rendered paste bodyNo. Time Source Destination Protocol Info
1 0.000000 209.114.219.98 209.114.219.69 SIP/SDP Request: INVITE sip:1001@209.114.219.69;user=phone, with session description
Frame 1 (854 bytes on wire, 854 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.070308000
Time delta from previous packet: 0.000000000 seconds
Time since reference or first frame: 0.000000000 seconds
Frame Number: 1
Packet Length: 854 bytes
Capture Length: 854 bytes
Ethernet II, Src: 00:48:54:6f:8a:d2, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:48:54:6f:8a:d2 (209.114.219.98)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.98 (209.114.219.98), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 840
Identification: 0x01ba (442)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 249
Protocol: UDP (0x11)
Header checksum: 0x635d (correct)
Source: 209.114.219.98 (209.114.219.98)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 820
Checksum: 0xe071 (correct)
Session Initiation Protocol
Request-Line: INVITE sip:1001@209.114.219.69;user=phone SIP/2.0
Method: INVITE
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 192.168.200.169:5060
From: 3213084003 <sip:3213084003@209.114.219.69;user=phone>;tag=3518047997
SIP Display info: 3213084003
SIP from address: sip:3213084003@209.114.219.69
SIP tag: 3518047997
To: <sip:1001@209.114.219.69;user=phone>
SIP to address: sip:1001@209.114.219.69
Call-ID: 1314847947@192.168.200.169
CSeq: 1 INVITE
Contact: 3213084003 <sip:3213084003@192.168.200.169:5060;user=phone;transport=udp>
User-Agent: Cisco ATA 186 v3.1.0 atasip (040211A)
Expires: 300
Allow: ACK, BYE, CANCEL, INVITE, NOTIFY, OPTIONS, REFER, REGISTER
Content-Length: 280
Content-Type: application/sdp
Message body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): 3213084003 2325 2325 IN IP4 192.168.200.169
Owner Username: 3213084003
Session ID: 2325
Session Version: 2325
Owner Network Type: IN
Owner Address Type: IP4
Owner Address: 192.168.200.169
Session Name (s): ATA186 Call
Connection Information (c): IN IP4 192.168.200.169
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 192.168.200.169
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Media Description, name and address (m): audio 16384 RTP/AVP 18 8 0 101
Media Type: audio
Media Port: 16384
Media Proto: RTP/AVP
Media Format: ITU-T G.729
Media Format: ITU-T G.711 PCMA
Media Format: ITU-T G.711 PCMU
Media Format: 101
Media Attribute (a): rtpmap:18 G729/8000/1
Media Attribute Fieldname: rtpmap
Media Attribute Value: 18 G729/8000/1
Media Attribute (a): fmtp:18 annexb=no
Media Attribute Fieldname: fmtp
Media Attribute Value: 18 annexb=no
Media Attribute (a): rtpmap:8 PCMA/8000/1
Media Attribute Fieldname: rtpmap
Media Attribute Value: 8 PCMA/8000/1
Media Attribute (a): rtpmap:0 PCMU/8000/1
Media Attribute Fieldname: rtpmap
Media Attribute Value: 0 PCMU/8000/1
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 101 telephone-event/8000
Media Attribute (a): fmtp:101 0-15
Media Attribute Fieldname: fmtp
Media Attribute Value: 101 0-15
0000 00 11 43 58 7a 18 00 48 54 6f 8a d2 08 00 45 00 ..CXz..HTo....E.
0010 03 48 01 ba 00 00 f9 11 63 5d d1 72 db 62 d1 72 .H......c].r.b.r
0020 db 45 13 c4 13 c4 03 34 e0 71 49 4e 56 49 54 45 .E.....4.qINVITE
0030 20 73 69 70 3a 31 30 30 31 40 32 30 39 2e 31 31 sip:1001@209.11
0040 34 2e 32 31 39 2e 36 39 3b 75 73 65 72 3d 70 68 4.219.69;user=ph
0050 6f 6e 65 20 53 49 50 2f 32 2e 30 0d 0a 56 69 61 one SIP/2.0..Via
0060 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 31 39 : SIP/2.0/UDP 19
0070 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 3a 35 30 2.168.200.169:50
0080 36 30 0d 0a 46 72 6f 6d 3a 20 33 32 31 33 30 38 60..From: 321308
0090 34 30 30 33 20 3c 73 69 70 3a 33 32 31 33 30 38 4003 <sip:321308
00a0 34 30 30 33 40 32 30 39 2e 31 31 34 2e 32 31 39 4003@209.114.219
00b0 2e 36 39 3b 75 73 65 72 3d 70 68 6f 6e 65 3e 3b .69;user=phone>;
00c0 74 61 67 3d 33 35 31 38 30 34 37 39 39 37 0d 0a tag=3518047997..
00d0 54 6f 3a 20 3c 73 69 70 3a 31 30 30 31 40 32 30 To: <sip:1001@20
00e0 39 2e 31 31 34 2e 32 31 39 2e 36 39 3b 75 73 65 9.114.219.69;use
00f0 72 3d 70 68 6f 6e 65 3e 0d 0a 43 61 6c 6c 2d 49 r=phone>..Call-I
0100 44 3a 20 31 33 31 34 38 34 37 39 34 37 40 31 39 D: 1314847947@19
0110 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 0d 0a 43 2.168.200.169..C
0120 53 65 71 3a 20 31 20 49 4e 56 49 54 45 0d 0a 43 Seq: 1 INVITE..C
0130 6f 6e 74 61 63 74 3a 20 33 32 31 33 30 38 34 30 ontact: 32130840
0140 30 33 20 3c 73 69 70 3a 33 32 31 33 30 38 34 30 03 <sip:32130840
0150 30 33 40 31 39 32 2e 31 36 38 2e 32 30 30 2e 31 03@192.168.200.1
0160 36 39 3a 35 30 36 30 3b 75 73 65 72 3d 70 68 6f 69:5060;user=pho
0170 6e 65 3b 74 72 61 6e 73 70 6f 72 74 3d 75 64 70 ne;transport=udp
0180 3e 0d 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 43 >..User-Agent: C
0190 69 73 63 6f 20 41 54 41 20 31 38 36 20 20 76 33 isco ATA 186 v3
01a0 2e 31 2e 30 20 61 74 61 73 69 70 20 28 30 34 30 .1.0 atasip (040
01b0 32 31 31 41 29 0d 0a 45 78 70 69 72 65 73 3a 20 211A)..Expires:
01c0 33 30 30 0d 0a 41 6c 6c 6f 77 3a 20 41 43 4b 2c 300..Allow: ACK,
01d0 20 42 59 45 2c 20 43 41 4e 43 45 4c 2c 20 49 4e BYE, CANCEL, IN
01e0 56 49 54 45 2c 20 4e 4f 54 49 46 59 2c 20 4f 50 VITE, NOTIFY, OP
01f0 54 49 4f 4e 53 2c 20 52 45 46 45 52 2c 20 52 45 TIONS, REFER, RE
0200 47 49 53 54 45 52 0d 0a 43 6f 6e 74 65 6e 74 2d GISTER..Content-
0210 4c 65 6e 67 74 68 3a 20 32 38 30 0d 0a 43 6f 6e Length: 280..Con
0220 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 tent-Type: appli
0230 63 61 74 69 6f 6e 2f 73 64 70 0d 0a 0d 0a 76 3d cation/sdp....v=
0240 30 0d 0a 6f 3d 33 32 31 33 30 38 34 30 30 33 20 0..o=3213084003
0250 32 33 32 35 20 32 33 32 35 20 49 4e 20 49 50 34 2325 2325 IN IP4
0260 20 31 39 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 192.168.200.169
0270 0d 0a 73 3d 41 54 41 31 38 36 20 43 61 6c 6c 0d ..s=ATA186 Call.
