43 20 41 73 74 65 72 69 73 6b 20 50 : HCC Asterisk P 01a0 42 58 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 BX..Content-Leng 01b0 74 68 3a 20 30 0d 0a 0d 0a th: 0.... No. Time Source Destination Protocol Info 21 0.413122 209.114.219.98 209.114.219.69 RTP Payload type=ITU-T G.729, SSRC=3448847109, Seq=438, Time=71120 Frame 21 (74 bytes on wire, 74 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.483430000 Time delta from previous packet: 0.009126000 seconds Time since reference or first frame: 0.413122000 seconds Frame Number: 21 Packet Length: 74 bytes Capture Length: 74 bytes Ethernet II, Src: 00:48:54:6f:8a:d2, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:48:54:6f:8a:d2 (209.114.219.98) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.98 (209.114.219.98), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x01bc (444) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (0x11) Header checksum: 0x6667 (correct) Source: 209.114.219.98 (209.114.219.98) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 16384 (16384), Dst Port: 10204 (10204) Source port: 16384 (16384) Destination port: 10204 (10204) Length: 40 Checksum: 0xdf66 (correct) Real-Time Transport Protocol Stream setup by SDP (frame 9) Setup frame: 9 Setup Method: SDP 10.. .... = Version: RFC 1889 Version (2) ..0. .... = Padding: False ...0 .... = Extension: False .... 0000 = Contributing source identifiers count: 0 0... .... = Marker: False .001 0010 = Payload type: ITU-T G.729 (18) Sequence number: 438 Timestamp: 71120 Synchronization Source identifier: 3448847109 Payload: 40B8F8DA491249CC591B548FDF8A0D93... 0000 00 11 43 58 7a 18 00 48 54 6f 8a d2 08 00 45 00 ..CXz..HTo....E. 0010 00 3c 01 bc 00 00 f9 11 66 67 d1 72 db 62 d1 72 .<......fg.r.b.r 0020 db 45 40 00 27 dc 00 28 df 66 80 12 01 b6 00 01 .E@.'..(.f...... 0030 15 d0 cd 91 3b 05 40 b8 f8 da 49 12 49 cc 59 1b ....;.@...I.I.Y. 0040 54 8f df 8a 0d 93 77 43 e0 1e T.....wC.. No. Time Source Destination Protocol Info 22 0.413174 209.114.219.69 209.114.219.90 RTP Payload type=ITU-T G.729, SSRC=444875168, Seq=26155, Time=240 Frame 22 (74 bytes on wire, 74 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.483482000 Time delta from previous packet: 0.000052000 seconds Time since reference or first frame: 0.413174000 seconds Frame Number: 22 Packet Length: 74 bytes Capture Length: 74 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00 Destination: 00:b0:8e:35:44:00 (209.114.219.90) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00) 0001 10.. = Differentiated Services Codepoint: Unknown (0x06) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x0001 (1) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xe112 (correct) Source: 209.114.219.69 (209.114.219.69) Destination: 209.114.219.90 (209.114.219.90) User Datagram Protocol, Src Port: 10770 (10770), Dst Port: 17302 (17302) Source port: 10770 (10770) Destination port: 17302 (17302) Length: 40 Checksum: 0x0000 (none) Real-Time Transport Protocol Stream setup by SDP (frame 56) Setup frame: 56 Setup Method: SDP 10.. .... = Version: RFC 1889 Version (2) ..0. .... = Padding: False ...0 .... = Extension: False .... 0000 = Contributing source identifiers count: 0 0... .... = Marker: False .001 0010 = Payload type: ITU-T G.729 (18) Sequence number: 26155 Timestamp: 240 Synchronization Source identifier: 444875168 Payload: 40B8F8DA491249CC591B548FDF8A0D93... 0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E. 0010 00 3c 00 01 40 00 40 11 e1 12 d1 72 db 45 d1 72 .<..@.@....r.E.r 0020 db 5a 2a 12 43 96 00 28 00 00 80 12 66 2b 00 00 .Z*.C..(....f+.. 0030 00 f0 1a 84 41 a0 40 b8 f8 da 49 12 49 cc 59 1b ....A.@...I.I.Y. 0040 54 8f df 8a 0d 93 77 43 e0 1e T.....wC.. No. Time Source Destination Protocol Info 23 0.427044 209.114.219.98 209.114.219.69 SIP Request: ACK sip:1001@209.114.219.69 Frame 23 (374 bytes on wire, 374 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.497352000 Time delta from previous packet: 0.013870000 seconds Time since reference or first frame: 0.427044000 seconds Frame Number: 23 Packet Length: 374 bytes Capture Length: 374 bytes Ethernet II, Src: 00:48:54:6f:8a:d2, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:48:54:6f:8a:d2 (209.114.219.98) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.98 (209.114.219.98), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 360 Identification: 0x01bd (445) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (0x11) Header checksum: 0x653a (correct) Source: 209.114.219.98 (209.114.219.98) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 340 Checksum: 0xc66a (correct) Session Initiation Protocol Request-Line: ACK sip:1001@209.114.219.69 SIP/2.0 Method: ACK Resent Packet: False Message Header Via: SIP/2.0/UDP 192.168.200.169:5060 From: 3213084003 ;tag=3518047997 SIP Display info: 3213084003 SIP from address: sip:3213084003@209.114.219.69 SIP tag: 3518047997 To: ;tag=as6a4d6dad SIP to address: sip:1001@209.114.219.69 SIP tag: as6a4d6dad Call-ID: 1314847947@192.168.200.169 CSeq: 1 ACK User-Agent: Cisco ATA 186 v3.1.0 atasip (040211A) Content-Length: 0 0000 00 11 43 58 7a 18 00 48 54 6f 8a d2 08 00 45 00 ..CXz..HTo....E. 0010 01 68 01 bd 00 00 f9 11 65 3a d1 72 db 62 d1 72 .h......e:.r.b.r 0020 db 45 13 c4 13 c4 01 54 c6 6a 41 43 4b 20 73 69 .E.....T.jACK si 0030 70 3a 31 30 30 31 40 32 30 39 2e 31 31 34 2e 32 p:1001@209.114.2 0040 31 39 2e 36 39 20 53 49 50 2f 32 2e 30 0d 0a 56 19.69 SIP/2.0..V 0050 69 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 ia: SIP/2.0/UDP 0060 31 39 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 3a 192.168.200.169: 0070 35 30 36 30 0d 0a 46 72 6f 6d 3a 20 33 32 31 33 5060..From: 3213 0080 30 38 34 30 30 33 20 3c 73 69 70 3a 33 32 31 33 084003 ;tag=3518047997 00c0 0d 0a 54 6f 3a 20 3c 73 69 70 3a 31 30 30 31 40 ..To: ;tag=a 00f0 73 36 61 34 64 36 64 61 64 0d 0a 43 61 6c 6c 2d s6a4d6dad..Call- 0100 49 44 3a 20 31 33 31 34 38 34 37 39 34 37 40 31 ID: 1314847947@1 0110 39 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 0d 0a 92.168.200.169.. 0120 43 53 65 71 3a 20 31 20 41 43 4b 0d 0a 55 73 65 CSeq: 1 ACK..Use 0130 72 2d 41 67 65 6e 74 3a 20 43 69 73 63 6f 20 41 r-Agent: Cisco A 0140 54 41 20 31 38 36 20 20 76 33 2e 31 2e 30 20 61 TA 186 v3.1.0 a 0150 74 61 73 69 70 20 28 30 34 30 32 31 31 41 29 0d tasip (040211A). 0160 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a .Content-Length: 0170 20 30 0d 0a 0d 0a 0.... No. Time Source Destination Protocol Info 24 0.427290 209.114.219.69 209.114.219.98 SIP/SDP Request: INVITE sip:3213084003@192.168.200.169:5060, with session description Frame 24 (738 bytes on wire, 738 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.497598000 Time delta from previous packet: 0.000246000 seconds Time since reference or first frame: 0.427290000 seconds Frame Number: 24 Packet Length: 738 bytes Capture Length: 738 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:48:54:6f:8a:d2 Destination: 00:48:54:6f:8a:d2 (209.114.219.98) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.98 (209.114.219.98) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00) 0001 10.. = Differentiated Services Codepoint: Unknown (0x06) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 724 Identification: 0x0aaa (2730) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xd3c9 (correct) Source: 209.114.219.69 (209.114.219.69) Destination: 209.114.219.98 (209.114.219.98) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 704 Checksum: 0x5c5f (incorrect, should be 0x79f5) Session Initiation Protocol Request-Line: INVITE sip:3213084003@192.168.200.169:5060 SIP/2.0 Method: INVITE Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK569565cd;rport From: ;tag=as6a4d6dad SIP from address: sip:1001@209.114.219.69 SIP tag: as6a4d6dad To: 3213084003 ;tag=3518047997 SIP Display info: 3213084003 SIP to address: sip:3213084003@209.114.219.69 SIP tag: 3518047997 Contact: Call-ID: 1314847947@192.168.200.169 CSeq: 102 INVITE User-Agent: HCC Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER Content-Type: application/sdp Content-Length: 220 Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): root 3032 3034 IN IP4 209.114.219.90 Owner Username: root Session ID: 3032 Session Version: 3034 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 209.114.219.90 Session Name (s): session Connection Information (c): IN IP4 209.114.219.90 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 209.114.219.90 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 17302 RTP/AVP 18 101 Media Type: audio Media Port: 17302 Media Proto: RTP/AVP Media Format: ITU-T G.729 Media Format: 101 Media Attribute (a): rtpmap:18 G729/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 18 G729/8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-16 Media Attribute (a): silenceSupp:off - - - - Media Attribute Fieldname: silenceSupp Media Attribute Value: off - - - - 0000 00 48 54 6f 8a d2 00 11 43 58 7a 18 08 00 45 18 .HTo....CXz...E. 0010 02 d4 0a aa 40 00 40 11 d3 c9 d1 72 db 45 d1 72 ....@.@....r.E.r 0020 db 62 13 c4 13 c4 02 c0 5c 5f 49 4e 56 49 54 45 .b......\_INVITE 0030 20 73 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 sip:3213084003@ 0040 31 39 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 3a 192.168.200.169: 0050 35 30 36 30 20 53 49 50 2f 32 2e 30 0d 0a 56 69 5060 SIP/2.0..Vi 0060 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 a: SIP/2.0/UDP 2 0070 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 09.114.219.69:50 0080 36 30 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 60;branch=z9hG4b 0090 4b 35 36 39 35 36 35 63 64 3b 72 70 6f 72 74 0d K569565cd;rport. 00a0 0a 46 72 6f 6d 3a 20 3c 73 69 70 3a 31 30 30 31 .From: ;tag= 00d0 61 73 36 61 34 64 36 64 61 64 0d 0a 54 6f 3a 20 as6a4d6dad..To: 00e0 33 32 31 33 30 38 34 30 30 33 20 3c 73 69 70 3a 3213084003 ;tag=351804 0120 37 39 39 37 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 7997..Contact: < 0130 73 69 70 3a 31 30 30 31 40 32 30 39 2e 31 31 34 sip:1001@209.114 0140 2e 32 31 39 2e 36 39 3e 0d 0a 43 61 6c 6c 2d 49 .219.69>..Call-I 0150 44 3a 20 31 33 31 34 38 34 37 39 34 37 40 31 39 D: 1314847947@19 0160 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 0d 0a 43 2.168.200.169..C 0170 53 65 71 3a 20 31 30 32 20 49 4e 56 49 54 45 0d Seq: 102 INVITE. 0180 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 48 43 43 .User-Agent: HCC 0190 20 41 73 74 65 72 69 73 6b 20 50 42 58 0d 0a 41 Asterisk PBX..A 01a0 6c 6c 6f 77 3a 20 49 4e 56 49 54 45 2c 20 41 43 llow: INVITE, AC 01b0 4b 2c 20 43 41 4e 43 45 4c 2c 20 4f 50 54 49 4f K, CANCEL, OPTIO 01c0 4e 53 2c 20 42 59 45 2c 20 52 45 46 45 52 0d 0a NS, BYE, REFER.. 01d0 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 Content-Type: ap 01e0 70 6c 69 63 61 74 69 6f 6e 2f 73 64 70 0d 0a 43 plication/sdp..C 01f0 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 ontent-Length: 2 0200 32 30 0d 0a 0d 0a 76 3d 30 0d 0a 6f 3d 72 6f 6f 20....v=0..o=roo 0210 74 20 33 30 33 32 20 33 30 33 34 20 49 4e 20 49 t 3032 3034 IN I 0220 50 34 20 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 P4 209.114.219.9 0230 30 0d 0a 73 3d 73 65 73 73 69 6f 6e 0d 0a 63 3d 0..s=session..c= 0240 49 4e 20 49 50 34 20 32 30 39 2e 31 31 34 2e 32 IN IP4 209.114.2 0250 31 39 2e 39 30 0d 0a 74 3d 30 20 30 0d 0a 6d 3d 19.90..t=0 0..m= 0260 61 75 64 69 6f 20 31 37 33 30 32 20 52 54 50 2f audio 17302 RTP/ 0270 41 56 50 20 31 38 20 31 30 31 0d 0a 61 3d 72 74 AVP 18 101..a=rt 0280 70 6d 61 70 3a 31 38 20 47 37 32 39 2f 38 30 30 pmap:18 G729/800 0290 30 0d 0a 61 3d 72 74 70 6d 61 70 3a 31 30 31 20 0..a=rtpmap:101 02a0 74 65 6c 65 70 68 6f 6e 65 2d 65 76 65 6e 74 2f telephone-event/ 02b0 38 30 30 30 0d 0a 61 3d 66 6d 74 70 3a 31 30 31 8000..a=fmtp:101 02c0 20 30 2d 31 36 0d 0a 61 3d 73 69 6c 65 6e 63 65 0-16..a=silence 02d0 53 75 70 70 3a 6f 66 66 20 2d 20 2d 20 2d 20 2d Supp:off - - - - 02e0 0d 0a .. No. Time Source Destination Protocol Info 25 0.433507 209.114.219.98 209.114.219.69 RTP Payload type=ITU-T G.729, SSRC=3448847109, Seq=439, Time=71280 Frame 25 (74 bytes on wire, 74 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.503815000 Time delta from previous packet: 0.006217000 seconds Time since reference or first frame: 0.433507000 seconds Frame Number: 25 Packet Length: 74 bytes Capture Length: 74 bytes Ethernet II, Src: 00:48:54:6f:8a:d2, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:48:54:6f:8a:d2 (209.114.219.98) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.98 (209.114.219.98), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x01be (446) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (0x11) Header checksum: 0x6665 (correct) Source: 209.114.219.98 (209.114.219.98) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 16384 (16384), Dst Port: 10204 (10204) Source port: 16384 (16384) Destination port: 10204 (10204) Length: 40 Checksum: 0x47d9 (correct) Real-Time Transport Protocol Stream setup by SDP (frame 9) Setup frame: 9 Setup Method: SDP 10.. .... = Version: RFC 1889 Version (2) ..0. .... = Padding: False ...0 .... = Extension: False .... 0000 = Contributing source identifiers count: 0 0... .... = Marker: False .001 0010 = Payload type: ITU-T G.729 (18) Sequence number: 439 Timestamp: 71280 Synchronization Source identifier: 3448847109 Payload: 10E3E58F7FFEDC26CA90511021F8A12A... 0000 00 11 43 58 7a 18 00 48 54 6f 8a d2 08 00 45 00 ..CXz..HTo....E. 0010 00 3c 01 be 00 00 f9 11 66 65 d1 72 db 62 d1 72 .<......fe.r.b.r 0020 db 45 40 00 27 dc 00 28 47 d9 80 12 01 b7 00 01 .E@.'..(G....... 0030 16 70 cd 91 3b 05 10 e3 e5 8f 7f fe dc 26 ca 90 .p..;........&.. 0040 51 10 21 f8 a1 2a 4b 66 d8 c6 Q.!..*Kf.. No. Time Source Destination Protocol Info 26 0.433571 209.114.219.69 209.114.219.90 RTP Payload type=ITU-T G.729, SSRC=444875168, Seq=26156, Time=400 Frame 26 (74 bytes on wire, 74 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.503879000 Time delta from previous packet: 0.000064000 seconds Time since reference or first frame: 0.433571000 seconds Frame Number: 26 Packet Length: 74 bytes Capture Length: 74 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00 Destination: 00:b0:8e:35:44:00 (209.114.219.90) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00) 0001 10.. = Differentiated Services Codepoint: Unknown (0x06) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x0002 (2) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xe111 (correct) Source: 209.114.219.69 (209.114.219.69) Destination: 209.114.219.90 (209.114.219.90) User Datagram Protocol, Src Port: 10770 (10770), Dst Port: 17302 (17302) Source port: 10770 (10770) Destination port: 17302 (17302) Length: 40 Checksum: 0x0000 (none) Real-Time Transport Protocol Stream setup by SDP (frame 56) Setup frame: 56 Setup Method: SDP 10.. .... = Version: RFC 1889 Version (2) ..0. .... = Padding: False ...0 .... = Extension: False .... 0000 = Contributing source identifiers count: 0 0... .... = Marker: False .001 0010 = Payload type: ITU-T G.729 (18) Sequence number: 26156 Timestamp: 400 Synchronization Source identifier: 444875168 Payload: 10E3E58F7FFEDC26CA90511021F8A12A... 0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E. 0010 00 3c 00 02 40 00 40 11 e1 11 d1 72 db 45 d1 72 .<..@.@....r.E.r 0020 db 5a 2a 12 43 96 00 28 00 00 80 12 66 2c 00 00 .Z*.C..(....f,.. 0030 01 90 1a 84 41 a0 10 e3 e5 8f 7f fe dc 26 ca 90 ....A........&.. 0040 51 10 21 f8 a1 2a 4b 66 d8 c6 Q.!..*Kf.. No. Time Source Destination Protocol Info 27 0.454019 209.114.219.98 209.114.219.69 RTP Payload type=ITU-T G.729, SSRC=3448847109, Seq=440, Time=71440 Frame 27 (74 bytes on wire, 74 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.524327000 Time delta from previous packet: 0.020448000 seconds Time since reference or first frame: 0.454019000 seconds Frame Number: 27 Packet Length: 74 bytes Capture Length: 74 bytes Ethernet II, Src: 00:48:54:6f:8a:d2, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:48:54:6f:8a:d2 (209.114.219.98) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.98 (209.114.219.98), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x01bf (447) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (0x11) Header checksum: 0x6664 (correct) Source: 209.114.219.98 (209.114.219.98) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 16384 (16384), Dst Port: 10204 (10204) Source port: 16384 (16384) Destination port: 10204 (10204) Length: 40 Checksum: 0x173a (correct) Real-Time Transport Protocol Stream setup by SDP (frame 9) Setup frame: 9 Setup Method: SDP 10.. .... = Version: RFC 1889 Version (2) ..0. .... = Padding: False ...0 .... = Extension: False .... 0000 = Contributing source identifiers count: 0 0... .... = Marker: False .001 0010 = Payload type: ITU-T G.729 (18) Sequence number: 440 Timestamp: 71440 Synchronization Source identifier: 3448847109 Payload: 40A2E1EDB75351930C52583381C1CB13... 