Advertisement
Guest User

xlite

a guest
Aug 6th, 2015
273
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 69.23 KB | None | 0 0
  1. No. Time Source Destination Protocol Length Info
  2. 15 2.643963000 10.10.22.171 69.59.234.67 SIP/SDP 813 Request: INVITE sip:732xxxxxxx@69.59.234.67 |
  3.  
  4. Frame 15: 813 bytes on wire (6504 bits), 813 bytes captured (6504 bits) on interface 0
  5. Interface id: 0 (\Device\NPF_{7023A778-8B3D-449A-89DE-863C93D970BD})
  6. Encapsulation type: Ethernet (1)
  7. Arrival Time: Aug 6, 2015 12:53:02.725653000 Pacific Daylight Time
  8. [Time shift for this packet: 0.000000000 seconds]
  9. Epoch Time: 1438890782.725653000 seconds
  10. [Time delta from previous captured frame: 0.034890000 seconds]
  11. [Time delta from previous displayed frame: 0.000000000 seconds]
  12. [Time since reference or first frame: 2.643963000 seconds]
  13. Frame Number: 15
  14. Frame Length: 813 bytes (6504 bits)
  15. Capture Length: 813 bytes (6504 bits)
  16. [Frame is marked: False]
  17. [Frame is ignored: False]
  18. [Protocols in frame: eth:ethertype:ip:udp:sip:sdp]
  19. [Number of per-protocol-data: 1]
  20. [Session Initiation Protocol, key 6]
  21. [Coloring Rule Name: UDP]
  22. [Coloring Rule String: udp]
  23. Ethernet II, Src: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa), Dst: All-HSRP-routers_7a (00:00:0c:07:ac:7a)
  24. Destination: All-HSRP-routers_7a (00:00:0c:07:ac:7a)
  25. Address: All-HSRP-routers_7a (00:00:0c:07:ac:7a)
  26. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  27. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  28. Source: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  29. Address: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  30. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  31. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  32. Type: IP (0x0800)
  33. Internet Protocol Version 4, Src: 10.10.22.171 (10.10.22.171), Dst: 69.59.234.67 (69.59.234.67)
  34. Version: 4
  35. Header Length: 20 bytes
  36. Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
  37. Total Length: 799
  38. Identification: 0x1bce (7118)
  39. Flags: 0x00
  40. Fragment offset: 0
  41. Time to live: 128
  42. Protocol: UDP (17)
  43. Header checksum: 0xcbcc [validation disabled]
  44. Source: 10.10.22.171 (10.10.22.171)
  45. Destination: 69.59.234.67 (69.59.234.67)
  46. [Source GeoIP: Unknown]
  47. [Destination GeoIP: Unknown]
  48. User Datagram Protocol, Src Port: 61660 (61660), Dst Port: 5060 (5060)
  49. Session Initiation Protocol (INVITE)
  50. Request-Line: INVITE sip:732xxxxxxx@69.59.234.67 SIP/2.0
  51. Method: INVITE
  52. Request-URI: sip:732xxxxxxx@69.59.234.67
  53. Request-URI User Part: 732xxxxxxx
  54. Request-URI Host Part: 69.59.234.67
  55. [Resent Packet: False]
  56. Message Header
  57. Via: SIP/2.0/UDP 10.10.22.171:61660;branch=z9hG4bK-524287-1---f907ce4540cf9e26;rport
  58. Transport: UDP
  59. Sent-by Address: 10.10.22.171
  60. Sent-by port: 61660
  61. Branch: z9hG4bK-524287-1---f907ce4540cf9e26
  62. RPort: rport
  63. Max-Forwards: 70
  64. Contact: <sip:1619yyyyyyy@10.10.22.171:61660>
  65. Contact URI: sip:1619yyyyyyy@10.10.22.171:61660
  66. Contact URI User Part: 1619yyyyyyy
  67. Contact URI Host Part: 10.10.22.171
  68. Contact URI Host Port: 61660
  69. To: <sip:732xxxxxxx@69.59.234.67>
  70. SIP to address: sip:732xxxxxxx@69.59.234.67
  71. From: <sip:1619yyyyyyy@69.59.234.67>;tag=3e1b7c51
  72. SIP from address: sip:1619yyyyyyy@69.59.234.67
  73. SIP from address User Part: 1619yyyyyyy
  74. SIP from address Host Part: 69.59.234.67
  75. SIP from tag: 3e1b7c51
  76. Call-ID: 76589Y2Y4OTVlNWQzOTlhYTg4MzU4MzY0MTNhMTZjNjFiMTQ
  77. CSeq: 1 INVITE
  78. Sequence Number: 1
  79. Method: INVITE
  80. Allow: SUBSCRIBE, NOTIFY, INVITE, ACK, CANCEL, BYE, REFER, INFO, MESSAGE
  81. Content-Type: application/sdp
  82. User-Agent: X-Lite 4.8.4 76589-ee0a787b-W6.1
  83. Content-Length: 241
  84. Message Body
  85. Session Description Protocol
  86. Session Description Protocol Version (v): 0
  87. Owner/Creator, Session Id (o): - 13083364382620040 1 IN IP4 10.10.22.171
  88. Owner Username: -
  89. Session ID: 13083364382620040
  90. Session Version: 1
  91. Owner Network Type: IN
  92. Owner Address Type: IP4
  93. Owner Address: 10.10.22.171
  94. Session Name (s): X-Lite release 4.8.4 stamp 76589
  95. Connection Information (c): IN IP4 10.10.22.171
  96. Time Description, active time (t): 0 0
  97. Session Start Time: 0
  98. Session Stop Time: 0
  99. Media Description, name and address (m): audio 56448 RTP/AVP 9 8 0 84 101
  100. Media Type: audio
  101. Media Port: 56448
  102. Media Protocol: RTP/AVP
  103. Media Format: ITU-T G.722
  104. Media Format: ITU-T G.711 PCMA
  105. Media Format: ITU-T G.711 PCMU
  106. Media Format: Unassigned
  107. Media Format: DynamicRTP-Type-101
  108. Media Attribute (a): rtpmap:84 speex/16000
  109. Media Attribute Fieldname: rtpmap
  110. Media Format: 84
  111. MIME Type: speex
  112. Sample Rate: 16000
  113. Media Attribute (a): rtpmap:101 telephone-event/8000
  114. Media Attribute Fieldname: rtpmap
  115. Media Format: 101
  116. MIME Type: telephone-event
  117. Sample Rate: 8000
  118. Media Attribute (a): fmtp:101 0-15
  119. Media Attribute Fieldname: fmtp
  120. Media Format: 101 [telephone-event]
  121. Media format specific parameters: 0-15
  122. Media Attribute (a): sendrecv
  123.  
  124. No. Time Source Destination Protocol Length Info
  125. 16 2.736759000 69.59.234.67 10.10.22.171 SIP 493 Status: 407 Proxy Authentication Required |
  126.  
  127. Frame 16: 493 bytes on wire (3944 bits), 493 bytes captured (3944 bits) on interface 0
  128. Interface id: 0 (\Device\NPF_{7023A778-8B3D-449A-89DE-863C93D970BD})
  129. Encapsulation type: Ethernet (1)
  130. Arrival Time: Aug 6, 2015 12:53:02.818449000 Pacific Daylight Time
  131. [Time shift for this packet: 0.000000000 seconds]
  132. Epoch Time: 1438890782.818449000 seconds
  133. [Time delta from previous captured frame: 0.092796000 seconds]
  134. [Time delta from previous displayed frame: 0.092796000 seconds]
  135. [Time since reference or first frame: 2.736759000 seconds]
  136. Frame Number: 16
  137. Frame Length: 493 bytes (3944 bits)
  138. Capture Length: 493 bytes (3944 bits)
  139. [Frame is marked: False]
  140. [Frame is ignored: False]
  141. [Protocols in frame: eth:ethertype:ip:udp:sip]
  142. [Number of per-protocol-data: 1]
  143. [Session Initiation Protocol, key 6]
  144. [Coloring Rule Name: UDP]
  145. [Coloring Rule String: udp]
  146. Ethernet II, Src: Cisco_32:b5:73 (b0:aa:77:32:b5:73), Dst: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  147. Destination: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  148. Address: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  149. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  150. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  151. Source: Cisco_32:b5:73 (b0:aa:77:32:b5:73)
  152. Address: Cisco_32:b5:73 (b0:aa:77:32:b5:73)
  153. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  154. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  155. Type: IP (0x0800)
  156. Internet Protocol Version 4, Src: 69.59.234.67 (69.59.234.67), Dst: 10.10.22.171 (10.10.22.171)
  157. Version: 4
  158. Header Length: 20 bytes
  159. Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
  160. Total Length: 479
  161. Identification: 0x0000 (0)
  162. Flags: 0x02 (Don't Fragment)
  163. Fragment offset: 0
  164. Time to live: 55
  165. Protocol: UDP (17)
  166. Header checksum: 0xf1da [validation disabled]
  167. Source: 69.59.234.67 (69.59.234.67)
  168. Destination: 10.10.22.171 (10.10.22.171)
  169. [Source GeoIP: Unknown]
  170. [Destination GeoIP: Unknown]
  171. User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 61660 (61660)
  172. Session Initiation Protocol (407)
  173. Status-Line: SIP/2.0 407 Proxy Authentication Required
  174. Status-Code: 407
  175. [Resent Packet: False]
  176. [Request Frame: 15]
  177. [Response Time (ms): 92]
  178. Message Header
  179. Via: SIP/2.0/UDP 10.10.22.171:61660;branch=z9hG4bK-524287-1---f907ce4540cf9e26;rport
  180. Transport: UDP
  181. Sent-by Address: 10.10.22.171
  182. Sent-by port: 61660
  183. Branch: z9hG4bK-524287-1---f907ce4540cf9e26
  184. RPort: rport
  185. From: <sip:1619yyyyyyy@69.59.234.67>;tag=3e1b7c51
  186. SIP from address: sip:1619yyyyyyy@69.59.234.67
  187. SIP from address User Part: 1619yyyyyyy
  188. SIP from address Host Part: 69.59.234.67
  189. SIP from tag: 3e1b7c51
  190. To: <sip:732xxxxxxx@69.59.234.67>;tag=2130296115
  191. SIP to address: sip:732xxxxxxx@69.59.234.67
  192. SIP to tag: 2130296115
  193. Call-ID: 76589Y2Y4OTVlNWQzOTlhYTg4MzU4MzY0MTNhMTZjNjFiMTQ
  194. CSeq: 1 INVITE
  195. Sequence Number: 1
  196. Method: INVITE
  197. Proxy-Authenticate: Digest realm="69.59.234.67", domain="69.59.234.67", nonce="1168824344", algorithm=MD5
  198. Authentication Scheme: Digest
  199. Realm: "69.59.234.67"
  200. Authentication Domain: "69.59.234.67"
  201. Nonce Value: "1168824344"
  202. Algorithm: MD5
  203. Max-Forwards: 70
  204. Content-Length: 0
  205.  
