17:33:41.354519 IP 79.170.152.3.5062 > 79.170.152.35.5060: SIP, length: 713
Eh....@.?.b.O...O..#.......WREGISTER sip:zeon.iptelefon.su:5060 SIP/2.0
Via: SIP/2.0/UDP 192.168.1.96:5062;branch=z9hG4bK416482384
From: "24" <sip:[email protected]>;tag=1080195939
To: "24" <sip:[email protected]>
Call-ID: [email protected]
CSeq: 209 REGISTER
Contact: <sip:[email protected]:5062>
Authorization: Digest username="24", realm="zeOn", nonce="329d3bbd", uri="sip:zeon.iptelefon.su:5060", response="1eaae26c32a2762f4be6c80c757cc6ca", algorithm=MD5
Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER, SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE
Max-Forwards: 70
User-Agent: Yealink SIP-T28P 2.71.14.4
Expires: 180
Allow-Events: talk,hold,conference,refer,check-sync
Content-Length: 0


17:33:41.354913 IP 79.170.152.35.5060 > 79.170.152.3.5062: SIP, length: 506
[email protected]..#O...........SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 192.168.1.96:5062;branch=z9hG4bK416482384;received=79.170.152.3;rport=5062
From: "24" <sip:[email protected]>;tag=1080195939
To: "24" <sip:[email protected]>;tag=as5f513237
Call-ID: [email protected]
CSeq: 209 REGISTER
Server: zeOn
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH, MESSAGE
Supported: replaces, timer
WWW-Authenticate: Digest algorithm=MD5, realm="zeOn", nonce="07aa7c8f"
Content-Length: 0


17:33:41.357174 IP 79.170.152.3.5062 > 79.170.152.35.5060: SIP, length: 4
Eh. ..@.?.eMO...O..#........

..............
17:33:41.460268 IP 79.170.152.3.5062 > 79.170.152.35.5060: SIP, length: 714
Eh....@.?.b.O...O..#........REGISTER sip:zeon.iptelefon.su:5060 SIP/2.0
Via: SIP/2.0/UDP 192.168.1.96:5062;branch=z9hG4bK2038079138
From: "24" <sip:[email protected]>;tag=1080195939
To: "24" <sip:[email protected]>
Call-ID: [email protected]
CSeq: 210 REGISTER
Contact: <sip:[email protected]:5062>
Authorization: Digest username="24", realm="zeOn", nonce="07aa7c8f", uri="sip:zeon.iptelefon.su:5060", response="cc6f3c734c2a48e24306cb0cb9dda337", algorithm=MD5
Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER, SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE
Max-Forwards: 70
User-Agent: Yealink SIP-T28P 2.71.14.4
Expires: 180
Allow-Events: talk,hold,conference,refer,check-sync
Content-Length: 0


17:33:41.461271 IP 79.170.152.35.5060 > 79.170.152.3.5062: SIP, length: 541
[email protected]..#O........%..OPTIONS sip:[email protected]:5062 SIP/2.0
Via: SIP/2.0/UDP 79.170.152.35:5060;branch=z9hG4bK0740e5f2;rport
Max-Forwards: 70
From: "asterisk" <sip:[email protected]>;tag=as3ffe1773
To: <sip:[email protected]:5062>
Contact: <sip:[email protected]:5060>
Call-ID: [email protected]:5060
CSeq: 102 OPTIONS
User-Agent: zeOn
Date: Tue, 31 Jan 2017 14:33:41 GMT
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH, MESSAGE
Supported: replaces, timer
Content-Length: 0


17:33:41.461479 IP 79.170.152.35.5060 > 79.170.152.3.5062: SIP, length: 525
E..)[email protected]..#O...........SIP/2.0 200 OK
Via: SIP/2.0/UDP 192.168.1.96:5062;branch=z9hG4bK2038079138;received=79.170.152.3;rport=5062
From: "24" <sip:[email protected]>;tag=1080195939
To: "24" <sip:[email protected]>;tag=as5f513237
Call-ID: [email protected]
CSeq: 210 REGISTER
Server: zeOn
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH, MESSAGE
Supported: replaces, timer
Expires: 180
Contact: <sip:[email protected]:5062>;expires=180
Date: Tue, 31 Jan 2017 14:33:41 GMT
Content-Length: 0


17:33:41.498152 IP 79.170.152.3.5062 > 79.170.152.35.5060: SIP, length: 333
Eh.i..@.?.d.O...O..#.....UcASIP/2.0 200 OK
Via: SIP/2.0/UDP 79.170.152.35:5060;branch=z9hG4bK0740e5f2;rport
From: "asterisk" <sip:[email protected]>;tag=as3ffe1773
To: <sip:[email protected]:5062>;tag=1918848539
Call-ID: [email protected]:5060
CSeq: 102 OPTIONS
User-Agent: Yealink SIP-T28P 2.71.14.4
Content-Length: 0


17:33:44.570507 IP 79.170.152.3.2089 > 79.170.152.35.5060: SIP, length: 2
E.......?..TO...O..#.)...
.h
................
17:33:44.742538 ARP, Request who-has 79.170.152.4 tell 79.170.152.3, length 46
...........&..O.........O.....................
17:33:45.746567 ARP, Request who-has 79.170.152.4 tell 79.170.152.3, length 46
...........&..O.........O.....................
17:33:46.746564 ARP, Request who-has 79.170.152.4 tell 79.170.152.3, length 46
...........&..O.........O.....................
17:33:46.769585 IP 79.170.152.3.1920 > 79.170.152.35.5060: SIP, length: 4
Eh. |8@.?...O...O..#........