0000 00 11 43 58 7a 18 00 48 54 6f 8a d2 08 00 45 00 ..CXz..HTo....E. 0010 00 3c 01 bf 00 00 f9 11 66 64 d1 72 db 62 d1 72 .<......fd.r.b.r 0020 db 45 40 00 27 dc 00 28 17 3a 80 12 01 b8 00 01 .E@.'..(.:...... 0030 17 10 cd 91 3b 05 40 a2 e1 ed b7 53 51 93 0c 52 ....;.@....SQ..R 0040 58 33 81 c1 cb 13 42 61 66 54 X3....BafT No. Time Source Destination Protocol Info 28 0.454065 209.114.219.69 209.114.219.90 RTP Payload type=ITU-T G.729, SSRC=444875168, Seq=26157, Time=560 Frame 28 (74 bytes on wire, 74 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.524373000 Time delta from previous packet: 0.000046000 seconds Time since reference or first frame: 0.454065000 seconds Frame Number: 28 Packet Length: 74 bytes Capture Length: 74 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00 Destination: 00:b0:8e:35:44:00 (209.114.219.90) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00) 0001 10.. = Differentiated Services Codepoint: Unknown (0x06) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x0003 (3) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xe110 (correct) Source: 209.114.219.69 (209.114.219.69) Destination: 209.114.219.90 (209.114.219.90) User Datagram Protocol, Src Port: 10770 (10770), Dst Port: 17302 (17302) Source port: 10770 (10770) Destination port: 17302 (17302) Length: 40 Checksum: 0x0000 (none) Real-Time Transport Protocol Stream setup by SDP (frame 56) Setup frame: 56 Setup Method: SDP 10.. .... = Version: RFC 1889 Version (2) ..0. .... = Padding: False ...0 .... = Extension: False .... 0000 = Contributing source identifiers count: 0 0... .... = Marker: False .001 0010 = Payload type: ITU-T G.729 (18) Sequence number: 26157 Timestamp: 560 Synchronization Source identifier: 444875168 Payload: 40A2E1EDB75351930C52583381C1CB13... 0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E. 0010 00 3c 00 03 40 00 40 11 e1 10 d1 72 db 45 d1 72 .<..@.@....r.E.r 0020 db 5a 2a 12 43 96 00 28 00 00 80 12 66 2d 00 00 .Z*.C..(....f-.. 0030 02 30 1a 84 41 a0 40 a2 e1 ed b7 53 51 93 0c 52 .0..A.@....SQ..R 0040 58 33 81 c1 cb 13 42 61 66 54 X3....BafT No. Time Source Destination Protocol Info 29 0.472795 209.114.219.98 209.114.219.69 RTP Payload type=ITU-T G.729, SSRC=3448847109, Seq=441, Time=71600 Frame 29 (74 bytes on wire, 74 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.543103000 Time delta from previous packet: 0.018730000 seconds Time since reference or first frame: 0.472795000 seconds Frame Number: 29 Packet Length: 74 bytes Capture Length: 74 bytes Ethernet II, Src: 00:48:54:6f:8a:d2, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:48:54:6f:8a:d2 (209.114.219.98) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.98 (209.114.219.98), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x01c0 (448) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (0x11) Header checksum: 0x6663 (correct) Source: 209.114.219.98 (209.114.219.98) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 16384 (16384), Dst Port: 10204 (10204) Source port: 16384 (16384) Destination port: 10204 (10204) Length: 40 Checksum: 0x5fe6 (correct) Real-Time Transport Protocol Stream setup by SDP (frame 9) Setup frame: 9 Setup Method: SDP 10.. .... = Version: RFC 1889 Version (2) ..0. .... = Padding: False ...0 .... = Extension: False .... 0000 = Contributing source identifiers count: 0 0... .... = Marker: False .001 0010 = Payload type: ITU-T G.729 (18) Sequence number: 441 Timestamp: 71600 Synchronization Source identifier: 3448847109 Payload: 7841E69237929A73C5D1722372038E3B... 0000 00 11 43 58 7a 18 00 48 54 6f 8a d2 08 00 45 00 ..CXz..HTo....E. 0010 00 3c 01 c0 00 00 f9 11 66 63 d1 72 db 62 d1 72 .<......fc.r.b.r 0020 db 45 40 00 27 dc 00 28 5f e6 80 12 01 b9 00 01 .E@.'..(_....... 0030 17 b0 cd 91 3b 05 78 41 e6 92 37 92 9a 73 c5 d1 ....;.xA..7..s.. 0040 72 23 72 03 8e 3b 19 8d b9 9e r#r..;.... No. Time Source Destination Protocol Info 30 0.472940 209.114.219.69 209.114.219.90 RTP Payload type=ITU-T G.729, SSRC=444875168, Seq=26158, Time=720 Frame 30 (74 bytes on wire, 74 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.543248000 Time delta from previous packet: 0.000145000 seconds Time since reference or first frame: 0.472940000 seconds Frame Number: 30 Packet Length: 74 bytes Capture Length: 74 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00 Destination: 00:b0:8e:35:44:00 (209.114.219.90) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00) 0001 10.. = Differentiated Services Codepoint: Unknown (0x06) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x0004 (4) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xe10f (correct) Source: 209.114.219.69 (209.114.219.69) Destination: 209.114.219.90 (209.114.219.90) User Datagram Protocol, Src Port: 10770 (10770), Dst Port: 17302 (17302) Source port: 10770 (10770) Destination port: 17302 (17302) Length: 40 Checksum: 0x0000 (none) Real-Time Transport Protocol Stream setup by SDP (frame 56) Setup frame: 56 Setup Method: SDP 10.. .... = Version: RFC 1889 Version (2) ..0. .... = Padding: False ...0 .... = Extension: False .... 0000 = Contributing source identifiers count: 0 0... .... = Marker: False .001 0010 = Payload type: ITU-T G.729 (18) Sequence number: 26158 Timestamp: 720 Synchronization Source identifier: 444875168 Payload: 7841E69237929A73C5D1722372038E3B... 0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E. 0010 00 3c 00 04 40 00 40 11 e1 0f d1 72 db 45 d1 72 .<..@.@....r.E.r 0020 db 5a 2a 12 43 96 00 28 00 00 80 12 66 2e 00 00 .Z*.C..(....f... 0030 02 d0 1a 84 41 a0 78 41 e6 92 37 92 9a 73 c5 d1 ....A.xA..7..s.. 0040 72 23 72 03 8e 3b 19 8d b9 9e r#r..;.... No. Time Source Destination Protocol Info 31 0.480878 209.114.219.98 209.114.219.69 SIP/SDP Status: 200 OK, with session description Frame 31 (794 bytes on wire, 794 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.551186000 Time delta from previous packet: 0.007938000 seconds Time since reference or first frame: 0.480878000 seconds Frame Number: 31 Packet Length: 794 bytes Capture Length: 794 bytes Ethernet II, Src: 00:48:54:6f:8a:d2, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:48:54:6f:8a:d2 (209.114.219.98) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.98 (209.114.219.98), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 780 Identification: 0x01c1 (449) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (0x11) Header checksum: 0x6392 (correct) Source: 209.114.219.98 (209.114.219.98) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 760 Checksum: 0x2f7c (correct) Session Initiation Protocol Status-Line: SIP/2.0 200 OK Status-Code: 200 Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK569565cd;rport From: ;tag=as6a4d6dad SIP from address: sip:1001@209.114.219.69 SIP tag: as6a4d6dad To: 3213084003 ;tag=3518047997 SIP Display info: 3213084003 SIP to address: sip:3213084003@209.114.219.69 SIP tag: 3518047997 Call-ID: 1314847947@192.168.200.169 CSeq: 102 INVITE Contact: 3213084003 Server: Cisco ATA 186 v3.1.0 atasip (040211A) Allow: ACK, BYE, CANCEL, INVITE, NOTIFY, OPTIONS, REFER, REGISTER Content-Length: 228 Content-Type: application/sdp Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): 3213084003 2371 2371 IN IP4 192.168.200.169 Owner Username: 3213084003 Session ID: 2371 Session Version: 2371 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 192.168.200.169 Session Name (s): ATA186 Call Connection Information (c): IN IP4 192.168.200.169 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 192.168.200.169 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 16384 RTP/AVP 18 101 Media Type: audio Media Port: 16384 Media Proto: RTP/AVP Media Format: ITU-T G.729 Media Format: 101 Media Attribute (a): rtpmap:18 G729/8000/1 Media Attribute Fieldname: rtpmap Media Attribute Value: 18 G729/8000/1 Media Attribute (a): fmtp:18 annexb=no Media Attribute Fieldname: fmtp Media Attribute Value: 18 annexb=no Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-15 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-15 0000 00 11 43 58 7a 18 00 48 54 6f 8a d2 08 00 45 00 ..CXz..HTo....E. 0010 03 0c 01 c1 00 00 f9 11 63 92 d1 72 db 62 d1 72 ........c..r.b.r 0020 db 45 13 c4 13 c4 02 f8 2f 7c 53 49 50 2f 32 2e .E....../|SIP/2. 0030 30 20 32 30 30 20 4f 4b 0d 0a 56 69 61 3a 20 53 0 200 OK..Via: S 0040 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 2e 31 IP/2.0/UDP 209.1 0050 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 3b 62 14.219.69:5060;b 0060 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 35 36 39 ranch=z9hG4bK569 0070 35 36 35 63 64 3b 72 70 6f 72 74 0d 0a 46 72 6f 565cd;rport..Fro 0080 6d 3a 20 3c 73 69 70 3a 31 30 30 31 40 32 30 39 m: ;tag=as6a 00b0 34 64 36 64 61 64 0d 0a 54 6f 3a 20 33 32 31 33 4d6dad..To: 3213 00c0 30 38 34 30 30 33 20 3c 73 69 70 3a 33 32 31 33 084003 ;tag=3518047997 0100 0d 0a 43 61 6c 6c 2d 49 44 3a 20 31 33 31 34 38 ..Call-ID: 13148 0110 34 37 39 34 37 40 31 39 32 2e 31 36 38 2e 32 30 47947@192.168.20 0120 30 2e 31 36 39 0d 0a 43 53 65 71 3a 20 31 30 32 0.169..CSeq: 102 0130 20 49 4e 56 49 54 45 0d 0a 43 6f 6e 74 61 63 74 INVITE..Contact 0140 3a 20 33 32 31 33 30 38 34 30 30 33 20 3c 73 69 : 3213084003 ..Ser 0190 76 65 72 3a 20 43 69 73 63 6f 20 41 54 41 20 31 ver: Cisco ATA 1 01a0 38 36 20 20 76 33 2e 31 2e 30 20 61 74 61 73 69 86 v3.1.0 atasi 01b0 70 20 28 30 34 30 32 31 31 41 29 0d 0a 41 6c 6c p (040211A)..All 01c0 6f 77 3a 20 41 43 4b 2c 20 42 59 45 2c 20 43 41 ow: ACK, BYE, CA 01d0 4e 43 45 4c 2c 20 49 4e 56 49 54 45 2c 20 4e 4f NCEL, INVITE, NO 01e0 54 49 46 59 2c 20 4f 50 54 49 4f 4e 53 2c 20 52 TIFY, OPTIONS, R 01f0 45 46 45 52 2c 20 52 45 47 49 53 54 45 52 0d 0a EFER, REGISTER.. 0200 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 Content-Length: 0210 32 32 38 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 228..Content-Typ 0220 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 73 e: application/s 0230 64 70 0d 0a 0d 0a 76 3d 30 0d 0a 6f 3d 33 32 31 dp....v=0..o=321 0240 33 30 38 34 30 30 33 20 32 33 37 31 20 32 33 37 3084003 2371 237 0250 31 20 49 4e 20 49 50 34 20 31 39 32 2e 31 36 38 1 IN IP4 192.168 0260 2e 32 30 30 2e 31 36 39 0d 0a 73 3d 41 54 41 31 .200.169..s=ATA1 0270 38 36 20 43 61 6c 6c 0d 0a 63 3d 49 4e 20 49 50 86 Call..c=IN IP 0280 34 20 31 39 32 2e 31 36 38 2e 32 30 30 2e 31 36 4 192.168.200.16 0290 39 0d 0a 74 3d 30 20 30 0d 0a 6d 3d 61 75 64 69 9..t=0 0..m=audi 02a0 6f 20 31 36 33 38 34 20 52 54 50 2f 41 56 50 20 o 16384 RTP/AVP 02b0 31 38 20 31 30 31 0d 0a 61 3d 72 74 70 6d 61 70 18 101..a=rtpmap 02c0 3a 31 38 20 47 37 32 39 2f 38 30 30 30 2f 31 0d :18 G729/8000/1. 02d0 0a 61 3d 66 6d 74 70 3a 31 38 20 61 6e 6e 65 78 .a=fmtp:18 annex 02e0 62 3d 6e 6f 0d 0a 61 3d 72 74 70 6d 61 70 3a 31 b=no..a=rtpmap:1 02f0 30 31 20 74 65 6c 65 70 68 6f 6e 65 2d 65 76 65 01 telephone-eve 0300 6e 74 2f 38 30 30 30 0d 0a 61 3d 66 6d 74 70 3a nt/8000..a=fmtp: 0310 31 30 31 20 30 2d 31 35 0d 0a 101 0-15.. No. Time Source Destination Protocol Info 32 0.481061 209.114.219.69 209.114.219.98 SIP Request: ACK sip:3213084003@192.168.200.169:5060 Frame 32 (430 bytes on wire, 430 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.551369000 Time delta from previous packet: 0.000183000 seconds Time since reference or first frame: 0.481061000 seconds Frame Number: 32 Packet Length: 430 bytes Capture Length: 430 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:48:54:6f:8a:d2 Destination: 00:48:54:6f:8a:d2 (209.114.219.98) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.98 (209.114.219.98) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00) 0001 10.. = Differentiated Services Codepoint: Unknown (0x06) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 416 Identification: 0x0aab (2731) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xd4fc (correct) Source: 209.114.219.69 (209.114.219.69) Destination: 209.114.219.98 (209.114.219.98) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 396 Checksum: 0x5b2b (incorrect, should be 0x983b) Session Initiation Protocol Request-Line: ACK sip:3213084003@192.168.200.169:5060 SIP/2.0 Method: ACK Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK714ab40f;rport From: ;tag=as6a4d6dad SIP from address: sip:1001@209.114.219.69 SIP tag: as6a4d6dad To: 3213084003 ;tag=3518047997 SIP Display info: 3213084003 SIP to address: sip:3213084003@209.114.219.69 SIP tag: 3518047997 Contact: Call-ID: 1314847947@192.168.200.169 CSeq: 102 ACK User-Agent: HCC Asterisk PBX Content-Length: 0 0000 00 48 54 6f 8a d2 00 11 43 58 7a 18 08 00 45 18 .HTo....CXz...E. 0010 01 a0 0a ab 40 00 40 11 d4 fc d1 72 db 45 d1 72 ....@.@....r.E.r 0020 db 62 13 c4 13 c4 01 8c 5b 2b 41 43 4b 20 73 69 .b......[+ACK si 0030 70 3a 33 32 31 33 30 38 34 30 30 33 40 31 39 32 p:3213084003@192 0040 2e 31 36 38 2e 32 30 30 2e 31 36 39 3a 35 30 36 .168.200.169:506 0050 30 20 53 49 50 2f 32 2e 30 0d 0a 56 69 61 3a 20 0 SIP/2.0..Via: 0060 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 2e SIP/2.0/UDP 209. 0070 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 3b 114.219.69:5060; 0080 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 37 31 branch=z9hG4bK71 0090 34 61 62 34 30 66 3b 72 70 6f 72 74 0d 0a 46 72 4ab40f;rport..Fr 00a0 6f 6d 3a 20 3c 73 69 70 3a 31 30 30 31 40 32 30 om: ;tag=as6 00d0 61 34 64 36 64 61 64 0d 0a 54 6f 3a 20 33 32 31 a4d6dad..To: 321 00e0 33 30 38 34 30 30 33 20 3c 73 69 70 3a 33 32 31 3084003 ;tag=351804799 0120 37 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 73 69 70 7..Contact: ..Call-ID: 0150 31 33 31 34 38 34 37 39 34 37 40 31 39 32 2e 31 1314847947@192.1 0160 36 38 2e 32 30 30 2e 31 36 39 0d 0a 43 53 65 71 68.200.169..CSeq 0170 3a 20 31 30 32 20 41 43 4b 0d 0a 55 73 65 72 2d : 102 ACK..User- 0180 41 67 65 6e 74 3a 20 48 43 43 20 41 73 74 65 72 Agent: HCC Aster 0190 69 73 6b 20 50 42 58 0d 0a 43 6f 6e 74 65 6e 74 isk PBX..Content 01a0 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a -Length: 0.... No. Time Source Destination Protocol Info 33 0.481183 209.114.219.69 209.114.219.90 SIP/SDP Request: INVITE sip:003214093773@209.114.219.90:5060, with session description Frame 33 (751 bytes on wire, 751 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.551491000 Time delta from previous packet: 0.000122000 seconds Time since reference or first frame: 0.481183000 seconds Frame Number: 33 Packet Length: 751 bytes Capture Length: 751 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00 Destination: 00:b0:8e:35:44:00 (209.114.219.90) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00) 0001 10.. = Differentiated Services Codepoint: Unknown (0x06) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 737 Identification: 0x0aac (2732) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xd3c2 (correct) Source: 209.114.219.69 (209.114.219.69) Destination: 209.114.219.90 (209.114.219.90) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 717 Checksum: 0x5c64 (incorrect, should be 0x6532) Session Initiation Protocol Request-Line: INVITE sip:003214093773@209.114.219.90:5060 SIP/2.0 Method: INVITE Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK0cb3e938 From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Contact: Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 CSeq: 105 INVITE User-Agent: HCC Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER Content-Type: application/sdp Content-Length: 222 Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): root 3032 3035 IN IP4 192.168.200.169 Owner Username: root Session ID: 3032 Session Version: 3035 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 192.168.200.169 Session Name (s): session Connection Information (c): IN IP4 192.168.200.169 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 192.168.200.169 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 16384 RTP/AVP 18 101 Media Type: audio Media Port: 16384 Media Proto: RTP/AVP Media Format: ITU-T G.729 Media Format: 101 Media Attribute (a): rtpmap:18 G729/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 18 G729/8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-16 Media Attribute (a): silenceSupp:off - - - - Media Attribute Fieldname: silenceSupp Media Attribute Value: off - - - - 0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E. 0010 02 e1 0a ac 40 00 40 11 d3 c2 d1 72 db 45 d1 72 ....@.@....r.E.r 0020 db 5a 13 c4 13 c4 02 cd 5c 64 49 4e 56 49 54 45 .Z......