Untitled

[root@server1 HTML]# ngrep port 5060
interface: eth0 (192.168.1.0/255.255.255.0)
filter: (ip or ip6) and ( port 5060 )
#
U IP1.IP1.IP1.IP1:17804 -> LAN.LAN.LAN.LAN:5060
  ..................
#
U IP1.IP1.IP1.IP1:52650 -> LAN.LAN.LAN.LAN:5060
  REGISTER sip:mydomain.com SIP/2.0..Via: SIP/2.0/UDP 192.168.0.7:52650;rport;branch=z9hG4bKPj1Te-txgo3Koum0V1msJo6TAoGLy9do17..Max-Forwards: 70..Fro
  m: "1000" <sip:1000@mydomain.com>;tag=sufXbk9fvCrIaqpx30qiWbQNTLFzPYSe..To: "1000" <sip:1000@mydomain.com>..Call-ID: 78MEDW12nsfzBiBG1HDcqlIoFdw
  z8CuN..CSeq: 25804 REGISTER..User-Agent: CSipSimple r944 / SHW-M250K-10..Contact: "1000" <sip:1000@192.168.0.7:52650;ob>..Expires: 900..Allow: PRACK,
  INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS..Content-Length:  0....
#
U LAN.LAN.LAN.LAN:5060 -> IP1.IP1.IP1.IP1:52650
  SIP/2.0 401 Unauthorized..Via: SIP/2.0/UDP 192.168.0.7:52650;rport=52650;branch=z9hG4bKPj1Te-txgo3Koum0V1msJo6TAoGLy9do17;received=IP1.IP1.IP1.IP1..Fro
  m: "1000" <sip:1000@mydomain.com>;tag=sufXbk9fvCrIaqpx30qiWbQNTLFzPYSe..To: "1000" <sip:1000@mydomain.com>;tag=NQ5NypUpQyF5Q..Call-ID: 78MEDW12n
  sfzBiBG1HDcqlIoFdwz8CuN..CSeq: 25804 REGISTER..User-Agent: FreeSWITCH-mod_sofia/1.0.head-git-4ceca18 2011-10-21 20-38-41 -0500..Allow: INVITE, ACK, BY
  E, CANCEL, OPTIONS, MESSAGE, UPDATE, INFO, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE..Supported: timer, precondition, path, replaces..WWW-Authentica
  te: Digest realm="mydomain.com", nonce="d10998b4-1650-47f5-bf85-79bcab84a00c", algorithm=MD5, qop="auth"..Content-Length: 0....
#
U IP1.IP1.IP1.IP1:52650 -> LAN.LAN.LAN.LAN:5060
  REGISTER sip:mydomain.com SIP/2.0..Via: SIP/2.0/UDP 192.168.0.7:52650;rport;branch=z9hG4bKPjUdy3NroLOT4SccqjGttlurEe7HrteyAz..Max-Forwards: 70..Fro
  m: "1000" <sip:1000@mydomain.com>;tag=sufXbk9fvCrIaqpx30qiWbQNTLFzPYSe..To: "1000" <sip:1000@mydomain.com>..Call-ID: 78MEDW12nsfzBiBG1HDcqlIoFdw
  z8CuN..CSeq: 25805 REGISTER..User-Agent: CSipSimple r944 / SHW-M250K-10..Contact: "1000" <sip:1000@192.168.0.7:52650;ob>..Expires: 900..Allow: PRACK,
  INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS..Authorization: Digest username="1000", realm="mydomain.com", nonce="d
  10998b4-1650-47f5-bf85-79bcab84a00c", uri="sip:mydomain.com", response="942530ea6b105edc290a9d133c02ab79", algorithm=MD5, cnonce="SzkFKNvd8fRAdDzS5
  .9qL5GtDTEM5oWJ", qop=auth, nc=00000001..Content-Length:  0....