..............
17:33:47.750682 ARP, Request who-has 79.170.152.4 tell 79.170.152.3, length 46
...........&..O.........O.....................
17:33:48.746564 ARP, Request who-has 79.170.152.4 tell 79.170.152.3, length 46
...........&..O.........O.....................
17:33:49.091661 IP 79.170.152.3.2089 > 79.170.152.35.5060: SIP, length: 1085
E..Y....?...O...O..#.)...E".INVITE sip:[email protected] SIP/2.0
Via: SIP/2.0/UDP 192.168.0.180:5060;rport;branch=z9hG4bK7Qyee6zq79Hh3r
To: <sip:[email protected]>
Contact: <sip:[email protected]:5060>
Content-Type: application/sdp
User-Agent: VoIP-Client MTK/v1.0
From: "94" <sip:[email protected]>;tag=XAyC52+OdU93vA
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY
Supported: replaces
CSeq: 475658129 INVITE
Max-Forwards: 70
Call-ID: xQsYK4dvil4FYN5hDKR
Authorization: Digest username="94",realm="zeOn",nonce="4a723ec5",uri="sip:79.170.152.35",response="7238db0a2c3105b18c09e28e9a2a607f",algorithm=MD5
Content-Length: 469

v=0
o=- 628007879 628007879 IN IP4 192.168.0.180
s=-
c=IN IP4 192.168.0.180
t=0 0
m=audio 15003 RTP/AVP 8 4 97 96 98 99 0 18 13 101
a=rtpmap:8 PCMA/8000
a=rtpmap:4 G723/8000
a=fmtp:4 annexa=yes
a=rtpmap:97 G726-16/8000
a=rtpmap:96 G726-24/8000
a=rtpmap:98 G726-32/8000
a=rtpmap:99 G726-40/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:18 G729/8000
a=fmtp:18 annexb=yes
a=rtpmap:13 CN/8000
a=rtpmap:101 telephone-event/8000
a=sendrecv
a=ptime:20
a=maxptime:40

17:33:49.092250 IP 79.170.152.35.5060 > 79.170.152.3.2089: SIP, length: 503
[email protected]..#O......)....SIP/2.0 401 Unauthorized
Via: SIP/2.0/UDP 192.168.0.180:5060;branch=z9hG4bK7Qyee6zq79Hh3r;received=79.170.152.3;rport=2089
From: "94" <sip:[email protected]>;tag=XAyC52+OdU93vA
To: <sip:[email protected]>;tag=as75911b5a
Call-ID: xQsYK4dvil4FYN5hDKR
CSeq: 475658129 INVITE
Server: zeOn
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH, MESSAGE
Supported: replaces, timer
WWW-Authenticate: Digest algorithm=MD5, realm="zeOn", nonce="256f543f"
Content-Length: 0


17:33:49.130078 IP 79.170.152.3.2089 > 79.170.152.35.5060: SIP, length: 290
E..>....?..4O...O..#.)...*G.ACK sip:[email protected] SIP/2.0
Call-ID: xQsYK4dvil4FYN5hDKR
From: "94" <sip:[email protected]>;tag=XAyC52+OdU93vA
CSeq: 475658129 ACK
To: <sip:[email protected]>;tag=as75911b5a
Via: SIP/2.0/UDP 192.168.0.180:5060;rport;branch=z9hG4bK7Qyee6zq79Hh3r
User-Agent: VoIP-Client MTK/v1.0


17:33:49.190551 IP 79.170.152.3.2089 > 79.170.152.35.5060: SIP, length: 1085
E..Y....?...O...O..#.)...E&.INVITE sip:[email protected] SIP/2.0
Via: SIP/2.0/UDP 192.168.0.180:5060;rport;branch=z9hG4bKMss8fYUaKE9Knd
To: <sip:[email protected]>
Contact: <sip:[email protected]:5060>
Content-Type: application/sdp
User-Agent: VoIP-Client MTK/v1.0
From: "94" <sip:[email protected]>;tag=XAyC52+OdU93vA
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY
Supported: replaces
Max-Forwards: 70
Call-ID: xQsYK4dvil4FYN5hDKR
Content-Length: 469
CSeq: 475658130 INVITE
Authorization: Digest username="94",realm="zeOn",nonce="256f543f",uri="sip:79.170.152.35",response="821cb31cc8f27a4f2c04b0a2b5e58312",algorithm=MD5

v=0
o=- 628007879 628007879 IN IP4 192.168.0.180
s=-
c=IN IP4 192.168.0.180
t=0 0
m=audio 15003 RTP/AVP 8 4 97 96 98 99 0 18 13 101
a=rtpmap:8 PCMA/8000
a=rtpmap:4 G723/8000
a=fmtp:4 annexa=yes
a=rtpmap:97 G726-16/8000
a=rtpmap:96 G726-24/8000
a=rtpmap:98 G726-32/8000
a=rtpmap:99 G726-40/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:18 G729/8000
a=fmtp:18 annexb=yes
a=rtpmap:13 CN/8000
a=rtpmap:101 telephone-event/8000
a=sendrecv
a=ptime:20
a=maxptime:40