\dINVITE 0030 20 73 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 sip:00321409377 0040 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3@209.114.219.90 0050 3a 35 30 36 30 20 53 49 50 2f 32 2e 30 0d 0a 56 :5060 SIP/2.0..V 0060 69 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 ia: SIP/2.0/UDP 0070 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 209.114.219.69:5 0080 30 36 30 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 060;branch=z9hG4 0090 62 4b 30 63 62 33 65 39 33 38 0d 0a 46 72 6f 6d bK0cb3e938..From 00a0 3a 20 22 33 32 31 33 30 38 34 30 30 33 22 20 3c : "3213084003" < 00b0 73 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 sip:3213084003@2 00c0 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 3b 74 09.114.219.69>;t 00d0 61 67 3d 61 73 37 32 31 63 32 32 63 34 0d 0a 54 ag=as721c22c4..T 00e0 6f 3a 20 3c 73 69 70 3a 30 30 33 32 31 34 30 39 o: ;tag=4D09928 0110 30 2d 37 41 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 0-7A..Contact: < 0120 73 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 sip:3213084003@2 0130 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 0d 0a 09.114.219.69>.. 0140 43 61 6c 6c 2d 49 44 3a 20 35 33 37 62 32 66 38 Call-ID: 537b2f8 0150 38 32 36 38 61 33 62 66 34 31 63 39 32 61 65 65 8268a3bf41c92aee 0160 39 34 38 38 65 38 35 35 33 40 32 30 39 2e 31 31 9488e8553@209.11 0170 34 2e 32 31 39 2e 36 39 0d 0a 43 53 65 71 3a 20 4.219.69..CSeq: 0180 31 30 35 20 49 4e 56 49 54 45 0d 0a 55 73 65 72 105 INVITE..User 0190 2d 41 67 65 6e 74 3a 20 48 43 43 20 41 73 74 65 -Agent: HCC Aste 01a0 72 69 73 6b 20 50 42 58 0d 0a 41 6c 6c 6f 77 3a risk PBX..Allow: 01b0 20 49 4e 56 49 54 45 2c 20 41 43 4b 2c 20 43 41 INVITE, ACK, CA 01c0 4e 43 45 4c 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 NCEL, OPTIONS, B 01d0 59 45 2c 20 52 45 46 45 52 0d 0a 43 6f 6e 74 65 YE, REFER..Conte 01e0 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 nt-Type: applica 01f0 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f 6e 74 65 6e tion/sdp..Conten 0200 74 2d 4c 65 6e 67 74 68 3a 20 32 32 32 0d 0a 0d t-Length: 222... 0210 0a 76 3d 30 0d 0a 6f 3d 72 6f 6f 74 20 33 30 33 .v=0..o=root 303 0220 32 20 33 30 33 35 20 49 4e 20 49 50 34 20 31 39 2 3035 IN IP4 19 0230 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 0d 0a 73 2.168.200.169..s 0240 3d 73 65 73 73 69 6f 6e 0d 0a 63 3d 49 4e 20 49 =session..c=IN I 0250 50 34 20 31 39 32 2e 31 36 38 2e 32 30 30 2e 31 P4 192.168.200.1 0260 36 39 0d 0a 74 3d 30 20 30 0d 0a 6d 3d 61 75 64 69..t=0 0..m=aud 0270 69 6f 20 31 36 33 38 34 20 52 54 50 2f 41 56 50 io 16384 RTP/AVP 0280 20 31 38 20 31 30 31 0d 0a 61 3d 72 74 70 6d 61 18 101..a=rtpma 0290 70 3a 31 38 20 47 37 32 39 2f 38 30 30 30 0d 0a p:18 G729/8000.. 02a0 61 3d 72 74 70 6d 61 70 3a 31 30 31 20 74 65 6c a=rtpmap:101 tel 02b0 65 70 68 6f 6e 65 2d 65 76 65 6e 74 2f 38 30 30 ephone-event/800 02c0 30 0d 0a 61 3d 66 6d 74 70 3a 31 30 31 20 30 2d 0..a=fmtp:101 0- 02d0 31 36 0d 0a 61 3d 73 69 6c 65 6e 63 65 53 75 70 16..a=silenceSup 02e0 70 3a 6f 66 66 20 2d 20 2d 20 2d 20 2d 0d 0a p:off - - - -.. No. Time Source Destination Protocol Info 34 0.484891 209.114.219.90 209.114.219.69 SIP Status: 100 Trying Frame 34 (445 bytes on wire, 445 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.555199000 Time delta from previous packet: 0.003708000 seconds Time since reference or first frame: 0.484891000 seconds Frame Number: 34 Packet Length: 445 bytes Capture Length: 445 bytes Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:b0:8e:35:44:00 (209.114.219.90) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00) 0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 431 Identification: 0x3521 (13601) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x2b2f (correct) Source: 209.114.219.90 (209.114.219.90) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060) Source port: 56262 (56262) Destination port: 5060 (5060) Length: 411 Checksum: 0x0f20 (correct) Session Initiation Protocol Status-Line: SIP/2.0 100 Trying Status-Code: 100 Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK0cb3e938 From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Date: Wed, 05 Jan 2005 23:34:43 GMT Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 Server: Cisco-SIPGateway/IOS-12.x CSeq: 105 INVITE Allow-Events: telephone-event Content-Length: 0 0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh 0010 01 af 35 21 00 00 ff 11 2b 2f d1 72 db 5a d1 72 ..5!....+/.r.Z.r 0020 db 45 db c6 13 c4 01 9b 0f 20 53 49 50 2f 32 2e .E....... SIP/2. 0030 30 20 31 30 30 20 54 72 79 69 6e 67 0d 0a 56 69 0 100 Trying..Vi 0040 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 a: SIP/2.0/UDP 2 0050 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 09.114.219.69:50 0060 36 30 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 60;branch=z9hG4b 0070 4b 30 63 62 33 65 39 33 38 0d 0a 46 72 6f 6d 3a K0cb3e938..From: 0080 20 22 33 32 31 33 30 38 34 30 30 33 22 20 3c 73 "3213084003" ;ta 00b0 67 3d 61 73 37 32 31 63 32 32 63 34 0d 0a 54 6f g=as721c22c4..To 00c0 3a 20 3c 73 69 70 3a 30 30 33 32 31 34 30 39 33 : ;tag=4D099280 00f0 2d 37 41 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 -7A..Date: Wed, 0100 30 35 20 4a 61 6e 20 32 30 30 35 20 32 33 3a 33 05 Jan 2005 23:3 0110 34 3a 34 33 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 4:43 GMT..Call-I 0120 44 3a 20 35 33 37 62 32 66 38 38 32 36 38 61 33 D: 537b2f88268a3 0130 62 66 34 31 63 39 32 61 65 65 39 34 38 38 65 38 bf41c92aee9488e8 0140 35 35 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 553@209.114.219. 0150 36 39 0d 0a 53 65 72 76 65 72 3a 20 43 69 73 63 69..Server: Cisc 0160 6f 2d 53 49 50 47 61 74 65 77 61 79 2f 49 4f 53 o-SIPGateway/IOS 0170 2d 31 32 2e 78 0d 0a 43 53 65 71 3a 20 31 30 35 -12.x..CSeq: 105 0180 20 49 4e 56 49 54 45 0d 0a 41 6c 6c 6f 77 2d 45 INVITE..Allow-E 0190 76 65 6e 74 73 3a 20 74 65 6c 65 70 68 6f 6e 65 vents: telephone 01a0 2d 65 76 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d -event..Content- 01b0 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Length: 0.... No. Time Source Destination Protocol Info 35 0.486116 209.114.219.90 209.114.219.69 SIP/SDP Status: 200 OK, with session description Frame 35 (892 bytes on wire, 892 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.556424000 Time delta from previous packet: 0.001225000 seconds Time since reference or first frame: 0.486116000 seconds Frame Number: 35 Packet Length: 892 bytes Capture Length: 892 bytes Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:b0:8e:35:44:00 (209.114.219.90) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00) 0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 878 Identification: 0x3522 (13602) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x296f (correct) Source: 209.114.219.90 (209.114.219.90) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060) Source port: 56262 (56262) Destination port: 5060 (5060) Length: 858 Checksum: 0x04e8 (correct) Session Initiation Protocol Status-Line: SIP/2.0 200 OK Status-Code: 200 Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK0cb3e938 From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Date: Wed, 05 Jan 2005 23:34:43 GMT Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 Server: Cisco-SIPGateway/IOS-12.x CSeq: 105 INVITE Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER Allow-Events: telephone-event Contact: Content-Type: application/sdp Content-Length: 263 Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): CiscoSystemsSIP-GW-UserAgent 614 7262 IN IP4 209.114.219.90 Owner Username: CiscoSystemsSIP-GW-UserAgent Session ID: 614 Session Version: 7262 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 209.114.219.90 Session Name (s): SIP Call Connection Information (c): IN IP4 209.114.219.90 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 209.114.219.90 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 17302 RTP/AVP 18 101 Media Type: audio Media Port: 17302 Media Proto: RTP/AVP Media Format: ITU-T G.729 Media Format: 101 Connection Information (c): IN IP4 209.114.219.90 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 209.114.219.90 Media Attribute (a): rtpmap:18 G729/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 18 G729/8000 Media Attribute (a): fmtp:18 annexb=no Media Attribute Fieldname: fmtp Media Attribute Value: 18 annexb=no Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-16 0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh 0010 03 6e 35 22 00 00 ff 11 29 6f d1 72 db 5a d1 72 .n5"....)o.r.Z.r 0020 db 45 db c6 13 c4 03 5a 04 e8 53 49 50 2f 32 2e .E.....Z..SIP/2. 0030 30 20 32 30 30 20 4f 4b 0d 0a 56 69 61 3a 20 53 0 200 OK..Via: S 0040 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 2e 31 IP/2.0/UDP 209.1 0050 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 3b 62 14.219.69:5060;b 0060 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 30 63 62 ranch=z9hG4bK0cb 0070 33 65 39 33 38 0d 0a 46 72 6f 6d 3a 20 22 33 32 3e938..From: "32 0080 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3a 33 13084003" ;tag=as 00b0 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 3c 73 721c22c4..To: ; 00e0 74 61 67 3d 34 44 30 39 39 32 38 30 2d 37 41 0d tag=4D099280-7A. 00f0 0a 44 61 74 65 3a 20 57 65 64 2c 20 30 35 20 4a .Date: Wed, 05 J 0100 61 6e 20 32 30 30 35 20 32 33 3a 33 34 3a 34 33 an 2005 23:34:43 0110 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 44 3a 20 35 GMT..Call-ID: 5 0120 33 37 62 32 66 38 38 32 36 38 61 33 62 66 34 31 37b2f88268a3bf41 0130 63 39 32 61 65 65 39 34 38 38 65 38 35 35 33 40 c92aee9488e8553@ 0140 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 0d 0a 209.114.219.69.. 0150 53 65 72 76 65 72 3a 20 43 69 73 63 6f 2d 53 49 Server: Cisco-SI 0160 50 47 61 74 65 77 61 79 2f 49 4f 53 2d 31 32 2e PGateway/IOS-12. 0170 78 0d 0a 43 53 65 71 3a 20 31 30 35 20 49 4e 56 x..CSeq: 105 INV 0180 49 54 45 0d 0a 41 6c 6c 6f 77 3a 20 49 4e 56 49 ITE..Allow: INVI 0190 54 45 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 59 45 TE, OPTIONS, BYE 01a0 2c 20 43 41 4e 43 45 4c 2c 20 41 43 4b 2c 20 50 , CANCEL, ACK, P 01b0 52 41 43 4b 2c 20 43 4f 4d 45 54 2c 20 52 45 46 RACK, COMET, REF 01c0 45 52 2c 20 53 55 42 53 43 52 49 42 45 2c 20 4e ER, SUBSCRIBE, N 01d0 4f 54 49 46 59 2c 20 49 4e 46 4f 2c 20 55 50 44 OTIFY, INFO, UPD 01e0 41 54 45 2c 20 52 45 47 49 53 54 45 52 0d 0a 41 ATE, REGISTER..A 01f0 6c 6c 6f 77 2d 45 76 65 6e 74 73 3a 20 74 65 6c llow-Events: tel 0200 65 70 68 6f 6e 65 2d 65 76 65 6e 74 0d 0a 43 6f ephone-event..Co 0210 6e 74 61 63 74 3a 20 3c 73 69 70 3a 30 30 33 32 ntact: ..C 0240 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 ontent-Type: app 0250 6c 69 63 61 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f lication/sdp..Co 0260 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 36 ntent-Length: 26 0270 33 0d 0a 0d 0a 76 3d 30 0d 0a 6f 3d 43 69 73 63 3....v=0..o=Cisc 0280 6f 53 79 73 74 65 6d 73 53 49 50 2d 47 57 2d 55 oSystemsSIP-GW-U 0290 73 65 72 41 67 65 6e 74 20 36 31 34 20 37 32 36 serAgent 614 726 02a0 32 20 49 4e 20 49 50 34 20 32 30 39 2e 31 31 34 2 IN IP4 209.114 02b0 2e 32 31 39 2e 39 30 0d 0a 73 3d 53 49 50 20 43 .219.90..s=SIP C 02c0 61 6c 6c 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 all..c=IN IP4 20 02d0 39 2e 31 31 34 2e 32 31 39 2e 39 30 0d 0a 74 3d 9.114.219.90..t= 02e0 30 20 30 0d 0a 6d 3d 61 75 64 69 6f 20 31 37 33 0 0..m=audio 173 02f0 30 32 20 52 54 50 2f 41 56 50 20 31 38 20 31 30 02 RTP/AVP 18 10 0300 31 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 39 2e 1..c=IN IP4 209. 0310 31 31 34 2e 32 31 39 2e 39 30 0d 0a 61 3d 72 74 114.219.90..a=rt 0320 70 6d 61 70 3a 31 38 20 47 37 32 39 2f 38 30 30 pmap:18 G729/800 0330 30 0d 0a 61 3d 66 6d 74 70 3a 31 38 20 61 6e 6e 0..a=fmtp:18 ann 0340 65 78 62 3d 6e 6f 0d 0a 61 3d 72 74 70 6d 61 70 exb=no..a=rtpmap 0350 3a 31 30 31 20 74 65 6c 65 70 68 6f 6e 65 2d 65 :101 telephone-e 0360 76 65 6e 74 2f 38 30 30 30 0d 0a 61 3d 66 6d 74 vent/8000..a=fmt 0370 70 3a 31 30 31 20 30 2d 31 36 0d 0a p:101 0-16.. No. Time Source Destination Protocol Info 36 0.486262 209.114.219.69 209.114.219.90 SIP Request: ACK sip:003214093773@209.114.219.90:5060 Frame 36 (441 bytes on wire, 441 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.556570000 Time delta from previous packet: 0.000146000 seconds Time since reference or first frame: 0.486262000 seconds Frame Number: 36 Packet Length: 441 bytes Capture Length: 441 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00 Destination: 00:b0:8e:35:44:00 (209.114.219.90) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00) 0001 10.. = Differentiated Services Codepoint: Unknown (0x06) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 427 Identification: 0x0aad (2733) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xd4f7 (correct) Source: 209.114.219.69 (209.114.219.69) Destination: 209.114.219.90 (209.114.219.90) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 407 Checksum: 0x5b2e (incorrect, should be 0xbd41) Session Initiation Protocol Request-Line: ACK sip:003214093773@209.114.219.90:5060 SIP/2.0 Method: ACK Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK34b26127 From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Contact: Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 CSeq: 105 ACK User-Agent: HCC Asterisk PBX Content-Length: 0 0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E. 0010 01 ab 0a ad 40 00 40 11 d4 f7 d1 72 db 45 d1 72 ....@.@....r.E.r 0020 db 5a 13 c4 13 c4 01 97 5b 2e 41 43 4b 20 73 69 .Z......[.ACK si 0030 70 3a 30 30 33 32 31 34 30 39 33 37 37 33 40 32 p:003214093773@2 0040 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3a 35 30 09.114.219.90:50 0050 36 30 20 53 49 50 2f 32 2e 30 0d 0a 56 69 61 3a 60 SIP/2.0..Via: 0060 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 SIP/2.0/UDP 209 0070 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 .114.219.69:5060 0080 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 33 ;branch=z9hG4bK3 0090 34 62 32 36 31 32 37 0d 0a 46 72 6f 6d 3a 20 22 4b26127..From: " 00a0 33 32 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3213084003" ;tag= 00d0 61 73 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 as721c22c4..To: 00e0 3c 73 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 ;tag=4D099280-7 0110 41 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 73 69 70 A..Contact: ..Cal 0140 6c 2d 49 44 3a 20 35 33 37 62 32 66 38 38 32 36 l-ID: 537b2f8826 0150 38 61 33 62 66 34 31 63 39 32 61 65 65 39 34 38 8a3bf41c92aee948 0160 38 65 38 35 35 33 40 32 30 39 2e 31 31 34 2e 32 8e8553@209.114.2 0170 31 39 2e 36 39 0d 0a 43 53 65 71 3a 20 31 30 35 19.69..CSeq: 105 0180 20 41 43 4b 0d 0a 55 73 65 72 2d 41 67 65 6e 74 ACK..User-Agent 0190 3a 20 48 43 43 20 41 73 74 65 72 69 73 6b 20 50 : HCC Asterisk P 01a0 42 58 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 BX..Content-Leng 01b0 74 68 3a 20 30 0d 0a 0d 0a th: 0.... No. Time Source Destination Protocol Info 37 0.493877 209.114.219.98 209.114.219.69 RTP Payload type=ITU-T G.729, SSRC=3448847109, Seq=442, Time=71760 Frame 37 (74 bytes on wire, 74 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.564185000 Time delta from previous packet: 0.007615000 seconds Time since reference or first frame: 0.493877000 seconds Frame Number: 37 Packet Length: 74 bytes Capture Length: 74 bytes Ethernet II, Src: 00:48:54:6f:8a:d2, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:48:54:6f:8a:d2 (209.114.219.98) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.98 (209.114.219.98), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x01c2 (450) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (0x11) Header checksum: 0x6661 (correct) Source: 209.114.219.98 (209.114.219.98) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 16384 (16384), Dst Port: 10204 (10204) Source port: 16384 (16384) Destination port: 10204 (10204) Length: 40 Checksum: 0xc1e7 (correct) Real-Time Transport Protocol Stream setup by SDP (frame 9) Setup frame: 9 Setup Method: SDP 10.. .... = Version: RFC 1889 Version (2) ..0. .... = Padding: False ...0 .... = Extension: False .... 0000 = Contributing source identifiers count: 0 0... .... = Marker: False .001 0010 = Payload type: ITU-T G.729 (18) Sequence number: 442 Timestamp: 71760 Synchronization Source identifier: 3448847109 Payload: 40BD319B74C2541A389A78452EA154A2... 0000 00 11 43 58 7a 18 00 48 54 6f 8a d2 08 00 45 00 ..CXz..HTo....E. 0010 00 3c 01 c2 00 00 f9 11 66 61 d1 72 db 62 d1 72 .<......fa.r.b.r 0020 db 45 40 00 27 dc 00 28 c1 e7 80 12 01 ba 00 01 .E@.'..(........ 0030 18 50 cd 91 3b 05 40 bd 31 9b 74 c2 54 1a 38 9a .P..;.@.1.t.T.8. 