  206. No. Time Source Destination Protocol Length Info
  207. 17 2.740109000 10.10.22.171 69.59.234.67 SIP 381 Request: ACK sip:732xxxxxxx@69.59.234.67 |
  208.  
  209. Frame 17: 381 bytes on wire (3048 bits), 381 bytes captured (3048 bits) on interface 0
  210. Interface id: 0 (\Device\NPF_{7023A778-8B3D-449A-89DE-863C93D970BD})
  211. Encapsulation type: Ethernet (1)
  212. Arrival Time: Aug 6, 2015 12:53:02.821799000 Pacific Daylight Time
  213. [Time shift for this packet: 0.000000000 seconds]
  214. Epoch Time: 1438890782.821799000 seconds
  215. [Time delta from previous captured frame: 0.003350000 seconds]
  216. [Time delta from previous displayed frame: 0.003350000 seconds]
  217. [Time since reference or first frame: 2.740109000 seconds]
  218. Frame Number: 17
  219. Frame Length: 381 bytes (3048 bits)
  220. Capture Length: 381 bytes (3048 bits)
  221. [Frame is marked: False]
  222. [Frame is ignored: False]
  223. [Protocols in frame: eth:ethertype:ip:udp:sip]
  224. [Number of per-protocol-data: 1]
  225. [Session Initiation Protocol, key 6]
  226. [Coloring Rule Name: UDP]
  227. [Coloring Rule String: udp]
  228. Ethernet II, Src: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa), Dst: All-HSRP-routers_7a (00:00:0c:07:ac:7a)
  229. Destination: All-HSRP-routers_7a (00:00:0c:07:ac:7a)
  230. Address: All-HSRP-routers_7a (00:00:0c:07:ac:7a)
  231. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  232. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  233. Source: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  234. Address: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  235. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  236. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  237. Type: IP (0x0800)
  238. Internet Protocol Version 4, Src: 10.10.22.171 (10.10.22.171), Dst: 69.59.234.67 (69.59.234.67)
  239. Version: 4
  240. Header Length: 20 bytes
  241. Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
  242. Total Length: 367
  243. Identification: 0x1bcf (7119)
  244. Flags: 0x00
  245. Fragment offset: 0
  246. Time to live: 128
  247. Protocol: UDP (17)
  248. Header checksum: 0xcd7b [validation disabled]
  249. Source: 10.10.22.171 (10.10.22.171)
  250. Destination: 69.59.234.67 (69.59.234.67)
  251. [Source GeoIP: Unknown]
  252. [Destination GeoIP: Unknown]
  253. User Datagram Protocol, Src Port: 61660 (61660), Dst Port: 5060 (5060)
  254. Session Initiation Protocol (ACK)
  255. Request-Line: ACK sip:732xxxxxxx@69.59.234.67 SIP/2.0
  256. Method: ACK
  257. Request-URI: sip:732xxxxxxx@69.59.234.67
  258. Request-URI User Part: 732xxxxxxx
  259. Request-URI Host Part: 69.59.234.67
  260. [Resent Packet: False]
  261. [Request Frame: 15]
  262. [Response Time (ms): 96]
  263. Message Header
  264. Via: SIP/2.0/UDP 10.10.22.171:61660;branch=z9hG4bK-524287-1---f907ce4540cf9e26;rport
  265. Transport: UDP
  266. Sent-by Address: 10.10.22.171
  267. Sent-by port: 61660
  268. Branch: z9hG4bK-524287-1---f907ce4540cf9e26
  269. RPort: rport
  270. Max-Forwards: 70
  271. To: <sip:732xxxxxxx@69.59.234.67>;tag=2130296115
  272. SIP to address: sip:732xxxxxxx@69.59.234.67
  273. SIP to tag: 2130296115
  274. From: <sip:1619yyyyyyy@69.59.234.67>;tag=3e1b7c51
  275. SIP from address: sip:1619yyyyyyy@69.59.234.67
  276. SIP from address User Part: 1619yyyyyyy
  277. SIP from address Host Part: 69.59.234.67
  278. SIP from tag: 3e1b7c51
  279. Call-ID: 76589Y2Y4OTVlNWQzOTlhYTg4MzU4MzY0MTNhMTZjNjFiMTQ
  280. CSeq: 1 ACK
  281. Sequence Number: 1
  282. Method: ACK
  283. Content-Length: 0
  284.  
  285. No. Time Source Destination Protocol Length Info
  286. 18 2.744533000 10.10.22.171 69.59.234.67 SIP/SDP 997 Request: INVITE sip:732xxxxxxx@69.59.234.67 |
  287.  
  288. Frame 18: 997 bytes on wire (7976 bits), 997 bytes captured (7976 bits) on interface 0
  289. Interface id: 0 (\Device\NPF_{7023A778-8B3D-449A-89DE-863C93D970BD})
  290. Encapsulation type: Ethernet (1)
  291. Arrival Time: Aug 6, 2015 12:53:02.826223000 Pacific Daylight Time
  292. [Time shift for this packet: 0.000000000 seconds]
  293. Epoch Time: 1438890782.826223000 seconds
  294. [Time delta from previous captured frame: 0.004424000 seconds]
  295. [Time delta from previous displayed frame: 0.004424000 seconds]
  296. [Time since reference or first frame: 2.744533000 seconds]
  297. Frame Number: 18
  298. Frame Length: 997 bytes (7976 bits)
  299. Capture Length: 997 bytes (7976 bits)
  300. [Frame is marked: False]
  301. [Frame is ignored: False]
  302. [Protocols in frame: eth:ethertype:ip:udp:sip:sdp]
  303. [Number of per-protocol-data: 1]
  304. [Session Initiation Protocol, key 6]
  305. [Coloring Rule Name: UDP]
  306. [Coloring Rule String: udp]
  307. Ethernet II, Src: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa), Dst: All-HSRP-routers_7a (00:00:0c:07:ac:7a)
  308. Destination: All-HSRP-routers_7a (00:00:0c:07:ac:7a)
  309. Address: All-HSRP-routers_7a (00:00:0c:07:ac:7a)
  310. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  311. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  312. Source: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  313. Address: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  314. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  315. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  316. Type: IP (0x0800)
  317. Internet Protocol Version 4, Src: 10.10.22.171 (10.10.22.171), Dst: 69.59.234.67 (69.59.234.67)
  318. Version: 4
  319. Header Length: 20 bytes
  320. Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
  321. Total Length: 983
  322. Identification: 0x1bd0 (7120)
  323. Flags: 0x00
  324. Fragment offset: 0
  325. Time to live: 128
  326. Protocol: UDP (17)
  327. Header checksum: 0xcb12 [validation disabled]
  328. Source: 10.10.22.171 (10.10.22.171)
  329. Destination: 69.59.234.67 (69.59.234.67)
  330. [Source GeoIP: Unknown]
  331. [Destination GeoIP: Unknown]
  332. User Datagram Protocol, Src Port: 61660 (61660), Dst Port: 5060 (5060)
  333. Session Initiation Protocol (INVITE)
  334. Request-Line: INVITE sip:732xxxxxxx@69.59.234.67 SIP/2.0
  335. Method: INVITE
  336. Request-URI: sip:732xxxxxxx@69.59.234.67
  337. Request-URI User Part: 732xxxxxxx
  338. Request-URI Host Part: 69.59.234.67
  339. [Resent Packet: False]
  340. Message Header
  341. Via: SIP/2.0/UDP 10.10.22.171:61660;branch=z9hG4bK-524287-1---3037df0281da296c;rport
  342. Transport: UDP
  343. Sent-by Address: 10.10.22.171
  344. Sent-by port: 61660
  345. Branch: z9hG4bK-524287-1---3037df0281da296c
  346. RPort: rport
  347. Max-Forwards: 70
  348. Contact: <sip:1619yyyyyyy@10.10.22.171:61660>
  349. Contact URI: sip:1619yyyyyyy@10.10.22.171:61660
  350. Contact URI User Part: 1619yyyyyyy
  351. Contact URI Host Part: 10.10.22.171
  352. Contact URI Host Port: 61660
  353. To: <sip:732xxxxxxx@69.59.234.67>
  354. SIP to address: sip:732xxxxxxx@69.59.234.67
  355. From: <sip:1619yyyyyyy@69.59.234.67>;tag=3e1b7c51
  356. SIP from address: sip:1619yyyyyyy@69.59.234.67
  357. SIP from address User Part: 1619yyyyyyy
  358. SIP from address Host Part: 69.59.234.67
  359. SIP from tag: 3e1b7c51
  360. Call-ID: 76589Y2Y4OTVlNWQzOTlhYTg4MzU4MzY0MTNhMTZjNjFiMTQ
  361. CSeq: 2 INVITE
  362. Sequence Number: 2
  363. Method: INVITE
  364. Allow: SUBSCRIBE, NOTIFY, INVITE, ACK, CANCEL, BYE, REFER, INFO, MESSAGE
  365. Content-Type: application/sdp
  366. Proxy-Authorization: Digest username="1619yyyyyyy",realm="69.59.234.67",nonce="1168824344",uri="sip:732xxxxxxx@69.59.234.67",response="db26510892e12936bfe4e3ed8d2e8de8",algorithm=MD5
  367. Authentication Scheme: Digest
  368. Username: "1619yyyyyyy"
  369. Realm: "69.59.234.67"
  370. Nonce Value: "1168824344"
  371. Authentication URI: "sip:732xxxxxxx@69.59.234.67"
  372. Digest Authentication Response: "db26510892e12936bfe4e3ed8d2e8de8"
  373. Algorithm: MD5
  374. User-Agent: X-Lite 4.8.4 76589-ee0a787b-W6.1
  375. Content-Length: 241
  376. Message Body
  377. Session Description Protocol
  378. Session Description Protocol Version (v): 0
  379. Owner/Creator, Session Id (o): - 13083364382620040 1 IN IP4 10.10.22.171
  380. Owner Username: -
  381. Session ID: 13083364382620040
  382. Session Version: 1
  383. Owner Network Type: IN
  384. Owner Address Type: IP4
  385. Owner Address: 10.10.22.171
  386. Session Name (s): X-Lite release 4.8.4 stamp 76589
  387. Connection Information (c): IN IP4 10.10.22.171
  388. Time Description, active time (t): 0 0
  389. Session Start Time: 0
  390. Session Stop Time: 0
  391. Media Description, name and address (m): audio 56448 RTP/AVP 9 8 0 84 101
  392. Media Type: audio
  393. Media Port: 56448
  394. Media Protocol: RTP/AVP
  395. Media Format: ITU-T G.722
  396. Media Format: ITU-T G.711 PCMA
  397. Media Format: ITU-T G.711 PCMU
  398. Media Format: Unassigned
  399. Media Format: DynamicRTP-Type-101
  400. Media Attribute (a): rtpmap:84 speex/16000
  401. Media Attribute Fieldname: rtpmap
  402. Media Format: 84
  403. MIME Type: speex
  404. Sample Rate: 16000
  405. Media Attribute (a): rtpmap:101 telephone-event/8000
  406. Media Attribute Fieldname: rtpmap
  407. Media Format: 101
  408. MIME Type: telephone-event
  409. Sample Rate: 8000
  410. Media Attribute (a): fmtp:101 0-15
  411. Media Attribute Fieldname: fmtp
  412. Media Format: 101 [telephone-event]
  413. Media format specific parameters: 0-15
  414. Media Attribute (a): sendrecv
  415.  