#
U LAN.LAN.LAN.LAN:5060 -> IP1.IP1.IP1.IP1:52650
  SIP/2.0 200 OK..Via: SIP/2.0/UDP 192.168.0.7:52650;rport=52650;branch=z9hG4bKPjUdy3NroLOT4SccqjGttlurEe7HrteyAz;received=IP1.IP1.IP1.IP1..From: "1000"
  <sip:1000@mydomain.com>;tag=sufXbk9fvCrIaqpx30qiWbQNTLFzPYSe..To: "1000" <sip:1000@mydomain.com>;tag=p0ye0Hctm75QK..Call-ID: 78MEDW12nsfzBiBG1HD
  cqlIoFdwz8CuN..CSeq: 25805 REGISTER..Contact: <sip:1000@192.168.0.7:52650;ob>;expires=900..Date: Tue, 25 Oct 2011 00:40:13 GMT..User-Agent: FreeSWITCH
  -mod_sofia/1.0.head-git-4ceca18 2011-10-21 20-38-41 -0500..Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, UPDATE, INFO, REGISTER, REFER, NOTIFY, P
  UBLISH, SUBSCRIBE..Supported: timer, precondition, path, replaces..Content-Length: 0....
#
U IP1.IP1.IP1.IP1:52650 -> LAN.LAN.LAN.LAN:5060
  REGISTER sip:mydomain.com SIP/2.0..Via: SIP/2.0/UDP IP1.IP1.IP1.IP1:52650;rport;branch=z9hG4bKPjO4rbtAX71eIaLEFINx7F3Hm2PFQ9UOUW..Max-Forwards: 70..
  From: "1000" <sip:1000@mydomain.com>;tag=7uoK5HI6z649RQnUkdMUfyWXVYNu0ymy..To: "1000" <sip:1000@mydomain.com>..Call-ID: 78MEDW12nsfzBiBG1HDcqlIo
  Fdwz8CuN..CSeq: 25806 REGISTER..User-Agent: CSipSimple r944 / SHW-M250K-10..Contact: <sip:1000@IP1.IP1.IP1.IP1:52650;transport=UDP;ob>..Contact: "1000"
   <sip:1000@192.168.0.7:52650;ob>;expires=0..Expires: 900..Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS..
  Content-Length:  0....
#
U LAN.LAN.LAN.LAN:5060 -> IP1.IP1.IP1.IP1:52650
  SIP/2.0 401 Unauthorized..Via: SIP/2.0/UDP IP1.IP1.IP1.IP1:52650;rport=52650;branch=z9hG4bKPjO4rbtAX71eIaLEFINx7F3Hm2PFQ9UOUW..From: "1000" <sip:1000@h
  ellohakkyo.com>;tag=7uoK5HI6z649RQnUkdMUfyWXVYNu0ymy..To: "1000" <sip:1000@mydomain.com>;tag=Q9Q71cXXHgvaF..Call-ID: 78MEDW12nsfzBiBG1HDcqlIoFdwz8C
  uN..CSeq: 25806 REGISTER..User-Agent: FreeSWITCH-mod_sofia/1.0.head-git-4ceca18 2011-10-21 20-38-41 -0500..Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, M
  ESSAGE, UPDATE, INFO, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE..Supported: timer, precondition, path, replaces..WWW-Authenticate: Digest realm="hel
  lohakkyo.com", nonce="fd66560a-1cc2-41ec-8a22-b35e0fa1fbfa", algorithm=MD5, qop="auth"..Content-Length: 0....
#
U IP1.IP1.IP1.IP1:52650 -> LAN.LAN.LAN.LAN:5060
  REGISTER sip:mydomain.com SIP/2.0..Via: SIP/2.0/UDP IP1.IP1.IP1.IP1:52650;rport;branch=z9hG4bKPjZqINX8GFqdQ2DkHG2ia7zLSxBhUKn32k..Max-Forwards: 70..
  From: "1000" <sip:1000@mydomain.com>;tag=7uoK5HI6z649RQnUkdMUfyWXVYNu0ymy..To: "1000" <sip:1000@mydomain.com>..Call-ID: 78MEDW12nsfzBiBG1HDcqlIo
  Fdwz8CuN..CSeq: 25807 REGISTER..User-Agent: CSipSimple r944 / SHW-M250K-10..Contact: <sip:1000@IP1.IP1.IP1.IP1:52650;transport=UDP;ob>..Contact: "1000"
   <sip:1000@192.168.0.7:52650;ob>;expires=0..Expires: 900..Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, REFER, MESSAGE, OPTIONS..