0040 78 45 2e a1 54 a2 90 ec d9 52 xE..T....R No. Time Source Destination Protocol Info 38 0.493944 209.114.219.69 209.114.219.90 RTP Payload type=ITU-T G.729, SSRC=444875168, Seq=26159, Time=880 Frame 38 (74 bytes on wire, 74 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.564252000 Time delta from previous packet: 0.000067000 seconds Time since reference or first frame: 0.493944000 seconds Frame Number: 38 Packet Length: 74 bytes Capture Length: 74 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00 Destination: 00:b0:8e:35:44:00 (209.114.219.90) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00) 0001 10.. = Differentiated Services Codepoint: Unknown (0x06) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 60 Identification: 0x0005 (5) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xe10e (correct) Source: 209.114.219.69 (209.114.219.69) Destination: 209.114.219.90 (209.114.219.90) User Datagram Protocol, Src Port: 10770 (10770), Dst Port: 17302 (17302) Source port: 10770 (10770) Destination port: 17302 (17302) Length: 40 Checksum: 0x0000 (none) Real-Time Transport Protocol Stream setup by SDP (frame 56) Setup frame: 56 Setup Method: SDP 10.. .... = Version: RFC 1889 Version (2) ..0. .... = Padding: False ...0 .... = Extension: False .... 0000 = Contributing source identifiers count: 0 0... .... = Marker: False .001 0010 = Payload type: ITU-T G.729 (18) Sequence number: 26159 Timestamp: 880 Synchronization Source identifier: 444875168 Payload: 40BD319B74C2541A389A78452EA154A2... 0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E. 0010 00 3c 00 05 40 00 40 11 e1 0e d1 72 db 45 d1 72 .<..@.@....r.E.r 0020 db 5a 2a 12 43 96 00 28 00 00 80 12 66 2f 00 00 .Z*.C..(....f/.. 0030 03 70 1a 84 41 a0 40 bd 31 9b 74 c2 54 1a 38 9a .p..A.@.1.t.T.8. 0040 78 45 2e a1 54 a2 90 ec d9 52 xE..T....R No. Time Source Destination Protocol Info 39 0.494029 209.114.219.69 209.114.219.90 SIP/SDP Request: INVITE sip:003214093773@209.114.219.90:5060, with session description Frame 39 (749 bytes on wire, 749 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.564337000 Time delta from previous packet: 0.000085000 seconds Time since reference or first frame: 0.494029000 seconds Frame Number: 39 Packet Length: 749 bytes Capture Length: 749 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00 Destination: 00:b0:8e:35:44:00 (209.114.219.90) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00) 0001 10.. = Differentiated Services Codepoint: Unknown (0x06) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 735 Identification: 0x0aae (2734) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xd3c2 (correct) Source: 209.114.219.69 (209.114.219.69) Destination: 209.114.219.90 (209.114.219.90) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 715 Checksum: 0x5c62 (incorrect, should be 0x53d5) Session Initiation Protocol Request-Line: INVITE sip:003214093773@209.114.219.90:5060 SIP/2.0 Method: INVITE Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK332f738b From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Contact: Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 CSeq: 106 INVITE User-Agent: HCC Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER Content-Type: application/sdp Content-Length: 220 Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): root 3032 3036 IN IP4 209.114.219.98 Owner Username: root Session ID: 3032 Session Version: 3036 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 209.114.219.98 Session Name (s): session Connection Information (c): IN IP4 209.114.219.98 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 209.114.219.98 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 16384 RTP/AVP 18 101 Media Type: audio Media Port: 16384 Media Proto: RTP/AVP Media Format: ITU-T G.729 Media Format: 101 Media Attribute (a): rtpmap:18 G729/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 18 G729/8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-16 Media Attribute (a): silenceSupp:off - - - - Media Attribute Fieldname: silenceSupp Media Attribute Value: off - - - - 0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E. 0010 02 df 0a ae 40 00 40 11 d3 c2 d1 72 db 45 d1 72 ....@.@....r.E.r 0020 db 5a 13 c4 13 c4 02 cb 5c 62 49 4e 56 49 54 45 .Z......\bINVITE 0030 20 73 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 sip:00321409377 0040 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3@209.114.219.90 0050 3a 35 30 36 30 20 53 49 50 2f 32 2e 30 0d 0a 56 :5060 SIP/2.0..V 0060 69 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 ia: SIP/2.0/UDP 0070 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 209.114.219.69:5 0080 30 36 30 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 060;branch=z9hG4 0090 62 4b 33 33 32 66 37 33 38 62 0d 0a 46 72 6f 6d bK332f738b..From 00a0 3a 20 22 33 32 31 33 30 38 34 30 30 33 22 20 3c : "3213084003" < 00b0 73 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 sip:3213084003@2 00c0 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 3b 74 09.114.219.69>;t 00d0 61 67 3d 61 73 37 32 31 63 32 32 63 34 0d 0a 54 ag=as721c22c4..T 00e0 6f 3a 20 3c 73 69 70 3a 30 30 33 32 31 34 30 39 o: ;tag=4D09928 0110 30 2d 37 41 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 0-7A..Contact: < 0120 73 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 sip:3213084003@2 0130 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 0d 0a 09.114.219.69>.. 0140 43 61 6c 6c 2d 49 44 3a 20 35 33 37 62 32 66 38 Call-ID: 537b2f8 0150 38 32 36 38 61 33 62 66 34 31 63 39 32 61 65 65 8268a3bf41c92aee 0160 39 34 38 38 65 38 35 35 33 40 32 30 39 2e 31 31 9488e8553@209.11 0170 34 2e 32 31 39 2e 36 39 0d 0a 43 53 65 71 3a 20 4.219.69..CSeq: 0180 31 30 36 20 49 4e 56 49 54 45 0d 0a 55 73 65 72 106 INVITE..User 0190 2d 41 67 65 6e 74 3a 20 48 43 43 20 41 73 74 65 -Agent: HCC Aste 01a0 72 69 73 6b 20 50 42 58 0d 0a 41 6c 6c 6f 77 3a risk PBX..Allow: 01b0 20 49 4e 56 49 54 45 2c 20 41 43 4b 2c 20 43 41 INVITE, ACK, CA 01c0 4e 43 45 4c 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 NCEL, OPTIONS, B 01d0 59 45 2c 20 52 45 46 45 52 0d 0a 43 6f 6e 74 65 YE, REFER..Conte 01e0 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 nt-Type: applica 01f0 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f 6e 74 65 6e tion/sdp..Conten 0200 74 2d 4c 65 6e 67 74 68 3a 20 32 32 30 0d 0a 0d t-Length: 220... 0210 0a 76 3d 30 0d 0a 6f 3d 72 6f 6f 74 20 33 30 33 .v=0..o=root 303 0220 32 20 33 30 33 36 20 49 4e 20 49 50 34 20 32 30 2 3036 IN IP4 20 0230 39 2e 31 31 34 2e 32 31 39 2e 39 38 0d 0a 73 3d 9.114.219.98..s= 0240 73 65 73 73 69 6f 6e 0d 0a 63 3d 49 4e 20 49 50 session..c=IN IP 0250 34 20 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 38 4 209.114.219.98 0260 0d 0a 74 3d 30 20 30 0d 0a 6d 3d 61 75 64 69 6f ..t=0 0..m=audio 0270 20 31 36 33 38 34 20 52 54 50 2f 41 56 50 20 31 16384 RTP/AVP 1 0280 38 20 31 30 31 0d 0a 61 3d 72 74 70 6d 61 70 3a 8 101..a=rtpmap: 0290 31 38 20 47 37 32 39 2f 38 30 30 30 0d 0a 61 3d 18 G729/8000..a= 02a0 72 74 70 6d 61 70 3a 31 30 31 20 74 65 6c 65 70 rtpmap:101 telep 02b0 68 6f 6e 65 2d 65 76 65 6e 74 2f 38 30 30 30 0d hone-event/8000. 02c0 0a 61 3d 66 6d 74 70 3a 31 30 31 20 30 2d 31 36 .a=fmtp:101 0-16 02d0 0d 0a 61 3d 73 69 6c 65 6e 63 65 53 75 70 70 3a ..a=silenceSupp: 02e0 6f 66 66 20 2d 20 2d 20 2d 20 2d 0d 0a off - - - -.. No. Time Source Destination Protocol Info 40 0.497712 209.114.219.90 209.114.219.69 SIP Status: 100 Trying Frame 40 (445 bytes on wire, 445 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.568020000 Time delta from previous packet: 0.003683000 seconds Time since reference or first frame: 0.497712000 seconds Frame Number: 40 Packet Length: 445 bytes Capture Length: 445 bytes Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:b0:8e:35:44:00 (209.114.219.90) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00) 0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 431 Identification: 0x3523 (13603) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x2b2d (correct) Source: 209.114.219.90 (209.114.219.90) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060) Source port: 56262 (56262) Destination port: 5060 (5060) Length: 411 Checksum: 0xe874 (correct) Session Initiation Protocol Status-Line: SIP/2.0 100 Trying Status-Code: 100 Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK332f738b From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Date: Wed, 05 Jan 2005 23:34:43 GMT Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 Server: Cisco-SIPGateway/IOS-12.x CSeq: 106 INVITE Allow-Events: telephone-event Content-Length: 0 0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh 0010 01 af 35 23 00 00 ff 11 2b 2d d1 72 db 5a d1 72 ..5#....+-.r.Z.r 0020 db 45 db c6 13 c4 01 9b e8 74 53 49 50 2f 32 2e .E.......tSIP/2. 0030 30 20 31 30 30 20 54 72 79 69 6e 67 0d 0a 56 69 0 100 Trying..Vi 0040 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 a: SIP/2.0/UDP 2 0050 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 09.114.219.69:50 0060 36 30 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 60;branch=z9hG4b 0070 4b 33 33 32 66 37 33 38 62 0d 0a 46 72 6f 6d 3a K332f738b..From: 0080 20 22 33 32 31 33 30 38 34 30 30 33 22 20 3c 73 "3213084003" ;ta 00b0 67 3d 61 73 37 32 31 63 32 32 63 34 0d 0a 54 6f g=as721c22c4..To 00c0 3a 20 3c 73 69 70 3a 30 30 33 32 31 34 30 39 33 : ;tag=4D099280 00f0 2d 37 41 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 -7A..Date: Wed, 0100 30 35 20 4a 61 6e 20 32 30 30 35 20 32 33 3a 33 05 Jan 2005 23:3 0110 34 3a 34 33 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 4:43 GMT..Call-I 0120 44 3a 20 35 33 37 62 32 66 38 38 32 36 38 61 33 D: 537b2f88268a3 0130 62 66 34 31 63 39 32 61 65 65 39 34 38 38 65 38 bf41c92aee9488e8 0140 35 35 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 553@209.114.219. 0150 36 39 0d 0a 53 65 72 76 65 72 3a 20 43 69 73 63 69..Server: Cisc 0160 6f 2d 53 49 50 47 61 74 65 77 61 79 2f 49 4f 53 o-SIPGateway/IOS 0170 2d 31 32 2e 78 0d 0a 43 53 65 71 3a 20 31 30 36 -12.x..CSeq: 106 0180 20 49 4e 56 49 54 45 0d 0a 41 6c 6c 6f 77 2d 45 INVITE..Allow-E 0190 76 65 6e 74 73 3a 20 74 65 6c 65 70 68 6f 6e 65 vents: telephone 01a0 2d 65 76 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d -event..Content- 01b0 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Length: 0.... No. Time Source Destination Protocol Info 41 0.499103 209.114.219.90 209.114.219.69 SIP/SDP Status: 200 OK, with session description Frame 41 (892 bytes on wire, 892 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.569411000 Time delta from previous packet: 0.001391000 seconds Time since reference or first frame: 0.499103000 seconds Frame Number: 41 Packet Length: 892 bytes Capture Length: 892 bytes Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:b0:8e:35:44:00 (209.114.219.90) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00) 0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 878 Identification: 0x3524 (13604) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x296d (correct) Source: 209.114.219.90 (209.114.219.90) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060) Source port: 56262 (56262) Destination port: 5060 (5060) Length: 858 Checksum: 0xdd3c (correct) Session Initiation Protocol Status-Line: SIP/2.0 200 OK Status-Code: 200 Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK332f738b From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Date: Wed, 05 Jan 2005 23:34:43 GMT Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 Server: Cisco-SIPGateway/IOS-12.x CSeq: 106 INVITE Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER Allow-Events: telephone-event Contact: Content-Type: application/sdp Content-Length: 263 Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): CiscoSystemsSIP-GW-UserAgent 614 7263 IN IP4 209.114.219.90 Owner Username: CiscoSystemsSIP-GW-UserAgent Session ID: 614 Session Version: 7263 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 209.114.219.90 Session Name (s): SIP Call Connection Information (c): IN IP4 209.114.219.90 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 209.114.219.90 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 17302 RTP/AVP 18 101 Media Type: audio Media Port: 17302 Media Proto: RTP/AVP Media Format: ITU-T G.729 Media Format: 101 Connection Information (c): IN IP4 209.114.219.90 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 209.114.219.90 Media Attribute (a): rtpmap:18 G729/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 18 G729/8000 Media Attribute (a): fmtp:18 annexb=no Media Attribute Fieldname: fmtp Media Attribute Value: 18 annexb=no Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-16 0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh 0010 03 6e 35 24 00 00 ff 11 29 6d d1 72 db 5a d1 72 .n5$....)m.r.Z.r 0020 db 45 db c6 13 c4 03 5a dd 3c 53 49 50 2f 32 2e .E.....Z.;tag=as 00b0 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 3c 73 721c22c4..To: ; 00e0 74 61 67 3d 34 44 30 39 39 32 38 30 2d 37 41 0d tag=4D099280-7A. 00f0 0a 44 61 74 65 3a 20 57 65 64 2c 20 30 35 20 4a .Date: Wed, 05 J 0100 61 6e 20 32 30 30 35 20 32 33 3a 33 34 3a 34 33 an 2005 23:34:43 0110 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 44 3a 20 35 GMT..Call-ID: 5 0120 33 37 62 32 66 38 38 32 36 38 61 33 62 66 34 31 37b2f88268a3bf41 0130 63 39 32 61 65 65 39 34 38 38 65 38 35 35 33 40 c92aee9488e8553@ 0140 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 0d 0a 209.114.219.69.. 0150 53 65 72 76 65 72 3a 20 43 69 73 63 6f 2d 53 49 Server: Cisco-SI 0160 50 47 61 74 65 77 61 79 2f 49 4f 53 2d 31 32 2e PGateway/IOS-12. 0170 78 0d 0a 43 53 65 71 3a 20 31 30 36 20 49 4e 56 x..CSeq: 106 INV 0180 49 54 45 0d 0a 41 6c 6c 6f 77 3a 20 49 4e 56 49 ITE..Allow: INVI 0190 54 45 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 59 45 TE, OPTIONS, BYE 01a0 2c 20 43 41 4e 43 45 4c 2c 20 41 43 4b 2c 20 50 , CANCEL, ACK, P 01b0 52 41 43 4b 2c 20 43 4f 4d 45 54 2c 20 52 45 46 RACK, COMET, REF 01c0 45 52 2c 20 53 55 42 53 43 52 49 42 45 2c 20 4e ER, SUBSCRIBE, N 01d0 4f 54 49 46 59 2c 20 49 4e 46 4f 2c 20 55 50 44 OTIFY, INFO, UPD 01e0 41 54 45 2c 20 52 45 47 49 53 54 45 52 0d 0a 41 ATE, REGISTER..A 01f0 6c 6c 6f 77 2d 45 76 65 6e 74 73 3a 20 74 65 6c llow-Events: tel 0200 65 70 68 6f 6e 65 2d 65 76 65 6e 74 0d 0a 43 6f ephone-event..Co 0210 6e 74 61 63 74 3a 20 3c 73 69 70 3a 30 30 33 32 ntact: ..C 0240 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 ontent-Type: app 0250 6c 69 63 61 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f lication/sdp..Co 0260 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 36 ntent-Length: 26 0270 33 0d 0a 0d 0a 76 3d 30 0d 0a 6f 3d 43 69 73 63 3....v=0..o=Cisc 0280 6f 53 79 73 74 65 6d 73 53 49 50 2d 47 57 2d 55 oSystemsSIP-GW-U 0290 73 65 72 41 67 65 6e 74 20 36 31 34 20 37 32 36 serAgent 614 726 02a0 33 20 49 4e 20 49 50 34 20 32 30 39 2e 31 31 34 3 IN IP4 209.114 02b0 2e 32 31 39 2e 39 30 0d 0a 73 3d 53 49 50 20 43 .219.90..s=SIP C 02c0 61 6c 6c 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 all..c=IN IP4 20 02d0 39 2e 31 31 34 2e 32 31 39 2e 39 30 0d 0a 74 3d 9.114.219.90..t= 02e0 30 20 30 0d 0a 6d 3d 61 75 64 69 6f 20 31 37 33 0 0..m=audio 173 02f0 30 32 20 52 54 50 2f 41 56 50 20 31 38 20 31 30 02 RTP/AVP 18 10 0300 31 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 39 2e 1..c=IN IP4 209. 0310 31 31 34 2e 32 31 39 2e 39 30 0d 0a 61 3d 72 74 114.219.90..a=rt 0320 70 6d 61 70 3a 31 38 20 47 37 32 39 2f 38 30 30 pmap:18 G729/800 0330 30 0d 0a 61 3d 66 6d 74 70 3a 31 38 20 61 6e 6e 0..a=fmtp:18 ann 0340 65 78 62 3d 6e 6f 0d 0a 61 3d 72 74 70 6d 61 70 exb=no..a=rtpmap 0350 3a 31 30 31 20 74 65 6c 65 70 68 6f 6e 65 2d 65 :101 telephone-e 0360 76 65 6e 74 2f 38 30 30 30 0d 0a 61 3d 66 6d 74 vent/8000..a=fmt 0370 70 3a 31 30 31 20 30 2d 31 36 0d 0a p:101 0-16.. No. Time Source Destination Protocol Info 42 0.499241 209.114.219.69 209.114.219.90 SIP Request: ACK sip:003214093773@209.114.219.90:5060 Frame 42 (441 bytes on wire, 441 bytes captured) Arrival Time: Jan 5, 2005 21:54:12.569549000 Time delta from previous packet: 0.000138000 seconds Time since reference or first frame: 0.499241000 seconds Frame Number: 42 Packet Length: 441 bytes Capture Length: 441 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00 Destination: 00:b0:8e:35:44:00 (209.114.219.90) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00) 0001 10.. = Differentiated Services Codepoint: Unknown (0x06) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 427 Identification: 0x0aaf (2735) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xd4f5 (correct) Source: 209.114.219.69 (209.114.219.69) Destination: 209.114.219.90 (209.114.219.90) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 407 Checksum: 0x5b2e (incorrect, should be 0x8a34) Session Initiation Protocol Request-Line: ACK sip:003214093773@209.114.219.90:5060 SIP/2.0 Method: ACK Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK7ef87252 From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Contact: Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 CSeq: 106 ACK User-Agent: HCC Asterisk PBX Content-Length: 0 0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E. 0010 01 ab 0a af 40 00 40 11 d4 f5 d1 72 db 45 d1 72 ....@.@....r.E.r 0020 db 5a 13 c4 13 c4 01 97 5b 2e 41 43 4b 20 73 69 .Z......