  416. No. Time Source Destination Protocol Length Info
  417. 20 2.836793000 69.59.234.67 10.10.22.171 SIP 348 Status: 100 Trying |
  418.  
  419. Frame 20: 348 bytes on wire (2784 bits), 348 bytes captured (2784 bits) on interface 0
  420. Interface id: 0 (\Device\NPF_{7023A778-8B3D-449A-89DE-863C93D970BD})
  421. Encapsulation type: Ethernet (1)
  422. Arrival Time: Aug 6, 2015 12:53:02.918483000 Pacific Daylight Time
  423. [Time shift for this packet: 0.000000000 seconds]
  424. Epoch Time: 1438890782.918483000 seconds
  425. [Time delta from previous captured frame: 0.049921000 seconds]
  426. [Time delta from previous displayed frame: 0.092260000 seconds]
  427. [Time since reference or first frame: 2.836793000 seconds]
  428. Frame Number: 20
  429. Frame Length: 348 bytes (2784 bits)
  430. Capture Length: 348 bytes (2784 bits)
  431. [Frame is marked: False]
  432. [Frame is ignored: False]
  433. [Protocols in frame: eth:ethertype:ip:udp:sip]
  434. [Number of per-protocol-data: 1]
  435. [Session Initiation Protocol, key 6]
  436. [Coloring Rule Name: UDP]
  437. [Coloring Rule String: udp]
  438. Ethernet II, Src: Cisco_32:b5:73 (b0:aa:77:32:b5:73), Dst: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  439. Destination: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  440. Address: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  441. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  442. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  443. Source: Cisco_32:b5:73 (b0:aa:77:32:b5:73)
  444. Address: Cisco_32:b5:73 (b0:aa:77:32:b5:73)
  445. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  446. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  447. Type: IP (0x0800)
  448. Internet Protocol Version 4, Src: 69.59.234.67 (69.59.234.67), Dst: 10.10.22.171 (10.10.22.171)
  449. Version: 4
  450. Header Length: 20 bytes
  451. Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
  452. Total Length: 334
  453. Identification: 0x0000 (0)
  454. Flags: 0x02 (Don't Fragment)
  455. Fragment offset: 0
  456. Time to live: 55
  457. Protocol: UDP (17)
  458. Header checksum: 0xf26b [validation disabled]
  459. Source: 69.59.234.67 (69.59.234.67)
  460. Destination: 10.10.22.171 (10.10.22.171)
  461. [Source GeoIP: Unknown]
  462. [Destination GeoIP: Unknown]
  463. User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 61660 (61660)
  464. Session Initiation Protocol (100)
  465. Status-Line: SIP/2.0 100 Trying
  466. Status-Code: 100
  467. [Resent Packet: False]
  468. [Request Frame: 18]
  469. [Response Time (ms): 92]
  470. Message Header
  471. Via: SIP/2.0/UDP 10.10.22.171:61660;branch=z9hG4bK-524287-1---3037df0281da296c;rport
  472. Transport: UDP
  473. Sent-by Address: 10.10.22.171
  474. Sent-by port: 61660
  475. Branch: z9hG4bK-524287-1---3037df0281da296c
  476. RPort: rport
  477. From: <sip:1619yyyyyyy@69.59.234.67>;tag=3e1b7c51
  478. SIP from address: sip:1619yyyyyyy@69.59.234.67
  479. SIP from address User Part: 1619yyyyyyy
  480. SIP from address Host Part: 69.59.234.67
  481. SIP from tag: 3e1b7c51
  482. To: <sip:732xxxxxxx@69.59.234.67>
  483. SIP to address: sip:732xxxxxxx@69.59.234.67
  484. Call-ID: 76589Y2Y4OTVlNWQzOTlhYTg4MzU4MzY0MTNhMTZjNjFiMTQ
  485. CSeq: 2 INVITE
  486. Sequence Number: 2
  487. Method: INVITE
  488. Max-Forwards: 15
  489. Content-Length: 0
  490.  
  491. No. Time Source Destination Protocol Length Info
  492. 55 6.949544000 69.59.234.67 10.10.22.171 SIP/SDP 742 Status: 183 Session Progress |
  493.  
  494. Frame 55: 742 bytes on wire (5936 bits), 742 bytes captured (5936 bits) on interface 0
  495. Interface id: 0 (\Device\NPF_{7023A778-8B3D-449A-89DE-863C93D970BD})
  496. Encapsulation type: Ethernet (1)
  497. Arrival Time: Aug 6, 2015 12:53:07.031234000 Pacific Daylight Time
  498. [Time shift for this packet: 0.000000000 seconds]
  499. Epoch Time: 1438890787.031234000 seconds
  500. [Time delta from previous captured frame: 0.213614000 seconds]
  501. [Time delta from previous displayed frame: 4.112751000 seconds]
  502. [Time since reference or first frame: 6.949544000 seconds]
  503. Frame Number: 55
  504. Frame Length: 742 bytes (5936 bits)
  505. Capture Length: 742 bytes (5936 bits)
  506. [Frame is marked: False]
  507. [Frame is ignored: False]
  508. [Protocols in frame: eth:ethertype:ip:udp:sip:sdp]
  509. [Number of per-protocol-data: 1]
  510. [Session Initiation Protocol, key 6]
  511. [Coloring Rule Name: UDP]
  512. [Coloring Rule String: udp]
  513. Ethernet II, Src: Cisco_32:b5:73 (b0:aa:77:32:b5:73), Dst: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  514. Destination: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  515. Address: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  516. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  517. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  518. Source: Cisco_32:b5:73 (b0:aa:77:32:b5:73)
  519. Address: Cisco_32:b5:73 (b0:aa:77:32:b5:73)
  520. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  521. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  522. Type: IP (0x0800)
  523. Internet Protocol Version 4, Src: 69.59.234.67 (69.59.234.67), Dst: 10.10.22.171 (10.10.22.171)
  524. Version: 4
  525. Header Length: 20 bytes
  526. Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
  527. Total Length: 728
  528. Identification: 0x0000 (0)
  529. Flags: 0x02 (Don't Fragment)
  530. Fragment offset: 0
  531. Time to live: 55
  532. Protocol: UDP (17)
  533. Header checksum: 0xf0e1 [validation disabled]
  534. Source: 69.59.234.67 (69.59.234.67)
  535. Destination: 10.10.22.171 (10.10.22.171)
  536. [Source GeoIP: Unknown]
  537. [Destination GeoIP: Unknown]
  538. User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 61660 (61660)
  539. Session Initiation Protocol (183)
  540. Status-Line: SIP/2.0 183 Session Progress
  541. Status-Code: 183
  542. [Resent Packet: False]
  543. [Request Frame: 18]
  544. [Response Time (ms): 4206]
  545. Message Header
  546. Via: SIP/2.0/UDP 10.10.22.171:61660;branch=z9hG4bK-524287-1---3037df0281da296c;rport
  547. Transport: UDP
  548. Sent-by Address: 10.10.22.171
  549. Sent-by port: 61660
  550. Branch: z9hG4bK-524287-1---3037df0281da296c
  551. RPort: rport
  552. From: "1619yyyyyyy" <sip:1619yyyyyyy@69.59.234.67>;tag=3e1b7c51
  553. SIP Display info: "1619yyyyyyy"
  554. SIP from address: sip:1619yyyyyyy@69.59.234.67
  555. SIP from address User Part: 1619yyyyyyy
  556. SIP from address Host Part: 69.59.234.67
  557. SIP from tag: 3e1b7c51
  558. To: <sip:732xxxxxxx@69.59.234.67>;tag=gK04e8523f
  559. SIP to address: sip:732xxxxxxx@69.59.234.67
  560. SIP to tag: gK04e8523f
  561. Call-ID: 76589Y2Y4OTVlNWQzOTlhYTg4MzU4MzY0MTNhMTZjNjFiMTQ
  562. CSeq: 2 INVITE
  563. Sequence Number: 2
  564. Method: INVITE
  565. Contact: <sip:1732xxxxxxx@69.59.234.67:5060>
  566. Contact URI: sip:1732xxxxxxx@69.59.234.67:5060
  567. Contact URI User Part: 1732xxxxxxx
  568. Contact URI Host Part: 69.59.234.67
  569. Contact URI Host Port: 5060
  570. Max-Forwards: 15
  571. X-Von-Relay: 74.116.151.238
  572. [Expert Info (Note/Undecoded): Unrecognised SIP header (X-Von-Relay)]
  573. Content-Type: application/sdp
  574. Content-Length: 245
  575. Message Body
  576. Session Description Protocol
  577. Session Description Protocol Version (v): 0
  578. Owner/Creator, Session Id (o): Sonus_UAC 676462814 623748875 IN IP4 74.116.151.238
  579. Owner Username: Sonus_UAC
  580. Session ID: 676462814
  581. Session Version: 623748875
  582. Owner Network Type: IN
  583. Owner Address Type: IP4
  584. Owner Address: 74.116.151.238
  585. Session Name (s): SIP Media Capabilities
  586. Connection Information (c): IN IP4 74.116.151.238
  587. Time Description, active time (t): 0 0
  588. Session Start Time: 0
  589. Session Stop Time: 0
  590. Media Description, name and address (m): audio 15302 RTP/AVP 0 101
  591. Media Type: audio
  592. Media Port: 15302
  593. Media Protocol: RTP/AVP
  594. Media Format: ITU-T G.711 PCMU
  595. Media Format: DynamicRTP-Type-101
  596. Media Attribute (a): rtpmap:0 PCMU/8000
  597. Media Attribute Fieldname: rtpmap
  598. Media Format: 0
  599. MIME Type: PCMU
  600. Sample Rate: 8000
  601. Media Attribute (a): rtpmap:101 telephone-event/8000
  602. Media Attribute Fieldname: rtpmap
  603. Media Format: 101
  604. MIME Type: telephone-event
  605. Sample Rate: 8000
  606. Media Attribute (a): fmtp:101 0-15
  607. Media Attribute Fieldname: fmtp
  608. Media Format: 101 [telephone-event]
  609. Media format specific parameters: 0-15
  610. Media Attribute (a): sendrecv
  611. Media Attribute (a): ptime:20
  612. Media Attribute Fieldname: ptime
  613. Media Attribute Value: 20
  614.  