  Authorization: Digest username="1000", realm="mydomain.com", nonce="fd66560a-1cc2-41ec-8a22-b35e0fa1fbfa", uri="sip:mydomain.com", response="b74
  c4e806a28a3499e7abcdd3004260f", algorithm=MD5, cnonce="SzkFKNvd8fRAdDzS5.9qL5GtDTEM5oWJ", qop=auth, nc=00000001..Content-Length:  0....
#
U LAN.LAN.LAN.LAN:5060 -> IP1.IP1.IP1.IP1:52650
  SIP/2.0 200 OK..Via: SIP/2.0/UDP IP1.IP1.IP1.IP1:52650;rport=52650;branch=z9hG4bKPjZqINX8GFqdQ2DkHG2ia7zLSxBhUKn32k..From: "1000" <sip:1000@mydomain
  .com>;tag=7uoK5HI6z649RQnUkdMUfyWXVYNu0ymy..To: "1000" <sip:1000@mydomain.com>;tag=rjH037D1eSjXa..Call-ID: 78MEDW12nsfzBiBG1HDcqlIoFdwz8CuN..CSeq:
  25807 REGISTER..Contact: <sip:1000@IP1.IP1.IP1.IP1:52650;transport=UDP;ob>;expires=900..Date: Tue, 25 Oct 2011 00:40:13 GMT..User-Agent: FreeSWITCH-mod
  _sofia/1.0.head-git-4ceca18 2011-10-21 20-38-41 -0500..Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, UPDATE, INFO, REGISTER, REFER, NOTIFY, PUBLI
  SH, SUBSCRIBE..Supported: timer, precondition, path, replaces..Content-Length: 0....
#
U LAN.LAN.LAN.LAN:5060 -> IP1.IP1.IP1.IP1:52650
  NOTIFY sip:1000@IP1.IP1.IP1.IP1:52650;transport=UDP;ob SIP/2.0..Via: SIP/2.0/UDP LAN.LAN.LAN.LAN;rport;branch=z9hG4bKXca97Uj8rvmtS..Max-Forwards: 70..From
  : <sip:1000@LAN.LAN.LAN.LAN>;tag=SUaS52y4B28Fp..To: <sip:1000@LAN.LAN.LAN.LAN>..Call-ID: bde7d46d-7944-122f-02a4-001bfce452cb..CSeq: 19415542 NOTIFY..Contac
  t: <sip:mod_sofia@LAN.LAN.LAN.LAN:5060>..User-Agent: FreeSWITCH-mod_sofia/1.0.head-git-4ceca18 2011-10-21 20-38-41 -0500..Allow: INVITE, ACK, BYE, CANCEL
  , OPTIONS, MESSAGE, UPDATE, INFO, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE..Supported: timer, precondition, path, replaces..Event: message-summary.
  .Allow-Events: talk, hold, presence, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer..Subscrip
  tion-State: terminated;reason=timeout..Content-Type: application/simple-message-summary..Content-Length: 64....Messages-Waiting: no..Message-Account:
  sip:1000@LAN.LAN.LAN.LAN....
#
U LAN.LAN.LAN.LAN:5060 -> IP1.IP1.IP1.IP1:52650
  NOTIFY sip:1000@IP1.IP1.IP1.IP1:52650;transport=UDP;ob SIP/2.0..Via: SIP/2.0/UDP LAN.LAN.LAN.LAN;rport;branch=z9hG4bKyN319p3Bp5aDN..Max-Forwards: 70..From
  : <sip:1000@LAN.LAN.LAN.LAN>;tag=t43H7XF88aZ2H..To: <sip:1000@LAN.LAN.LAN.LAN>..Call-ID: bde8045c-7944-122f-02a4-001bfce452cb..CSeq: 19415542 NOTIFY..Contac
  t: <sip:mod_sofia@LAN.LAN.LAN.LAN:5060>..User-Agent: FreeSWITCH-mod_sofia/1.0.head-git-4ceca18 2011-10-21 20-38-41 -0500..Allow: INVITE, ACK, BYE, CANCEL
  , OPTIONS, MESSAGE, UPDATE, INFO, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE..Supported: timer, precondition, path, replaces..Event: message-summary.