[.ACK si 0030 70 3a 30 30 33 32 31 34 30 39 33 37 37 33 40 32 p:003214093773@2 0040 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3a 35 30 09.114.219.90:50 0050 36 30 20 53 49 50 2f 32 2e 30 0d 0a 56 69 61 3a 60 SIP/2.0..Via: 0060 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 SIP/2.0/UDP 209 0070 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 .114.219.69:5060 0080 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 37 ;branch=z9hG4bK7 0090 65 66 38 37 32 35 32 0d 0a 46 72 6f 6d 3a 20 22 ef87252..From: " 00a0 33 32 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3213084003" ;tag= 00d0 61 73 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 as721c22c4..To: 00e0 3c 73 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 ;tag=4D099280-7 0110 41 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 73 69 70 A..Contact: ..Cal 0140 6c 2d 49 44 3a 20 35 33 37 62 32 66 38 38 32 36 l-ID: 537b2f8826 0150 38 61 33 62 66 34 31 63 39 32 61 65 65 39 34 38 8a3bf41c92aee948 0160 38 65 38 35 35 33 40 32 30 39 2e 31 31 34 2e 32 8e8553@209.114.2 0170 31 39 2e 36 39 0d 0a 43 53 65 71 3a 20 31 30 36 19.69..CSeq: 106 0180 20 41 43 4b 0d 0a 55 73 65 72 2d 41 67 65 6e 74 ACK..User-Agent 0190 3a 20 48 43 43 20 41 73 74 65 72 69 73 6b 20 50 : HCC Asterisk P 01a0 42 58 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 BX..Content-Leng 01b0 74 68 3a 20 30 0d 0a 0d 0a th: 0.... No. Time Source Destination Protocol Info 43 2.992681 209.114.219.98 209.114.219.69 ARP Who has 209.114.219.69? Tell 209.114.219.98 Frame 43 (60 bytes on wire, 60 bytes captured) Arrival Time: Jan 5, 2005 21:54:15.062989000 Time delta from previous packet: 2.493440000 seconds Time since reference or first frame: 2.992681000 seconds Frame Number: 43 Packet Length: 60 bytes Capture Length: 60 bytes Ethernet II, Src: 00:48:54:6f:8a:d2, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:48:54:6f:8a:d2 (209.114.219.98) Type: ARP (0x0806) Trailer: 00000000000000000000000000000000... Address Resolution Protocol (request) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: request (0x0001) Sender MAC address: 00:48:54:6f:8a:d2 (209.114.219.98) Sender IP address: 209.114.219.98 (209.114.219.98) Target MAC address: 00:00:00:00:00:00 (00:00:00_00:00:00) Target IP address: 209.114.219.69 (209.114.219.69) 0000 00 11 43 58 7a 18 00 48 54 6f 8a d2 08 06 00 01 ..CXz..HTo...... 0010 08 00 06 04 00 01 00 48 54 6f 8a d2 d1 72 db 62 .......HTo...r.b 0020 00 00 00 00 00 00 d1 72 db 45 00 00 00 00 00 00 .......r.E...... 0030 00 00 00 00 00 00 00 00 00 00 00 00 ............ No. Time Source Destination Protocol Info 44 2.992693 209.114.219.69 209.114.219.98 ARP 209.114.219.69 is at 00:11:43:58:7a:18 Frame 44 (42 bytes on wire, 42 bytes captured) Arrival Time: Jan 5, 2005 21:54:15.063001000 Time delta from previous packet: 0.000012000 seconds Time since reference or first frame: 2.992693000 seconds Frame Number: 44 Packet Length: 42 bytes Capture Length: 42 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:48:54:6f:8a:d2 Destination: 00:48:54:6f:8a:d2 (209.114.219.98) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: ARP (0x0806) Address Resolution Protocol (reply) Hardware type: Ethernet (0x0001) Protocol type: IP (0x0800) Hardware size: 6 Protocol size: 4 Opcode: reply (0x0002) Sender MAC address: 00:11:43:58:7a:18 (209.114.219.69) Sender IP address: 209.114.219.69 (209.114.219.69) Target MAC address: 00:48:54:6f:8a:d2 (209.114.219.98) Target IP address: 209.114.219.98 (209.114.219.98) 0000 00 48 54 6f 8a d2 00 11 43 58 7a 18 08 06 00 01 .HTo....CXz..... 0010 08 00 06 04 00 02 00 11 43 58 7a 18 d1 72 db 45 ........CXz..r.E 0020 00 48 54 6f 8a d2 d1 72 db 62 .HTo...r.b No. Time Source Destination Protocol Info 45 7.886927 209.114.219.98 209.114.219.69 SIP/SDP Request: INVITE sip:1001@209.114.219.69, with session description Frame 45 (797 bytes on wire, 797 bytes captured) Arrival Time: Jan 5, 2005 21:54:19.957235000 Time delta from previous packet: 4.894234000 seconds Time since reference or first frame: 7.886927000 seconds Frame Number: 45 Packet Length: 797 bytes Capture Length: 797 bytes Ethernet II, Src: 00:48:54:6f:8a:d2, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:48:54:6f:8a:d2 (209.114.219.98) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.98 (209.114.219.98), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 783 Identification: 0x0333 (819) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (0x11) Header checksum: 0x621d (correct) Source: 209.114.219.98 (209.114.219.98) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 763 Checksum: 0xc390 (correct) Session Initiation Protocol Request-Line: INVITE sip:1001@209.114.219.69 SIP/2.0 Method: INVITE Resent Packet: False Message Header Via: SIP/2.0/UDP 192.168.200.169:5060 From: 3213084003 ;tag=3518047997 SIP Display info: 3213084003 SIP from address: sip:3213084003@209.114.219.69 SIP tag: 3518047997 To: ;tag=as6a4d6dad SIP to address: sip:1001@209.114.219.69 SIP tag: as6a4d6dad Call-ID: 1314847947@192.168.200.169 CSeq: 2 INVITE Contact: 3213084003 User-Agent: Cisco ATA 186 v3.1.0 atasip (040211A) Expires: 10 Allow: ACK, BYE, CANCEL, INVITE, NOTIFY, OPTIONS, REFER, REGISTER Content-Length: 220 Content-Type: application/sdp Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): 3213084003 3113 3113 IN IP4 192.168.200.169 Owner Username: 3213084003 Session ID: 3113 Session Version: 3113 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 192.168.200.169 Session Name (s): ATA186 Call Connection Information (c): IN IP4 0.0.0.0 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 0.0.0.0 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 16384 RTP/AVP 18 101 Media Type: audio Media Port: 16384 Media Proto: RTP/AVP Media Format: ITU-T G.729 Media Format: 101 Media Attribute (a): rtpmap:18 G729/8000/1 Media Attribute Fieldname: rtpmap Media Attribute Value: 18 G729/8000/1 Media Attribute (a): fmtp:18 annexb=no Media Attribute Fieldname: fmtp Media Attribute Value: 18 annexb=no Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-15 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-15 0000 00 11 43 58 7a 18 00 48 54 6f 8a d2 08 00 45 00 ..CXz..HTo....E. 0010 03 0f 03 33 00 00 f9 11 62 1d d1 72 db 62 d1 72 ...3....b..r.b.r 0020 db 45 13 c4 13 c4 02 fb c3 90 49 4e 56 49 54 45 .E........INVITE 0030 20 73 69 70 3a 31 30 30 31 40 32 30 39 2e 31 31 sip:1001@209.11 0040 34 2e 32 31 39 2e 36 39 20 53 49 50 2f 32 2e 30 4.219.69 SIP/2.0 0050 0d 0a 56 69 61 3a 20 53 49 50 2f 32 2e 30 2f 55 ..Via: SIP/2.0/U 0060 44 50 20 31 39 32 2e 31 36 38 2e 32 30 30 2e 31 DP 192.168.200.1 0070 36 39 3a 35 30 36 30 0d 0a 46 72 6f 6d 3a 20 33 69:5060..From: 3 0080 32 31 33 30 38 34 30 30 33 20 3c 73 69 70 3a 33 213084003 ;tag=3518047 00c0 39 39 37 0d 0a 54 6f 3a 20 3c 73 69 70 3a 31 30 997..To: ;ta 00f0 67 3d 61 73 36 61 34 64 36 64 61 64 0d 0a 43 61 g=as6a4d6dad..Ca 0100 6c 6c 2d 49 44 3a 20 31 33 31 34 38 34 37 39 34 ll-ID: 131484794 0110 37 40 31 39 32 2e 31 36 38 2e 32 30 30 2e 31 36 7@192.168.200.16 0120 39 0d 0a 43 53 65 71 3a 20 32 20 49 4e 56 49 54 9..CSeq: 2 INVIT 0130 45 0d 0a 43 6f 6e 74 61 63 74 3a 20 33 32 31 33 E..Contact: 3213 0140 30 38 34 30 30 33 20 3c 73 69 70 3a 33 32 31 33 084003 ..User-Agen 0190 74 3a 20 43 69 73 63 6f 20 41 54 41 20 31 38 36 t: Cisco ATA 186 01a0 20 20 76 33 2e 31 2e 30 20 61 74 61 73 69 70 20 v3.1.0 atasip 01b0 28 30 34 30 32 31 31 41 29 0d 0a 45 78 70 69 72 (040211A)..Expir 01c0 65 73 3a 20 31 30 0d 0a 41 6c 6c 6f 77 3a 20 41 es: 10..Allow: A 01d0 43 4b 2c 20 42 59 45 2c 20 43 41 4e 43 45 4c 2c CK, BYE, CANCEL, 01e0 20 49 4e 56 49 54 45 2c 20 4e 4f 54 49 46 59 2c INVITE, NOTIFY, 01f0 20 4f 50 54 49 4f 4e 53 2c 20 52 45 46 45 52 2c OPTIONS, REFER, 0200 20 52 45 47 49 53 54 45 52 0d 0a 43 6f 6e 74 65 REGISTER..Conte 0210 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 32 30 0d 0a nt-Length: 220.. 0220 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 Content-Type: ap 0230 70 6c 69 63 61 74 69 6f 6e 2f 73 64 70 0d 0a 0d plication/sdp... 0240 0a 76 3d 30 0d 0a 6f 3d 33 32 31 33 30 38 34 30 .v=0..o=32130840 0250 30 33 20 33 31 31 33 20 33 31 31 33 20 49 4e 20 03 3113 3113 IN 0260 49 50 34 20 31 39 32 2e 31 36 38 2e 32 30 30 2e IP4 192.168.200. 0270 31 36 39 0d 0a 73 3d 41 54 41 31 38 36 20 43 61 169..s=ATA186 Ca 0280 6c 6c 0d 0a 63 3d 49 4e 20 49 50 34 20 30 2e 30 ll..c=IN IP4 0.0 0290 2e 30 2e 30 0d 0a 74 3d 30 20 30 0d 0a 6d 3d 61 .0.0..t=0 0..m=a 02a0 75 64 69 6f 20 31 36 33 38 34 20 52 54 50 2f 41 udio 16384 RTP/A 02b0 56 50 20 31 38 20 31 30 31 0d 0a 61 3d 72 74 70 VP 18 101..a=rtp 02c0 6d 61 70 3a 31 38 20 47 37 32 39 2f 38 30 30 30 map:18 G729/8000 02d0 2f 31 0d 0a 61 3d 66 6d 74 70 3a 31 38 20 61 6e /1..a=fmtp:18 an 02e0 6e 65 78 62 3d 6e 6f 0d 0a 61 3d 72 74 70 6d 61 nexb=no..a=rtpma 02f0 70 3a 31 30 31 20 74 65 6c 65 70 68 6f 6e 65 2d p:101 telephone- 0300 65 76 65 6e 74 2f 38 30 30 30 0d 0a 61 3d 66 6d event/8000..a=fm 0310 74 70 3a 31 30 31 20 30 2d 31 35 0d 0a tp:101 0-15.. No. Time Source Destination Protocol Info 46 7.887243 209.114.219.69 209.114.219.98 SIP/SDP Status: 200 OK, with session description Frame 46 (707 bytes on wire, 707 bytes captured) Arrival Time: Jan 5, 2005 21:54:19.957551000 Time delta from previous packet: 0.000316000 seconds Time since reference or first frame: 7.887243000 seconds Frame Number: 46 Packet Length: 707 bytes Capture Length: 707 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:48:54:6f:8a:d2 Destination: 00:48:54:6f:8a:d2 (209.114.219.98) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.98 (209.114.219.98) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00) 0001 10.. = Differentiated Services Codepoint: Unknown (0x06) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 693 Identification: 0x0ab1 (2737) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xd3e1 (correct) Source: 209.114.219.69 (209.114.219.69) Destination: 209.114.219.98 (209.114.219.98) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 673 Checksum: 0x5c40 (incorrect, should be 0x5591) Session Initiation Protocol Status-Line: SIP/2.0 200 OK Status-Code: 200 Resent Packet: False Message Header Via: SIP/2.0/UDP 192.168.200.169:5060;received=209.114.219.98;rport=5060 From: 3213084003 ;tag=3518047997 SIP Display info: 3213084003 SIP from address: sip:3213084003@209.114.219.69 SIP tag: 3518047997 To: ;tag=as6a4d6dad SIP to address: sip:1001@209.114.219.69 SIP tag: as6a4d6dad Call-ID: 1314847947@192.168.200.169 CSeq: 2 INVITE User-Agent: HCC Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER Contact: Content-Type: application/sdp Content-Length: 220 Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): root 3032 3035 IN IP4 209.114.219.90 Owner Username: root Session ID: 3032 Session Version: 3035 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 209.114.219.90 Session Name (s): session Connection Information (c): IN IP4 209.114.219.90 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 209.114.219.90 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 17302 RTP/AVP 18 101 Media Type: audio Media Port: 17302 Media Proto: RTP/AVP Media Format: ITU-T G.729 Media Format: 101 Media Attribute (a): rtpmap:18 G729/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 18 G729/8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-16 Media Attribute (a): silenceSupp:off - - - - Media Attribute Fieldname: silenceSupp Media Attribute Value: off - - - - 0000 00 48 54 6f 8a d2 00 11 43 58 7a 18 08 00 45 18 .HTo....CXz...E. 0010 02 b5 0a b1 40 00 40 11 d3 e1 d1 72 db 45 d1 72 ....@.@....r.E.r 0020 db 62 13 c4 13 c4 02 a1 5c 40 53 49 50 2f 32 2e .b......\@SIP/2. 0030 30 20 32 30 30 20 4f 4b 0d 0a 56 69 61 3a 20 53 0 200 OK..Via: S 0040 49 50 2f 32 2e 30 2f 55 44 50 20 31 39 32 2e 31 IP/2.0/UDP 192.1 0050 36 38 2e 32 30 30 2e 31 36 39 3a 35 30 36 30 3b 68.200.169:5060; 0060 72 65 63 65 69 76 65 64 3d 32 30 39 2e 31 31 34 received=209.114 0070 2e 32 31 39 2e 39 38 3b 72 70 6f 72 74 3d 35 30 .219.98;rport=50 0080 36 30 0d 0a 46 72 6f 6d 3a 20 33 32 31 33 30 38 60..From: 321308 0090 34 30 30 33 20 3c 73 69 70 3a 33 32 31 33 30 38 4003 ; 00c0 74 61 67 3d 33 35 31 38 30 34 37 39 39 37 0d 0a tag=3518047997.. 00d0 54 6f 3a 20 3c 73 69 70 3a 31 30 30 31 40 32 30 To: ;tag=as6 0100 61 34 64 36 64 61 64 0d 0a 43 61 6c 6c 2d 49 44 a4d6dad..Call-ID 0110 3a 20 31 33 31 34 38 34 37 39 34 37 40 31 39 32 : 1314847947@192 0120 2e 31 36 38 2e 32 30 30 2e 31 36 39 0d 0a 43 53 .168.200.169..CS 0130 65 71 3a 20 32 20 49 4e 56 49 54 45 0d 0a 55 73 eq: 2 INVITE..Us 0140 65 72 2d 41 67 65 6e 74 3a 20 48 43 43 20 41 73 er-Agent: HCC As 0150 74 65 72 69 73 6b 20 50 42 58 0d 0a 41 6c 6c 6f terisk PBX..Allo 0160 77 3a 20 49 4e 56 49 54 45 2c 20 41 43 4b 2c 20 w: INVITE, ACK, 0170 43 41 4e 43 45 4c 2c 20 4f 50 54 49 4f 4e 53 2c CANCEL, OPTIONS, 0180 20 42 59 45 2c 20 52 45 46 45 52 0d 0a 43 6f 6e BYE, REFER..Con 0190 74 61 63 74 3a 20 3c 73 69 70 3a 31 30 30 31 40 tact: . 01b0 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 .Content-Type: a 01c0 70 70 6c 69 63 61 74 69 6f 6e 2f 73 64 70 0d 0a pplication/sdp.. 01d0 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 Content-Length: 01e0 32 32 30 0d 0a 0d 0a 76 3d 30 0d 0a 6f 3d 72 6f 220....v=0..o=ro 01f0 6f 74 20 33 30 33 32 20 33 30 33 35 20 49 4e 20 ot 3032 3035 IN 0200 49 50 34 20 32 30 39 2e 31 31 34 2e 32 31 39 2e IP4 209.114.219. 0210 39 30 0d 0a 73 3d 73 65 73 73 69 6f 6e 0d 0a 63 90..s=session..c 0220 3d 49 4e 20 49 50 34 20 32 30 39 2e 31 31 34 2e =IN IP4 209.114. 0230 32 31 39 2e 39 30 0d 0a 74 3d 30 20 30 0d 0a 6d 219.90..t=0 0..m 0240 3d 61 75 64 69 6f 20 31 37 33 30 32 20 52 54 50 =audio 17302 RTP 0250 2f 41 56 50 20 31 38 20 31 30 31 0d 0a 61 3d 72 /AVP 18 101..a=r 0260 74 70 6d 61 70 3a 31 38 20 47 37 32 39 2f 38 30 tpmap:18 G729/80 0270 30 30 0d 0a 61 3d 72 74 70 6d 61 70 3a 31 30 31 00..a=rtpmap:101 0280 20 74 65 6c 65 70 68 6f 6e 65 2d 65 76 65 6e 74 telephone-event 0290 2f 38 30 30 30 0d 0a 61 3d 66 6d 74 70 3a 31 30 /8000..a=fmtp:10 02a0 31 20 30 2d 31 36 0d 0a 61 3d 73 69 6c 65 6e 63 1 0-16..a=silenc 02b0 65 53 75 70 70 3a 6f 66 66 20 2d 20 2d 20 2d 20 eSupp:off - - - 02c0 2d 0d 0a -.. No. Time Source Destination Protocol Info 47 7.887503 209.114.219.69 209.114.219.90 SIP/SDP Request: INVITE sip:003214093773@209.114.219.90:5060, with session description Frame 47 (820 bytes on wire, 820 bytes captured) Arrival Time: Jan 5, 2005 21:54:19.957811000 Time delta from previous packet: 0.000260000 seconds Time since reference or first frame: 7.887503000 seconds Frame Number: 47 Packet Length: 820 bytes Capture Length: 820 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00 Destination: 00:b0:8e:35:44:00 (209.114.219.90) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00) 0001 10.. = Differentiated Services Codepoint: Unknown (0x06) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 806 Identification: 0x0ab2 (2738) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xd377 (correct) Source: 209.114.219.69 (209.114.219.69) Destination: 209.114.219.90 (209.114.219.90) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 786 Checksum: 0x5ca9 (incorrect, should be 0x12a8) Session Initiation Protocol Request-Line: INVITE sip:003214093773@209.114.219.90:5060 SIP/2.0 Method: INVITE Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK5df422a7 From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Contact: Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 CSeq: 107 INVITE User-Agent: HCC Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER Content-Type: application/sdp Content-Length: 291 Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): root 3032 3037 IN IP4 209.114.219.69 Owner Username: root Session ID: 3032 Session Version: 3037 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 209.114.219.69 Session Name (s): session Connection Information (c): IN IP4 209.114.219.69 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 209.114.219.69 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 10770 RTP/AVP 0 8 3 18 101 Media Type: audio Media Port: 10770 Media Proto: RTP/AVP Media Format: ITU-T G.711 PCMU Media Format: ITU-T G.711 PCMA Media Format: GSM 06.10 Media Format: ITU-T G.729 Media Format: 101 Media Attribute (a): rtpmap:0 PCMU/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 0 PCMU/8000 Media Attribute (a): rtpmap:8 PCMA/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 8 PCMA/8000 Media Attribute (a): rtpmap:3 GSM/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 3 GSM/8000 Media Attribute (a): rtpmap:18 G729/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 18 G729/8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-16 Media Attribute (a): silenceSupp:off - - - - Media Attribute Fieldname: silenceSupp Media Attribute Value: off - - - - 0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E. 0010 03 26 0a b2 40 00 40 11 d3 77 d1 72 db 45 d1 72 .