Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- # tshark -V -n -i eth1 -f "port 5060 and host 195.211.120.9" 14:45
- Running as user "root" and group "root". This could be dangerous.
- Capturing on eth1
- Frame 1: 1083 bytes on wire (8664 bits), 1083 bytes captured (8664 bits) on interface 0
- Interface id: 0
- WTAP_ENCAP: 1
- Arrival Time: Feb 1, 2015 14:45:40.973666000 MSK
- [Time shift for this packet: 0.000000000 seconds]
- Epoch Time: 1422791140.973666000 seconds
- [Time delta from previous captured frame: 0.000000000 seconds]
- [Time delta from previous displayed frame: 0.000000000 seconds]
- [Time since reference or first frame: 0.000000000 seconds]
- Frame Number: 1
- Frame Length: 1083 bytes (8664 bits)
- Capture Length: 1083 bytes (8664 bits)
- [Frame is marked: False]
- [Frame is ignored: False]
- [Protocols in frame: eth:ip:udp:sip:sdp]
- Ethernet II, Src: 64:87:88:fe:36:f6 (64:87:88:fe:36:f6), Dst: 00:50:56:85:5b:eb (00:50:56:85:5b:eb)
- Destination: 00:50:56:85:5b:eb (00:50:56:85:5b:eb)
- Address: 00:50:56:85:5b:eb (00:50:56:85:5b:eb)
- .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
- .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- Source: 64:87:88:fe:36:f6 (64:87:88:fe:36:f6)
- Address: 64:87:88:fe:36:f6 (64:87:88:fe:36:f6)
- .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
- .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- Type: IP (0x0800)
- Internet Protocol Version 4, Src: 195.211.120.9 (195.211.120.9), Dst: 195.16.98.68 (195.16.98.68)
- Version: 4
- Header length: 20 bytes
- Differentiated Services Field: 0x28 (DSCP 0x0a: Assured Forwarding 11; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
- 0010 10.. = Differentiated Services Codepoint: Assured Forwarding 11 (0x0a)
- .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00)
- Total Length: 1069
- Identification: 0x0000 (0)
- Flags: 0x02 (Don't Fragment)
- 0... .... = Reserved bit: Not set
- .1.. .... = Don't fragment: Set
- ..0. .... = More fragments: Not set
- Fragment offset: 0
- Time to live: 53
- Protocol: UDP (17)
- Header checksum: 0xe066 [correct]
- [Good: True]
- [Bad: False]
- Source: 195.211.120.9 (195.211.120.9)
- Destination: 195.16.98.68 (195.16.98.68)
- User Datagram Protocol, Src Port: 9060 (9060), Dst Port: 5060 (5060)
- Source port: 9060 (9060)
- Destination port: 5060 (5060)
- Length: 1049
- Checksum: 0x757c [validation disabled]
- [Good Checksum: False]
- [Bad Checksum: False]
- Session Initiation Protocol (INVITE)
- Request-Line: INVITE sip:014716@195.16.98.68:5060 SIP/2.0
- Method: INVITE
- Request-URI: sip:014716@195.16.98.68:5060
- Request-URI User Part: 014716
- Request-URI Host Part: 195.16.98.68
- Request-URI Host Port: 5060
- [Resent Packet: False]
- Message Header
- Via: SIP/2.0/UDP 195.211.120.9:9060;rport;branch=z9hG4bK-2250159064-3826321322-503332789-34251810311
- Transport: UDP
- Sent-by Address: 195.211.120.9
- Sent-by port: 9060
- RPort: rport
- Branch: z9hG4bK-2250159064-3826321322-503332789-34251810311
- Via: SIP/2.0/UDP 195.211.120.9:5061;rport=5061;branch=z9hG4bK-2250159064-3826321322-503332789-3425181031;received=195.211.120.9
- Transport: UDP
- Sent-by Address: 195.211.120.9
- Sent-by port: 5061
- RPort: 5061
- Branch: z9hG4bK-2250159064-3826321322-503332789-3425181031
- Received: 195.211.120.9
- From: <sip:79037729533@195.211.120.9:5061;user=phone>;tag=1752804824-3826321322-503332789-3425181031
- SIP from address: sip:79037729533@195.211.120.9:5061;user=phone
- SIP from address User Part: 79037729533
- SIP from address Host Part: 195.211.120.9
- SIP from address Host Port: 5061
- SIP From URI parameter: user=phone
- SIP from tag: 1752804824-3826321322-503332789-3425181031
- To: <sip:014716@195.211.120.9:9060;user=phone>
- SIP to address: sip:014716@195.211.120.9:9060;user=phone
- SIP to address User Part: 014716
- SIP to address Host Part: 195.211.120.9
- SIP to address Host Port: 9060
- SIP To URI parameter: user=phone
- Call-ID: B25634E5DE64BAFE44A67ECBDFD85F90
- CSeq: 1 INVITE
- Sequence Number: 1
- Method: INVITE
- Contact: <sip:79037729533@195.211.120.9:9060>
- Contact URI: sip:79037729533@195.211.120.9:9060
- Contact URI User Part: 79037729533
- Contact URI Host Part: 195.211.120.9
- Contact URI Host Port: 9060
- Content-Type: application/sdp
- Allow: ACK, BYE, CANCEL, INFO, INVITE, OPTIONS, REFER, REGISTER, SUBSCRIBE, UPDATE
- Max-Forwards: 70
- User-Agent: TS-v4.5.1-17a
- Cisco-Guid: 3634107034-2852590052-3040804894-1729964236
- [Expert Info (Note/Undecoded): Unrecognised SIP header (Cisco-Guid)]
- [Message: Unrecognised SIP header (Cisco-Guid)]
- [Severity level: Note]
- [Group: Undecoded]
- Content-Length: 267
- Message Body
- Session Description Protocol
- Session Description Protocol Version (v): 0
- Owner/Creator, Session Id (o): - 1422791140 1422791140 IN IP4 195.211.120.9
- Owner Username: -
- Session ID: 1422791140
- Session Version: 1422791140
- Owner Network Type: IN
- Owner Address Type: IP4
- Owner Address: 195.211.120.9
- Session Name (s): -
- Connection Information (c): IN IP4 195.211.120.9
- Connection Network Type: IN
- Connection Address Type: IP4
- Connection Address: 195.211.120.9
- Time Description, active time (t): 0 0
- Session Start Time: 0
- Session Stop Time: 0
- Media Description, name and address (m): audio 10954 RTP/AVP 8 0 101
- Media Type: audio
- Media Port: 10954
- Media Protocol: RTP/AVP
- Media Format: ITU-T G.711 PCMA
- Media Format: ITU-T G.711 PCMU
- Media Format: DynamicRTP-Type-101
- Media Attribute (a): rtpmap:8 PCMA/8000
- Media Attribute Fieldname: rtpmap
- Media Format: 8
- MIME Type: PCMA
- Sample Rate: 8000
- Media Attribute (a): rtpmap:0 PCMU/8000
- Media Attribute Fieldname: rtpmap
- Media Format: 0
- MIME Type: PCMU
- Sample Rate: 8000
- Media Attribute (a): rtpmap:101 telephone-event/8000
- Media Attribute Fieldname: rtpmap
- Media Format: 101
- MIME Type: telephone-event
- Sample Rate: 8000
- Media Attribute (a): fmtp:101 0-15
- Media Attribute Fieldname: fmtp
- Media Format: 101 [telephone-event]
- Media format specific parameters: 0-15
- Media Attribute (a): ptime:20
- Media Attribute Fieldname: ptime
- Media Attribute Value: 20
- Media Attribute (a): sendrecv
- Media Attribute (a): silenceSupp:off - - - -
- Media Attribute Fieldname: silenceSupp
- Media Attribute Value: off - - - -
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