  615. No. Time Source Destination Protocol Length Info
  616. 101 7.431317000 10.10.22.171 69.59.234.67 SIP 602 Request: CANCEL sip:732xxxxxxx@69.59.234.67 |
  617.  
  618. Frame 101: 602 bytes on wire (4816 bits), 602 bytes captured (4816 bits) on interface 0
  619. Interface id: 0 (\Device\NPF_{7023A778-8B3D-449A-89DE-863C93D970BD})
  620. Encapsulation type: Ethernet (1)
  621. Arrival Time: Aug 6, 2015 12:53:07.513007000 Pacific Daylight Time
  622. [Time shift for this packet: 0.000000000 seconds]
  623. Epoch Time: 1438890787.513007000 seconds
  624. [Time delta from previous captured frame: 0.003847000 seconds]
  625. [Time delta from previous displayed frame: 0.481773000 seconds]
  626. [Time since reference or first frame: 7.431317000 seconds]
  627. Frame Number: 101
  628. Frame Length: 602 bytes (4816 bits)
  629. Capture Length: 602 bytes (4816 bits)
  630. [Frame is marked: False]
  631. [Frame is ignored: False]
  632. [Protocols in frame: eth:ethertype:ip:udp:sip]
  633. [Number of per-protocol-data: 1]
  634. [Session Initiation Protocol, key 6]
  635. [Coloring Rule Name: UDP]
  636. [Coloring Rule String: udp]
  637. Ethernet II, Src: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa), Dst: All-HSRP-routers_7a (00:00:0c:07:ac:7a)
  638. Destination: All-HSRP-routers_7a (00:00:0c:07:ac:7a)
  639. Address: All-HSRP-routers_7a (00:00:0c:07:ac:7a)
  640. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  641. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  642. Source: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  643. Address: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  644. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  645. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  646. Type: IP (0x0800)
  647. Internet Protocol Version 4, Src: 10.10.22.171 (10.10.22.171), Dst: 69.59.234.67 (69.59.234.67)
  648. Version: 4
  649. Header Length: 20 bytes
  650. Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
  651. Total Length: 588
  652. Identification: 0x1bef (7151)
  653. Flags: 0x00
  654. Fragment offset: 0
  655. Time to live: 128
  656. Protocol: UDP (17)
  657. Header checksum: 0xcc7e [validation disabled]
  658. Source: 10.10.22.171 (10.10.22.171)
  659. Destination: 69.59.234.67 (69.59.234.67)
  660. [Source GeoIP: Unknown]
  661. [Destination GeoIP: Unknown]
  662. User Datagram Protocol, Src Port: 61660 (61660), Dst Port: 5060 (5060)
  663. Session Initiation Protocol (CANCEL)
  664. Request-Line: CANCEL sip:732xxxxxxx@69.59.234.67 SIP/2.0
  665. Method: CANCEL
  666. Request-URI: sip:732xxxxxxx@69.59.234.67
  667. Request-URI User Part: 732xxxxxxx
  668. Request-URI Host Part: 69.59.234.67
  669. [Resent Packet: False]
  670. Message Header
  671. Via: SIP/2.0/UDP 10.10.22.171:61660;branch=z9hG4bK-524287-1---3037df0281da296c;rport
  672. Transport: UDP
  673. Sent-by Address: 10.10.22.171
  674. Sent-by port: 61660
  675. Branch: z9hG4bK-524287-1---3037df0281da296c
  676. RPort: rport
  677. Max-Forwards: 70
  678. To: <sip:732xxxxxxx@69.59.234.67>
  679. SIP to address: sip:732xxxxxxx@69.59.234.67
  680. From: <sip:1619yyyyyyy@69.59.234.67>;tag=3e1b7c51
  681. SIP from address: sip:1619yyyyyyy@69.59.234.67
  682. SIP from address User Part: 1619yyyyyyy
  683. SIP from address Host Part: 69.59.234.67
  684. SIP from tag: 3e1b7c51
  685. Call-ID: 76589Y2Y4OTVlNWQzOTlhYTg4MzU4MzY0MTNhMTZjNjFiMTQ
  686. CSeq: 2 CANCEL
  687. Sequence Number: 2
  688. Method: CANCEL
  689. Proxy-Authorization: Digest username="1619yyyyyyy",realm="69.59.234.67",nonce="1168824344",uri="sip:732xxxxxxx@69.59.234.67",response="738ca13120cc4329d28b26ab8df6e263",algorithm=MD5
  690. Authentication Scheme: Digest
  691. Username: "1619yyyyyyy"
  692. Realm: "69.59.234.67"
  693. Nonce Value: "1168824344"
  694. Authentication URI: "sip:732xxxxxxx@69.59.234.67"
  695. Digest Authentication Response: "738ca13120cc4329d28b26ab8df6e263"
  696. Algorithm: MD5
  697. User-Agent: X-Lite 4.8.4 76589-ee0a787b-W6.1
  698. Content-Length: 0
  699.  
  700. No. Time Source Destination Protocol Length Info
  701. 106 7.522296000 69.59.234.67 10.10.22.171 SIP 359 Status: 487 Request Cancelled |
  702.  
  703. Frame 106: 359 bytes on wire (2872 bits), 359 bytes captured (2872 bits) on interface 0
  704. Interface id: 0 (\Device\NPF_{7023A778-8B3D-449A-89DE-863C93D970BD})
  705. Encapsulation type: Ethernet (1)
  706. Arrival Time: Aug 6, 2015 12:53:07.603986000 Pacific Daylight Time
  707. [Time shift for this packet: 0.000000000 seconds]
  708. Epoch Time: 1438890787.603986000 seconds
  709. [Time delta from previous captured frame: 0.014715000 seconds]
  710. [Time delta from previous displayed frame: 0.090979000 seconds]
  711. [Time since reference or first frame: 7.522296000 seconds]
  712. Frame Number: 106
  713. Frame Length: 359 bytes (2872 bits)
  714. Capture Length: 359 bytes (2872 bits)
  715. [Frame is marked: False]
  716. [Frame is ignored: False]
  717. [Protocols in frame: eth:ethertype:ip:udp:sip]
  718. [Number of per-protocol-data: 1]
  719. [Session Initiation Protocol, key 6]
  720. [Coloring Rule Name: UDP]
  721. [Coloring Rule String: udp]
  722. Ethernet II, Src: Cisco_32:b5:73 (b0:aa:77:32:b5:73), Dst: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  723. Destination: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  724. Address: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  725. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  726. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  727. Source: Cisco_32:b5:73 (b0:aa:77:32:b5:73)
  728. Address: Cisco_32:b5:73 (b0:aa:77:32:b5:73)
  729. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  730. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  731. Type: IP (0x0800)
  732. Internet Protocol Version 4, Src: 69.59.234.67 (69.59.234.67), Dst: 10.10.22.171 (10.10.22.171)
  733. Version: 4
  734. Header Length: 20 bytes
  735. Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
  736. Total Length: 345
  737. Identification: 0x0000 (0)
  738. Flags: 0x02 (Don't Fragment)
  739. Fragment offset: 0
  740. Time to live: 55
  741. Protocol: UDP (17)
  742. Header checksum: 0xf260 [validation disabled]
  743. Source: 69.59.234.67 (69.59.234.67)
  744. Destination: 10.10.22.171 (10.10.22.171)
  745. [Source GeoIP: Unknown]
  746. [Destination GeoIP: Unknown]
  747. User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 61660 (61660)
  748. Session Initiation Protocol (487)
  749. Status-Line: SIP/2.0 487 Request Cancelled
  750. Status-Code: 487
  751. [Resent Packet: False]
  752. [Request Frame: 101]
  753. [Response Time (ms): 4778]
  754. Message Header
  755. Via: SIP/2.0/UDP 10.10.22.171:61660;branch=z9hG4bK-524287-1---3037df0281da296c;rport
  756. Transport: UDP
  757. Sent-by Address: 10.10.22.171
  758. Sent-by port: 61660
  759. Branch: z9hG4bK-524287-1---3037df0281da296c
  760. RPort: rport
  761. From: <sip:1619yyyyyyy@69.59.234.67>;tag=3e1b7c51
  762. SIP from address: sip:1619yyyyyyy@69.59.234.67
  763. SIP from address User Part: 1619yyyyyyy
  764. SIP from address Host Part: 69.59.234.67
  765. SIP from tag: 3e1b7c51
  766. To: <sip:732xxxxxxx@69.59.234.67>
  767. SIP to address: sip:732xxxxxxx@69.59.234.67
  768. Call-ID: 76589Y2Y4OTVlNWQzOTlhYTg4MzU4MzY0MTNhMTZjNjFiMTQ
  769. CSeq: 2 INVITE
  770. Sequence Number: 2
  771. Method: INVITE
  772. Max-Forwards: 15
  773. Content-Length: 0
  774.  