&..@.@..w.r.E.r 0020 db 5a 13 c4 13 c4 03 12 5c a9 49 4e 56 49 54 45 .Z......\.INVITE 0030 20 73 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 sip:00321409377 0040 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3@209.114.219.90 0050 3a 35 30 36 30 20 53 49 50 2f 32 2e 30 0d 0a 56 :5060 SIP/2.0..V 0060 69 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 ia: SIP/2.0/UDP 0070 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 209.114.219.69:5 0080 30 36 30 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 060;branch=z9hG4 0090 62 4b 35 64 66 34 32 32 61 37 0d 0a 46 72 6f 6d bK5df422a7..From 00a0 3a 20 22 33 32 31 33 30 38 34 30 30 33 22 20 3c : "3213084003" < 00b0 73 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 sip:3213084003@2 00c0 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 3b 74 09.114.219.69>;t 00d0 61 67 3d 61 73 37 32 31 63 32 32 63 34 0d 0a 54 ag=as721c22c4..T 00e0 6f 3a 20 3c 73 69 70 3a 30 30 33 32 31 34 30 39 o: ;tag=4D09928 0110 30 2d 37 41 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 0-7A..Contact: < 0120 73 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 sip:3213084003@2 0130 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 0d 0a 09.114.219.69>.. 0140 43 61 6c 6c 2d 49 44 3a 20 35 33 37 62 32 66 38 Call-ID: 537b2f8 0150 38 32 36 38 61 33 62 66 34 31 63 39 32 61 65 65 8268a3bf41c92aee 0160 39 34 38 38 65 38 35 35 33 40 32 30 39 2e 31 31 9488e8553@209.11 0170 34 2e 32 31 39 2e 36 39 0d 0a 43 53 65 71 3a 20 4.219.69..CSeq: 0180 31 30 37 20 49 4e 56 49 54 45 0d 0a 55 73 65 72 107 INVITE..User 0190 2d 41 67 65 6e 74 3a 20 48 43 43 20 41 73 74 65 -Agent: HCC Aste 01a0 72 69 73 6b 20 50 42 58 0d 0a 41 6c 6c 6f 77 3a risk PBX..Allow: 01b0 20 49 4e 56 49 54 45 2c 20 41 43 4b 2c 20 43 41 INVITE, ACK, CA 01c0 4e 43 45 4c 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 NCEL, OPTIONS, B 01d0 59 45 2c 20 52 45 46 45 52 0d 0a 43 6f 6e 74 65 YE, REFER..Conte 01e0 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 nt-Type: applica 01f0 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f 6e 74 65 6e tion/sdp..Conten 0200 74 2d 4c 65 6e 67 74 68 3a 20 32 39 31 0d 0a 0d t-Length: 291... 0210 0a 76 3d 30 0d 0a 6f 3d 72 6f 6f 74 20 33 30 33 .v=0..o=root 303 0220 32 20 33 30 33 37 20 49 4e 20 49 50 34 20 32 30 2 3037 IN IP4 20 0230 39 2e 31 31 34 2e 32 31 39 2e 36 39 0d 0a 73 3d 9.114.219.69..s= 0240 73 65 73 73 69 6f 6e 0d 0a 63 3d 49 4e 20 49 50 session..c=IN IP 0250 34 20 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 4 209.114.219.69 0260 0d 0a 74 3d 30 20 30 0d 0a 6d 3d 61 75 64 69 6f ..t=0 0..m=audio 0270 20 31 30 37 37 30 20 52 54 50 2f 41 56 50 20 30 10770 RTP/AVP 0 0280 20 38 20 33 20 31 38 20 31 30 31 0d 0a 61 3d 72 8 3 18 101..a=r 0290 74 70 6d 61 70 3a 30 20 50 43 4d 55 2f 38 30 30 tpmap:0 PCMU/800 02a0 30 0d 0a 61 3d 72 74 70 6d 61 70 3a 38 20 50 43 0..a=rtpmap:8 PC 02b0 4d 41 2f 38 30 30 30 0d 0a 61 3d 72 74 70 6d 61 MA/8000..a=rtpma 02c0 70 3a 33 20 47 53 4d 2f 38 30 30 30 0d 0a 61 3d p:3 GSM/8000..a= 02d0 72 74 70 6d 61 70 3a 31 38 20 47 37 32 39 2f 38 rtpmap:18 G729/8 02e0 30 30 30 0d 0a 61 3d 72 74 70 6d 61 70 3a 31 30 000..a=rtpmap:10 02f0 31 20 74 65 6c 65 70 68 6f 6e 65 2d 65 76 65 6e 1 telephone-even 0300 74 2f 38 30 30 30 0d 0a 61 3d 66 6d 74 70 3a 31 t/8000..a=fmtp:1 0310 30 31 20 30 2d 31 36 0d 0a 61 3d 73 69 6c 65 6e 01 0-16..a=silen 0320 63 65 53 75 70 70 3a 6f 66 66 20 2d 20 2d 20 2d ceSupp:off - - - 0330 20 2d 0d 0a -.. No. Time Source Destination Protocol Info 48 7.893405 209.114.219.90 209.114.219.69 SIP Status: 100 Trying Frame 48 (445 bytes on wire, 445 bytes captured) Arrival Time: Jan 5, 2005 21:54:19.963713000 Time delta from previous packet: 0.005902000 seconds Time since reference or first frame: 7.893405000 seconds Frame Number: 48 Packet Length: 445 bytes Capture Length: 445 bytes Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:b0:8e:35:44:00 (209.114.219.90) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00) 0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 431 Identification: 0x3525 (13605) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x2b2b (correct) Source: 209.114.219.90 (209.114.219.90) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060) Source port: 56262 (56262) Destination port: 5060 (5060) Length: 411 Checksum: 0x141d (correct) Session Initiation Protocol Status-Line: SIP/2.0 100 Trying Status-Code: 100 Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK5df422a7 From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Date: Wed, 05 Jan 2005 23:34:50 GMT Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 Server: Cisco-SIPGateway/IOS-12.x CSeq: 107 INVITE Allow-Events: telephone-event Content-Length: 0 0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh 0010 01 af 35 25 00 00 ff 11 2b 2b d1 72 db 5a d1 72 ..5%....++.r.Z.r 0020 db 45 db c6 13 c4 01 9b 14 1d 53 49 50 2f 32 2e .E........SIP/2. 0030 30 20 31 30 30 20 54 72 79 69 6e 67 0d 0a 56 69 0 100 Trying..Vi 0040 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 a: SIP/2.0/UDP 2 0050 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 09.114.219.69:50 0060 36 30 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 60;branch=z9hG4b 0070 4b 35 64 66 34 32 32 61 37 0d 0a 46 72 6f 6d 3a K5df422a7..From: 0080 20 22 33 32 31 33 30 38 34 30 30 33 22 20 3c 73 "3213084003" ;ta 00b0 67 3d 61 73 37 32 31 63 32 32 63 34 0d 0a 54 6f g=as721c22c4..To 00c0 3a 20 3c 73 69 70 3a 30 30 33 32 31 34 30 39 33 : ;tag=4D099280 00f0 2d 37 41 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 -7A..Date: Wed, 0100 30 35 20 4a 61 6e 20 32 30 30 35 20 32 33 3a 33 05 Jan 2005 23:3 0110 34 3a 35 30 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 4:50 GMT..Call-I 0120 44 3a 20 35 33 37 62 32 66 38 38 32 36 38 61 33 D: 537b2f88268a3 0130 62 66 34 31 63 39 32 61 65 65 39 34 38 38 65 38 bf41c92aee9488e8 0140 35 35 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 553@209.114.219. 0150 36 39 0d 0a 53 65 72 76 65 72 3a 20 43 69 73 63 69..Server: Cisc 0160 6f 2d 53 49 50 47 61 74 65 77 61 79 2f 49 4f 53 o-SIPGateway/IOS 0170 2d 31 32 2e 78 0d 0a 43 53 65 71 3a 20 31 30 37 -12.x..CSeq: 107 0180 20 49 4e 56 49 54 45 0d 0a 41 6c 6c 6f 77 2d 45 INVITE..Allow-E 0190 76 65 6e 74 73 3a 20 74 65 6c 65 70 68 6f 6e 65 vents: telephone 01a0 2d 65 76 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d -event..Content- 01b0 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Length: 0.... No. Time Source Destination Protocol Info 49 7.894628 209.114.219.90 209.114.219.69 SIP/SDP Status: 200 OK, with session description Frame 49 (892 bytes on wire, 892 bytes captured) Arrival Time: Jan 5, 2005 21:54:19.964936000 Time delta from previous packet: 0.001223000 seconds Time since reference or first frame: 7.894628000 seconds Frame Number: 49 Packet Length: 892 bytes Capture Length: 892 bytes Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:b0:8e:35:44:00 (209.114.219.90) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00) 0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 878 Identification: 0x3526 (13606) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x296b (correct) Source: 209.114.219.90 (209.114.219.90) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060) Source port: 56262 (56262) Destination port: 5060 (5060) Length: 858 Checksum: 0x07e5 (correct) Session Initiation Protocol Status-Line: SIP/2.0 200 OK Status-Code: 200 Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK5df422a7 From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Date: Wed, 05 Jan 2005 23:34:50 GMT Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 Server: Cisco-SIPGateway/IOS-12.x CSeq: 107 INVITE Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER Allow-Events: telephone-event Contact: Content-Type: application/sdp Content-Length: 263 Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): CiscoSystemsSIP-GW-UserAgent 614 7264 IN IP4 209.114.219.90 Owner Username: CiscoSystemsSIP-GW-UserAgent Session ID: 614 Session Version: 7264 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 209.114.219.90 Session Name (s): SIP Call Connection Information (c): IN IP4 209.114.219.90 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 209.114.219.90 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 17302 RTP/AVP 18 101 Media Type: audio Media Port: 17302 Media Proto: RTP/AVP Media Format: ITU-T G.729 Media Format: 101 Connection Information (c): IN IP4 209.114.219.90 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 209.114.219.90 Media Attribute (a): rtpmap:18 G729/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 18 G729/8000 Media Attribute (a): fmtp:18 annexb=no Media Attribute Fieldname: fmtp Media Attribute Value: 18 annexb=no Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-16 0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh 0010 03 6e 35 26 00 00 ff 11 29 6b d1 72 db 5a d1 72 .n5&....)k.r.Z.r 0020 db 45 db c6 13 c4 03 5a 07 e5 53 49 50 2f 32 2e .E.....Z..SIP/2. 0030 30 20 32 30 30 20 4f 4b 0d 0a 56 69 61 3a 20 53 0 200 OK..Via: S 0040 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 2e 31 IP/2.0/UDP 209.1 0050 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 3b 62 14.219.69:5060;b 0060 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 35 64 66 ranch=z9hG4bK5df 0070 34 32 32 61 37 0d 0a 46 72 6f 6d 3a 20 22 33 32 422a7..From: "32 0080 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3a 33 13084003" ;tag=as 00b0 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 3c 73 721c22c4..To: ; 00e0 74 61 67 3d 34 44 30 39 39 32 38 30 2d 37 41 0d tag=4D099280-7A. 00f0 0a 44 61 74 65 3a 20 57 65 64 2c 20 30 35 20 4a .Date: Wed, 05 J 0100 61 6e 20 32 30 30 35 20 32 33 3a 33 34 3a 35 30 an 2005 23:34:50 0110 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 44 3a 20 35 GMT..Call-ID: 5 0120 33 37 62 32 66 38 38 32 36 38 61 33 62 66 34 31 37b2f88268a3bf41 0130 63 39 32 61 65 65 39 34 38 38 65 38 35 35 33 40 c92aee9488e8553@ 0140 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 0d 0a 209.114.219.69.. 0150 53 65 72 76 65 72 3a 20 43 69 73 63 6f 2d 53 49 Server: Cisco-SI 0160 50 47 61 74 65 77 61 79 2f 49 4f 53 2d 31 32 2e PGateway/IOS-12. 0170 78 0d 0a 43 53 65 71 3a 20 31 30 37 20 49 4e 56 x..CSeq: 107 INV 0180 49 54 45 0d 0a 41 6c 6c 6f 77 3a 20 49 4e 56 49 ITE..Allow: INVI 0190 54 45 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 59 45 TE, OPTIONS, BYE 01a0 2c 20 43 41 4e 43 45 4c 2c 20 41 43 4b 2c 20 50 , CANCEL, ACK, P 01b0 52 41 43 4b 2c 20 43 4f 4d 45 54 2c 20 52 45 46 RACK, COMET, REF 01c0 45 52 2c 20 53 55 42 53 43 52 49 42 45 2c 20 4e ER, SUBSCRIBE, N 01d0 4f 54 49 46 59 2c 20 49 4e 46 4f 2c 20 55 50 44 OTIFY, INFO, UPD 01e0 41 54 45 2c 20 52 45 47 49 53 54 45 52 0d 0a 41 ATE, REGISTER..A 01f0 6c 6c 6f 77 2d 45 76 65 6e 74 73 3a 20 74 65 6c llow-Events: tel 0200 65 70 68 6f 6e 65 2d 65 76 65 6e 74 0d 0a 43 6f ephone-event..Co 0210 6e 74 61 63 74 3a 20 3c 73 69 70 3a 30 30 33 32 ntact: ..C 0240 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 ontent-Type: app 0250 6c 69 63 61 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f lication/sdp..Co 0260 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 36 ntent-Length: 26 0270 33 0d 0a 0d 0a 76 3d 30 0d 0a 6f 3d 43 69 73 63 3....v=0..o=Cisc 0280 6f 53 79 73 74 65 6d 73 53 49 50 2d 47 57 2d 55 oSystemsSIP-GW-U 0290 73 65 72 41 67 65 6e 74 20 36 31 34 20 37 32 36 serAgent 614 726 02a0 34 20 49 4e 20 49 50 34 20 32 30 39 2e 31 31 34 4 IN IP4 209.114 02b0 2e 32 31 39 2e 39 30 0d 0a 73 3d 53 49 50 20 43 .219.90..s=SIP C 02c0 61 6c 6c 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 all..c=IN IP4 20 02d0 39 2e 31 31 34 2e 32 31 39 2e 39 30 0d 0a 74 3d 9.114.219.90..t= 02e0 30 20 30 0d 0a 6d 3d 61 75 64 69 6f 20 31 37 33 0 0..m=audio 173 02f0 30 32 20 52 54 50 2f 41 56 50 20 31 38 20 31 30 02 RTP/AVP 18 10 0300 31 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 39 2e 1..c=IN IP4 209. 0310 31 31 34 2e 32 31 39 2e 39 30 0d 0a 61 3d 72 74 114.219.90..a=rt 0320 70 6d 61 70 3a 31 38 20 47 37 32 39 2f 38 30 30 pmap:18 G729/800 0330 30 0d 0a 61 3d 66 6d 74 70 3a 31 38 20 61 6e 6e 0..a=fmtp:18 ann 0340 65 78 62 3d 6e 6f 0d 0a 61 3d 72 74 70 6d 61 70 exb=no..a=rtpmap 0350 3a 31 30 31 20 74 65 6c 65 70 68 6f 6e 65 2d 65 :101 telephone-e 0360 76 65 6e 74 2f 38 30 30 30 0d 0a 61 3d 66 6d 74 vent/8000..a=fmt 0370 70 3a 31 30 31 20 30 2d 31 36 0d 0a p:101 0-16.. No. Time Source Destination Protocol Info 50 7.894808 209.114.219.69 209.114.219.90 SIP Request: ACK sip:003214093773@209.114.219.90:5060 Frame 50 (441 bytes on wire, 441 bytes captured) Arrival Time: Jan 5, 2005 21:54:19.965116000 Time delta from previous packet: 0.000180000 seconds Time since reference or first frame: 7.894808000 seconds Frame Number: 50 Packet Length: 441 bytes Capture Length: 441 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00 Destination: 00:b0:8e:35:44:00 (209.114.219.90) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00) 0001 10.. = Differentiated Services Codepoint: Unknown (0x06) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 427 Identification: 0x0ab3 (2739) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xd4f1 (correct) Source: 209.114.219.69 (209.114.219.69) Destination: 209.114.219.90 (209.114.219.90) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 407 Checksum: 0x5b2e (incorrect, should be 0x5a3a) Session Initiation Protocol Request-Line: ACK sip:003214093773@209.114.219.90:5060 SIP/2.0 Method: ACK Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK6f6dc532 From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Contact: Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 CSeq: 107 ACK User-Agent: HCC Asterisk PBX Content-Length: 0 0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E. 0010 01 ab 0a b3 40 00 40 11 d4 f1 d1 72 db 45 d1 72 ....@.@....r.E.r 0020 db 5a 13 c4 13 c4 01 97 5b 2e 41 43 4b 20 73 69 .Z......[.ACK si 0030 70 3a 30 30 33 32 31 34 30 39 33 37 37 33 40 32 p:003214093773@2 0040 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3a 35 30 09.114.219.90:50 0050 36 30 20 53 49 50 2f 32 2e 30 0d 0a 56 69 61 3a 60 SIP/2.0..Via: 0060 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 SIP/2.0/UDP 209 0070 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 .114.219.69:5060 0080 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 36 ;branch=z9hG4bK6 0090 66 36 64 63 35 33 32 0d 0a 46 72 6f 6d 3a 20 22 f6dc532..From: " 00a0 33 32 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3213084003" ;tag= 00d0 61 73 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 as721c22c4..To: 00e0 3c 73 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 ;tag=4D099280-7 0110 41 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 73 69 70 A..Contact: ..Cal 0140 6c 2d 49 44 3a 20 35 33 37 62 32 66 38 38 32 36 l-ID: 537b2f8826 0150 38 61 33 62 66 34 31 63 39 32 61 65 65 39 34 38 8a3bf41c92aee948 0160 38 65 38 35 35 33 40 32 30 39 2e 31 31 34 2e 32 8e8553@209.114.2 0170 31 39 2e 36 39 0d 0a 43 53 65 71 3a 20 31 30 37 19.69..CSeq: 107 0180 20 41 43 4b 0d 0a 55 73 65 72 2d 41 67 65 6e 74 ACK..User-Agent 0190 3a 20 48 43 43 20 41 73 74 65 72 69 73 6b 20 50 : HCC Asterisk P 01a0 42 58 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 BX..Content-Leng 01b0 74 68 3a 20 30 0d 0a 0d 0a th: 0.... No. Time Source Destination Protocol Info 51 7.916835 209.114.219.98 209.114.219.69 SIP Request: ACK sip:1001@209.114.219.69 Frame 51 (374 bytes on wire, 374 bytes captured) Arrival Time: Jan 5, 2005 21:54:19.987143000 Time delta from previous packet: 0.022027000 seconds Time since reference or first frame: 7.916835000 seconds Frame Number: 51 Packet Length: 374 bytes Capture Length: 374 bytes Ethernet II, Src: 00:48:54:6f:8a:d2, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:48:54:6f:8a:d2 (209.114.219.98) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.98 (209.114.219.98), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 360 Identification: 0x0334 (820) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (0x11) Header checksum: 0x63c3 (correct) Source: 209.114.219.98 (209.114.219.98) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 340 Checksum: 0xc56a (correct) Session Initiation Protocol Request-Line: ACK sip:1001@209.114.219.69 SIP/2.0 Method: ACK Resent Packet: False Message Header Via: SIP/2.0/UDP 192.168.200.169:5060 From: 3213084003 ;tag=3518047997 SIP Display info: 3213084003 SIP from address: sip:3213084003@209.114.219.69 SIP tag: 3518047997 To: ;tag=as6a4d6dad SIP to address: sip:1001@209.114.219.69 SIP tag: as6a4d6dad Call-ID: 1314847947@192.168.200.169 CSeq: 2 ACK User-Agent: Cisco ATA 186 v3.1.0 atasip (040211A) Content-Length: 0 0000 00 11 43 58 7a 18 00 48 54 6f 8a d2 08 00 45 00 ..CXz..HTo....E. 0010 01 68 03 34 00 00 f9 11 63 c3 d1 72 db 62 d1 72 .h.4....c..r.b.r 0020 db 45 13 c4 13 c4 01 54 c5 6a 41 43 4b 20 73 69 .E.....T.jACK si 0030 70 3a 31 30 30 31 40 32 30 39 2e 31 31 34 2e 32 p:1001@209.114.2 0040 31 39 2e 36 39 20 53 49 50 2f 32 2e 30 0d 0a 56 19.69 SIP/2.0..V 0050 69 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 ia: SIP/2.0/UDP 0060 31 39 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 3a 192.168.200.169: 0070 35 30 36 30 0d 0a 46 72 6f 6d 3a 20 33 32 31 33 5060..From: 3213 0080 30 38 34 30 30 33 20 3c 73 69 70 3a 33 32 31 33 084003 ;tag=3518047997 00c0 0d 0a 54 6f 3a 20 3c 73 69 70 3a 31 30 30 31 40 ..To: ;tag=a 00f0 73 36 61 34 64 36 64 61 64 0d 0a 43 61 6c 6c 2d s6a4d6dad..Call- 0100 49 44 3a 20 31 33 31 34 38 34 37 39 34 37 40 31 ID: 1314847947@1 0110 39 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 0d 0a 92.168.200.169.. 