  .Allow-Events: talk, hold, presence, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer..Subscrip
  tion-State: terminated;reason=timeout..Content-Type: application/simple-message-summary..Content-Length: 64....Messages-Waiting: no..Message-Account:
  sip:1000@LAN.LAN.LAN.LAN....
#
U IP1.IP1.IP1.IP1:52650 -> LAN.LAN.LAN.LAN:5060
  SIP/2.0 200 OK..Via: SIP/2.0/UDP LAN.LAN.LAN.LAN;rport=5060;received=WAN.WAN.WAN.WAN;branch=z9hG4bKXca97Uj8rvmtS..Call-ID: bde7d46d-7944-122f-02a4-001bfce452
  cb..From: <sip:1000@LAN.LAN.LAN.LAN>;tag=SUaS52y4B28Fp..To: <sip:1000@LAN.LAN.LAN.LAN>;tag=z9hG4bKXca97Uj8rvmtS..CSeq: 19415542 NOTIFY..Content-Length:  0..
  ..
#
U IP1.IP1.IP1.IP1:52650 -> LAN.LAN.LAN.LAN:5060
  SIP/2.0 200 OK..Via: SIP/2.0/UDP LAN.LAN.LAN.LAN;rport=5060;received=WAN.WAN.WAN.WAN;branch=z9hG4bKyN319p3Bp5aDN..Call-ID: bde8045c-7944-122f-02a4-001bfce452
  cb..From: <sip:1000@LAN.LAN.LAN.LAN>;tag=t43H7XF88aZ2H..To: <sip:1000@LAN.LAN.LAN.LAN>;tag=z9hG4bKyN319p3Bp5aDN..CSeq: 19415542 NOTIFY..Content-Length:  0..
  ..
#
U IP1.IP1.IP1.IP1:17804 -> LAN.LAN.LAN.LAN:5060
  ..................

U IP1.IP1.IP1.IP1:40326 -> LAN.LAN.LAN.LAN:5060
  ..................
#
U IP1.IP1.IP1.IP1:40326 -> LAN.LAN.LAN.LAN:5060
  INVITE sip:1001@mydomain.com SIP/2.0..Via: SIP/2.0/UDP IP1.IP1.IP1.IP1:40326;rport;branch=z9hG4bKPjasf5BKgXzZpGCpyOX6YQFh92Q-pyFrbQ..Max-Forwards: 7
  0..From: "1000" <sip:1000@mydomain.com>;tag=uconjBss5PWwJsMah1tBDt.yxbojiQC...To: <sip:1001@mydomain.com>..Contact: <sip:1000@IP1.IP1.IP1.IP1:403
  26;transport=UDP;ob>..Call-ID: tzOG9ZoiKP1t1dCNOGQ04eYiBvHzZxFd..CSeq: 17127 INVITE..Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY
  , REFER, MESSAGE, OPTIONS..Supported: replaces, 100rel, timer, norefersub..Session-Expires: 1800..Min-SE: 90..User-Agent: CSipSimple r944 / SHW-M250K-
  10..Content-Type: application/sdp..Content-Length:   385....v=0..o=- 3528497469 3528497469 IN IP4 192.168.0.9..s=pjmedia..c=IN IP4 192.168.0.9..t=0 0.
  .a=X-nat:0..m=audio 4000 RTP/AVP 9 104 103 102 0 8 101..a=rtcp:4001 IN IP4 192.168.0.9..a=rtpmap:9 G722/8000..a=rtpmap:104 speex/32000..a=rtpmap:103 s
  peex/16000..a=rtpmap:102 speex/8000..a=rtpmap:0 PCMU/8000..a=rtpmap:8 PCMA/8000..a=sendrecv..a=rtpmap:101 telephone-event/8000..a=fmtp:101 0-15..