  775. No. Time Source Destination Protocol Length Info
  776. 107 7.523079000 69.59.234.67 10.10.22.171 SIP 344 Status: 200 OK |
  777.  
  778. Frame 107: 344 bytes on wire (2752 bits), 344 bytes captured (2752 bits) on interface 0
  779. Interface id: 0 (\Device\NPF_{7023A778-8B3D-449A-89DE-863C93D970BD})
  780. Encapsulation type: Ethernet (1)
  781. Arrival Time: Aug 6, 2015 12:53:07.604769000 Pacific Daylight Time
  782. [Time shift for this packet: 0.000000000 seconds]
  783. Epoch Time: 1438890787.604769000 seconds
  784. [Time delta from previous captured frame: 0.000783000 seconds]
  785. [Time delta from previous displayed frame: 0.000783000 seconds]
  786. [Time since reference or first frame: 7.523079000 seconds]
  787. Frame Number: 107
  788. Frame Length: 344 bytes (2752 bits)
  789. Capture Length: 344 bytes (2752 bits)
  790. [Frame is marked: False]
  791. [Frame is ignored: False]
  792. [Protocols in frame: eth:ethertype:ip:udp:sip]
  793. [Number of per-protocol-data: 1]
  794. [Session Initiation Protocol, key 6]
  795. [Coloring Rule Name: UDP]
  796. [Coloring Rule String: udp]
  797. Ethernet II, Src: Cisco_32:b5:73 (b0:aa:77:32:b5:73), Dst: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  798. Destination: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  799. Address: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  800. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  801. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  802. Source: Cisco_32:b5:73 (b0:aa:77:32:b5:73)
  803. Address: Cisco_32:b5:73 (b0:aa:77:32:b5:73)
  804. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  805. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  806. Type: IP (0x0800)
  807. Internet Protocol Version 4, Src: 69.59.234.67 (69.59.234.67), Dst: 10.10.22.171 (10.10.22.171)
  808. Version: 4
  809. Header Length: 20 bytes
  810. Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
  811. Total Length: 330
  812. Identification: 0x0000 (0)
  813. Flags: 0x02 (Don't Fragment)
  814. Fragment offset: 0
  815. Time to live: 55
  816. Protocol: UDP (17)
  817. Header checksum: 0xf26f [validation disabled]
  818. Source: 69.59.234.67 (69.59.234.67)
  819. Destination: 10.10.22.171 (10.10.22.171)
  820. [Source GeoIP: Unknown]
  821. [Destination GeoIP: Unknown]
  822. User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 61660 (61660)
  823. Session Initiation Protocol (200)
  824. Status-Line: SIP/2.0 200 OK
  825. Status-Code: 200
  826. [Resent Packet: False]
  827. Message Header
  828. Via: SIP/2.0/UDP 10.10.22.171:61660;branch=z9hG4bK-524287-1---3037df0281da296c;rport
  829. Transport: UDP
  830. Sent-by Address: 10.10.22.171
  831. Sent-by port: 61660
  832. Branch: z9hG4bK-524287-1---3037df0281da296c
  833. RPort: rport
  834. From: <sip:1619yyyyyyy@69.59.234.67>;tag=3e1b7c51
  835. SIP from address: sip:1619yyyyyyy@69.59.234.67
  836. SIP from address User Part: 1619yyyyyyy
  837. SIP from address Host Part: 69.59.234.67
  838. SIP from tag: 3e1b7c51
  839. To: <sip:732xxxxxxx@69.59.234.67>
  840. SIP to address: sip:732xxxxxxx@69.59.234.67
  841. Call-ID: 76589Y2Y4OTVlNWQzOTlhYTg4MzU4MzY0MTNhMTZjNjFiMTQ
  842. CSeq: 2 CANCEL
  843. Sequence Number: 2
  844. Method: CANCEL
  845. Max-Forwards: 15
  846. Content-Length: 0
  847.  
  848. No. Time Source Destination Protocol Length Info
  849. 109 7.543875000 10.10.22.171 69.59.234.67 SIP 366 Request: ACK sip:732xxxxxxx@69.59.234.67 |
  850.  
  851. Frame 109: 366 bytes on wire (2928 bits), 366 bytes captured (2928 bits) on interface 0
  852. Interface id: 0 (\Device\NPF_{7023A778-8B3D-449A-89DE-863C93D970BD})
  853. Encapsulation type: Ethernet (1)
  854. Arrival Time: Aug 6, 2015 12:53:07.625565000 Pacific Daylight Time
  855. [Time shift for this packet: 0.000000000 seconds]
  856. Epoch Time: 1438890787.625565000 seconds
  857. [Time delta from previous captured frame: 0.014954000 seconds]
  858. [Time delta from previous displayed frame: 0.020796000 seconds]
  859. [Time since reference or first frame: 7.543875000 seconds]
  860. Frame Number: 109
  861. Frame Length: 366 bytes (2928 bits)
  862. Capture Length: 366 bytes (2928 bits)
  863. [Frame is marked: False]
  864. [Frame is ignored: False]
  865. [Protocols in frame: eth:ethertype:ip:udp:sip]
  866. [Number of per-protocol-data: 1]
  867. [Session Initiation Protocol, key 6]
  868. [Coloring Rule Name: UDP]
  869. [Coloring Rule String: udp]
  870. Ethernet II, Src: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa), Dst: All-HSRP-routers_7a (00:00:0c:07:ac:7a)
  871. Destination: All-HSRP-routers_7a (00:00:0c:07:ac:7a)
  872. Address: All-HSRP-routers_7a (00:00:0c:07:ac:7a)
  873. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  874. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  875. Source: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  876. Address: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  877. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  878. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  879. Type: IP (0x0800)
  880. Internet Protocol Version 4, Src: 10.10.22.171 (10.10.22.171), Dst: 69.59.234.67 (69.59.234.67)
  881. Version: 4
  882. Header Length: 20 bytes
  883. Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
  884. Total Length: 352
  885. Identification: 0x1bf0 (7152)
  886. Flags: 0x00
  887. Fragment offset: 0
  888. Time to live: 128
  889. Protocol: UDP (17)
  890. Header checksum: 0xcd69 [validation disabled]
  891. Source: 10.10.22.171 (10.10.22.171)
  892. Destination: 69.59.234.67 (69.59.234.67)
  893. [Source GeoIP: Unknown]
  894. [Destination GeoIP: Unknown]
  895. User Datagram Protocol, Src Port: 61660 (61660), Dst Port: 5060 (5060)
  896. Session Initiation Protocol (ACK)
  897. Request-Line: ACK sip:732xxxxxxx@69.59.234.67 SIP/2.0
  898. Method: ACK
  899. Request-URI: sip:732xxxxxxx@69.59.234.67
  900. Request-URI User Part: 732xxxxxxx
  901. Request-URI Host Part: 69.59.234.67
  902. [Resent Packet: False]
  903. [Request Frame: 101]
  904. [Response Time (ms): 4800]
  905. Message Header
  906. Via: SIP/2.0/UDP 10.10.22.171:61660;branch=z9hG4bK-524287-1---3037df0281da296c;rport
  907. Transport: UDP
  908. Sent-by Address: 10.10.22.171
  909. Sent-by port: 61660
  910. Branch: z9hG4bK-524287-1---3037df0281da296c
  911. RPort: rport
  912. Max-Forwards: 70
  913. To: <sip:732xxxxxxx@69.59.234.67>
  914. SIP to address: sip:732xxxxxxx@69.59.234.67
  915. From: <sip:1619yyyyyyy@69.59.234.67>;tag=3e1b7c51
  916. SIP from address: sip:1619yyyyyyy@69.59.234.67
  917. SIP from address User Part: 1619yyyyyyy
  918. SIP from address Host Part: 69.59.234.67
  919. SIP from tag: 3e1b7c51
  920. Call-ID: 76589Y2Y4OTVlNWQzOTlhYTg4MzU4MzY0MTNhMTZjNjFiMTQ
  921. CSeq: 2 ACK
  922. Sequence Number: 2
  923. Method: ACK
  924. Content-Length: 0
  925.  
  926. No. Time Source Destination Protocol Length Info
  927. 122 9.215556000 10.10.22.171 69.59.234.67 SIP 576 Request: REGISTER sip:sphone.vopr.vonage.net (1 binding) |
  928.  