0120 43 53 65 71 3a 20 32 20 41 43 4b 0d 0a 55 73 65 CSeq: 2 ACK..Use 0130 72 2d 41 67 65 6e 74 3a 20 43 69 73 63 6f 20 41 r-Agent: Cisco A 0140 54 41 20 31 38 36 20 20 76 33 2e 31 2e 30 20 61 TA 186 v3.1.0 a 0150 74 61 73 69 70 20 28 30 34 30 32 31 31 41 29 0d tasip (040211A). 0160 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a .Content-Length: 0170 20 30 0d 0a 0d 0a 0.... No. Time Source Destination Protocol Info 52 9.721768 209.114.219.98 209.114.219.69 SIP Request: BYE sip:1001@209.114.219.69 Frame 52 (374 bytes on wire, 374 bytes captured) Arrival Time: Jan 5, 2005 21:54:21.792076000 Time delta from previous packet: 1.804933000 seconds Time since reference or first frame: 9.721768000 seconds Frame Number: 52 Packet Length: 374 bytes Capture Length: 374 bytes Ethernet II, Src: 00:48:54:6f:8a:d2, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:48:54:6f:8a:d2 (209.114.219.98) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.98 (209.114.219.98), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 360 Identification: 0x0335 (821) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 249 Protocol: UDP (0x11) Header checksum: 0x63c2 (correct) Source: 209.114.219.98 (209.114.219.98) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 340 Checksum: 0xce3e (correct) Session Initiation Protocol Request-Line: BYE sip:1001@209.114.219.69 SIP/2.0 Method: BYE Resent Packet: False Message Header Via: SIP/2.0/UDP 192.168.200.169:5060 From: 3213084003 ;tag=3518047997 SIP Display info: 3213084003 SIP from address: sip:3213084003@209.114.219.69 SIP tag: 3518047997 To: ;tag=as6a4d6dad SIP to address: sip:1001@209.114.219.69 SIP tag: as6a4d6dad Call-ID: 1314847947@192.168.200.169 CSeq: 3 BYE User-Agent: Cisco ATA 186 v3.1.0 atasip (040211A) Content-Length: 0 0000 00 11 43 58 7a 18 00 48 54 6f 8a d2 08 00 45 00 ..CXz..HTo....E. 0010 01 68 03 35 00 00 f9 11 63 c2 d1 72 db 62 d1 72 .h.5....c..r.b.r 0020 db 45 13 c4 13 c4 01 54 ce 3e 42 59 45 20 73 69 .E.....T.>BYE si 0030 70 3a 31 30 30 31 40 32 30 39 2e 31 31 34 2e 32 p:1001@209.114.2 0040 31 39 2e 36 39 20 53 49 50 2f 32 2e 30 0d 0a 56 19.69 SIP/2.0..V 0050 69 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 ia: SIP/2.0/UDP 0060 31 39 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 3a 192.168.200.169: 0070 35 30 36 30 0d 0a 46 72 6f 6d 3a 20 33 32 31 33 5060..From: 3213 0080 30 38 34 30 30 33 20 3c 73 69 70 3a 33 32 31 33 084003 ;tag=3518047997 00c0 0d 0a 54 6f 3a 20 3c 73 69 70 3a 31 30 30 31 40 ..To: ;tag=a 00f0 73 36 61 34 64 36 64 61 64 0d 0a 43 61 6c 6c 2d s6a4d6dad..Call- 0100 49 44 3a 20 31 33 31 34 38 34 37 39 34 37 40 31 ID: 1314847947@1 0110 39 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 0d 0a 92.168.200.169.. 0120 43 53 65 71 3a 20 33 20 42 59 45 0d 0a 55 73 65 CSeq: 3 BYE..Use 0130 72 2d 41 67 65 6e 74 3a 20 43 69 73 63 6f 20 41 r-Agent: Cisco A 0140 54 41 20 31 38 36 20 20 76 33 2e 31 2e 30 20 61 TA 186 v3.1.0 a 0150 74 61 73 69 70 20 28 30 34 30 32 31 31 41 29 0d tasip (040211A). 0160 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a .Content-Length: 0170 20 30 0d 0a 0d 0a 0.... No. Time Source Destination Protocol Info 53 9.721965 209.114.219.69 209.114.219.98 SIP Status: 200 OK Frame 53 (451 bytes on wire, 451 bytes captured) Arrival Time: Jan 5, 2005 21:54:21.792273000 Time delta from previous packet: 0.000197000 seconds Time since reference or first frame: 9.721965000 seconds Frame Number: 53 Packet Length: 451 bytes Capture Length: 451 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:48:54:6f:8a:d2 Destination: 00:48:54:6f:8a:d2 (209.114.219.98) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.98 (209.114.219.98) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00) 0001 10.. = Differentiated Services Codepoint: Unknown (0x06) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 437 Identification: 0x0ab4 (2740) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xd4de (correct) Source: 209.114.219.69 (209.114.219.69) Destination: 209.114.219.98 (209.114.219.98) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 417 Checksum: 0x5b40 (incorrect, should be 0xfc35) Session Initiation Protocol Status-Line: SIP/2.0 200 OK Status-Code: 200 Resent Packet: False Message Header Via: SIP/2.0/UDP 192.168.200.169:5060;received=209.114.219.98;rport=5060 From: 3213084003 ;tag=3518047997 SIP Display info: 3213084003 SIP from address: sip:3213084003@209.114.219.69 SIP tag: 3518047997 To: ;tag=as6a4d6dad SIP to address: sip:1001@209.114.219.69 SIP tag: as6a4d6dad Call-ID: 1314847947@192.168.200.169 CSeq: 3 BYE User-Agent: HCC Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER Contact: Content-Length: 0 0000 00 48 54 6f 8a d2 00 11 43 58 7a 18 08 00 45 18 .HTo....CXz...E. 0010 01 b5 0a b4 40 00 40 11 d4 de d1 72 db 45 d1 72 ....@.@....r.E.r 0020 db 62 13 c4 13 c4 01 a1 5b 40 53 49 50 2f 32 2e .b......[@SIP/2. 0030 30 20 32 30 30 20 4f 4b 0d 0a 56 69 61 3a 20 53 0 200 OK..Via: S 0040 49 50 2f 32 2e 30 2f 55 44 50 20 31 39 32 2e 31 IP/2.0/UDP 192.1 0050 36 38 2e 32 30 30 2e 31 36 39 3a 35 30 36 30 3b 68.200.169:5060; 0060 72 65 63 65 69 76 65 64 3d 32 30 39 2e 31 31 34 received=209.114 0070 2e 32 31 39 2e 39 38 3b 72 70 6f 72 74 3d 35 30 .219.98;rport=50 0080 36 30 0d 0a 46 72 6f 6d 3a 20 33 32 31 33 30 38 60..From: 321308 0090 34 30 30 33 20 3c 73 69 70 3a 33 32 31 33 30 38 4003 ; 00c0 74 61 67 3d 33 35 31 38 30 34 37 39 39 37 0d 0a tag=3518047997.. 00d0 54 6f 3a 20 3c 73 69 70 3a 31 30 30 31 40 32 30 To: ;tag=as6 0100 61 34 64 36 64 61 64 0d 0a 43 61 6c 6c 2d 49 44 a4d6dad..Call-ID 0110 3a 20 31 33 31 34 38 34 37 39 34 37 40 31 39 32 : 1314847947@192 0120 2e 31 36 38 2e 32 30 30 2e 31 36 39 0d 0a 43 53 .168.200.169..CS 0130 65 71 3a 20 33 20 42 59 45 0d 0a 55 73 65 72 2d eq: 3 BYE..User- 0140 41 67 65 6e 74 3a 20 48 43 43 20 41 73 74 65 72 Agent: HCC Aster 0150 69 73 6b 20 50 42 58 0d 0a 41 6c 6c 6f 77 3a 20 isk PBX..Allow: 0160 49 4e 56 49 54 45 2c 20 41 43 4b 2c 20 43 41 4e INVITE, ACK, CAN 0170 43 45 4c 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 59 CEL, OPTIONS, BY 0180 45 2c 20 52 45 46 45 52 0d 0a 43 6f 6e 74 61 63 E, REFER..Contac 0190 74 3a 20 3c 73 69 70 3a 31 30 30 31 40 32 30 39 t: ..Co 01b0 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d ntent-Length: 0. 01c0 0a 0d 0a ... No. Time Source Destination Protocol Info 54 9.722119 209.114.219.69 209.114.219.90 SIP/SDP Request: INVITE sip:003214093773@209.114.219.90:5060, with session description Frame 54 (820 bytes on wire, 820 bytes captured) Arrival Time: Jan 5, 2005 21:54:21.792427000 Time delta from previous packet: 0.000154000 seconds Time since reference or first frame: 9.722119000 seconds Frame Number: 54 Packet Length: 820 bytes Capture Length: 820 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00 Destination: 00:b0:8e:35:44:00 (209.114.219.90) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00) 0001 10.. = Differentiated Services Codepoint: Unknown (0x06) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 806 Identification: 0x0ab5 (2741) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xd374 (correct) Source: 209.114.219.69 (209.114.219.69) Destination: 209.114.219.90 (209.114.219.90) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 786 Checksum: 0x5ca9 (incorrect, should be 0x14a3) Session Initiation Protocol Request-Line: INVITE sip:003214093773@209.114.219.90:5060 SIP/2.0 Method: INVITE Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK3502cfe8 From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Contact: Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 CSeq: 108 INVITE User-Agent: HCC Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER Content-Type: application/sdp Content-Length: 291 Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): root 3032 3038 IN IP4 209.114.219.69 Owner Username: root Session ID: 3032 Session Version: 3038 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 209.114.219.69 Session Name (s): session Connection Information (c): IN IP4 209.114.219.69 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 209.114.219.69 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 10770 RTP/AVP 0 8 3 18 101 Media Type: audio Media Port: 10770 Media Proto: RTP/AVP Media Format: ITU-T G.711 PCMU Media Format: ITU-T G.711 PCMA Media Format: GSM 06.10 Media Format: ITU-T G.729 Media Format: 101 Media Attribute (a): rtpmap:0 PCMU/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 0 PCMU/8000 Media Attribute (a): rtpmap:8 PCMA/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 8 PCMA/8000 Media Attribute (a): rtpmap:3 GSM/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 3 GSM/8000 Media Attribute (a): rtpmap:18 G729/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 18 G729/8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-16 Media Attribute (a): silenceSupp:off - - - - Media Attribute Fieldname: silenceSupp Media Attribute Value: off - - - - 0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E. 0010 03 26 0a b5 40 00 40 11 d3 74 d1 72 db 45 d1 72 .&..@.@..t.r.E.r 0020 db 5a 13 c4 13 c4 03 12 5c a9 49 4e 56 49 54 45 .Z......\.INVITE 0030 20 73 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 sip:00321409377 0040 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3@209.114.219.90 0050 3a 35 30 36 30 20 53 49 50 2f 32 2e 30 0d 0a 56 :5060 SIP/2.0..V 0060 69 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 ia: SIP/2.0/UDP 0070 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 209.114.219.69:5 0080 30 36 30 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 060;branch=z9hG4 0090 62 4b 33 35 30 32 63 66 65 38 0d 0a 46 72 6f 6d bK3502cfe8..From 00a0 3a 20 22 33 32 31 33 30 38 34 30 30 33 22 20 3c : "3213084003" < 00b0 73 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 sip:3213084003@2 00c0 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 3b 74 09.114.219.69>;t 00d0 61 67 3d 61 73 37 32 31 63 32 32 63 34 0d 0a 54 ag=as721c22c4..T 00e0 6f 3a 20 3c 73 69 70 3a 30 30 33 32 31 34 30 39 o: ;tag=4D09928 0110 30 2d 37 41 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 0-7A..Contact: < 0120 73 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 sip:3213084003@2 0130 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 0d 0a 09.114.219.69>.. 0140 43 61 6c 6c 2d 49 44 3a 20 35 33 37 62 32 66 38 Call-ID: 537b2f8 0150 38 32 36 38 61 33 62 66 34 31 63 39 32 61 65 65 8268a3bf41c92aee 0160 39 34 38 38 65 38 35 35 33 40 32 30 39 2e 31 31 9488e8553@209.11 0170 34 2e 32 31 39 2e 36 39 0d 0a 43 53 65 71 3a 20 4.219.69..CSeq: 0180 31 30 38 20 49 4e 56 49 54 45 0d 0a 55 73 65 72 108 INVITE..User 0190 2d 41 67 65 6e 74 3a 20 48 43 43 20 41 73 74 65 -Agent: HCC Aste 01a0 72 69 73 6b 20 50 42 58 0d 0a 41 6c 6c 6f 77 3a risk PBX..Allow: 01b0 20 49 4e 56 49 54 45 2c 20 41 43 4b 2c 20 43 41 INVITE, ACK, CA 01c0 4e 43 45 4c 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 NCEL, OPTIONS, B 01d0 59 45 2c 20 52 45 46 45 52 0d 0a 43 6f 6e 74 65 YE, REFER..Conte 01e0 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 nt-Type: applica 01f0 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f 6e 74 65 6e tion/sdp..Conten 0200 74 2d 4c 65 6e 67 74 68 3a 20 32 39 31 0d 0a 0d t-Length: 291... 0210 0a 76 3d 30 0d 0a 6f 3d 72 6f 6f 74 20 33 30 33 .v=0..o=root 303 0220 32 20 33 30 33 38 20 49 4e 20 49 50 34 20 32 30 2 3038 IN IP4 20 0230 39 2e 31 31 34 2e 32 31 39 2e 36 39 0d 0a 73 3d 9.114.219.69..s= 0240 73 65 73 73 69 6f 6e 0d 0a 63 3d 49 4e 20 49 50 session..c=IN IP 0250 34 20 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 4 209.114.219.69 0260 0d 0a 74 3d 30 20 30 0d 0a 6d 3d 61 75 64 69 6f ..t=0 0..m=audio 0270 20 31 30 37 37 30 20 52 54 50 2f 41 56 50 20 30 10770 RTP/AVP 0 0280 20 38 20 33 20 31 38 20 31 30 31 0d 0a 61 3d 72 8 3 18 101..a=r 0290 74 70 6d 61 70 3a 30 20 50 43 4d 55 2f 38 30 30 tpmap:0 PCMU/800 02a0 30 0d 0a 61 3d 72 74 70 6d 61 70 3a 38 20 50 43 0..a=rtpmap:8 PC 02b0 4d 41 2f 38 30 30 30 0d 0a 61 3d 72 74 70 6d 61 MA/8000..a=rtpma 02c0 70 3a 33 20 47 53 4d 2f 38 30 30 30 0d 0a 61 3d p:3 GSM/8000..a= 02d0 72 74 70 6d 61 70 3a 31 38 20 47 37 32 39 2f 38 rtpmap:18 G729/8 02e0 30 30 30 0d 0a 61 3d 72 74 70 6d 61 70 3a 31 30 000..a=rtpmap:10 02f0 31 20 74 65 6c 65 70 68 6f 6e 65 2d 65 76 65 6e 1 telephone-even 0300 74 2f 38 30 30 30 0d 0a 61 3d 66 6d 74 70 3a 31 t/8000..a=fmtp:1 0310 30 31 20 30 2d 31 36 0d 0a 61 3d 73 69 6c 65 6e 01 0-16..a=silen 0320 63 65 53 75 70 70 3a 6f 66 66 20 2d 20 2d 20 2d ceSupp:off - - - 0330 20 2d 0d 0a -.. No. Time Source Destination Protocol Info 55 9.725827 209.114.219.90 209.114.219.69 SIP Status: 100 Trying Frame 55 (445 bytes on wire, 445 bytes captured) Arrival Time: Jan 5, 2005 21:54:21.796135000 Time delta from previous packet: 0.003708000 seconds Time since reference or first frame: 9.725827000 seconds Frame Number: 55 Packet Length: 445 bytes Capture Length: 445 bytes Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:b0:8e:35:44:00 (209.114.219.90) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00) 0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 431 Identification: 0x3527 (13607) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x2b29 (correct) Source: 209.114.219.90 (209.114.219.90) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060) Source port: 56262 (56262) Destination port: 5060 (5060) Length: 411 Checksum: 0x101d (correct) Session Initiation Protocol Status-Line: SIP/2.0 100 Trying Status-Code: 100 Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK3502cfe8 From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Date: Wed, 05 Jan 2005 23:34:52 GMT Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 Server: Cisco-SIPGateway/IOS-12.x CSeq: 108 INVITE Allow-Events: telephone-event Content-Length: 0 0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh 0010 01 af 35 27 00 00 ff 11 2b 29 d1 72 db 5a d1 72 ..5'....+).r.Z.r 0020 db 45 db c6 13 c4 01 9b 10 1d 53 49 50 2f 32 2e .E........SIP/2. 0030 30 20 31 30 30 20 54 72 79 69 6e 67 0d 0a 56 69 0 100 Trying..Vi 0040 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 a: SIP/2.0/UDP 2 0050 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 09.114.219.69:50 0060 36 30 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 60;branch=z9hG4b 0070 4b 33 35 30 32 63 66 65 38 0d 0a 46 72 6f 6d 3a K3502cfe8..From: 0080 20 22 33 32 31 33 30 38 34 30 30 33 22 20 3c 73 "3213084003" ;ta 00b0 67 3d 61 73 37 32 31 63 32 32 63 34 0d 0a 54 6f g=as721c22c4..To 00c0 3a 20 3c 73 69 70 3a 30 30 33 32 31 34 30 39 33 : ;tag=4D099280 00f0 2d 37 41 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 -7A..Date: Wed, 0100 30 35 20 4a 61 6e 20 32 30 30 35 20 32 33 3a 33 05 Jan 2005 23:3 0110 34 3a 35 32 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 4:52 GMT..Call-I 0120 44 3a 20 35 33 37 62 32 66 38 38 32 36 38 61 33 D: 537b2f88268a3 0130 62 66 34 31 63 39 32 61 65 65 39 34 38 38 65 38 bf41c92aee9488e8 0140 35 35 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 553@209.114.219. 