0280 0a 63 3d 49 4e 20 49 50 34 20 31 39 32 2e 31 36 .c=IN IP4 192.16
0290 38 2e 32 30 30 2e 31 36 39 0d 0a 74 3d 30 20 30 8.200.169..t=0 0
02a0 0d 0a 6d 3d 61 75 64 69 6f 20 31 36 33 38 34 20 ..m=audio 16384
02b0 52 54 50 2f 41 56 50 20 31 38 20 38 20 30 20 31 RTP/AVP 18 8 0 1
02c0 30 31 0d 0a 61 3d 72 74 70 6d 61 70 3a 31 38 20 01..a=rtpmap:18
02d0 47 37 32 39 2f 38 30 30 30 2f 31 0d 0a 61 3d 66 G729/8000/1..a=f
02e0 6d 74 70 3a 31 38 20 61 6e 6e 65 78 62 3d 6e 6f mtp:18 annexb=no
02f0 0d 0a 61 3d 72 74 70 6d 61 70 3a 38 20 50 43 4d ..a=rtpmap:8 PCM
0300 41 2f 38 30 30 30 2f 31 0d 0a 61 3d 72 74 70 6d A/8000/1..a=rtpm
0310 61 70 3a 30 20 50 43 4d 55 2f 38 30 30 30 2f 31 ap:0 PCMU/8000/1
0320 0d 0a 61 3d 72 74 70 6d 61 70 3a 31 30 31 20 74 ..a=rtpmap:101 t
0330 65 6c 65 70 68 6f 6e 65 2d 65 76 65 6e 74 2f 38 elephone-event/8
0340 30 30 30 0d 0a 61 3d 66 6d 74 70 3a 31 30 31 20 000..a=fmtp:101
0350 30 2d 31 35 0d 0a 0-15..
No. Time Source Destination Protocol Info
2 0.000334 209.114.219.69 209.114.219.98 SIP Status: 100 Trying
Frame 2 (458 bytes on wire, 458 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.070642000
Time delta from previous packet: 0.000334000 seconds
Time since reference or first frame: 0.000334000 seconds
Frame Number: 2
Packet Length: 458 bytes
Capture Length: 458 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:48:54:6f:8a:d2
Destination: 00:48:54:6f:8a:d2 (209.114.219.98)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.98 (209.114.219.98)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 444
Identification: 0x0aa1 (2721)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xd4ea (correct)
Source: 209.114.219.69 (209.114.219.69)
Destination: 209.114.219.98 (209.114.219.98)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 424
Checksum: 0x5b47 (incorrect, should be 0xe76a)
Session Initiation Protocol
Status-Line: SIP/2.0 100 Trying
Status-Code: 100
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 192.168.200.169:5060;received=209.114.219.98;rport=5060
From: 3213084003 <sip:3213084003@209.114.219.69;user=phone>;tag=3518047997
SIP Display info: 3213084003
SIP from address: sip:3213084003@209.114.219.69
SIP tag: 3518047997
To: <sip:1001@209.114.219.69;user=phone>;tag=as6a4d6dad
SIP to address: sip:1001@209.114.219.69
SIP tag: as6a4d6dad
Call-ID: 1314847947@192.168.200.169
CSeq: 1 INVITE
User-Agent: HCC Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER
Contact: <sip:1001@209.114.219.69>
Content-Length: 0
0000 00 48 54 6f 8a d2 00 11 43 58 7a 18 08 00 45 18 .HTo....CXz...E.
0010 01 bc 0a a1 40 00 40 11 d4 ea d1 72 db 45 d1 72 ....@.@....r.E.r
0020 db 62 13 c4 13 c4 01 a8 5b 47 53 49 50 2f 32 2e .b......[GSIP/2.
0030 30 20 31 30 30 20 54 72 79 69 6e 67 0d 0a 56 69 0 100 Trying..Vi
0040 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 31 a: SIP/2.0/UDP 1
0050 39 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 3a 35 92.168.200.169:5
0060 30 36 30 3b 72 65 63 65 69 76 65 64 3d 32 30 39 060;received=209
0070 2e 31 31 34 2e 32 31 39 2e 39 38 3b 72 70 6f 72 .114.219.98;rpor
0080 74 3d 35 30 36 30 0d 0a 46 72 6f 6d 3a 20 33 32 t=5060..From: 32
0090 31 33 30 38 34 30 30 33 20 3c 73 69 70 3a 33 32 13084003 <sip:32
00a0 31 33 30 38 34 30 30 33 40 32 30 39 2e 31 31 34 13084003@209.114
00b0 2e 32 31 39 2e 36 39 3b 75 73 65 72 3d 70 68 6f .219.69;user=pho
00c0 6e 65 3e 3b 74 61 67 3d 33 35 31 38 30 34 37 39 ne>;tag=35180479
00d0 39 37 0d 0a 54 6f 3a 20 3c 73 69 70 3a 31 30 30 97..To: <sip:100
00e0 31 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 1@209.114.219.69
00f0 3b 75 73 65 72 3d 70 68 6f 6e 65 3e 3b 74 61 67 ;user=phone>;tag
0100 3d 61 73 36 61 34 64 36 64 61 64 0d 0a 43 61 6c =as6a4d6dad..Cal
0110 6c 2d 49 44 3a 20 31 33 31 34 38 34 37 39 34 37 l-ID: 1314847947
0120 40 31 39 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 @192.168.200.169
0130 0d 0a 43 53 65 71 3a 20 31 20 49 4e 56 49 54 45 ..CSeq: 1 INVITE
0140 0d 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 48 43 ..User-Agent: HC
0150 43 20 41 73 74 65 72 69 73 6b 20 50 42 58 0d 0a C Asterisk PBX..
0160 41 6c 6c 6f 77 3a 20 49 4e 56 49 54 45 2c 20 41 Allow: INVITE, A
0170 43 4b 2c 20 43 41 4e 43 45 4c 2c 20 4f 50 54 49 CK, CANCEL, OPTI
0180 4f 4e 53 2c 20 42 59 45 2c 20 52 45 46 45 52 0d ONS, BYE, REFER.
0190 0a 43 6f 6e 74 61 63 74 3a 20 3c 73 69 70 3a 31 .Contact: <sip:1
01a0 30 30 31 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 001@209.114.219.
01b0 36 39 3e 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 69>..Content-Len
01c0 67 74 68 3a 20 30 0d 0a 0d 0a gth: 0....
No. Time Source Destination Protocol Info
3 0.069784 209.114.219.69 209.114.219.90 SIP/SDP Request: INVITE sip:003214093773@209.114.219.90, with session description
Frame 3 (836 bytes on wire, 836 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.140092000
Time delta from previous packet: 0.069450000 seconds
Time since reference or first frame: 0.069784000 seconds
Frame Number: 3
Packet Length: 836 bytes
Capture Length: 836 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00
Destination: 00:b0:8e:35:44:00 (209.114.219.90)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 822
Identification: 0x0aa2 (2722)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xd377 (correct)
Source: 209.114.219.69 (209.114.219.69)
Destination: 209.114.219.90 (209.114.219.90)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 802
Checksum: 0x5cb9 (incorrect, should be 0x6ac3)
Session Initiation Protocol
Request-Line: INVITE sip:003214093773@209.114.219.90 SIP/2.0
Method: INVITE
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK63f185c9
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>
SIP to address: sip:003214093773@209.114.219.90
Contact: <sip:3213084003@209.114.219.69>
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
CSeq: 102 INVITE
User-Agent: HCC Asterisk PBX
Date: Wed, 05 Jan 2005 21:54:12 GMT
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER
Content-Type: application/sdp
Content-Length: 291
Message body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): root 3032 3032 IN IP4 209.114.219.69
Owner Username: root
Session ID: 3032
Session Version: 3032
Owner Network Type: IN
Owner Address Type: IP4
Owner Address: 209.114.219.69
Session Name (s): session
Connection Information (c): IN IP4 209.114.219.69
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 209.114.219.69
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Media Description, name and address (m): audio 10770 RTP/AVP 0 8 3 18 101
Media Type: audio
Media Port: 10770
Media Proto: RTP/AVP
Media Format: ITU-T G.711 PCMU
Media Format: ITU-T G.711 PCMA
Media Format: GSM 06.10
Media Format: ITU-T G.729
Media Format: 101
Media Attribute (a): rtpmap:0 PCMU/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 0 PCMU/8000
Media Attribute (a): rtpmap:8 PCMA/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 8 PCMA/8000
Media Attribute (a): rtpmap:3 GSM/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 3 GSM/8000
Media Attribute (a): rtpmap:18 G729/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 18 G729/8000
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 101 telephone-event/8000
Media Attribute (a): fmtp:101 0-16
Media Attribute Fieldname: fmtp
Media Attribute Value: 101 0-16
Media Attribute (a): silenceSupp:off - - - -
Media Attribute Fieldname: silenceSupp
Media Attribute Value: off - - - -
0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E.
0010 03 36 0a a2 40 00 40 11 d3 77 d1 72 db 45 d1 72 .6..@.@..w.r.E.r
0020 db 5a 13 c4 13 c4 03 22 5c b9 49 4e 56 49 54 45 .Z....."\.INVITE
0030 20 73 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 sip:00321409377
0040 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3@209.114.219.90
0050 20 53 49 50 2f 32 2e 30 0d 0a 56 69 61 3a 20 53 SIP/2.0..Via: S
0060 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 2e 31 IP/2.0/UDP 209.1
0070 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 3b 62 14.219.69:5060;b
0080 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 36 33 66 ranch=z9hG4bK63f
0090 31 38 35 63 39 0d 0a 46 72 6f 6d 3a 20 22 33 32 185c9..From: "32
00a0 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3a 33 13084003" <sip:3
00b0 32 31 33 30 38 34 30 30 33 40 32 30 39 2e 31 31 213084003@209.11
00c0 34 2e 32 31 39 2e 36 39 3e 3b 74 61 67 3d 61 73 4.219.69>;tag=as
00d0 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 3c 73 721c22c4..To: <s
00e0 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 33 40 ip:003214093773@
00f0 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3e 0d 209.114.219.90>.
0100 0a 43 6f 6e 74 61 63 74 3a 20 3c 73 69 70 3a 33 .Contact: <sip:3
0110 32 31 33 30 38 34 30 30 33 40 32 30 39 2e 31 31 213084003@209.11
0120 34 2e 32 31 39 2e 36 39 3e 0d 0a 43 61 6c 6c 2d 4.219.69>..Call-
0130 49 44 3a 20 35 33 37 62 32 66 38 38 32 36 38 61 ID: 537b2f88268a
0140 33 62 66 34 31 63 39 32 61 65 65 39 34 38 38 65 3bf41c92aee9488e
0150 38 35 35 33 40 32 30 39 2e 31 31 34 2e 32 31 39 8553@209.114.219
0160 2e 36 39 0d 0a 43 53 65 71 3a 20 31 30 32 20 49 .69..CSeq: 102 I
0170 4e 56 49 54 45 0d 0a 55 73 65 72 2d 41 67 65 6e NVITE..User-Agen
0180 74 3a 20 48 43 43 20 41 73 74 65 72 69 73 6b 20 t: HCC Asterisk
0190 50 42 58 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 PBX..Date: Wed,
01a0 30 35 20 4a 61 6e 20 32 30 30 35 20 32 31 3a 35 05 Jan 2005 21:5
01b0 34 3a 31 32 20 47 4d 54 0d 0a 41 6c 6c 6f 77 3a 4:12 GMT..Allow:
01c0 20 49 4e 56 49 54 45 2c 20 41 43 4b 2c 20 43 41 INVITE, ACK, CA
01d0 4e 43 45 4c 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 NCEL, OPTIONS, B
01e0 59 45 2c 20 52 45 46 45 52 0d 0a 43 6f 6e 74 65 YE, REFER..Conte
01f0 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 nt-Type: applica
0200 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f 6e 74 65 6e tion/sdp..Conten
0210 74 2d 4c 65 6e 67 74 68 3a 20 32 39 31 0d 0a 0d t-Length: 291...
0220 0a 76 3d 30 0d 0a 6f 3d 72 6f 6f 74 20 33 30 33 .v=0..o=root 303
0230 32 20 33 30 33 32 20 49 4e 20 49 50 34 20 32 30 2 3032 IN IP4 20
0240 39 2e 31 31 34 2e 32 31 39 2e 36 39 0d 0a 73 3d 9.114.219.69..s=
0250 73 65 73 73 69 6f 6e 0d 0a 63 3d 49 4e 20 49 50 session..c=IN IP
0260 34 20 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 4 209.114.219.69
0270 0d 0a 74 3d 30 20 30 0d 0a 6d 3d 61 75 64 69 6f ..t=0 0..m=audio
0280 20 31 30 37 37 30 20 52 54 50 2f 41 56 50 20 30 10770 RTP/AVP 0
0290 20 38 20 33 20 31 38 20 31 30 31 0d 0a 61 3d 72 8 3 18 101..a=r
02a0 74 70 6d 61 70 3a 30 20 50 43 4d 55 2f 38 30 30 tpmap:0 PCMU/800
02b0 30 0d 0a 61 3d 72 74 70 6d 61 70 3a 38 20 50 43 0..a=rtpmap:8 PC
02c0 4d 41 2f 38 30 30 30 0d 0a 61 3d 72 74 70 6d 61 MA/8000..a=rtpma
02d0 70 3a 33 20 47 53 4d 2f 38 30 30 30 0d 0a 61 3d p:3 GSM/8000..a=
02e0 72 74 70 6d 61 70 3a 31 38 20 47 37 32 39 2f 38 rtpmap:18 G729/8
02f0 30 30 30 0d 0a 61 3d 72 74 70 6d 61 70 3a 31 30 000..a=rtpmap:10
0300 31 20 74 65 6c 65 70 68 6f 6e 65 2d 65 76 65 6e 1 telephone-even
0310 74 2f 38 30 30 30 0d 0a 61 3d 66 6d 74 70 3a 31 t/8000..a=fmtp:1
0320 30 31 20 30 2d 31 36 0d 0a 61 3d 73 69 6c 65 6e 01 0-16..a=silen
0330 63 65 53 75 70 70 3a 6f 66 66 20 2d 20 2d 20 2d ceSupp:off - - -
0340 20 2d 0d 0a -..