  929. Frame 122: 576 bytes on wire (4608 bits), 576 bytes captured (4608 bits) on interface 0
  930. Interface id: 0 (\Device\NPF_{7023A778-8B3D-449A-89DE-863C93D970BD})
  931. Encapsulation type: Ethernet (1)
  932. Arrival Time: Aug 6, 2015 12:53:09.297246000 Pacific Daylight Time
  933. [Time shift for this packet: 0.000000000 seconds]
  934. Epoch Time: 1438890789.297246000 seconds
  935. [Time delta from previous captured frame: 0.000877000 seconds]
  936. [Time delta from previous displayed frame: 1.671681000 seconds]
  937. [Time since reference or first frame: 9.215556000 seconds]
  938. Frame Number: 122
  939. Frame Length: 576 bytes (4608 bits)
  940. Capture Length: 576 bytes (4608 bits)
  941. [Frame is marked: False]
  942. [Frame is ignored: False]
  943. [Protocols in frame: eth:ethertype:ip:udp:sip]
  944. [Number of per-protocol-data: 2]
  945. [Session Initiation Protocol, key 5]
  946. [User Datagram Protocol, key 5]
  947. [Coloring Rule Name: UDP]
  948. [Coloring Rule String: udp]
  949. Ethernet II, Src: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa), Dst: All-HSRP-routers_7a (00:00:0c:07:ac:7a)
  950. Destination: All-HSRP-routers_7a (00:00:0c:07:ac:7a)
  951. Address: All-HSRP-routers_7a (00:00:0c:07:ac:7a)
  952. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  953. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  954. Source: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  955. Address: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  956. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  957. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  958. Type: IP (0x0800)
  959. Internet Protocol Version 4, Src: 10.10.22.171 (10.10.22.171), Dst: 69.59.234.67 (69.59.234.67)
  960. Version: 4
  961. Header Length: 20 bytes
  962. Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
  963. Total Length: 562
  964. Identification: 0x1bf5 (7157)
  965. Flags: 0x00
  966. Fragment offset: 0
  967. Time to live: 128
  968. Protocol: UDP (17)
  969. Header checksum: 0xcc92 [validation disabled]
  970. Source: 10.10.22.171 (10.10.22.171)
  971. Destination: 69.59.234.67 (69.59.234.67)
  972. [Source GeoIP: Unknown]
  973. [Destination GeoIP: Unknown]
  974. User Datagram Protocol, Src Port: 5061 (5061), Dst Port: 5061 (5061)
  975. Session Initiation Protocol (REGISTER)
  976. Request-Line: REGISTER sip:sphone.vopr.vonage.net SIP/2.0
  977. Method: REGISTER
  978. Request-URI: sip:sphone.vopr.vonage.net
  979. Request-URI Host Part: sphone.vopr.vonage.net
  980. [Resent Packet: False]
  981. Message Header
  982. From: "1619yyyyyyy"<sip:1619yyyyyyy@sphone.vopr.vonage.net>;tag=5e712fb8
  983. SIP Display info: "1619yyyyyyy"
  984. SIP from address: sip:1619yyyyyyy@sphone.vopr.vonage.net
  985. SIP from address User Part: 1619yyyyyyy
  986. SIP from address Host Part: sphone.vopr.vonage.net
  987. SIP from tag: 5e712fb8
  988. To: "1619yyyyyyy"<sip:1619yyyyyyy@sphone.vopr.vonage.net>
  989. SIP Display info: "1619yyyyyyy"
  990. SIP to address: sip:1619yyyyyyy@sphone.vopr.vonage.net
  991. Call-Id: 54302388aebefaf4b8638f487862ec7f
  992. CSeq: 85296 REGISTER
  993. Sequence Number: 85296
  994. Method: REGISTER
  995. Contact: "1619yyyyyyy"<sip:1619yyyyyyy@10.10.5.225:5061;LINEID=f3f51104a461>
  996. SIP Display info: "1619yyyyyyy"
  997. Contact URI: sip:1619yyyyyyy@10.10.5.225:5061;LINEID=f3f51104a461
  998. Contact URI User Part: 1619yyyyyyy
  999. Contact URI Host Part: 10.10.5.225
  1000. Contact URI Host Port: 5061
  1001. Contact URI parameter: LINEID=f3f51104a461
  1002. Expires: 3600
  1003. Date: Thu, 06 Aug 2015 19:53:09 GMT
  1004. Max-Forwards: 70
  1005. User-Agent: Voicent Soft Phone
  1006. Supported: replaces
  1007. Via: SIP/2.0/UDP 10.10.5.225:5061;branch=z9hG4bK-4e59638e0ab4;rport
  1008. Transport: UDP
  1009. Sent-by Address: 10.10.5.225
  1010. Sent-by port: 5061
  1011. Branch: z9hG4bK-4e59638e0ab4
  1012. RPort: rport
  1013. Content-Length: 0
  1014.  
  1015. No. Time Source Destination Protocol Length Info
  1016. 123 9.305530000 69.59.234.67 10.10.22.171 SIP 502 Status: 401 Unauthorized |
  1017.  
  1018. Frame 123: 502 bytes on wire (4016 bits), 502 bytes captured (4016 bits) on interface 0
  1019. Interface id: 0 (\Device\NPF_{7023A778-8B3D-449A-89DE-863C93D970BD})
  1020. Encapsulation type: Ethernet (1)
  1021. Arrival Time: Aug 6, 2015 12:53:09.387220000 Pacific Daylight Time
  1022. [Time shift for this packet: 0.000000000 seconds]
  1023. Epoch Time: 1438890789.387220000 seconds
  1024. [Time delta from previous captured frame: 0.089974000 seconds]
  1025. [Time delta from previous displayed frame: 0.089974000 seconds]
  1026. [Time since reference or first frame: 9.305530000 seconds]
  1027. Frame Number: 123
  1028. Frame Length: 502 bytes (4016 bits)
  1029. Capture Length: 502 bytes (4016 bits)
  1030. [Frame is marked: False]
  1031. [Frame is ignored: False]
  1032. [Protocols in frame: eth:ethertype:ip:udp:sip]
  1033. [Number of per-protocol-data: 2]
  1034. [Session Initiation Protocol, key 5]
  1035. [User Datagram Protocol, key 5]
  1036. [Coloring Rule Name: UDP]
  1037. [Coloring Rule String: udp]
  1038. Ethernet II, Src: Cisco_32:b5:73 (b0:aa:77:32:b5:73), Dst: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  1039. Destination: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  1040. Address: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  1041. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  1042. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  1043. Source: Cisco_32:b5:73 (b0:aa:77:32:b5:73)
  1044. Address: Cisco_32:b5:73 (b0:aa:77:32:b5:73)
  1045. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  1046. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  1047. Type: IP (0x0800)
  1048. Internet Protocol Version 4, Src: 69.59.234.67 (69.59.234.67), Dst: 10.10.22.171 (10.10.22.171)
  1049. Version: 4
  1050. Header Length: 20 bytes
  1051. Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
  1052. Total Length: 488
  1053. Identification: 0x0000 (0)
  1054. Flags: 0x02 (Don't Fragment)
  1055. Fragment offset: 0
  1056. Time to live: 55
  1057. Protocol: UDP (17)
  1058. Header checksum: 0xf1d1 [validation disabled]
  1059. Source: 69.59.234.67 (69.59.234.67)
  1060. Destination: 10.10.22.171 (10.10.22.171)
  1061. [Source GeoIP: Unknown]
  1062. [Destination GeoIP: Unknown]
  1063. User Datagram Protocol, Src Port: 5061 (5061), Dst Port: 5061 (5061)
  1064. Session Initiation Protocol (401)
  1065. Status-Line: SIP/2.0 401 Unauthorized
  1066. Status-Code: 401
  1067. [Resent Packet: False]
  1068. [Request Frame: 122]
  1069. [Response Time (ms): 89]
  1070. Message Header
  1071. Via: SIP/2.0/UDP 10.10.5.225:5061;branch=z9hG4bK-4e59638e0ab4;rport
  1072. Transport: UDP
  1073. Sent-by Address: 10.10.5.225
  1074. Sent-by port: 5061
  1075. Branch: z9hG4bK-4e59638e0ab4
  1076. RPort: rport
  1077. From: "1619yyyyyyy" <sip:1619yyyyyyy@sphone.vopr.vonage.net>;tag=5e712fb8
  1078. SIP Display info: "1619yyyyyyy"
  1079. SIP from address: sip:1619yyyyyyy@sphone.vopr.vonage.net
  1080. SIP from address User Part: 1619yyyyyyy
  1081. SIP from address Host Part: sphone.vopr.vonage.net
  1082. SIP from tag: 5e712fb8
  1083. To: "1619yyyyyyy" <sip:1619yyyyyyy@sphone.vopr.vonage.net>
  1084. SIP Display info: "1619yyyyyyy"
  1085. SIP to address: sip:1619yyyyyyy@sphone.vopr.vonage.net
  1086. Call-ID: 54302388aebefaf4b8638f487862ec7f
  1087. CSeq: 85296 REGISTER
  1088. Sequence Number: 85296
  1089. Method: REGISTER
  1090. WWW-Authenticate: Digest realm="69.59.234.67", domain="69.59.234.67", nonce="1061877727", algorithm=MD5
  1091. Authentication Scheme: Digest
  1092. Realm: "69.59.234.67"
  1093. Authentication Domain: "69.59.234.67"
  1094. Nonce Value: "1061877727"
  1095. Algorithm: MD5
  1096. Max-Forwards: 70
  1097. Supported: replaces
  1098. Content-Length: 0
  1099.  
  1100. No. Time Source Destination Protocol Length Info
  1101. 130 9.312750000 10.10.22.171 69.59.234.67 SIP 758 Request: REGISTER sip:sphone.vopr.vonage.net (1 binding) |
  1102.  