17:33:49.193036 IP 79.170.152.35.5060 > 79.170.152.3.2089: SIP, length: 484
[email protected]..#O......)...xSIP/2.0 100 Trying
Via: SIP/2.0/UDP 192.168.0.180:5060;branch=z9hG4bKMss8fYUaKE9Knd;received=79.170.152.3;rport=2089
From: "94" <sip:[email protected]>;tag=XAyC52+OdU93vA
To: <sip:[email protected]>
Call-ID: xQsYK4dvil4FYN5hDKR
CSeq: 475658130 INVITE
Server: zeOn
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH, MESSAGE
Supported: replaces, timer
Session-Expires: 300;refresher=uas
Contact: <sip:[email protected]:5060>
Content-Length: 0


17:33:49.197491 IP 79.170.152.35.8080 > 79.170.152.3.53632: Flags [P.], seq 2025:2126, ack 1, win 293, length 101
E.....@[email protected]`O..#O.........mg.q..P..%........`&g...)G%.u.x....:.qV....FC......\U..4O&.N.~^V.X.Jd.7<.~.@&KL....j#RI.".,n......H.".].a|c.}@t.9..
17:33:49.197558 IP 79.170.152.35.8080 > 79.170.152.3.61540: Flags [P.], seq 1917:1999, ack 1, win 284, length 82
E..z+.@.@.?.O..#O......dW.:(.w..P...........M._...Q.Hm....Z 7....D>q."v...Pj.84T..Gb_..I.i.9P.dcI.,.K......;<...3df._..`..
17:33:49.235273 IP 79.170.152.35.5060 > 79.170.152.3.5065: SIP, length: 1472
E....y [email protected]..#O.........D.INVITE sip:[email protected]:5065 SIP/2.0
Via: SIP/2.0/UDP 79.170.152.35:5060;branch=z9hG4bK224504c7;rport
Max-Forwards: 70
From: <sip:[email protected]>;tag=as3171587b
To: <sip:[email protected]:5065>
Contact: <sip:[email protected]:5060>
Call-ID: [email protected]:5060
CSeq: 102 INVITE
User-Agent: zeOn
Date: Tue, 31 Jan 2017 14:33:49 GMT
Session-Expires: 300
Min-SE: 300
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH, MESSAGE
Supported: replaces, timer
Content-Type: application/sdp
Content-Length: 919

v=0
o=root 35933421 35933421 IN IP4 79.170.152.35
s=Asterisk PBX certified/13.8-cert3
c=IN IP4 79.170.152.35
t=0 0
m=audio 13012 RTP/AVP 4 0 8 3 111 112 5 10 118 7 18 110 117 119 97 9 102 115 116 107 101
a=rtpmap:4 G723/8000
a=fmtp:4 annexa=no
a=rtpmap:0 PCMU/8000
a=rtpmap:8 PCMA/8000
a=rtpmap:3 GSM/8000
a=rtpmap:111 G726-32/8000
a=rtpmap:112 AAL2-G726-32/8000
a=rtpmap:5 DVI4/8000
a=rtpmap:10 L16/8000
a=rtpmap:118 L16/16000
a=rtpmap:7 LPC/8000
a=rtpmap:18 G729/8000
a=fmtp:18 annexb=no
a=rtpmap:110 speex/8000
a=rtpmap:117 speex/16000
a=rtpmap:119 speex/32000
a=rtpmap:97 iLBC/8000
a=rtpmap:9 G722/8000
a=rtpmap:102 G7221/16000
a=fmtp:102 bitrate=32000
a=rtpmap:115 G7221/32000
a=fmtp:115 bitrate=48000
a=rtpmap:116 G719/48000
a=fmtp:116 bitrate=64000
a=rtpmap:107 opus/48000/2
a=fmtp:107 useinbandfec=1
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-
17:33:49.235296 IP 79.170.152.35 > 79.170.152.3: udp
O..#O...16.
a=maxptime:20
a=sendrecv

17:33:49.235475 IP 79.170.152.35.5060 > 79.170.152.3.2089: SIP, length: 500
[email protected]..#O......)....SIP/2.0 180 Ringing
Via: SIP/2.0/UDP 192.168.0.180:5060;branch=z9hG4bKMss8fYUaKE9Knd;received=79.170.152.3;rport=2089
From: "94" <sip:[email protected]>;tag=XAyC52+OdU93vA
To: <sip:[email protected]>;tag=as6130e22c
Call-ID: xQsYK4dvil4FYN5hDKR
CSeq: 475658130 INVITE
Server: zeOn
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH, MESSAGE
Supported: replaces, timer
Session-Expires: 300;refresher=uas
Contact: <sip:[email protected]:5060>
Content-Length: 0


17:33:49.236434 IP 79.170.152.35.5060 > 79.170.152.3.5062: SIP, length: 989
E....{[email protected]..#O..........qNOTIFY sip:[email protected]:5062 SIP/2.0
Via: SIP/2.0/UDP 79.170.152.35:5060;branch=z9hG4bK1979db90;rport
Max-Forwards: 70
From: <sip:[email protected]>;tag=as299110d6
To: "24" <sip:[email protected]>;tag=780527295
Contact: <sip:[email protected]:5060>
Call-ID: [email protected]
CSeq: 168 NOTIFY
User-Agent: zeOn
Subscription-State: active
Event: dialog
Content-Type: application/dialog-info+xml
Content-Length: 547

<?xml version="1.0"?>
<dialog-info xmlns="urn:ietf:params:xml:ns:dialog-info" version="66" state="full" entity="sip:[email protected]">
<dialog id="22" call-id="[email protected]" local-tag="780527295" remote-tag="as299110d6" direction="recipient">
<remote>
<identity display="22">sip:[email protected]</identity>
<target uri="sip:[email protected]"/>
</remote>
<local>
<identity display="22">sip:[email protected]</identity>
<target uri="sip:[email protected]"/>
</local>
<state>early</state>
</dialog>
</dialog-info>

17:33:49.236553 IP 79.170.152.35.5060 > 79.170.152.3.5061: SIP, length: 961
E....|[email protected]..#O..........UNOTIFY sip:[email protected]:5061 SIP/2.0
Via: SIP/2.0/UDP 79.170.152.35:5060;branch=z9hG4bK34bd0af1;rport
Max-Forwards: 70
From: <sip:[email protected]>;tag=as2a44be97
To: "20" <sip:[email protected]>;tag=724887580
Contact: <sip:[email protected]:5060>
Call-ID: [email protected]
CSeq: 152 NOTIFY
User-Agent: zeOn
Subscription-State: active
Event: dialog
Content-Type: application/dialog-info+xml
Content-Length: 527

<?xml version="1.0"?>
<dialog-info xmlns="urn:ietf:params:xml:ns:dialog-info" version="50" state="full" entity="sip:[email protected]">
<dialog id="22" call-id="[email protected]" local-tag="724887580" remote-tag="as2a44be97" direction="recipient">
<remote>
<identity display="22">sip:[email protected]</identity>
<target uri="sip:[email protected]"/>
</remote>
<local>
<identity display="22">sip:[email protected]</identity>
<target uri="sip:[email protected]"/>
</local>
<state>early</state>
</dialog>
</dialog-info>

17:33:49.256288 IP 79.170.152.3.5061 > 79.170.152.35.5060: SIP, length: 324
Eh.`. @.?.g.O...O..#.....L.ESIP/2.0 200 OK
Via: SIP/2.0/UDP 79.170.152.35:5060;branch=z9hG4bK34bd0af1;rport
From: <sip:[email protected]>;tag=as2a44be97
To: "20" <sip:[email protected]>;tag=724887580
Call-ID: [email protected]
CSeq: 152 NOTIFY
Contact: <sip:[email protected]:5061>
User-Agent: Yealink SIP-T26P 6.70.14.6
Content-Length: 0


17:33:49.256578 IP 79.170.152.3.5065 > 79.170.152.35.5060: SIP, length: 304
Eh.L.Z@.?..cO...O..#.....8!.SIP/2.0 100 Trying
Via: SIP/2.0/UDP 79.170.152.35:5060;branch=z9hG4bK224504c7;rport
From: <sip:[email protected]>;tag=as3171587b
To: <sip:[email protected]:5065>
Call-ID: [email protected]:5060
CSeq: 102 INVITE
User-Agent: Yealink SIP-T20P 9.71.14.5
Content-Length: 0


17:33:49.259427 IP 79.170.152.3.5062 > 79.170.152.35.5060: SIP, length: 332
Eh.h..@.?.d.O...O..#.....T..SIP/2.0 200 OK
Via: SIP/2.0/UDP 79.170.152.35:5060;branch=z9hG4bK1979db90;rport
From: <sip:[email protected]>;tag=as299110d6
To: "24" <sip:[email protected]>;tag=780527295
Call-ID: [email protected]
CSeq: 168 NOTIFY
Contact: <sip:[email protected]:5062>
User-Agent: Yealink SIP-T28P 2.71.14.4
Content-Length: 0