No. Time Source Destination Protocol Info
4 0.079014 209.114.219.90 209.114.219.69 SIP Status: 100 Trying
Frame 4 (445 bytes on wire, 445 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.149322000
Time delta from previous packet: 0.009230000 seconds
Time since reference or first frame: 0.079014000 seconds
Frame Number: 4
Packet Length: 445 bytes
Capture Length: 445 bytes
Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:b0:8e:35:44:00 (209.114.219.90)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00)
0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 431
Identification: 0x351a (13594)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 255
Protocol: UDP (0x11)
Header checksum: 0x2b36 (correct)
Source: 209.114.219.90 (209.114.219.90)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060)
Source port: 56262 (56262)
Destination port: 5060 (5060)
Length: 411
Checksum: 0x4416 (correct)
Session Initiation Protocol
Status-Line: SIP/2.0 100 Trying
Status-Code: 100
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK63f185c9
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Date: Wed, 05 Jan 2005 23:34:43 GMT
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
Server: Cisco-SIPGateway/IOS-12.x
CSeq: 102 INVITE
Allow-Events: telephone-event
Content-Length: 0
0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh
0010 01 af 35 1a 00 00 ff 11 2b 36 d1 72 db 5a d1 72 ..5.....+6.r.Z.r
0020 db 45 db c6 13 c4 01 9b 44 16 53 49 50 2f 32 2e .E......D.SIP/2.
0030 30 20 31 30 30 20 54 72 79 69 6e 67 0d 0a 56 69 0 100 Trying..Vi
0040 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 a: SIP/2.0/UDP 2
0050 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 09.114.219.69:50
0060 36 30 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 60;branch=z9hG4b
0070 4b 36 33 66 31 38 35 63 39 0d 0a 46 72 6f 6d 3a K63f185c9..From:
0080 20 22 33 32 31 33 30 38 34 30 30 33 22 20 3c 73 "3213084003" <s
0090 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 30 ip:3213084003@20
00a0 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 3b 74 61 9.114.219.69>;ta
00b0 67 3d 61 73 37 32 31 63 32 32 63 34 0d 0a 54 6f g=as721c22c4..To
00c0 3a 20 3c 73 69 70 3a 30 30 33 32 31 34 30 39 33 : <sip:003214093
00d0 37 37 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 773@209.114.219.
00e0 39 30 3e 3b 74 61 67 3d 34 44 30 39 39 32 38 30 90>;tag=4D099280
00f0 2d 37 41 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 -7A..Date: Wed,
0100 30 35 20 4a 61 6e 20 32 30 30 35 20 32 33 3a 33 05 Jan 2005 23:3
0110 34 3a 34 33 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 4:43 GMT..Call-I
0120 44 3a 20 35 33 37 62 32 66 38 38 32 36 38 61 33 D: 537b2f88268a3
0130 62 66 34 31 63 39 32 61 65 65 39 34 38 38 65 38 bf41c92aee9488e8
0140 35 35 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 553@209.114.219.
0150 36 39 0d 0a 53 65 72 76 65 72 3a 20 43 69 73 63 69..Server: Cisc
0160 6f 2d 53 49 50 47 61 74 65 77 61 79 2f 49 4f 53 o-SIPGateway/IOS
0170 2d 31 32 2e 78 0d 0a 43 53 65 71 3a 20 31 30 32 -12.x..CSeq: 102
0180 20 49 4e 56 49 54 45 0d 0a 41 6c 6c 6f 77 2d 45 INVITE..Allow-E
0190 76 65 6e 74 73 3a 20 74 65 6c 65 70 68 6f 6e 65 vents: telephone
01a0 2d 65 76 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d -event..Content-
01b0 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Length: 0....
No. Time Source Destination Protocol Info
5 0.337549 209.114.219.90 209.114.219.69 SIP/SDP Status: 183 Session Progress, with session description
Frame 5 (954 bytes on wire, 954 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.407857000
Time delta from previous packet: 0.258535000 seconds
Time since reference or first frame: 0.337549000 seconds
Frame Number: 5
Packet Length: 954 bytes
Capture Length: 954 bytes
Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:b0:8e:35:44:00 (209.114.219.90)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00)
0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 940
Identification: 0x351b (13595)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 255
Protocol: UDP (0x11)
Header checksum: 0x2938 (correct)
Source: 209.114.219.90 (209.114.219.90)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060)
Source port: 56262 (56262)
Destination port: 5060 (5060)
Length: 920
Checksum: 0xe79c (correct)
Session Initiation Protocol
Status-Line: SIP/2.0 183 Session Progress
Status-Code: 183
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK63f185c9
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Date: Wed, 05 Jan 2005 23:34:43 GMT
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
Server: Cisco-SIPGateway/IOS-12.x
CSeq: 102 INVITE
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER
Allow-Events: telephone-event
Contact: <sip:003214093773@209.114.219.90:5060>
Content-Disposition: session;handling=required
Content-Type: application/sdp
Content-Length: 263
Message body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): CiscoSystemsSIP-GW-UserAgent 614 7259 IN IP4 209.114.219.90
Owner Username: CiscoSystemsSIP-GW-UserAgent
Session ID: 614
Session Version: 7259
Owner Network Type: IN
Owner Address Type: IP4
Owner Address: 209.114.219.90
Session Name (s): SIP Call
Connection Information (c): IN IP4 209.114.219.90
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 209.114.219.90
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Media Description, name and address (m): audio 17302 RTP/AVP 18 101
Media Type: audio
Media Port: 17302
Media Proto: RTP/AVP
Media Format: ITU-T G.729
Media Format: 101
Connection Information (c): IN IP4 209.114.219.90
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 209.114.219.90
Media Attribute (a): rtpmap:18 G729/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 18 G729/8000
Media Attribute (a): fmtp:18 annexb=no
Media Attribute Fieldname: fmtp
Media Attribute Value: 18 annexb=no
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 101 telephone-event/8000
Media Attribute (a): fmtp:101 0-16
Media Attribute Fieldname: fmtp
Media Attribute Value: 101 0-16
0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh
0010 03 ac 35 1b 00 00 ff 11 29 38 d1 72 db 5a d1 72 ..5.....)8.r.Z.r
0020 db 45 db c6 13 c4 03 98 e7 9c 53 49 50 2f 32 2e .E........SIP/2.
0030 30 20 31 38 33 20 53 65 73 73 69 6f 6e 20 50 72 0 183 Session Pr
0040 6f 67 72 65 73 73 0d 0a 56 69 61 3a 20 53 49 50 ogress..Via: SIP
0050 2f 32 2e 30 2f 55 44 50 20 32 30 39 2e 31 31 34 /2.0/UDP 209.114
0060 2e 32 31 39 2e 36 39 3a 35 30 36 30 3b 62 72 61 .219.69:5060;bra
0070 6e 63 68 3d 7a 39 68 47 34 62 4b 36 33 66 31 38 nch=z9hG4bK63f18
0080 35 63 39 0d 0a 46 72 6f 6d 3a 20 22 33 32 31 33 5c9..From: "3213
0090 30 38 34 30 30 33 22 20 3c 73 69 70 3a 33 32 31 084003" <sip:321
00a0 33 30 38 34 30 30 33 40 32 30 39 2e 31 31 34 2e 3084003@209.114.
00b0 32 31 39 2e 36 39 3e 3b 74 61 67 3d 61 73 37 32 219.69>;tag=as72
00c0 31 63 32 32 63 34 0d 0a 54 6f 3a 20 3c 73 69 70 1c22c4..To: <sip
00d0 3a 30 30 33 32 31 34 30 39 33 37 37 33 40 32 30 :003214093773@20
00e0 39 2e 31 31 34 2e 32 31 39 2e 39 30 3e 3b 74 61 9.114.219.90>;ta
00f0 67 3d 34 44 30 39 39 32 38 30 2d 37 41 0d 0a 44 g=4D099280-7A..D
0100 61 74 65 3a 20 57 65 64 2c 20 30 35 20 4a 61 6e ate: Wed, 05 Jan
0110 20 32 30 30 35 20 32 33 3a 33 34 3a 34 33 20 47 2005 23:34:43 G
0120 4d 54 0d 0a 43 61 6c 6c 2d 49 44 3a 20 35 33 37 MT..Call-ID: 537
0130 62 32 66 38 38 32 36 38 61 33 62 66 34 31 63 39 b2f88268a3bf41c9
0140 32 61 65 65 39 34 38 38 65 38 35 35 33 40 32 30 2aee9488e8553@20
0150 39 2e 31 31 34 2e 32 31 39 2e 36 39 0d 0a 53 65 9.114.219.69..Se
0160 72 76 65 72 3a 20 43 69 73 63 6f 2d 53 49 50 47 rver: Cisco-SIPG
0170 61 74 65 77 61 79 2f 49 4f 53 2d 31 32 2e 78 0d ateway/IOS-12.x.
0180 0a 43 53 65 71 3a 20 31 30 32 20 49 4e 56 49 54 .CSeq: 102 INVIT
0190 45 0d 0a 41 6c 6c 6f 77 3a 20 49 4e 56 49 54 45 E..Allow: INVITE
01a0 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 59 45 2c 20 , OPTIONS, BYE,
01b0 43 41 4e 43 45 4c 2c 20 41 43 4b 2c 20 50 52 41 CANCEL, ACK, PRA
01c0 43 4b 2c 20 43 4f 4d 45 54 2c 20 52 45 46 45 52 CK, COMET, REFER
01d0 2c 20 53 55 42 53 43 52 49 42 45 2c 20 4e 4f 54 , SUBSCRIBE, NOT
01e0 49 46 59 2c 20 49 4e 46 4f 2c 20 55 50 44 41 54 IFY, INFO, UPDAT
01f0 45 2c 20 52 45 47 49 53 54 45 52 0d 0a 41 6c 6c E, REGISTER..All
0200 6f 77 2d 45 76 65 6e 74 73 3a 20 74 65 6c 65 70 ow-Events: telep
0210 68 6f 6e 65 2d 65 76 65 6e 74 0d 0a 43 6f 6e 74 hone-event..Cont
0220 61 63 74 3a 20 3c 73 69 70 3a 30 30 33 32 31 34 act: <sip:003214
0230 30 39 33 37 37 33 40 32 30 39 2e 31 31 34 2e 32 093773@209.114.2
0240 31 39 2e 39 30 3a 35 30 36 30 3e 0d 0a 43 6f 6e 19.90:5060>..Con
0250 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e tent-Disposition
0260 3a 20 73 65 73 73 69 6f 6e 3b 68 61 6e 64 6c 69 : session;handli
0270 6e 67 3d 72 65 71 75 69 72 65 64 0d 0a 43 6f 6e ng=required..Con
0280 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 tent-Type: appli
0290 63 61 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f 6e 74 cation/sdp..Cont
02a0 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 36 33 0d ent-Length: 263.
02b0 0a 0d 0a 76 3d 30 0d 0a 6f 3d 43 69 73 63 6f 53 ...v=0..o=CiscoS
02c0 79 73 74 65 6d 73 53 49 50 2d 47 57 2d 55 73 65 ystemsSIP-GW-Use
02d0 72 41 67 65 6e 74 20 36 31 34 20 37 32 35 39 20 rAgent 614 7259
02e0 49 4e 20 49 50 34 20 32 30 39 2e 31 31 34 2e 32 IN IP4 209.114.2
02f0 31 39 2e 39 30 0d 0a 73 3d 53 49 50 20 43 61 6c 19.90..s=SIP Cal
0300 6c 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 39 2e l..c=IN IP4 209.
0310 31 31 34 2e 32 31 39 2e 39 30 0d 0a 74 3d 30 20 114.219.90..t=0
0320 30 0d 0a 6d 3d 61 75 64 69 6f 20 31 37 33 30 32 0..m=audio 17302
0330 20 52 54 50 2f 41 56 50 20 31 38 20 31 30 31 0d RTP/AVP 18 101.
0340 0a 63 3d 49 4e 20 49 50 34 20 32 30 39 2e 31 31 .c=IN IP4 209.11
0350 34 2e 32 31 39 2e 39 30 0d 0a 61 3d 72 74 70 6d 4.219.90..a=rtpm
0360 61 70 3a 31 38 20 47 37 32 39 2f 38 30 30 30 0d ap:18 G729/8000.
0370 0a 61 3d 66 6d 74 70 3a 31 38 20 61 6e 6e 65 78 .a=fmtp:18 annex
0380 62 3d 6e 6f 0d 0a 61 3d 72 74 70 6d 61 70 3a 31 b=no..a=rtpmap:1
0390 30 31 20 74 65 6c 65 70 68 6f 6e 65 2d 65 76 65 01 telephone-eve
03a0 6e 74 2f 38 30 30 30 0d 0a 61 3d 66 6d 74 70 3a nt/8000..a=fmtp:
03b0 31 30 31 20 30 2d 31 36 0d 0a 101 0-16..
No. Time Source Destination Protocol Info
6 0.337934 209.114.219.69 209.114.219.98 SIP/SDP Status: 183 Session Progress, with session description
Frame 6 (792 bytes on wire, 792 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.408242000
Time delta from previous packet: 0.000385000 seconds
Time since reference or first frame: 0.337934000 seconds
Frame Number: 6
Packet Length: 792 bytes
Capture Length: 792 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:48:54:6f:8a:d2
Destination: 00:48:54:6f:8a:d2 (209.114.219.98)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.98 (209.114.219.98)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 778
Identification: 0x0aa3 (2723)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xd39a (correct)
Source: 209.114.219.69 (209.114.219.69)
Destination: 209.114.219.98 (209.114.219.98)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 758
Checksum: 0x5c95 (incorrect, should be 0x7936)
Session Initiation Protocol
Status-Line: SIP/2.0 183 Session Progress
Status-Code: 183
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 192.168.200.169:5060;received=209.114.219.98;rport=5060
From: 3213084003 <sip:3213084003@209.114.219.69;user=phone>;tag=3518047997
SIP Display info: 3213084003
SIP from address: sip:3213084003@209.114.219.69
SIP tag: 3518047997
To: <sip:1001@209.114.219.69;user=phone>;tag=as6a4d6dad
SIP to address: sip:1001@209.114.219.69
SIP tag: as6a4d6dad
Call-ID: 1314847947@192.168.200.169
CSeq: 1 INVITE
User-Agent: HCC Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER
Contact: <sip:1001@209.114.219.69>
Content-Type: application/sdp
Content-Length: 291
Message body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): root 3032 3032 IN IP4 209.114.219.69
Owner Username: root
Session ID: 3032
Session Version: 3032
Owner Network Type: IN
Owner Address Type: IP4
Owner Address: 209.114.219.69
Session Name (s): session
Connection Information (c): IN IP4 209.114.219.69
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 209.114.219.69
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Media Description, name and address (m): audio 10204 RTP/AVP 0 8 3 18 101
Media Type: audio
Media Port: 10204
Media Proto: RTP/AVP
Media Format: ITU-T G.711 PCMU
Media Format: ITU-T G.711 PCMA
Media Format: GSM 06.10
Media Format: ITU-T G.729
Media Format: 101
Media Attribute (a): rtpmap:0 PCMU/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 0 PCMU/8000
Media Attribute (a): rtpmap:8 PCMA/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 8 PCMA/8000
Media Attribute (a): rtpmap:3 GSM/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 3 GSM/8000
Media Attribute (a): rtpmap:18 G729/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 18 G729/8000
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 101 telephone-event/8000
Media Attribute (a): fmtp:101 0-16
Media Attribute Fieldname: fmtp
Media Attribute Value: 101 0-16
Media Attribute (a): silenceSupp:off - - - -
Media Attribute Fieldname: silenceSupp
Media Attribute Value: off - - - -
0000 00 48 54 6f 8a d2 00 11 43 58 7a 18 08 00 45 18 .HTo....CXz...E.
0010 03 0a 0a a3 40 00 40 11 d3 9a d1 72 db 45 d1 72 ....@.@....r.E.r
0020 db 62 13 c4 13 c4 02 f6 5c 95 53 49 50 2f 32 2e .b......\.SIP/2.
0030 30 20 31 38 33 20 53 65 73 73 69 6f 6e 20 50 72 0 183 Session Pr
0040 6f 67 72 65 73 73 0d 0a 56 69 61 3a 20 53 49 50 ogress..Via: SIP
0050 2f 32 2e 30 2f 55 44 50 20 31 39 32 2e 31 36 38 /2.0/UDP 192.168
0060 2e 32 30 30 2e 31 36 39 3a 35 30 36 30 3b 72 65 .200.169:5060;re
0070 63 65 69 76 65 64 3d 32 30 39 2e 31 31 34 2e 32 ceived=209.114.2
0080 31 39 2e 39 38 3b 72 70 6f 72 74 3d 35 30 36 30 19.98;rport=5060
0090 0d 0a 46 72 6f 6d 3a 20 33 32 31 33 30 38 34 30 ..From: 32130840
00a0 30 33 20 3c 73 69 70 3a 33 32 31 33 30 38 34 30 03 <sip:32130840
00b0 30 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 03@209.114.219.6
00c0 39 3b 75 73 65 72 3d 70 68 6f 6e 65 3e 3b 74 61 9;user=phone>;ta
00d0 67 3d 33 35 31 38 30 34 37 39 39 37 0d 0a 54 6f g=3518047997..To
00e0 3a 20 3c 73 69 70 3a 31 30 30 31 40 32 30 39 2e : <sip:1001@209.
00f0 31 31 34 2e 32 31 39 2e 36 39 3b 75 73 65 72 3d 114.219.69;user=
0100 70 68 6f 6e 65 3e 3b 74 61 67 3d 61 73 36 61 34 phone>;tag=as6a4
0110 64 36 64 61 64 0d 0a 43 61 6c 6c 2d 49 44 3a 20 d6dad..Call-ID:
0120 31 33 31 34 38 34 37 39 34 37 40 31 39 32 2e 31 1314847947@192.1
0130 36 38 2e 32 30 30 2e 31 36 39 0d 0a 43 53 65 71 68.200.169..CSeq
0140 3a 20 31 20 49 4e 56 49 54 45 0d 0a 55 73 65 72 : 1 INVITE..User
0150 2d 41 67 65 6e 74 3a 20 48 43 43 20 41 73 74 65 -Agent: HCC Aste
0160 72 69 73 6b 20 50 42 58 0d 0a 41 6c 6c 6f 77 3a risk PBX..Allow:
0170 20 49 4e 56 49 54 45 2c 20 41 43 4b 2c 20 43 41 INVITE, ACK, CA
0180 4e 43 45 4c 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 NCEL, OPTIONS, B
0190 59 45 2c 20 52 45 46 45 52 0d 0a 43 6f 6e 74 61 YE, REFER..Conta
01a0 63 74 3a 20 3c 73 69 70 3a 31 30 30 31 40 32 30 ct: <sip:1001@20
01b0 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 0d 0a 43 9.114.219.69>..C
01c0 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 ontent-Type: app
01d0 6c 69 63 61 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f lication/sdp..Co
01e0 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 39 ntent-Length: 29
01f0 31 0d 0a 0d 0a 76 3d 30 0d 0a 6f 3d 72 6f 6f 74 1....v=0..o=root
0200 20 33 30 33 32 20 33 30 33 32 20 49 4e 20 49 50 3032 3032 IN IP
0210 34 20 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 4 209.114.219.69
0220 0d 0a 73 3d 73 65 73 73 69 6f 6e 0d 0a 63 3d 49 ..s=session..c=I
0230 4e 20 49 50 34 20 32 30 39 2e 31 31 34 2e 32 31 N IP4 209.114.21
0240 39 2e 36 39 0d 0a 74 3d 30 20 30 0d 0a 6d 3d 61 9.69..t=0 0..m=a
0250 75 64 69 6f 20 31 30 32 30 34 20 52 54 50 2f 41 udio 10204 RTP/A
0260 56 50 20 30 20 38 20 33 20 31 38 20 31 30 31 0d VP 0 8 3 18 101.
0270 0a 61 3d 72 74 70 6d 61 70 3a 30 20 50 43 4d 55 .a=rtpmap:0 PCMU
0280 2f 38 30 30 30 0d 0a 61 3d 72 74 70 6d 61 70 3a /8000..a=rtpmap:
0290 38 20 50 43 4d 41 2f 38 30 30 30 0d 0a 61 3d 72 8 PCMA/8000..a=r
02a0 74 70 6d 61 70 3a 33 20 47 53 4d 2f 38 30 30 30 tpmap:3 GSM/8000
02b0 0d 0a 61 3d 72 74 70 6d 61 70 3a 31 38 20 47 37 ..a=rtpmap:18 G7
02c0 32 39 2f 38 30 30 30 0d 0a 61 3d 72 74 70 6d 61 29/8000..a=rtpma
02d0 70 3a 31 30 31 20 74 65 6c 65 70 68 6f 6e 65 2d p:101 telephone-
02e0 65 76 65 6e 74 2f 38 30 30 30 0d 0a 61 3d 66 6d event/8000..a=fm
02f0 74 70 3a 31 30 31 20 30 2d 31 36 0d 0a 61 3d 73 tp:101 0-16..a=s
0300 69 6c 65 6e 63 65 53 75 70 70 3a 6f 66 66 20 2d ilenceSupp:off -
0310 20 2d 20 2d 20 2d 0d 0a - - -..
No. Time Source Destination Protocol Info
7 0.390425 209.114.219.90 209.114.219.69 SIP/SDP Status: 200 OK, with session description
Frame 7 (892 bytes on wire, 892 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.460733000
Time delta from previous packet: 0.052491000 seconds
Time since reference or first frame: 0.390425000 seconds
Frame Number: 7
Packet Length: 892 bytes
Capture Length: 892 bytes
Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:b0:8e:35:44:00 (209.114.219.90)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00)
0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 878
Identification: 0x351c (13596)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 255
Protocol: UDP (0x11)
Header checksum: 0x2975 (correct)
Source: 209.114.219.90 (209.114.219.90)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060)
Source port: 56262 (56262)
Destination port: 5060 (5060)
Length: 858
Checksum: 0x32df (correct)
Session Initiation Protocol
Status-Line: SIP/2.0 200 OK
Status-Code: 200
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK63f185c9
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Date: Wed, 05 Jan 2005 23:34:43 GMT
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
Server: Cisco-SIPGateway/IOS-12.x
CSeq: 102 INVITE
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER
Allow-Events: telephone-event
Contact: <sip:003214093773@209.114.219.90:5060>
Content-Type: application/sdp
Content-Length: 263
Message body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): CiscoSystemsSIP-GW-UserAgent 614 7259 IN IP4 209.114.219.90
Owner Username: CiscoSystemsSIP-GW-UserAgent
Session ID: 614
Session Version: 7259
Owner Network Type: IN
Owner Address Type: IP4
Owner Address: 209.114.219.90
Session Name (s): SIP Call
Connection Information (c): IN IP4 209.114.219.90
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 209.114.219.90
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Media Description, name and address (m): audio 17302 RTP/AVP 18 101
Media Type: audio
Media Port: 17302
Media Proto: RTP/AVP
Media Format: ITU-T G.729
Media Format: 101
Connection Information (c): IN IP4 209.114.219.90
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 209.114.219.90
Media Attribute (a): rtpmap:18 G729/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 18 G729/8000
Media Attribute (a): fmtp:18 annexb=no
Media Attribute Fieldname: fmtp
Media Attribute Value: 18 annexb=no
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 101 telephone-event/8000
Media Attribute (a): fmtp:101 0-16
Media Attribute Fieldname: fmtp
Media Attribute Value: 101 0-16
0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh
0010 03 6e 35 1c 00 00 ff 11 29 75 d1 72 db 5a d1 72 .n5.....)u.r.Z.r
0020 db 45 db c6 13 c4 03 5a 32 df 53 49 50 2f 32 2e .E.....Z2.SIP/2.
0030 30 20 32 30 30 20 4f 4b 0d 0a 56 69 61 3a 20 53 0 200 OK..Via: S
0040 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 2e 31 IP/2.0/UDP 209.1
0050 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 3b 62 14.219.69:5060;b
0060 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 36 33 66 ranch=z9hG4bK63f
0070 31 38 35 63 39 0d 0a 46 72 6f 6d 3a 20 22 33 32 185c9..From: "32
0080 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3a 33 13084003" <sip:3
0090 32 31 33 30 38 34 30 30 33 40 32 30 39 2e 31 31 213084003@209.11
00a0 34 2e 32 31 39 2e 36 39 3e 3b 74 61 67 3d 61 73 4.219.69>;tag=as
00b0 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 3c 73 721c22c4..To: <s
00c0 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 33 40 ip:003214093773@
00d0 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3e 3b 209.114.219.90>;
00e0 74 61 67 3d 34 44 30 39 39 32 38 30 2d 37 41 0d tag=4D099280-7A.
00f0 0a 44 61 74 65 3a 20 57 65 64 2c 20 30 35 20 4a .Date: Wed, 05 J
0100 61 6e 20 32 30 30 35 20 32 33 3a 33 34 3a 34 33 an 2005 23:34:43
0110 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 44 3a 20 35 GMT..Call-ID: 5
0120 33 37 62 32 66 38 38 32 36 38 61 33 62 66 34 31 37b2f88268a3bf41
0130 63 39 32 61 65 65 39 34 38 38 65 38 35 35 33 40 c92aee9488e8553@
0140 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 0d 0a 209.114.219.69..
0150 53 65 72 76 65 72 3a 20 43 69 73 63 6f 2d 53 49 Server: Cisco-SI
0160 50 47 61 74 65 77 61 79 2f 49 4f 53 2d 31 32 2e PGateway/IOS-12.
0170 78 0d 0a 43 53 65 71 3a 20 31 30 32 20 49 4e 56 x..CSeq: 102 INV
0180 49 54 45 0d 0a 41 6c 6c 6f 77 3a 20 49 4e 56 49 ITE..Allow: INVI
0190 54 45 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 59 45 TE, OPTIONS, BYE
01a0 2c 20 43 41 4e 43 45 4c 2c 20 41 43 4b 2c 20 50 , CANCEL, ACK, P
01b0 52 41 43 4b 2c 20 43 4f 4d 45 54 2c 20 52 45 46 RACK, COMET, REF
01c0 45 52 2c 20 53 55 42 53 43 52 49 42 45 2c 20 4e ER, SUBSCRIBE, N
01d0 4f 54 49 46 59 2c 20 49 4e 46 4f 2c 20 55 50 44 OTIFY, INFO, UPD
01e0 41 54 45 2c 20 52 45 47 49 53 54 45 52 0d 0a 41 ATE, REGISTER..A
01f0 6c 6c 6f 77 2d 45 76 65 6e 74 73 3a 20 74 65 6c llow-Events: tel
0200 65 70 68 6f 6e 65 2d 65 76 65 6e 74 0d 0a 43 6f ephone-event..Co
0210 6e 74 61 63 74 3a 20 3c 73 69 70 3a 30 30 33 32 ntact: <sip:0032
0220 31 34 30 39 33 37 37 33 40 32 30 39 2e 31 31 34 14093773@209.114
0230 2e 32 31 39 2e 39 30 3a 35 30 36 30 3e 0d 0a 43 .219.90:5060>..C
0240 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 ontent-Type: app
0250 6c 69 63 61 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f lication/sdp..Co
0260 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 36 ntent-Length: 26
0270 33 0d 0a 0d 0a 76 3d 30 0d 0a 6f 3d 43 69 73 63 3....v=0..o=Cisc
0280 6f 53 79 73 74 65 6d 73 53 49 50 2d 47 57 2d 55 oSystemsSIP-GW-U
0290 73 65 72 41 67 65 6e 74 20 36 31 34 20 37 32 35 serAgent 614 725
02a0 39 20 49 4e 20 49 50 34 20 32 30 39 2e 31 31 34 9 IN IP4 209.114
02b0 2e 32 31 39 2e 39 30 0d 0a 73 3d 53 49 50 20 43 .219.90..s=SIP C
02c0 61 6c 6c 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 all..c=IN IP4 20
02d0 39 2e 31 31 34 2e 32 31 39 2e 39 30 0d 0a 74 3d 9.114.219.90..t=
02e0 30 20 30 0d 0a 6d 3d 61 75 64 69 6f 20 31 37 33 0 0..m=audio 173
02f0 30 32 20 52 54 50 2f 41 56 50 20 31 38 20 31 30 02 RTP/AVP 18 10
0300 31 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 39 2e 1..c=IN IP4 209.