  1103. Frame 130: 758 bytes on wire (6064 bits), 758 bytes captured (6064 bits) on interface 0
  1104. Interface id: 0 (\Device\NPF_{7023A778-8B3D-449A-89DE-863C93D970BD})
  1105. Encapsulation type: Ethernet (1)
  1106. Arrival Time: Aug 6, 2015 12:53:09.394440000 Pacific Daylight Time
  1107. [Time shift for this packet: 0.000000000 seconds]
  1108. Epoch Time: 1438890789.394440000 seconds
  1109. [Time delta from previous captured frame: 0.001173000 seconds]
  1110. [Time delta from previous displayed frame: 0.007220000 seconds]
  1111. [Time since reference or first frame: 9.312750000 seconds]
  1112. Frame Number: 130
  1113. Frame Length: 758 bytes (6064 bits)
  1114. Capture Length: 758 bytes (6064 bits)
  1115. [Frame is marked: False]
  1116. [Frame is ignored: False]
  1117. [Protocols in frame: eth:ethertype:ip:udp:sip]
  1118. [Number of per-protocol-data: 2]
  1119. [Session Initiation Protocol, key 5]
  1120. [User Datagram Protocol, key 5]
  1121. [Coloring Rule Name: UDP]
  1122. [Coloring Rule String: udp]
  1123. Ethernet II, Src: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa), Dst: All-HSRP-routers_7a (00:00:0c:07:ac:7a)
  1124. Destination: All-HSRP-routers_7a (00:00:0c:07:ac:7a)
  1125. Address: All-HSRP-routers_7a (00:00:0c:07:ac:7a)
  1126. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  1127. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  1128. Source: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  1129. Address: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  1130. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  1131. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  1132. Type: IP (0x0800)
  1133. Internet Protocol Version 4, Src: 10.10.22.171 (10.10.22.171), Dst: 69.59.234.67 (69.59.234.67)
  1134. Version: 4
  1135. Header Length: 20 bytes
  1136. Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
  1137. Total Length: 744
  1138. Identification: 0x1bf9 (7161)
  1139. Flags: 0x00
  1140. Fragment offset: 0
  1141. Time to live: 128
  1142. Protocol: UDP (17)
  1143. Header checksum: 0xcbd8 [validation disabled]
  1144. Source: 10.10.22.171 (10.10.22.171)
  1145. Destination: 69.59.234.67 (69.59.234.67)
  1146. [Source GeoIP: Unknown]
  1147. [Destination GeoIP: Unknown]
  1148. User Datagram Protocol, Src Port: 5061 (5061), Dst Port: 5061 (5061)
  1149. Session Initiation Protocol (REGISTER)
  1150. Request-Line: REGISTER sip:sphone.vopr.vonage.net SIP/2.0
  1151. Method: REGISTER
  1152. Request-URI: sip:sphone.vopr.vonage.net
  1153. Request-URI Host Part: sphone.vopr.vonage.net
  1154. [Resent Packet: False]
  1155. Message Header
  1156. From: "1619yyyyyyy"<sip:1619yyyyyyy@sphone.vopr.vonage.net>;tag=5e712fb8
  1157. SIP Display info: "1619yyyyyyy"
  1158. SIP from address: sip:1619yyyyyyy@sphone.vopr.vonage.net
  1159. SIP from address User Part: 1619yyyyyyy
  1160. SIP from address Host Part: sphone.vopr.vonage.net
  1161. SIP from tag: 5e712fb8
  1162. To: "1619yyyyyyy"<sip:1619yyyyyyy@sphone.vopr.vonage.net>
  1163. SIP Display info: "1619yyyyyyy"
  1164. SIP to address: sip:1619yyyyyyy@sphone.vopr.vonage.net
  1165. Call-Id: 54302388aebefaf4b8638f487862ec7f
  1166. CSeq: 85297 REGISTER
  1167. Sequence Number: 85297
  1168. Method: REGISTER
  1169. Contact: "1619yyyyyyy"<sip:1619yyyyyyy@10.10.5.225:5061;LINEID=f3f51104a461>
  1170. SIP Display info: "1619yyyyyyy"
  1171. Contact URI: sip:1619yyyyyyy@10.10.5.225:5061;LINEID=f3f51104a461
  1172. Contact URI User Part: 1619yyyyyyy
  1173. Contact URI Host Part: 10.10.5.225
  1174. Contact URI Host Port: 5061
  1175. Contact URI parameter: LINEID=f3f51104a461
  1176. Expires: 3600
  1177. Date: Thu, 06 Aug 2015 19:53:09 GMT
  1178. Max-Forwards: 70
  1179. User-Agent: Voicent Soft Phone
  1180. Supported: replaces
  1181. Authorization: Digest username="1619yyyyyyy", realm="69.59.234.67", nonce="1061877727", uri="sip:sphone.vopr.vonage.net", response="c3623ec40755e1129943b32554b70aef", algorithm=MD5
  1182. Authentication Scheme: Digest
  1183. Username: "1619yyyyyyy"
  1184. Realm: "69.59.234.67"
  1185. Nonce Value: "1061877727"
  1186. Authentication URI: "sip:sphone.vopr.vonage.net"
  1187. Digest Authentication Response: "c3623ec40755e1129943b32554b70aef"
  1188. Algorithm: MD5
  1189. Via: SIP/2.0/UDP 10.10.5.225:5061;branch=z9hG4bK-71ad6b4bc764;rport
  1190. Transport: UDP
  1191. Sent-by Address: 10.10.5.225
  1192. Sent-by port: 5061
  1193. Branch: z9hG4bK-71ad6b4bc764
  1194. RPort: rport
  1195. Content-Length: 0
  1196.  
  1197. No. Time Source Destination Protocol Length Info
  1198. 132 9.402367000 69.59.234.67 10.10.22.171 SIP 477 Status: 200 OK (1 binding) |
  1199.  
  1200. Frame 132: 477 bytes on wire (3816 bits), 477 bytes captured (3816 bits) on interface 0
  1201. Interface id: 0 (\Device\NPF_{7023A778-8B3D-449A-89DE-863C93D970BD})
  1202. Encapsulation type: Ethernet (1)
  1203. Arrival Time: Aug 6, 2015 12:53:09.484057000 Pacific Daylight Time
  1204. [Time shift for this packet: 0.000000000 seconds]
  1205. Epoch Time: 1438890789.484057000 seconds
  1206. [Time delta from previous captured frame: 0.022373000 seconds]
  1207. [Time delta from previous displayed frame: 0.089617000 seconds]
  1208. [Time since reference or first frame: 9.402367000 seconds]
  1209. Frame Number: 132
  1210. Frame Length: 477 bytes (3816 bits)
  1211. Capture Length: 477 bytes (3816 bits)
  1212. [Frame is marked: False]
  1213. [Frame is ignored: False]
  1214. [Protocols in frame: eth:ethertype:ip:udp:sip]
  1215. [Number of per-protocol-data: 2]
  1216. [Session Initiation Protocol, key 5]
  1217. [User Datagram Protocol, key 5]
  1218. [Coloring Rule Name: UDP]
  1219. [Coloring Rule String: udp]
  1220. Ethernet II, Src: Cisco_32:b5:73 (b0:aa:77:32:b5:73), Dst: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  1221. Destination: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  1222. Address: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  1223. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  1224. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  1225. Source: Cisco_32:b5:73 (b0:aa:77:32:b5:73)
  1226. Address: Cisco_32:b5:73 (b0:aa:77:32:b5:73)
  1227. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  1228. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  1229. Type: IP (0x0800)
  1230. Internet Protocol Version 4, Src: 69.59.234.67 (69.59.234.67), Dst: 10.10.22.171 (10.10.22.171)
  1231. Version: 4
  1232. Header Length: 20 bytes
  1233. Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
  1234. Total Length: 463
  1235. Identification: 0x0000 (0)
  1236. Flags: 0x02 (Don't Fragment)
  1237. Fragment offset: 0
  1238. Time to live: 55
  1239. Protocol: UDP (17)
  1240. Header checksum: 0xf1ea [validation disabled]
  1241. Source: 69.59.234.67 (69.59.234.67)
  1242. Destination: 10.10.22.171 (10.10.22.171)
  1243. [Source GeoIP: Unknown]
  1244. [Destination GeoIP: Unknown]
  1245. User Datagram Protocol, Src Port: 5061 (5061), Dst Port: 5061 (5061)
  1246. Session Initiation Protocol (200)
  1247. Status-Line: SIP/2.0 200 OK
  1248. Status-Code: 200
  1249. [Resent Packet: False]
  1250. [Request Frame: 130]
  1251. [Response Time (ms): 89]
  1252. Message Header
  1253. Via: SIP/2.0/UDP 10.10.5.225:5061;branch=z9hG4bK-71ad6b4bc764;rport
  1254. Transport: UDP
  1255. Sent-by Address: 10.10.5.225
  1256. Sent-by port: 5061
  1257. Branch: z9hG4bK-71ad6b4bc764
  1258. RPort: rport
  1259. From: "1619yyyyyyy" <sip:1619yyyyyyy@sphone.vopr.vonage.net>;tag=5e712fb8
  1260. SIP Display info: "1619yyyyyyy"
  1261. SIP from address: sip:1619yyyyyyy@sphone.vopr.vonage.net
  1262. SIP from address User Part: 1619yyyyyyy
  1263. SIP from address Host Part: sphone.vopr.vonage.net
  1264. SIP from tag: 5e712fb8
  1265. To: "1619yyyyyyy" <sip:1619yyyyyyy@sphone.vopr.vonage.net>
  1266. SIP Display info: "1619yyyyyyy"
  1267. SIP to address: sip:1619yyyyyyy@sphone.vopr.vonage.net
  1268. Call-ID: 54302388aebefaf4b8638f487862ec7f
  1269. CSeq: 85297 REGISTER
  1270. Sequence Number: 85297
  1271. Method: REGISTER
  1272. Contact: "1619yyyyyyy" <sip:1619yyyyyyy@10.10.5.225:5061;LINEID=f3f51104a461>;expires=20
  1273. SIP Display info: "1619yyyyyyy"
  1274. Contact URI: sip:1619yyyyyyy@10.10.5.225:5061;LINEID=f3f51104a461
  1275. Contact URI User Part: 1619yyyyyyy
  1276. Contact URI Host Part: 10.10.5.225
  1277. Contact URI Host Port: 5061
  1278. Contact URI parameter: LINEID=f3f51104a461
  1279. Contact parameter: expires=20
  1280. Max-Forwards: 70
  1281. Supported: replaces
  1282. Content-Length: 0
  1283.  
  1284. No. Time Source Destination Protocol Length Info
  1285. 133 9.507019000 10.10.22.171 69.59.234.67 SIP 736 Request: REGISTER sip:69.59.234.67 (1 binding) |
  1286.  