0150 36 39 0d 0a 53 65 72 76 65 72 3a 20 43 69 73 63 69..Server: Cisc 0160 6f 2d 53 49 50 47 61 74 65 77 61 79 2f 49 4f 53 o-SIPGateway/IOS 0170 2d 31 32 2e 78 0d 0a 43 53 65 71 3a 20 31 30 38 -12.x..CSeq: 108 0180 20 49 4e 56 49 54 45 0d 0a 41 6c 6c 6f 77 2d 45 INVITE..Allow-E 0190 76 65 6e 74 73 3a 20 74 65 6c 65 70 68 6f 6e 65 vents: telephone 01a0 2d 65 76 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d -event..Content- 01b0 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Length: 0.... No. Time Source Destination Protocol Info 56 9.727052 209.114.219.90 209.114.219.69 SIP/SDP Status: 200 OK, with session description Frame 56 (892 bytes on wire, 892 bytes captured) Arrival Time: Jan 5, 2005 21:54:21.797360000 Time delta from previous packet: 0.001225000 seconds Time since reference or first frame: 9.727052000 seconds Frame Number: 56 Packet Length: 892 bytes Capture Length: 892 bytes Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:b0:8e:35:44:00 (209.114.219.90) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00) 0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 878 Identification: 0x3528 (13608) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x2969 (correct) Source: 209.114.219.90 (209.114.219.90) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060) Source port: 56262 (56262) Destination port: 5060 (5060) Length: 858 Checksum: 0x03e5 (correct) Session Initiation Protocol Status-Line: SIP/2.0 200 OK Status-Code: 200 Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK3502cfe8 From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Date: Wed, 05 Jan 2005 23:34:52 GMT Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 Server: Cisco-SIPGateway/IOS-12.x CSeq: 108 INVITE Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER Allow-Events: telephone-event Contact: Content-Type: application/sdp Content-Length: 263 Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): CiscoSystemsSIP-GW-UserAgent 614 7264 IN IP4 209.114.219.90 Owner Username: CiscoSystemsSIP-GW-UserAgent Session ID: 614 Session Version: 7264 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 209.114.219.90 Session Name (s): SIP Call Connection Information (c): IN IP4 209.114.219.90 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 209.114.219.90 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 17302 RTP/AVP 18 101 Media Type: audio Media Port: 17302 Media Proto: RTP/AVP Media Format: ITU-T G.729 Media Format: 101 Connection Information (c): IN IP4 209.114.219.90 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 209.114.219.90 Media Attribute (a): rtpmap:18 G729/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 18 G729/8000 Media Attribute (a): fmtp:18 annexb=no Media Attribute Fieldname: fmtp Media Attribute Value: 18 annexb=no Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-16 0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh 0010 03 6e 35 28 00 00 ff 11 29 69 d1 72 db 5a d1 72 .n5(....)i.r.Z.r 0020 db 45 db c6 13 c4 03 5a 03 e5 53 49 50 2f 32 2e .E.....Z..SIP/2. 0030 30 20 32 30 30 20 4f 4b 0d 0a 56 69 61 3a 20 53 0 200 OK..Via: S 0040 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 2e 31 IP/2.0/UDP 209.1 0050 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 3b 62 14.219.69:5060;b 0060 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 33 35 30 ranch=z9hG4bK350 0070 32 63 66 65 38 0d 0a 46 72 6f 6d 3a 20 22 33 32 2cfe8..From: "32 0080 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3a 33 13084003" ;tag=as 00b0 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 3c 73 721c22c4..To: ; 00e0 74 61 67 3d 34 44 30 39 39 32 38 30 2d 37 41 0d tag=4D099280-7A. 00f0 0a 44 61 74 65 3a 20 57 65 64 2c 20 30 35 20 4a .Date: Wed, 05 J 0100 61 6e 20 32 30 30 35 20 32 33 3a 33 34 3a 35 32 an 2005 23:34:52 0110 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 44 3a 20 35 GMT..Call-ID: 5 0120 33 37 62 32 66 38 38 32 36 38 61 33 62 66 34 31 37b2f88268a3bf41 0130 63 39 32 61 65 65 39 34 38 38 65 38 35 35 33 40 c92aee9488e8553@ 0140 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 0d 0a 209.114.219.69.. 0150 53 65 72 76 65 72 3a 20 43 69 73 63 6f 2d 53 49 Server: Cisco-SI 0160 50 47 61 74 65 77 61 79 2f 49 4f 53 2d 31 32 2e PGateway/IOS-12. 0170 78 0d 0a 43 53 65 71 3a 20 31 30 38 20 49 4e 56 x..CSeq: 108 INV 0180 49 54 45 0d 0a 41 6c 6c 6f 77 3a 20 49 4e 56 49 ITE..Allow: INVI 0190 54 45 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 59 45 TE, OPTIONS, BYE 01a0 2c 20 43 41 4e 43 45 4c 2c 20 41 43 4b 2c 20 50 , CANCEL, ACK, P 01b0 52 41 43 4b 2c 20 43 4f 4d 45 54 2c 20 52 45 46 RACK, COMET, REF 01c0 45 52 2c 20 53 55 42 53 43 52 49 42 45 2c 20 4e ER, SUBSCRIBE, N 01d0 4f 54 49 46 59 2c 20 49 4e 46 4f 2c 20 55 50 44 OTIFY, INFO, UPD 01e0 41 54 45 2c 20 52 45 47 49 53 54 45 52 0d 0a 41 ATE, REGISTER..A 01f0 6c 6c 6f 77 2d 45 76 65 6e 74 73 3a 20 74 65 6c llow-Events: tel 0200 65 70 68 6f 6e 65 2d 65 76 65 6e 74 0d 0a 43 6f ephone-event..Co 0210 6e 74 61 63 74 3a 20 3c 73 69 70 3a 30 30 33 32 ntact: ..C 0240 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 ontent-Type: app 0250 6c 69 63 61 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f lication/sdp..Co 0260 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 36 ntent-Length: 26 0270 33 0d 0a 0d 0a 76 3d 30 0d 0a 6f 3d 43 69 73 63 3....v=0..o=Cisc 0280 6f 53 79 73 74 65 6d 73 53 49 50 2d 47 57 2d 55 oSystemsSIP-GW-U 0290 73 65 72 41 67 65 6e 74 20 36 31 34 20 37 32 36 serAgent 614 726 02a0 34 20 49 4e 20 49 50 34 20 32 30 39 2e 31 31 34 4 IN IP4 209.114 02b0 2e 32 31 39 2e 39 30 0d 0a 73 3d 53 49 50 20 43 .219.90..s=SIP C 02c0 61 6c 6c 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 all..c=IN IP4 20 02d0 39 2e 31 31 34 2e 32 31 39 2e 39 30 0d 0a 74 3d 9.114.219.90..t= 02e0 30 20 30 0d 0a 6d 3d 61 75 64 69 6f 20 31 37 33 0 0..m=audio 173 02f0 30 32 20 52 54 50 2f 41 56 50 20 31 38 20 31 30 02 RTP/AVP 18 10 0300 31 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 39 2e 1..c=IN IP4 209. 0310 31 31 34 2e 32 31 39 2e 39 30 0d 0a 61 3d 72 74 114.219.90..a=rt 0320 70 6d 61 70 3a 31 38 20 47 37 32 39 2f 38 30 30 pmap:18 G729/800 0330 30 0d 0a 61 3d 66 6d 74 70 3a 31 38 20 61 6e 6e 0..a=fmtp:18 ann 0340 65 78 62 3d 6e 6f 0d 0a 61 3d 72 74 70 6d 61 70 exb=no..a=rtpmap 0350 3a 31 30 31 20 74 65 6c 65 70 68 6f 6e 65 2d 65 :101 telephone-e 0360 76 65 6e 74 2f 38 30 30 30 0d 0a 61 3d 66 6d 74 vent/8000..a=fmt 0370 70 3a 31 30 31 20 30 2d 31 36 0d 0a p:101 0-16.. No. Time Source Destination Protocol Info 57 9.727222 209.114.219.69 209.114.219.90 SIP Request: ACK sip:003214093773@209.114.219.90:5060 Frame 57 (441 bytes on wire, 441 bytes captured) Arrival Time: Jan 5, 2005 21:54:21.797530000 Time delta from previous packet: 0.000170000 seconds Time since reference or first frame: 9.727222000 seconds Frame Number: 57 Packet Length: 441 bytes Capture Length: 441 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00 Destination: 00:b0:8e:35:44:00 (209.114.219.90) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00) 0001 10.. = Differentiated Services Codepoint: Unknown (0x06) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 427 Identification: 0x0ab6 (2742) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xd4ee (correct) Source: 209.114.219.69 (209.114.219.69) Destination: 209.114.219.90 (209.114.219.90) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 407 Checksum: 0x5b2e (incorrect, should be 0x853b) Session Initiation Protocol Request-Line: ACK sip:003214093773@209.114.219.90:5060 SIP/2.0 Method: ACK Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK5e9819a0 From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Contact: Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 CSeq: 108 ACK User-Agent: HCC Asterisk PBX Content-Length: 0 0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E. 0010 01 ab 0a b6 40 00 40 11 d4 ee d1 72 db 45 d1 72 ....@.@....r.E.r 0020 db 5a 13 c4 13 c4 01 97 5b 2e 41 43 4b 20 73 69 .Z......[.ACK si 0030 70 3a 30 30 33 32 31 34 30 39 33 37 37 33 40 32 p:003214093773@2 0040 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3a 35 30 09.114.219.90:50 0050 36 30 20 53 49 50 2f 32 2e 30 0d 0a 56 69 61 3a 60 SIP/2.0..Via: 0060 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 SIP/2.0/UDP 209 0070 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 .114.219.69:5060 0080 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 35 ;branch=z9hG4bK5 0090 65 39 38 31 39 61 30 0d 0a 46 72 6f 6d 3a 20 22 e9819a0..From: " 00a0 33 32 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3213084003" ;tag= 00d0 61 73 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 as721c22c4..To: 00e0 3c 73 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 ;tag=4D099280-7 0110 41 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 73 69 70 A..Contact: ..Cal 0140 6c 2d 49 44 3a 20 35 33 37 62 32 66 38 38 32 36 l-ID: 537b2f8826 0150 38 61 33 62 66 34 31 63 39 32 61 65 65 39 34 38 8a3bf41c92aee948 0160 38 65 38 35 35 33 40 32 30 39 2e 31 31 34 2e 32 8e8553@209.114.2 0170 31 39 2e 36 39 0d 0a 43 53 65 71 3a 20 31 30 38 19.69..CSeq: 108 0180 20 41 43 4b 0d 0a 55 73 65 72 2d 41 67 65 6e 74 ACK..User-Agent 0190 3a 20 48 43 43 20 41 73 74 65 72 69 73 6b 20 50 : HCC Asterisk P 01a0 42 58 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 BX..Content-Leng 01b0 74 68 3a 20 30 0d 0a 0d 0a th: 0.... No. Time Source Destination Protocol Info 58 9.727294 209.114.219.69 209.114.219.90 SIP Request: BYE sip:003214093773@209.114.219.90:5060 Frame 58 (441 bytes on wire, 441 bytes captured) Arrival Time: Jan 5, 2005 21:54:21.797602000 Time delta from previous packet: 0.000072000 seconds Time since reference or first frame: 9.727294000 seconds Frame Number: 58 Packet Length: 441 bytes Capture Length: 441 bytes Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00 Destination: 00:b0:8e:35:44:00 (209.114.219.90) Source: 00:11:43:58:7a:18 (209.114.219.69) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00) 0001 10.. = Differentiated Services Codepoint: Unknown (0x06) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 427 Identification: 0x0ab7 (2743) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xd4ed (correct) Source: 209.114.219.69 (209.114.219.69) Destination: 209.114.219.90 (209.114.219.90) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 407 Checksum: 0x5b2e (incorrect, should be 0xaf2e) Session Initiation Protocol Request-Line: BYE sip:003214093773@209.114.219.90:5060 SIP/2.0 Method: BYE Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK6211b226 From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Contact: Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 CSeq: 109 BYE User-Agent: HCC Asterisk PBX Content-Length: 0 0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E. 0010 01 ab 0a b7 40 00 40 11 d4 ed d1 72 db 45 d1 72 ....@.@....r.E.r 0020 db 5a 13 c4 13 c4 01 97 5b 2e 42 59 45 20 73 69 .Z......[.BYE si 0030 70 3a 30 30 33 32 31 34 30 39 33 37 37 33 40 32 p:003214093773@2 0040 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3a 35 30 09.114.219.90:50 0050 36 30 20 53 49 50 2f 32 2e 30 0d 0a 56 69 61 3a 60 SIP/2.0..Via: 0060 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 SIP/2.0/UDP 209 0070 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 .114.219.69:5060 0080 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 36 ;branch=z9hG4bK6 0090 32 31 31 62 32 32 36 0d 0a 46 72 6f 6d 3a 20 22 211b226..From: " 00a0 33 32 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3213084003" ;tag= 00d0 61 73 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 as721c22c4..To: 00e0 3c 73 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 ;tag=4D099280-7 0110 41 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 73 69 70 A..Contact: ..Cal 0140 6c 2d 49 44 3a 20 35 33 37 62 32 66 38 38 32 36 l-ID: 537b2f8826 0150 38 61 33 62 66 34 31 63 39 32 61 65 65 39 34 38 8a3bf41c92aee948 0160 38 65 38 35 35 33 40 32 30 39 2e 31 31 34 2e 32 8e8553@209.114.2 0170 31 39 2e 36 39 0d 0a 43 53 65 71 3a 20 31 30 39 19.69..CSeq: 109 0180 20 42 59 45 0d 0a 55 73 65 72 2d 41 67 65 6e 74 BYE..User-Agent 0190 3a 20 48 43 43 20 41 73 74 65 72 69 73 6b 20 50 : HCC Asterisk P 01a0 42 58 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 BX..Content-Leng 01b0 74 68 3a 20 30 0d 0a 0d 0a th: 0.... No. Time Source Destination Protocol Info 59 9.732878 209.114.219.90 209.114.219.69 SIP Status: 200 OK Frame 59 (407 bytes on wire, 407 bytes captured) Arrival Time: Jan 5, 2005 21:54:21.803186000 Time delta from previous packet: 0.005584000 seconds Time since reference or first frame: 9.732878000 seconds Frame Number: 59 Packet Length: 407 bytes Capture Length: 407 bytes Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:b0:8e:35:44:00 (209.114.219.90) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00) 0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 393 Identification: 0x3529 (13609) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x2b4d (correct) Source: 209.114.219.90 (209.114.219.90) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060) Source port: 56262 (56262) Destination port: 5060 (5060) Length: 373 Checksum: 0x03e3 (correct) Session Initiation Protocol Status-Line: SIP/2.0 200 OK Status-Code: 200 Resent Packet: False Message Header Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK6211b226 From: "3213084003" ;tag=as721c22c4 SIP Display info: "3213084003" SIP from address: sip:3213084003@209.114.219.69 SIP tag: as721c22c4 To: ;tag=4D099280-7A SIP to address: sip:003214093773@209.114.219.90 SIP tag: 4D099280-7A Date: Wed, 05 Jan 2005 23:34:52 GMT Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69 Server: Cisco-SIPGateway/IOS-12.x Content-Length: 0 CSeq: 109 BYE 0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh 0010 01 89 35 29 00 00 ff 11 2b 4d d1 72 db 5a d1 72 ..5)....+M.r.Z.r 0020 db 45 db c6 13 c4 01 75 03 e3 53 49 50 2f 32 2e .E.....u..SIP/2. 0030 30 20 32 30 30 20 4f 4b 0d 0a 56 69 61 3a 20 53 0 200 OK..Via: S 0040 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 2e 31 IP/2.0/UDP 209.1 0050 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 3b 62 14.219.69:5060;b 0060 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 36 32 31 ranch=z9hG4bK621 0070 31 62 32 32 36 0d 0a 46 72 6f 6d 3a 20 22 33 32 1b226..From: "32 0080 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3a 33 13084003" ;tag=as 00b0 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 3c 73 721c22c4..To: ; 00e0 74 61 67 3d 34 44 30 39 39 32 38 30 2d 37 41 0d tag=4D099280-7A. 00f0 0a 44 61 74 65 3a 20 57 65 64 2c 20 30 35 20 4a .Date: Wed, 05 J 0100 61 6e 20 32 30 30 35 20 32 33 3a 33 34 3a 35 32 an 2005 23:34:52 0110 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 44 3a 20 35 GMT..Call-ID: 5 0120 33 37 62 32 66 38 38 32 36 38 61 33 62 66 34 31 37b2f88268a3bf41 0130 63 39 32 61 65 65 39 34 38 38 65 38 35 35 33 40 c92aee9488e8553@ 0140 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 0d 0a 209.114.219.69.. 0150 53 65 72 76 65 72 3a 20 43 69 73 63 6f 2d 53 49 Server: Cisco-SI 0160 50 47 61 74 65 77 61 79 2f 49 4f 53 2d 31 32 2e PGateway/IOS-12. 0170 78 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 x..Content-Lengt 0180 68 3a 20 30 0d 0a 43 53 65 71 3a 20 31 30 39 20 h: 0..CSeq: 109 0190 42 59 45 0d 0a 0d 0a BYE.... No. Time Source Destination Protocol Info 60 9.733006 209.114.219.90 209.114.219.69 RTCP Receiver Report Frame 60 (90 bytes on wire, 90 bytes captured) Arrival Time: Jan 5, 2005 21:54:21.803314000 Time delta from previous packet: 0.000128000 seconds Time since reference or first frame: 9.733006000 seconds Frame Number: 60 Packet Length: 90 bytes Capture Length: 90 bytes Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18 Destination: 00:11:43:58:7a:18 (209.114.219.69) Source: 00:b0:8e:35:44:00 (209.114.219.90) Type: IP (0x0800) Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00) 0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 76 Identification: 0x0000 (0) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x61b3 (correct) Source: 209.114.219.90 (209.114.219.90) Destination: 209.114.219.69 (209.114.219.69) User Datagram Protocol, Src Port: 17303 (17303), Dst Port: 10771 (10771) Source port: 17303 (17303) Destination port: 10771 (10771) Length: 56 Checksum: 0xf097 (correct) Real-time Transport Control Protocol Stream setup by SDP (frame 54) Setup frame: 54 Setup Method: SDP 10.. .... = Version: RFC 1889 Version (2) ..0. .... = Padding: False ...0 0000 = Reception report count: 0 Packet type: Receiver Report (201) Length: 1 Sender SSRC: 236313434 Real-time Transport Control Protocol Stream setup by SDP (frame 54) Setup frame: 54 Setup Method: SDP 10.. .... = Version: RFC 1889 Version (2) ..0. .... = Padding: False ...0 0001 = Source count: 1 Packet type: Source description (202) Length: 7 Chunk 1, SSRC/CSRC 236313434 Identifier: 236313434 SDES items Type: CNAME (user and domain) (1) Length: 20 Text: 0.0.0@209.114.219.90 Real-time Transport Control Protocol Stream setup by SDP (frame 54) Setup frame: 54 Setup Method: SDP 10.. .... = Version: RFC 1889 Version (2) ..0. .... = Padding: False ...0 0001 = Source count: 1 Packet type: Goodbye (203) Length: 1 Identifier: 236313434 0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh 0010 00 4c 00 00 00 00 ff 11 61 b3 d1 72 db 5a d1 72 .L......a..r.Z.r 0020 db 45 43 97 2a 13 00 38 f0 97 80 c9 00 01 0e 15 .EC.*..8........ 0030 db 5a 81 ca 00 07 0e 15 db 5a 01 14 30 2e 30 2e .Z.......Z..0.0. 0040 30 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 0@209.114.219.90 0050 00 00 81 cb 00 01 0e 15 db 5a .........Z