[root@A1 ~]# tcpdump -Ann -i eth1 port 5060 and host 212.248.28.10
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth1, link-type EN10MB (Ethernet), capture size 65535 bytes
09:55:56.435426 IP 79.170.152.34.5060 > 212.248.28.10.5060: SIP, length: 521
E..%....@...O.."...
........OPTIONS sip:212.248.28.10 SIP/2.0
Via: SIP/2.0/UDP 79.170.152.34:5060;branch=z9hG4bK20b709c7
Max-Forwards: 70
From: "asterisk" <sip:asterisk@79.170.152.34>;tag=as56963ae7
To: <sip:212.248.28.10>
Contact: <sip:asterisk@79.170.152.34:5060>
Call-ID: 27f840d7384b549f05198e6901090b37@79.170.152.34:5060
CSeq: 102 OPTIONS
User-Agent: Hive
Date: Tue, 09 Aug 2016 06:55:56 GMT
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH, MESSAGE
Supported: replaces, timer
Content-Length: 0


09:55:57.435289 IP 79.170.152.34.5060 > 212.248.28.10.5060: SIP, length: 521
E..%....@...O.."...
........OPTIONS sip:212.248.28.10 SIP/2.0
Via: SIP/2.0/UDP 79.170.152.34:5060;branch=z9hG4bK20b709c7
Max-Forwards: 70
From: "asterisk" <sip:asterisk@79.170.152.34>;tag=as56963ae7
To: <sip:212.248.28.10>
Contact: <sip:asterisk@79.170.152.34:5060>
Call-ID: 27f840d7384b549f05198e6901090b37@79.170.152.34:5060
CSeq: 102 OPTIONS
User-Agent: Hive
Date: Tue, 09 Aug 2016 06:55:56 GMT
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH, MESSAGE
Supported: replaces, timer
Content-Length: 0


09:55:58.435118 IP 79.170.152.34.5060 > 212.248.28.10.5060: SIP, length: 521
E..%....@...O.."...
........OPTIONS sip:212.248.28.10 SIP/2.0
Via: SIP/2.0/UDP 79.170.152.34:5060;branch=z9hG4bK20b709c7
Max-Forwards: 70
From: "asterisk" <sip:asterisk@79.170.152.34>;tag=as56963ae7
To: <sip:212.248.28.10>
Contact: <sip:asterisk@79.170.152.34:5060>
Call-ID: 27f840d7384b549f05198e6901090b37@79.170.152.34:5060
CSeq: 102 OPTIONS
User-Agent: Hive
Date: Tue, 09 Aug 2016 06:55:56 GMT
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH, MESSAGE
Supported: replaces, timer
Content-Length: 0


09:55:59.435339 IP 79.170.152.34.5060 > 212.248.28.10.5060: SIP, length: 521
E..%....@...O.."...
........OPTIONS sip:212.248.28.10 SIP/2.0
Via: SIP/2.0/UDP 79.170.152.34:5060;branch=z9hG4bK20b709c7
Max-Forwards: 70
From: "asterisk" <sip:asterisk@79.170.152.34>;tag=as56963ae7
To: <sip:212.248.28.10>
Contact: <sip:asterisk@79.170.152.34:5060>
Call-ID: 27f840d7384b549f05198e6901090b37@79.170.152.34:5060
CSeq: 102 OPTIONS
User-Agent: Hive
Date: Tue, 09 Aug 2016 06:55:56 GMT
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH, MESSAGE
Supported: replaces, timer
Content-Length: 0


09:56:00.434862 IP 79.170.152.34.5060 > 212.248.28.10.5060: SIP, length: 521
E..%....@...O.."...
........OPTIONS sip:212.248.28.10 SIP/2.0
Via: SIP/2.0/UDP 79.170.152.34:5060;branch=z9hG4bK20b709c7
Max-Forwards: 70
From: "asterisk" <sip:asterisk@79.170.152.34>;tag=as56963ae7
To: <sip:212.248.28.10>
Contact: <sip:asterisk@79.170.152.34:5060>
Call-ID: 27f840d7384b549f05198e6901090b37@79.170.152.34:5060
CSeq: 102 OPTIONS
User-Agent: Hive
Date: Tue, 09 Aug 2016 06:55:56 GMT
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH, MESSAGE
Supported: replaces, timer
Content-Length: 0