  1287. Frame 133: 736 bytes on wire (5888 bits), 736 bytes captured (5888 bits) on interface 0
  1288. Interface id: 0 (\Device\NPF_{7023A778-8B3D-449A-89DE-863C93D970BD})
  1289. Encapsulation type: Ethernet (1)
  1290. Arrival Time: Aug 6, 2015 12:53:09.588709000 Pacific Daylight Time
  1291. [Time shift for this packet: 0.000000000 seconds]
  1292. Epoch Time: 1438890789.588709000 seconds
  1293. [Time delta from previous captured frame: 0.104652000 seconds]
  1294. [Time delta from previous displayed frame: 0.104652000 seconds]
  1295. [Time since reference or first frame: 9.507019000 seconds]
  1296. Frame Number: 133
  1297. Frame Length: 736 bytes (5888 bits)
  1298. Capture Length: 736 bytes (5888 bits)
  1299. [Frame is marked: False]
  1300. [Frame is ignored: False]
  1301. [Protocols in frame: eth:ethertype:ip:udp:sip]
  1302. [Number of per-protocol-data: 1]
  1303. [Session Initiation Protocol, key 6]
  1304. [Coloring Rule Name: UDP]
  1305. [Coloring Rule String: udp]
  1306. Ethernet II, Src: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa), Dst: All-HSRP-routers_7a (00:00:0c:07:ac:7a)
  1307. Destination: All-HSRP-routers_7a (00:00:0c:07:ac:7a)
  1308. Address: All-HSRP-routers_7a (00:00:0c:07:ac:7a)
  1309. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  1310. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  1311. Source: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  1312. Address: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  1313. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  1314. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  1315. Type: IP (0x0800)
  1316. Internet Protocol Version 4, Src: 10.10.22.171 (10.10.22.171), Dst: 69.59.234.67 (69.59.234.67)
  1317. Version: 4
  1318. Header Length: 20 bytes
  1319. Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
  1320. Total Length: 722
  1321. Identification: 0x1bfa (7162)
  1322. Flags: 0x00
  1323. Fragment offset: 0
  1324. Time to live: 128
  1325. Protocol: UDP (17)
  1326. Header checksum: 0xcbed [validation disabled]
  1327. Source: 10.10.22.171 (10.10.22.171)
  1328. Destination: 69.59.234.67 (69.59.234.67)
  1329. [Source GeoIP: Unknown]
  1330. [Destination GeoIP: Unknown]
  1331. User Datagram Protocol, Src Port: 61660 (61660), Dst Port: 5060 (5060)
  1332. Session Initiation Protocol (REGISTER)
  1333. Request-Line: REGISTER sip:69.59.234.67 SIP/2.0
  1334. Method: REGISTER
  1335. Request-URI: sip:69.59.234.67
  1336. Request-URI Host Part: 69.59.234.67
  1337. [Resent Packet: False]
  1338. Message Header
  1339. Via: SIP/2.0/UDP 10.10.22.171:61660;branch=z9hG4bK-524287-1---9eeed53d2ce4347c;rport
  1340. Transport: UDP
  1341. Sent-by Address: 10.10.22.171
  1342. Sent-by port: 61660
  1343. Branch: z9hG4bK-524287-1---9eeed53d2ce4347c
  1344. RPort: rport
  1345. Max-Forwards: 70
  1346. Contact: <sip:1619yyyyyyy@10.10.22.171;rinstance=4fb9cd6beb9c3ede>
  1347. Contact URI: sip:1619yyyyyyy@10.10.22.171;rinstance=4fb9cd6beb9c3ede
  1348. Contact URI User Part: 1619yyyyyyy
  1349. Contact URI Host Part: 10.10.22.171
  1350. Contact URI parameter: rinstance=4fb9cd6beb9c3ede
  1351. To: <sip:1619yyyyyyy@69.59.234.67>
  1352. SIP to address: sip:1619yyyyyyy@69.59.234.67
  1353. From: <sip:1619yyyyyyy@69.59.234.67>;tag=c4d8e037
  1354. SIP from address: sip:1619yyyyyyy@69.59.234.67
  1355. SIP from address User Part: 1619yyyyyyy
  1356. SIP from address Host Part: 69.59.234.67
  1357. SIP from tag: c4d8e037
  1358. Call-ID: 76589NTFhM2E1MzEzNDBkYWNiMjZlYjVlOWMwOTg2ZTcxYWM
  1359. CSeq: 7 REGISTER
  1360. Sequence Number: 7
  1361. Method: REGISTER
  1362. Expires: 3600
  1363. Allow: SUBSCRIBE, NOTIFY, INVITE, ACK, CANCEL, BYE, REFER, INFO, MESSAGE
  1364. User-Agent: X-Lite 4.8.4 76589-ee0a787b-W6.1
  1365. Authorization: Digest username="1619yyyyyyy",realm="69.59.234.67",nonce="1061877727",uri="sip:69.59.234.67",response="c3d22aef73c380c52a6ece681e780906",algorithm=MD5
  1366. Authentication Scheme: Digest
  1367. Username: "1619yyyyyyy"
  1368. Realm: "69.59.234.67"
  1369. Nonce Value: "1061877727"
  1370. Authentication URI: "sip:69.59.234.67"
  1371. Digest Authentication Response: "c3d22aef73c380c52a6ece681e780906"
  1372. Algorithm: MD5
  1373. Content-Length: 0
  1374.  
  1375. No. Time Source Destination Protocol Length Info
  1376. 134 9.598635000 69.59.234.67 10.10.22.171 SIP 431 Status: 200 OK (1 binding) |
  1377.  
  1378. Frame 134: 431 bytes on wire (3448 bits), 431 bytes captured (3448 bits) on interface 0
  1379. Interface id: 0 (\Device\NPF_{7023A778-8B3D-449A-89DE-863C93D970BD})
  1380. Encapsulation type: Ethernet (1)
  1381. Arrival Time: Aug 6, 2015 12:53:09.680325000 Pacific Daylight Time
  1382. [Time shift for this packet: 0.000000000 seconds]
  1383. Epoch Time: 1438890789.680325000 seconds
  1384. [Time delta from previous captured frame: 0.091616000 seconds]
  1385. [Time delta from previous displayed frame: 0.091616000 seconds]
  1386. [Time since reference or first frame: 9.598635000 seconds]
  1387. Frame Number: 134
  1388. Frame Length: 431 bytes (3448 bits)
  1389. Capture Length: 431 bytes (3448 bits)
  1390. [Frame is marked: False]
  1391. [Frame is ignored: False]
  1392. [Protocols in frame: eth:ethertype:ip:udp:sip]
  1393. [Number of per-protocol-data: 1]
  1394. [Session Initiation Protocol, key 6]
  1395. [Coloring Rule Name: UDP]
  1396. [Coloring Rule String: udp]
  1397. Ethernet II, Src: Cisco_32:b5:73 (b0:aa:77:32:b5:73), Dst: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  1398. Destination: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  1399. Address: Dell_6f:b1:fa (5c:26:0a:6f:b1:fa)
  1400. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  1401. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  1402. Source: Cisco_32:b5:73 (b0:aa:77:32:b5:73)
  1403. Address: Cisco_32:b5:73 (b0:aa:77:32:b5:73)
  1404. .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
  1405. .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
  1406. Type: IP (0x0800)
  1407. Internet Protocol Version 4, Src: 69.59.234.67 (69.59.234.67), Dst: 10.10.22.171 (10.10.22.171)
  1408. Version: 4
  1409. Header Length: 20 bytes
  1410. Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
  1411. Total Length: 417
  1412. Identification: 0x0000 (0)
  1413. Flags: 0x02 (Don't Fragment)
  1414. Fragment offset: 0
  1415. Time to live: 55
  1416. Protocol: UDP (17)
  1417. Header checksum: 0xf218 [validation disabled]
  1418. Source: 69.59.234.67 (69.59.234.67)
  1419. Destination: 10.10.22.171 (10.10.22.171)
  1420. [Source GeoIP: Unknown]
  1421. [Destination GeoIP: Unknown]
  1422. User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 61660 (61660)
  1423. Session Initiation Protocol (200)
  1424. Status-Line: SIP/2.0 200 OK
  1425. Status-Code: 200
  1426. [Resent Packet: False]
  1427. [Request Frame: 133]
  1428. [Response Time (ms): 91]
  1429. Message Header
  1430. Via: SIP/2.0/UDP 10.10.22.171:61660;branch=z9hG4bK-524287-1---9eeed53d2ce4347c;rport
  1431. Transport: UDP
  1432. Sent-by Address: 10.10.22.171
  1433. Sent-by port: 61660
  1434. Branch: z9hG4bK-524287-1---9eeed53d2ce4347c
  1435. RPort: rport
  1436. From: <sip:1619yyyyyyy@69.59.234.67>;tag=c4d8e037
  1437. SIP from address: sip:1619yyyyyyy@69.59.234.67
  1438. SIP from address User Part: 1619yyyyyyy
  1439. SIP from address Host Part: 69.59.234.67
  1440. SIP from tag: c4d8e037
  1441. To: <sip:1619yyyyyyy@69.59.234.67>
  1442. SIP to address: sip:1619yyyyyyy@69.59.234.67
  1443. Call-ID: 76589NTFhM2E1MzEzNDBkYWNiMjZlYjVlOWMwOTg2ZTcxYWM
  1444. CSeq: 7 REGISTER
  1445. Sequence Number: 7
  1446. Method: REGISTER
  1447. Contact: <sip:1619yyyyyyy@10.10.22.171:5060;rinstance=4fb9cd6beb9c3ede>;expires=20
  1448. Contact URI: sip:1619yyyyyyy@10.10.22.171:5060;rinstance=4fb9cd6beb9c3ede
  1449. Contact URI User Part: 1619yyyyyyy
  1450. Contact URI Host Part: 10.10.22.171
  1451. Contact URI Host Port: 5060
  1452. Contact URI parameter: rinstance=4fb9cd6beb9c3ede
  1453. Contact parameter: expires=20
  1454. Max-Forwards: 70
  1455. Content-Length: 0
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement