Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- [
- {
- "_index": "packets-2019-08-07",
- "_type": "pcap_file",
- "_score": null,
- "_source": {
- "layers": {
- "frame": {
- "frame.encap_type": "25",
- "frame.time": "Aug 7, 2019 16:51:49.912308000 Hora de Ver\u00c3\u00a3o de GMT",
- "frame.offset_shift": "0.000000000",
- "frame.time_epoch": "1565193109.912308000",
- "frame.time_delta": "0.035752000",
- "frame.time_delta_displayed": "0.000000000",
- "frame.time_relative": "34.138096000",
- "frame.number": "585",
- "frame.len": "1505",
- "frame.cap_len": "1505",
- "frame.marked": "0",
- "frame.ignored": "0",
- "frame.protocols": "sll:ethertype:ip:udp:sip:mime_multipart:sdp:isup",
- "frame.coloring_rule.name": "UDP",
- "frame.coloring_rule.string": "udp"
- },
- "sll": {
- "sll.pkttype": "0",
- "sll.hatype": "1",
- "sll.halen": "6",
- "sll.src.eth": "6c:3b:6b:fe:5b:2f",
- "sll.unused": "00:00",
- "sll.etype": "0x00000800"
- },
- "ip": {
- "ip.version": "4",
- "ip.hdr_len": "20",
- "ip.dsfield": "0x000000b8",
- "ip.dsfield_tree": {
- "ip.dsfield.dscp": "46",
- "ip.dsfield.ecn": "0"
- },
- "ip.len": "1489",
- "ip.id": "0x000086e2",
- "ip.flags": "0x00000000",
- "ip.flags_tree": {
- "ip.flags.rb": "0",
- "ip.flags.df": "0",
- "ip.flags.mf": "0"
- },
- "ip.frag_offset": "0",
- "ip.ttl": "63",
- "ip.proto": "17",
- "ip.checksum": "0x0000f6f7",
- "ip.checksum.status": "2",
- "ip.src": "212.13.38.147",
- "ip.addr": "212.13.38.147",
- "ip.src_host": "212.13.38.147",
- "ip.host": "212.13.38.147",
- "ip.dst": "212.13.40.220",
- "ip.addr": "212.13.40.220",
- "ip.dst_host": "212.13.40.220",
- "ip.host": "212.13.40.220",
- "Source GeoIP: Unknown": "",
- "Destination GeoIP: Unknown": ""
- },
- "udp": {
- "udp.srcport": "5060",
- "udp.dstport": "5060",
- "udp.port": "5060",
- "udp.port": "5060",
- "udp.length": "1469",
- "udp.checksum": "0x00006d60",
- "udp.checksum.status": "2",
- "udp.stream": "2"
- },
- "sip": {
- "sip.Status-Line": "SIP\/2.0 180 Ringing",
- "sip.Status-Line_tree": {
- "sip.Status-Code": "180",
- "sip.resend": "0",
- "sip.response-request": "531",
- "sip.response-time": "3853"
- },
- "sip.msg_hdr": "Content-Type:multipart\/mixed;boundary=unique-boundary-1\r\nContact: <sip:[email protected]:5060>\r\nAllow:INVITE,ACK,OPTIONS,BYE,CANCEL,REGISTER,INFO,PRACK,REFER,SUBSCRIBE,NOTIFY\r\nDate:Wed, 07 Aug 2019 14:07:01 GMT\r\nFrom:<sip:[email protected]>;tag=3970176878\r\nTo:<sip:[email protected]>;tag=1E8B303037363131022A4E1D\r\nCall-ID:[email protected]\r\nCSeq:83 INVITE\r\nRecord-Route:<sip:212.13.40.220;r2=on;lr;ftag=3970176878;tbk_i=10_10_N;tbk_o=1_2_Y;vsf=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA;vst=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD;did=f48.285>\r\nRecord-Route:<sip:212.13.40.223;r2=on;lr;ftag=3970176878;tbk_i=10_10_N;tbk_o=1_2_Y;vsf=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA;vst=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD;did=f48.285>\r\nServer:TB007611\r\nVia:SIP\/2.0\/UDP 212.13.40.220;branch=z9hG4bKe876.299389693c8ed69def7a656c2628033c.0;received=212.13.40.220;rport=5060\r\nVia:SIP\/2.0\/UDP 192.168.24.86:5060;branch=z9hG4bK00158fed98b7e9118b3c4da50ae2ed72;rport;tbk_i=10_10_N;tbk_o=1_2_Y;received=212.13.35.221;rport=5060\r\nContent-Length:342\r\n\r\n--unique-boundary-1\r\nContent-Type:application\/sdp\r\n\r\nv=0\r\no=- 2989269303 1 IN IP4 212.13.38.147\r\ns=-\r\nc=IN IP4 212.13.38.147\r\nt=0 0\r\nm=audio 26710 RTP\/AVP 8\r\na=direction:passive\r\n\r\n--unique-boundary-1\r\nContent-Type:application\/ISUP;base=itu-t92+;version=itu-t\r\nContent-Disposition:signal;handling=required\r\n\r\n,\u0001\u0001\u0011\u0002\u00164",
- "sip.msg_hdr_tree": {
- "sip.Content-Type": "multipart\/mixed;boundary=unique-boundary-1",
- "sip.Contact": "<sip:[email protected]:5060>",
- "sip.Contact_tree": {
- "sip.contact.uri": "sip:[email protected]:5060",
- "sip.contact.uri_tree": {
- "sip.contact.user": "351925934244",
- "sip.contact.host": "212.13.38.147",
- "sip.contact.port": "5060"
- }
- },
- "sip.Allow": "INVITE,ACK,OPTIONS,BYE,CANCEL,REGISTER,INFO,PRACK,REFER,SUBSCRIBE,NOTIFY",
- "sip.Date": "Wed, 07 Aug 2019 14:07:01 GMT",
- "sip.From": "<sip:[email protected]>;tag=3970176878",
- "sip.From_tree": {
- "sip.from.addr": "sip:[email protected]",
- "sip.from.addr_tree": {
- "sip.from.user": "351211450160",
- "sip.from.host": "212.13.40.223"
- },
- "sip.from.tag": "3970176878",
- "sip.tag": "3970176878"
- },
- "sip.To": "<sip:[email protected]>;tag=1E8B303037363131022A4E1D",
- "sip.To_tree": {
- "sip.to.addr": "sip:[email protected]",
- "sip.to.addr_tree": {
- "sip.to.user": "351925934244",
- "sip.to.host": "212.13.40.220"
- },
- "sip.to.tag": "1E8B303037363131022A4E1D",
- "sip.tag": "1E8B303037363131022A4E1D"
- },
- "sip.Call-ID": "[email protected]",
- "sip.CSeq": "83 INVITE",
- "sip.CSeq_tree": {
- "sip.CSeq.seq": "83",
- "sip.CSeq.method": "INVITE"
- },
- "sip.Record-Route": "<sip:212.13.40.220;r2=on;lr;ftag=3970176878;tbk_i=10_10_N;tbk_o=1_2_Y;vsf=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA;vst=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD;did=f48.285>",
- "sip.Record-Route_tree": {
- "sip.Record-Route.uri": "sip:212.13.40.220;r2=on;lr;ftag=3970176878;tbk_i=10_10_N;tbk_o=1_2_Y;vsf=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA;vst=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD;did=f48.285",
- "sip.Record-Route.uri_tree": {
- "sip.Record-Route.host": "212.13.40.220",
- "sip.Record-Route.param": "r2=on",
- "sip.Record-Route.param": "lr",
- "sip.Record-Route.param": "ftag=3970176878",
- "sip.Record-Route.param": "tbk_i=10_10_N",
- "sip.Record-Route.param": "tbk_o=1_2_Y",
- "sip.Record-Route.param": "vsf=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
- "sip.Record-Route.param": "vst=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD",
- "sip.Record-Route.param": "did=f48.285"
- }
- },
- "sip.Record-Route": "<sip:212.13.40.223;r2=on;lr;ftag=3970176878;tbk_i=10_10_N;tbk_o=1_2_Y;vsf=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA;vst=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD;did=f48.285>",
- "sip.Record-Route_tree": {
- "sip.Record-Route.uri": "sip:212.13.40.223;r2=on;lr;ftag=3970176878;tbk_i=10_10_N;tbk_o=1_2_Y;vsf=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA;vst=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD;did=f48.285",
- "sip.Record-Route.uri_tree": {
- "sip.Record-Route.host": "212.13.40.223",
- "sip.Record-Route.param": "r2=on",
- "sip.Record-Route.param": "lr",
- "sip.Record-Route.param": "ftag=3970176878",
- "sip.Record-Route.param": "tbk_i=10_10_N",
- "sip.Record-Route.param": "tbk_o=1_2_Y",
- "sip.Record-Route.param": "vsf=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
- "sip.Record-Route.param": "vst=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD",
- "sip.Record-Route.param": "did=f48.285"
- }
- },
- "sip.Server": "TB007611",
- "sip.Via": "SIP\/2.0\/UDP 212.13.40.220;branch=z9hG4bKe876.299389693c8ed69def7a656c2628033c.0;received=212.13.40.220;rport=5060",
- "sip.Via_tree": {
- "sip.Via.transport": "UDP",
- "sip.Via.sent-by.address": "212.13.40.220",
- "sip.Via.branch": "z9hG4bKe876.299389693c8ed69def7a656c2628033c.0",
- "sip.Via.received": "212.13.40.220",
- "sip.Via.rport": "5060"
- },
- "sip.Via": "SIP\/2.0\/UDP 192.168.24.86:5060;branch=z9hG4bK00158fed98b7e9118b3c4da50ae2ed72;rport;tbk_i=10_10_N;tbk_o=1_2_Y;received=212.13.35.221;rport=5060",
- "sip.Via_tree": {
- "sip.Via.transport": "UDP",
- "sip.Via.sent-by.address": "192.168.24.86",
- "sip.Via.sent-by.port": "5060",
- "sip.Via.branch": "z9hG4bK00158fed98b7e9118b3c4da50ae2ed72",
- "sip.Via.rport": "rport",
- "tbk_i=10_10_N": "",
- "tbk_o=1_2_Y": "",
- "sip.Via.received": "212.13.35.221",
- "sip.Via.rport": "5060"
- },
- "sip.Content-Length": "342"
- },
- "sip.msg_body": {
- "mime_multipart": {
- "mime_multipart.type": "multipart\/mixed",
- "mime_multipart.first_boundary": "--unique-boundary-1\r\n",
- "mime_multipart.part": "",
- "mime_multipart.part_tree": {
- "mime_multipart.header.content-type": "application\/sdp",
- "sdp": {
- "sdp.version": "0",
- "sdp.owner": "- 2989269303 1 IN IP4 212.13.38.147",
- "sdp.owner_tree": {
- "sdp.owner.username": "-",
- "sdp.owner.sessionid": "2989269303",
- "sdp.owner.version": "1",
- "sdp.owner.network_type": "IN",
- "sdp.owner.address_type": "IP4",
- "sdp.owner.address": "212.13.38.147"
- },
- "sdp.session_name": "-",
- "sdp.connection_info": "IN IP4 212.13.38.147",
- "sdp.connection_info_tree": {
- "sdp.connection_info.network_type": "IN",
- "sdp.connection_info.address_type": "IP4",
- "sdp.connection_info.address": "212.13.38.147"
- },
- "sdp.time": "0 0",
- "sdp.time_tree": {
- "sdp.time.start": "0",
- "sdp.time.stop": "0"
- },
- "sdp.media": "audio 26710 RTP\/AVP 8",
- "sdp.media_tree": {
- "sdp.media.media": "audio",
- "sdp.media.port_string": "26710",
- "sdp.media.port": "26710",
- "sdp.media.proto": "RTP\/AVP",
- "sdp.media.format": "ITU-T G.711 PCMA"
- },
- "sdp.media_attr": "direction:passive",
- "sdp.media_attr_tree": {
- "sdp.media_attribute.field": "direction",
- "sdp.media_attribute.value": "passive"
- }
- }
- },
- "mime_multipart.boundary": "\r\n--unique-boundary-1\r\n",
- "mime_multipart.part": "",
- "mime_multipart.part_tree": {
- "mime_multipart.header.content-type": "application\/ISUP;base=itu-t92+;version=itu-t",
- "mime_multipart.header.content-disposition": "signal;handling=required",
- "isup": {
- "isup.message_type": "44",
- "Event information : ALERTING (1)": {
- "isup.parameter_type": "36",
- "isup.event_ind": "1",
- "isup.event_presentation_restr_ind": "0"
- },
- "isup.optional_parameter_part_pointer": "1",
- "Parameter: (t=17, l=2) Backward call indicators: Backward call indicators : 0x1634": {
- "isup.parameter_type": "17",
- "isup.parameter_length": "2",
- "isup.charge_indicator": "0x00000002",
- "isup.called_partys_status_indicator": "0x00000001",
- "isup.called_partys_category_indicator": "0x00000001",
- "isup.backw_call_end_to_end_method_indicator": "0x00000000",
- "isup.backw_call_interworking_indicator": "0",
- "isup.backw_call_end_to_end_information_indicator": "0",
- "isup.backw_call_isdn_user_part_indicator": "1",
- "isup.backw_call_holding_indicator": "0",
- "isup.backw_call_isdn_access_indicator": "1",
- "isup.backw_call_echo_control_device_indicator": "1",
- "isup.backw_call_sccp_method_indicator": "0x00000000"
- },
- "isup.parameter_type": "0"
- }
- },
- "mime_multipart.last_boundary": "\r\n--unique-boundary-1--\r\n"
- }
- }
- }
- }
- }
- }
- ]
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement