login as: root
root@10.0.6.1's password:
Linux BLDGateway.jhddental.com 3.16.0-4-untangle-amd64 #1 SMP Debian 3.16.7-2untangle7 (2016-07-08) x86_64

Last login: Tue Jul 11 18:04:04 2017 from jkd-al-bhm01.jhddental.com
[root @ BLDGateway] ~ # tcpdump -i any host 68.117.155.178 -n
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on any, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes
18:06:40.348734 IP 68.117.155.178.55034 > 10.0.6.198.5060: SIP
18:06:52.927800 IP 10.0.6.198.5060 > 68.117.155.178.55034: SIP: BYE sip:111@68.117.155.178:55034 SIP/2.0
18:06:52.927882 IP 97.82.2.163.5060 > 68.117.155.178.55034: SIP: BYE sip:111@68.117.155.178:55034 SIP/2.0
18:06:52.927896 IP 97.82.2.163.5060 > 68.117.155.178.55034: SIP: BYE sip:111@68.117.155.178:55034 SIP/2.0
18:06:53.055037 IP 68.117.155.178.55034 > 97.82.2.163.5060: SIP: SIP/2.0 200 OK
18:06:53.055153 IP 68.117.155.178.55034 > 10.0.6.198.5060: SIP: SIP/2.0 200 OK
18:06:59.468000 IP 68.117.155.178.55034 > 97.82.2.163.5060: SIP: INVITE sip:2059944423@pbx.onehop.com SIP/2.0
18:06:59.468118 IP 68.117.155.178.55034 > 10.0.6.198.5060: SIP: INVITE sip:2059944423@pbx.onehop.com SIP/2.0
18:06:59.472120 IP 10.0.6.198.5060 > 68.117.155.178.55034: SIP: SIP/2.0 401 Unauthorized
18:06:59.472194 IP 97.82.2.163.5060 > 68.117.155.178.55034: SIP: SIP/2.0 401 Unauthorized
18:06:59.472210 IP 97.82.2.163.5060 > 68.117.155.178.55034: SIP: SIP/2.0 401 Unauthorized
18:06:59.486214 IP 68.117.155.178.55034 > 97.82.2.163.5060: SIP: ACK sip:2059944423@pbx.onehop.com SIP/2.0
18:06:59.486329 IP 68.117.155.178.55034 > 10.0.6.198.5060: SIP: ACK sip:2059944423@pbx.onehop.com SIP/2.0
18:06:59.495457 IP 68.117.155.178.55034 > 97.82.2.163.5060: SIP: INVITE sip:2059944423@pbx.onehop.com SIP/2.0
18:06:59.495569 IP 68.117.155.178.55034 > 10.0.6.198.5060: SIP: INVITE sip:2059944423@pbx.onehop.com SIP/2.0
18:06:59.502889 IP 10.0.6.198.5060 > 68.117.155.178.55034: SIP: SIP/2.0 100 Trying
18:06:59.502962 IP 97.82.2.163.5060 > 68.117.155.178.55034: SIP: SIP/2.0 100 Trying
18:06:59.502976 IP 97.82.2.163.5060 > 68.117.155.178.55034: SIP: SIP/2.0 100 Trying
18:07:00.470085 IP 10.0.6.198.5060 > 68.117.155.178.55034: SIP: SIP/2.0 180 Ringing
18:07:00.470163 IP 97.82.2.163.5060 > 68.117.155.178.55034: SIP: SIP/2.0 180 Ringing
18:07:00.470177 IP 97.82.2.163.5060 > 68.117.155.178.55034: SIP: SIP/2.0 180 Ringing
18:07:00.831502 IP 10.0.6.198.5060 > 68.117.155.178.55034: SIP: OPTIONS sip:111@68.117.155.178:55034;rinstance=fa72e560d7b553c9 SIP/2.0
18:07:00.831576 IP 97.82.2.163.5060 > 68.117.155.178.55034: SIP: OPTIONS sip:111@68.117.155.178:55034;rinstance=fa72e560d7b553c9 SIP/2.0
18:07:00.831591 IP 97.82.2.163.5060 > 68.117.155.178.55034: SIP: OPTIONS sip:111@68.117.155.178:55034;rinstance=fa72e560d7b553c9 SIP/2.0
18:07:00.846929 IP 68.117.155.178.55034 > 97.82.2.163.5060: SIP: SIP/2.0 200 OK
18:07:00.847041 IP 68.117.155.178.55034 > 10.0.6.198.5060: SIP: SIP/2.0 200 OK
18:07:04.424670 IP 10.0.6.198.5060 > 68.117.155.178.55034: SIP: SIP/2.0 200 OK
18:07:04.424747 IP 97.82.2.163.5060 > 68.117.155.178.55034: SIP: SIP/2.0 200 OK
18:07:04.424762 IP 97.82.2.163.5060 > 68.117.155.178.55034: SIP: SIP/2.0 200 OK
18:07:04.444618 IP 68.117.155.178.55034 > 97.82.2.163.5060: SIP: ACK sip:97.82.2.163:5060 SIP/2.0
18:07:04.444731 IP 68.117.155.178.55034 > 10.0.6.198.5060: SIP: ACK sip:97.82.2.163:5060 SIP/2.0
18:07:10.346665 IP 68.117.155.178.55034 > 97.82.2.163.5060: SIP
18:07:10.346781 IP 68.117.155.178.55034 > 10.0.6.198.5060: SIP