17:33:49.297783 IP 79.170.152.35.8080 > 79.170.152.3.51376: Flags [P.], seq 83:165, ack 1, win 271, length 82
..g@.......|-........{.3..1.w...[...:.....j.Y=.~w1vM.\.J......
17:33:49.297945 IP 79.170.152.35.8080 > 79.170.152.3.53632: Flags [.], seq 2126:3586, ack 1, win 293, length 1460
E.....@[email protected]..#O.........m..q..P..%.I........."..3.4...=:...7.Z.o...q.B.G....M.tr=jf.n<............9..edk {.t...{.u.
{x.L+..N.n..I.Z..7...N..3..u...\..!m....n....?"..F.*......U?...?U..dA......J.).NC.T...o.....0}.E..I...x.@....."9.|O?.3.....g ..Yz1..S..u.q.:..
.]..f......vP..*..W.'N.. ].?.o.g." ...o.4......n..Q.1......R..C.k...|...        zl.%.....0.d`.......w.Q..w2..G...9..o...;..By.......4.WD.2.)U]!._....JLs.Khg.Y......x..(..9.v^..B.....~..............Z..y..W..5..c....?...q.D..}..'.~.....'..}..R../..l..;T='n.[c...#z...UZ....)..8..^3.1.<g.w..0..o......|.....TR...'........b.........;.3S...i.w...d.l%.["`.hB.........f....2.K..?.k..?.......2..........Q?.....%z>.....G...'...).i....=.b2gP1k..44..o.Y^.`Y.DL..@CT...{.'....tj..8M....2..U7s<.A....C.o..n+...a.>....(d.nG   .nB.S...        $....'.......bz.......a,.J}:...........%. N.d......SG.......kA..u./..n.T..cVuvp.....1>%1.......\.....N?....9zhBwH......4..H]kZ.0{..|....(A`......--}>r..;...$....b....kQ.T.m2........'.`+W.g..A.y.)z....v.!e...S..vb.).L`.....(.M.m<=..p..>`.[W..1..w.Kn?c.+T......_..\....ujy..b..a.......k..5...`.Vs...)...fX..gA..eM.K5...B&P..-......*Zk..m....
U.K.'...U..v..&E...:L.8...r..J.R%V..~i.;        .....l...........
.#&wiC..1.@
.{......(.RO.lRN...od...v.fK.`F...#F.....$.s..n~..4..[v3M.G]G.[?._.;a.G
17:33:49.298029 IP 79.170.152.35.8080 > 79.170.152.3.61540: Flags [.], seq 1999:3459, ack 1, win 284, length 1460
.h...#..@;...h%..! hl.Z..e9./Lj.W..M_5.E.~%~f..Q..Q.I..!a.C1.o............
.....+]+p.P.I.D...D\.Cw9?&..?. ...5..R|.....(?w.>.No....Y....]U:..Y....%.
.5Q..,x.6.../..%..]..{.>i..fB.?3.aS-...B.8.S.g.+..i...6,....)..?%WU....T..m2x.6P...v..A..YZ...X-6p........H...>[email protected]=.....).~B....h..{k.A...........T..|C...../[email protected]&S.........:
...)..#..<........bH.H...o...........8tg...S...@...;..".q:......`D....nv...c....-.mk..=e......T`..j..C...H#.'(z.".;?...S{........Q....`...........'"......AQ2.2.9P`.B.....p.37...:O:6.e.u[.2\...^...opW..,I.)1Qm.....
pk.4.nT....2.F.... .....?D[.v......2^.\....L~h...{z#1.....c./AH.$5...Jx9..nh...@.<..*E.....O."=QG.....B.U..>jBA....#k..(.,.IL...NV...t\j.p..u......n....3*.P.I..^..x]...%....5r.7".....p;..c..S}.C.g.3.?...\.16....k...Rm.G......+..../....$........g....*...l........v[..U...U9.0Q.};y.[|;.j....E...Xo.'.gD.,U...>......[L....~.f...d.ME...1X......q.>...4.....R........E...X..{o............5....].Sj...:...o.Gnr....<.O.j...h.....8....y.p.L...:..W.....c..N7(.F.]....l....wcb...B......._a..
.
.....[......&.2.E.....o.T...o.}....8......mEn.....s...x.U....r...S.j.a....N4..A+KPm.u7..TJZ.C...N+...d9.^Y......(vt_..O...
17:33:49.298915 IP 79.170.152.3.53632 > 79.170.152.35.8080: Flags [.], ack 3586, win 256, length 0
E..([email protected]..#.....q....s.P....X........
17:33:49.298966 IP 79.170.152.35.8080 > 79.170.152.3.53632: Flags [P.], seq 3586:3939, ack 1, win 293, length 353
E.....@[email protected]..#O.........s..q..P..%..........."..?A.z.V...r......fD...(...... ....H.
]>.7f%.........0.............zA........g.E)3...4..d...A..R.Z!;7)....4#....{mp.0..d'..   #.$..7....`.S.o.&.fy.*....S a}..D.t)..^@v%A....Eshi
./...#.....m.=...a9.G2..w..;n.....o....@,O...dr.        ...M.#&s.......J..(...  u..6    5j..$...-.p.cq.W.8......\r;F.a..6...o..#..0q+.:...3|E+B.a.;.p6..o0.....MN....U.9..~M....R.'.
17:33:49.299161 IP 79.170.152.3.61540 > 79.170.152.35.8080: Flags [.], ack 3459, win 16425, length 0
E..([email protected]..#[email protected].@)y.........
17:33:49.299193 IP 79.170.152.35.8080 > 79.170.152.3.61540: Flags [P.], seq 3459:3795, ack 1, win 284, length 336
E..x+.@.@.>.O..#[email protected]....{P.......A.h..m..h.nQ...|P..gL...o.Gud....C..Q0...S...rdn. .6:.......j...    !e.m6./{.K...f..#..W..;y?.{....].s>K
_........7...).c...d.(...or.....ZP........)...zo@...).....)*.0...Pkv...n.....7....Nt.5H.N..Bh.:.3....D....O..D3P......O.Z:.Q......
17:33:49.353485 IP 79.170.152.3.5065 > 79.170.152.35.5060: SIP, length: 527
Eh.+.[@.?...O...O..#........SIP/2.0 180 Ringing
Via: SIP/2.0/UDP 79.170.152.35:5060;branch=z9hG4bK224504c7;rport
From: <sip:[email protected]>;tag=as3171587b
To: <sip:[email protected]:5065>;tag=1120215520
Call-ID: [email protected]:5060
CSeq: 102 INVITE
Contact: <sip:[email protected]:5065>
Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER, SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE
User-Agent: Yealink SIP-T20P 9.71.14.5
Allow-Events: talk,hold,conference,refer,check-sync
Content-Length: 0


17:33:49.353991 IP 79.170.152.35.5060 > 79.170.152.3.2089: SIP, length: 500
E....}[email protected]..#O......)....SIP/2.0 180 Ringing
Via: SIP/2.0/UDP 192.168.0.180:5060;branch=z9hG4bKMss8fYUaKE9Knd;received=79.170.152.3;rport=2089
From: "94" <sip:[email protected]>;tag=XAyC52+OdU93vA
To: <sip:[email protected]>;tag=as6130e22c
Call-ID: xQsYK4dvil4FYN5hDKR
CSeq: 475658130 INVITE
Server: zeOn
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH, MESSAGE
Supported: replaces, timer
Session-Expires: 300;refresher=uas
Contact: <sip:[email protected]:5060>
Content-Length: 0