#
U LAN.LAN.LAN.LAN:5060 -> IP1.IP1.IP1.IP1:40326
  SIP/2.0 100 Trying..Via: SIP/2.0/UDP IP1.IP1.IP1.IP1:40326;rport=40326;branch=z9hG4bKPjasf5BKgXzZpGCpyOX6YQFh92Q-pyFrbQ..From: "1000" <sip:1000@helloha
  kkyo.com>;tag=uconjBss5PWwJsMah1tBDt.yxbojiQC...To: <sip:1001@mydomain.com>..Call-ID: tzOG9ZoiKP1t1dCNOGQ04eYiBvHzZxFd..CSeq: 17127 INVITE..User-Ag
  ent: FreeSWITCH-mod_sofia/1.0.head-git-4ceca18 2011-10-21 20-38-41 -0500..Content-Length: 0....
#
U LAN.LAN.LAN.LAN:5060 -> IP1.IP1.IP1.IP1:40326
  SIP/2.0 407 Proxy Authentication Required..Via: SIP/2.0/UDP IP1.IP1.IP1.IP1:40326;rport=40326;branch=z9hG4bKPjasf5BKgXzZpGCpyOX6YQFh92Q-pyFrbQ..From: "
  1000" <sip:1000@mydomain.com>;tag=uconjBss5PWwJsMah1tBDt.yxbojiQC...To: <sip:1001@mydomain.com>;tag=jX24H73v30N3Q..Call-ID: tzOG9ZoiKP1t1dCNOGQ0
  4eYiBvHzZxFd..CSeq: 17127 INVITE..User-Agent: FreeSWITCH-mod_sofia/1.0.head-git-4ceca18 2011-10-21 20-38-41 -0500..Accept: application/sdp..Allow: INV
  ITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, UPDATE, INFO, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE..Supported: timer, precondition, path, replaces..Al
  low-Events: talk, hold, presence, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, refer..Proxy-Authe
  nticate: Digest realm="mydomain.com", nonce="54671397-957e-43ee-887a-fba804895bdc", algorithm=MD5, qop="auth"..Content-Length: 0....
#
U IP1.IP1.IP1.IP1:40326 -> LAN.LAN.LAN.LAN:5060
  ACK sip:1001@mydomain.com SIP/2.0..Via: SIP/2.0/UDP IP1.IP1.IP1.IP1:40326;rport;branch=z9hG4bKPjasf5BKgXzZpGCpyOX6YQFh92Q-pyFrbQ..Max-Forwards: 70..
  From: "1000" <sip:1000@mydomain.com>;tag=uconjBss5PWwJsMah1tBDt.yxbojiQC...To: <sip:1001@mydomain.com>;tag=jX24H73v30N3Q..Call-ID: tzOG9ZoiKP1t1
  dCNOGQ04eYiBvHzZxFd..CSeq: 17127 ACK..Content-Length:  0....
####
T IP1.IP1.IP1.IP1:36933 -> LAN.LAN.LAN.LAN:5060 [AP]
  INVITE sip:1001@mydomain.com SIP/2.0..Via: SIP/2.0/TCP 192.168.0.9:36933;rport;branch=z9hG4bKPj44ijjr3vXioTn7f3krdAdxY7u1BzlwvW..Max-Forwards: 70..
  From: "1000" <sip:1000@mydomain.com>;tag=uconjBss5PWwJsMah1tBDt.yxbojiQC...To: <sip:1001@mydomain.com>..Contact: <sip:1000@IP1.IP1.IP1.IP1:40326;
  transport=UDP;ob>..Call-ID: tzOG9ZoiKP1t1dCNOGQ04eYiBvHzZxFd..CSeq: 17128 INVITE..Allow: PRACK, INVITE, ACK, BYE, CANCEL, UPDATE, SUBSCRIBE, NOTIFY, R
  EFER, MESSAGE, OPTIONS..Supported: replaces, 100rel, timer, norefersub..Session-Expires: 1800..Min-SE: 90..User-Agent: CSipSimple r944 / SHW-M250K-10.
  .Proxy-Authorization: Digest username="1000", realm="mydomain.com", nonce="54671397-957e-43ee-887a-fba804895bdc", uri="sip:1001@mydomain.com", r
  esponse="8a5999d5b5dd32f960ecdab50f68a321", algorithm=MD5, cnonce="0cXxCBvdM3gv9K8f85mkzjtsaD.WEcJa", qop=auth, nc=00000001..Content-Type: application
  /sdp..Content-Length:   385....v=0..o=- 3528497469 3528497469 IN IP4 192.168.0.9..s=pjmedia..c=IN IP4 192.168.0.9..t=0 0..a=X-nat:0..m=audio 4000 RTP/
  AVP 9 104 103 102 0 8 101..a=rtcp:4001 IN IP4 192.168.0.9..a=rtpmap:9 G722/8000..a=rtpmap:104 speex/32000..a=rtpmap:103 speex/16000..a=rtpmap:102 spee
  x/8000..a=rtpmap:0 PCMU/8000..a=rtpmap:8 PCMA/8000..a=sendrecv..a=rtpmap:101 telephone-event/8000..a=fmtp:101 0-15..
##
T LAN.LAN.LAN.LAN:5060 -> IP1.IP1.IP1.IP1:36933 [AP]
  SIP/2.0 100 Trying..Via: SIP/2.0/TCP 192.168.0.9:36933;rport=36933;branch=z9hG4bKPj44ijjr3vXioTn7f3krdAdxY7u1BzlwvW;received=IP1.IP1.IP1.IP1..From: "10
  00" <sip:1000@mydomain.com>;tag=uconjBss5PWwJsMah1tBDt.yxbojiQC...To: <sip:1001@mydomain.com>..Call-ID: tzOG9ZoiKP1t1dCNOGQ04eYiBvHzZxFd..CSeq:
  17128 INVITE..User-Agent: FreeSWITCH-mod_sofia/1.0.head-git-4ceca18 2011-10-21 20-38-41 -0500..Content-Length: 0....
##
T LAN.LAN.LAN.LAN:5060 -> IP1.IP1.IP1.IP1:36933 [AP]
  SIP/2.0 480 Temporarily Unavailable..Via: SIP/2.0/TCP 192.168.0.9:36933;rport=36933;branch=z9hG4bKPj44ijjr3vXioTn7f3krdAdxY7u1BzlwvW;received=IP1.IP1.IP1.IP1..From: "1000" <sip:1000@mydomain.com>;tag=uconjBss5PWwJsMah1tBDt.yxbojiQC...To: <sip:1001@mydomain.com>;tag=K6UXK2m009BpK..Call-ID: tzOG9
  ZoiKP1t1dCNOGQ04eYiBvHzZxFd..CSeq: 17128 INVITE..User-Agent: FreeSWITCH-mod_sofia/1.0.head-git-4ceca18 2011-10-21 20-38-41 -0500..Accept: application/
  sdp..Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, MESSAGE, UPDATE, INFO, REGISTER, REFER, NOTIFY, PUBLISH, SUBSCRIBE..Supported: timer, precondition, pat
  h, replaces..Allow-Events: talk, hold, presence, dialog, line-seize, call-info, sla, include-session-description, presence.winfo, message-summary, ref
  er..Reason: Q.850;cause=16;text="NORMAL_CLEARING"..Content-Length: 0..Remote-Party-ID: "1001" <sip:1001@mydomain.com>;party=calling;privacy=off;scr
  een=no....
##
T IP1.IP1.IP1.IP1:36933 -> LAN.LAN.LAN.LAN:5060 [AP]
  ACK sip:1001@mydomain.com SIP/2.0..Via: SIP/2.0/TCP 192.168.0.9:36933;rport;branch=z9hG4bKPj44ijjr3vXioTn7f3krdAdxY7u1BzlwvW..Max-Forwards: 70..Fro
  m: "1000" <sip:1000@mydomain.com>;tag=uconjBss5PWwJsMah1tBDt.yxbojiQC...To: <sip:1001@mydomain.com>;tag=K6UXK2m009BpK..Call-ID: tzOG9ZoiKP1t1dCN
  OGQ04eYiBvHzZxFd..CSeq: 17128 ACK..Content-Length:  0....
##
U IP1.IP1.IP1.IP1:17804 -> LAN.LAN.LAN.LAN:5060
  ..................