17:33:49.492835 IP 79.170.152.3.61540 > 79.170.152.35.8080: Flags [.], ack 3795, win 16341, length 0
E..([email protected]..#.d...w..W.A~P.?.x.........
17:33:49.493546 IP 79.170.152.3.53632 > 79.170.152.35.8080: Flags [.], ack 3939, win 255, length 0
E..([email protected]..#.....q....t.P.............
17:33:49.498044 IP 79.170.152.3.51376 > 79.170.152.35.8080: Flags [.], ack 165, win 16104, length 0
E..([email protected]..#....:R..*[..P.>.y.........
17:33:49.750520 ARP, Request who-has 79.170.152.4 tell 79.170.152.3, length 46
...........&..O.........O.....................
17:33:50.465037 IP 79.170.152.3.2092 > 79.170.152.35.5060: SIP, length: 4
Eh. ..@.?.k.O...O..#.,.....V

..............
17:33:50.751554 ARP, Request who-has 79.170.152.4 tell 79.170.152.3, length 46
...........&..O.........O.....................
17:33:51.751549 ARP, Request who-has 79.170.152.4 tell 79.170.152.3, length 46
...........&..O.........O.....................
17:33:52.045829 IP 79.170.152.3.5065 > 79.170.152.35.5060: SIP, length: 701
Eh...\@.?...O...O..#.......ASIP/2.0 200 OK
Via: SIP/2.0/UDP 79.170.152.35:5060;branch=z9hG4bK224504c7;rport
From: <sip:[email protected]>;tag=as3171587b
To: <sip:[email protected]:5065>;tag=1120215520
Call-ID: [email protected]:5060
CSeq: 102 INVITE
Contact: <sip:[email protected]:5065>
Content-Type: application/sdp
Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER, SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE
User-Agent: Yealink SIP-T20P 9.71.14.5
Content-Length: 199

v=0
o=- 20230 20230 IN IP4 192.168.1.93
s=SDP data
c=IN IP4 192.168.1.93
t=0 0
m=audio 11800 RTP/AVP 8 101
a=rtpmap:8 PCMA/8000
a=sendrecv
a=fmtp:101 0-15
a=rtpmap:101 telephone-event/8000

17:33:52.046396 IP 79.170.152.35.5060 > 79.170.152.3.5065: SIP, length: 368
[email protected]..#O........x..ACK sip:[email protected]:5065 SIP/2.0
Via: SIP/2.0/UDP 79.170.152.35:5060;branch=z9hG4bK326dedbd;rport
Max-Forwards: 70
From: <sip:[email protected]>;tag=as3171587b
To: <sip:[email protected]:5065>;tag=1120215520
Contact: <sip:[email protected]:5060>
Call-ID: [email protected]:5060
CSeq: 102 ACK
User-Agent: zeOn
Content-Length: 0


17:33:52.046984 IP 79.170.152.35.5060 > 79.170.152.3.5062: SIP, length: 648
[email protected]..#O...........NOTIFY sip:[email protected]:5062 SIP/2.0
Via: SIP/2.0/UDP 79.170.152.35:5060;branch=z9hG4bK43232316;rport
Max-Forwards: 70
From: <sip:[email protected]>;tag=as299110d6
To: "24" <sip:[email protected]>;tag=780527295
Contact: <sip:[email protected]:5060>
Call-ID: [email protected]
CSeq: 169 NOTIFY
User-Agent: zeOn
Subscription-State: active
Event: dialog
Content-Type: application/dialog-info+xml
Content-Length: 206

<?xml version="1.0"?>
<dialog-info xmlns="urn:ietf:params:xml:ns:dialog-info" version="67" state="full" entity="sip:[email protected]">
<dialog id="22">
<state>confirmed</state>
</dialog>
</dialog-info>

17:33:52.047097 IP 79.170.152.35.5060 > 79.170.152.3.5061: SIP, length: 636
[email protected]..#O...........NOTIFY sip:[email protected]:5061 SIP/2.0
Via: SIP/2.0/UDP 79.170.152.35:5060;branch=z9hG4bK0bfeaef2;rport
Max-Forwards: 70
From: <sip:[email protected]>;tag=as2a44be97
To: "20" <sip:[email protected]>;tag=724887580
Contact: <sip:[email protected]:5060>
Call-ID: [email protected]
CSeq: 153 NOTIFY
User-Agent: zeOn
Subscription-State: active
Event: dialog
Content-Type: application/dialog-info+xml
Content-Length: 202

<?xml version="1.0"?>
<dialog-info xmlns="urn:ietf:params:xml:ns:dialog-info" version="51" state="full" entity="sip:[email protected]">
<dialog id="22">
<state>confirmed</state>
</dialog>
</dialog-info>

17:33:52.048642 IP 79.170.152.35.5060 > 79.170.152.3.5065: SIP, length: 403
[email protected]..#O..........'BYE sip:[email protected]:5065 SIP/2.0
Via: SIP/2.0/UDP 79.170.152.35:5060;branch=z9hG4bK24cd280f;rport
Max-Forwards: 70
From: <sip:[email protected]>;tag=as3171587b
To: <sip:[email protected]:5065>;tag=1120215520
Call-ID: [email protected]:5060
CSeq: 103 BYE
User-Agent: zeOn
X-Asterisk-HangupCause: Normal Clearing
X-Asterisk-HangupCauseCode: 16
Content-Length: 0


17:33:52.069675 IP 79.170.152.3.5061 > 79.170.152.35.5060: SIP, length: 324
Eh.`.!@.?.g.O...O..#.....Lb.SIP/2.0 200 OK
Via: SIP/2.0/UDP 79.170.152.35:5060;branch=z9hG4bK0bfeaef2;rport
From: <sip:[email protected]>;tag=as2a44be97
To: "20" <sip:[email protected]>;tag=724887580
Call-ID: [email protected]
CSeq: 153 NOTIFY
Contact: <sip:[email protected]:5061>
User-Agent: Yealink SIP-T26P 6.70.14.6
Content-Length: 0


17:33:52.069969 IP 79.170.152.35.5060 > 79.170.152.3.5061: SIP, length: 637
[email protected]..#O...........NOTIFY sip:[email protected]:5061 SIP/2.0
Via: SIP/2.0/UDP 79.170.152.35:5060;branch=z9hG4bK02a6d15e;rport
Max-Forwards: 70
From: <sip:[email protected]>;tag=as2a44be97
To: "20" <sip:[email protected]>;tag=724887580
Contact: <sip:[email protected]:5060>
Call-ID: [email protected]
CSeq: 154 NOTIFY
User-Agent: zeOn
Subscription-State: active
Event: dialog
Content-Type: application/dialog-info+xml
Content-Length: 203

<?xml version="1.0"?>
<dialog-info xmlns="urn:ietf:params:xml:ns:dialog-info" version="52" state="full" entity="sip:[email protected]">
<dialog id="22">
<state>terminated</state>
</dialog>
</dialog-info>

17:33:52.078146 IP 79.170.152.3.5062 > 79.170.152.35.5060: SIP, length: 332
Eh.h..@.?.d.O...O..#.....TV.SIP/2.0 200 OK
Via: SIP/2.0/UDP 79.170.152.35:5060;branch=z9hG4bK43232316;rport
From: <sip:[email protected]>;tag=as299110d6
To: "24" <sip:[email protected]>;tag=780527295
Call-ID: [email protected]
CSeq: 169 NOTIFY
Contact: <sip:[email protected]:5062>
User-Agent: Yealink SIP-T28P 2.71.14.4
Content-Length: 0


17:33:52.078397 IP 79.170.152.35.5060 > 79.170.152.3.5062: SIP, length: 649
[email protected]..#O...........NOTIFY sip:[email protected]:5062 SIP/2.0
Via: SIP/2.0/UDP 79.170.152.35:5060;branch=z9hG4bK0a2e1168;rport
Max-Forwards: 70
From: <sip:[email protected]>;tag=as299110d6
To: "24" <sip:[email protected]>;tag=780527295
Contact: <sip:[email protected]:5060>
Call-ID: [email protected]
CSeq: 170 NOTIFY
User-Agent: zeOn
Subscription-State: active
Event: dialog
Content-Type: application/dialog-info+xml
Content-Length: 207

<?xml version="1.0"?>
<dialog-info xmlns="urn:ietf:params:xml:ns:dialog-info" version="68" state="full" entity="sip:[email protected]">
<dialog id="22">
<state>terminated</state>
</dialog>
</dialog-info>

17:33:52.094959 IP 79.170.152.35.5060 > 79.170.152.3.2089: SIP, length: 463
[email protected]..#O......)...cSIP/2.0 603 Declined
Via: SIP/2.0/UDP 192.168.0.180:5060;branch=z9hG4bKMss8fYUaKE9Knd;received=79.170.152.3;rport=2089
From: "94" <sip:[email protected]>;tag=XAyC52+OdU93vA
To: <sip:[email protected]>;tag=as6130e22c
Call-ID: xQsYK4dvil4FYN5hDKR
CSeq: 475658130 INVITE
Server: zeOn
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH, MESSAGE
Supported: replaces, timer
Session-Expires: 300;refresher=uas
Content-Length: 0


17:33:52.096021 IP 79.170.152.3.5061 > 79.170.152.35.5060: SIP, length: 324
Eh.`."@.?.g.O...O..#.....L.qSIP/2.0 200 OK
Via: SIP/2.0/UDP 79.170.152.35:5060;branch=z9hG4bK02a6d15e;rport
From: <sip:[email protected]>;tag=as2a44be97
To: "20" <sip:[email protected]>;tag=724887580
Call-ID: [email protected]
CSeq: 154 NOTIFY
Contact: <sip:[email protected]:5061>
User-Agent: Yealink SIP-T26P 6.70.14.6
Content-Length: 0


17:33:52.103486 IP 79.170.152.35.8080 > 79.170.152.3.51376: Flags [P.], seq 165:247, ack 1, win 271, length 82
E..zB.@.@.(.O..#O.......*[..:R..P...........M..c..EW....V......kd.j.}.{.p/6..f.b..{{f5m..!..a..6..b=.Dk.".....u ....F.....
17:33:52.103579 IP 79.170.152.35.8080 > 79.170.152.3.53632: Flags [P.], seq 3939:4520, ack 1, win 293, length 581
E..m..@[email protected]}O..#O.........t..q..P..%........@.>.....#..V..t2t..........(        ,9..uH8M<3b..........   &..=.<...t.g.`.`.......9-.j..6~1a^h.........Y.........g.B.8........o.F..&. Y/`.l0.....+.'.7...-..S.qT.........u. ...E..F.8...+>....`wo.....'...~...L....<.2..B?i.....'..@..[..C..R........~M.   d..W..e....{..0.....!9..B..v..l.,.3...
17:33:52.103623 IP 79.170.152.35.8080 > 79.170.152.3.61540: Flags [P.], seq 3795:4359, ack 1, win 284, length 564
E..\+.@.@.>.O..#O......dW.A~.w..P.........../._...Q.Jl.^..xZ.......Eq..}6.^,.
.......]..{O7^..;.an.Y]....h...I&P@
J..........1t.......9.7.../9e.....`.YM..4..[7.7~#j.F.>..d*....Q.<       .9.P... $6Af...=....D?....]..4>Q...Z.C.#R)..    !.I.zo..G.."..3....).........44h.7.)......H...J]I1..Av.>..H...+..:f..<..Y..ZI..wi]...G.G.nK.@..@..".._....8..Z......be..x~}....A.E...k.}.N6{....y.z.........!.U.aA.v;....`R...:o..5/U7.C...r.V..I...w.ei.]./.qc.'..4.L%......:|.7(S..Q...OR.u:.{..W$.S.....H{Xf8../.4....X.y...**............".r....2.+..]..s.  ..A/?N?...}.<......UB..
17:33:52.118109 IP 79.170.152.3.5062 > 79.170.152.35.5060: SIP, length: 332
Eh.h..@.?.d.O...O..#.....T^.SIP/2.0 200 OK
Via: SIP/2.0/UDP 79.170.152.35:5060;branch=z9hG4bK0a2e1168;rport
From: <sip:[email protected]>;tag=as299110d6
To: "24" <sip:[email protected]>;tag=780527295
Call-ID: [email protected]
CSeq: 170 NOTIFY
Contact: <sip:[email protected]:5062>
User-Agent: Yealink SIP-T28P 2.71.14.4
Content-Length: 0


17:33:52.123760 IP 79.170.152.3.2089 > 79.170.152.35.5060: SIP, length: 290
E..>....?..4O...O..#.)...*.*ACK sip:[email protected] SIP/2.0
Call-ID: xQsYK4dvil4FYN5hDKR
From: "94" <sip:[email protected]>;tag=XAyC52+OdU93vA
CSeq: 475658130 ACK
To: <sip:[email protected]>;tag=as6130e22c
Via: SIP/2.0/UDP 192.168.0.180:5060;rport;branch=z9hG4bKMss8fYUaKE9Knd
User-Agent: VoIP-Client MTK/v1.0


17:33:52.124993 IP 79.170.152.3.5065 > 79.170.152.35.5060: SIP, length: 312
Eh.T.]@.?..XO...O..#[email protected]/2.0 200 OK
Via: SIP/2.0/UDP 79.170.152.35:5060;branch=z9hG4bK24cd280f;rport
From: <sip:[email protected]>;tag=as3171587b
To: <sip:[email protected]:5065>;tag=1120215520
Call-ID: [email protected]:5060
CSeq: 103 BYE
User-Agent: Yealink SIP-T20P 9.71.14.5
Content-Length: 0


17:33:52.171872 IP 79.170.152.35.5060 > 79.170.152.3.5065: SIP, length: 541
[email protected]..#O........%..OPTIONS sip:[email protected]:5065 SIP/2.0
Via: SIP/2.0/UDP 79.170.152.35:5060;branch=z9hG4bK4e3ac211;rport
Max-Forwards: 70
From: "asterisk" <sip:[email protected]>;tag=as732a34e8
To: <sip:[email protected]:5065>
Contact: <sip:[email protected]:5060>
Call-ID: [email protected]:5060
CSeq: 102 OPTIONS
User-Agent: zeOn
Date: Tue, 31 Jan 2017 14:33:52 GMT
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH, MESSAGE
Supported: replaces, timer
Content-Length: 0


17:33:52.272823 IP 79.170.152.3.5065 > 79.170.152.35.5060: SIP, length: 4
Eh. .^@.?...O...O..#........

..............
17:33:52.277728 IP 79.170.152.3.5065 > 79.170.152.35.5060: SIP, length: 333
Eh.i._@.?..AO...O..#.....Uv.SIP/2.0 200 OK
Via: SIP/2.0/UDP 79.170.152.35:5060;branch=z9hG4bK4e3ac211;rport
From: "asterisk" <sip:[email protected]>;tag=as732a34e8
To: <sip:[email protected]:5065>;tag=1907843679
Call-ID: [email protected]:5060
CSeq: 102 OPTIONS
User-Agent: Yealink SIP-T20P 9.71.14.5
Content-Length: 0


17:33:52.303019 IP 79.170.152.3.51376 > 79.170.152.35.8080: Flags [.], ack 247, win 16084, length 0
E..([email protected]..#....:R..*[..P.>.x.........
17:33:52.303219 IP 79.170.152.3.53632 > 79.170.152.35.8080: Flags [.], ack 4520, win 252, length 0
E..([email protected]..#.....q....w&P.............
17:33:52.311982 IP 79.170.152.3.61540 > 79.170.152.35.8080: Flags [.], ack 4359, win 16200, length 0
E..([email protected]..#.d...w..W.C.P.?Hv^........
17:33:52.751553 ARP, Request who-has 79.170.152.4 tell 79.170.152.3, length 46
...........&..O.........O.....................
17:33:53.755550 ARP, Request who-has 79.170.152.4 tell 79.170.152.3, length 46
...........&..O.........O.....................
^C