0310 31 31 34 2e 32 31 39 2e 39 30 0d 0a 61 3d 72 74 114.219.90..a=rt
0320 70 6d 61 70 3a 31 38 20 47 37 32 39 2f 38 30 30 pmap:18 G729/800
0330 30 0d 0a 61 3d 66 6d 74 70 3a 31 38 20 61 6e 6e 0..a=fmtp:18 ann
0340 65 78 62 3d 6e 6f 0d 0a 61 3d 72 74 70 6d 61 70 exb=no..a=rtpmap
0350 3a 31 30 31 20 74 65 6c 65 70 68 6f 6e 65 2d 65 :101 telephone-e
0360 76 65 6e 74 2f 38 30 30 30 0d 0a 61 3d 66 6d 74 vent/8000..a=fmt
0370 70 3a 31 30 31 20 30 2d 31 36 0d 0a p:101 0-16..
No. Time Source Destination Protocol Info
8 0.390675 209.114.219.69 209.114.219.90 SIP Request: ACK sip:003214093773@209.114.219.90
Frame 8 (436 bytes on wire, 436 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.460983000
Time delta from previous packet: 0.000250000 seconds
Time since reference or first frame: 0.390675000 seconds
Frame Number: 8
Packet Length: 436 bytes
Capture Length: 436 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00
Destination: 00:b0:8e:35:44:00 (209.114.219.90)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 422
Identification: 0x0aa4 (2724)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xd505 (correct)
Source: 209.114.219.69 (209.114.219.69)
Destination: 209.114.219.90 (209.114.219.90)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 402
Checksum: 0x5b29 (incorrect, should be 0x0283)
Session Initiation Protocol
Request-Line: ACK sip:003214093773@209.114.219.90 SIP/2.0
Method: ACK
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK3b36abf0
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Contact: <sip:3213084003@209.114.219.69>
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
CSeq: 102 ACK
User-Agent: HCC Asterisk PBX
Content-Length: 0
0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E.
0010 01 a6 0a a4 40 00 40 11 d5 05 d1 72 db 45 d1 72 ....@.@....r.E.r
0020 db 5a 13 c4 13 c4 01 92 5b 29 41 43 4b 20 73 69 .Z......[)ACK si
0030 70 3a 30 30 33 32 31 34 30 39 33 37 37 33 40 32 p:003214093773@2
0040 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 20 53 49 09.114.219.90 SI
0050 50 2f 32 2e 30 0d 0a 56 69 61 3a 20 53 49 50 2f P/2.0..Via: SIP/
0060 32 2e 30 2f 55 44 50 20 32 30 39 2e 31 31 34 2e 2.0/UDP 209.114.
0070 32 31 39 2e 36 39 3a 35 30 36 30 3b 62 72 61 6e 219.69:5060;bran
0080 63 68 3d 7a 39 68 47 34 62 4b 33 62 33 36 61 62 ch=z9hG4bK3b36ab
0090 66 30 0d 0a 46 72 6f 6d 3a 20 22 33 32 31 33 30 f0..From: "32130
00a0 38 34 30 30 33 22 20 3c 73 69 70 3a 33 32 31 33 84003" <sip:3213
00b0 30 38 34 30 30 33 40 32 30 39 2e 31 31 34 2e 32 084003@209.114.2
00c0 31 39 2e 36 39 3e 3b 74 61 67 3d 61 73 37 32 31 19.69>;tag=as721
00d0 63 32 32 63 34 0d 0a 54 6f 3a 20 3c 73 69 70 3a c22c4..To: <sip:
00e0 30 30 33 32 31 34 30 39 33 37 37 33 40 32 30 39 003214093773@209
00f0 2e 31 31 34 2e 32 31 39 2e 39 30 3e 3b 74 61 67 .114.219.90>;tag
0100 3d 34 44 30 39 39 32 38 30 2d 37 41 0d 0a 43 6f =4D099280-7A..Co
0110 6e 74 61 63 74 3a 20 3c 73 69 70 3a 33 32 31 33 ntact: <sip:3213
0120 30 38 34 30 30 33 40 32 30 39 2e 31 31 34 2e 32 084003@209.114.2
0130 31 39 2e 36 39 3e 0d 0a 43 61 6c 6c 2d 49 44 3a 19.69>..Call-ID:
0140 20 35 33 37 62 32 66 38 38 32 36 38 61 33 62 66 537b2f88268a3bf
0150 34 31 63 39 32 61 65 65 39 34 38 38 65 38 35 35 41c92aee9488e855
0160 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3@209.114.219.69
0170 0d 0a 43 53 65 71 3a 20 31 30 32 20 41 43 4b 0d ..CSeq: 102 ACK.
0180 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 48 43 43 .User-Agent: HCC
0190 20 41 73 74 65 72 69 73 6b 20 50 42 58 0d 0a 43 Asterisk PBX..C
01a0 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 ontent-Length: 0
01b0 0d 0a 0d 0a ....
No. Time Source Destination Protocol Info
9 0.390992 209.114.219.69 209.114.219.98 SIP/SDP Status: 200 OK, with session description
Frame 9 (778 bytes on wire, 778 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.461300000
Time delta from previous packet: 0.000317000 seconds
Time since reference or first frame: 0.390992000 seconds
Frame Number: 9
Packet Length: 778 bytes
Capture Length: 778 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:48:54:6f:8a:d2
Destination: 00:48:54:6f:8a:d2 (209.114.219.98)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.98 (209.114.219.98)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 764
Identification: 0x0aa5 (2725)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xd3a6 (correct)
Source: 209.114.219.69 (209.114.219.69)
Destination: 209.114.219.98 (209.114.219.98)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 744
Checksum: 0x5c87 (incorrect, should be 0x7029)
Session Initiation Protocol
Status-Line: SIP/2.0 200 OK
Status-Code: 200
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 192.168.200.169:5060;received=209.114.219.98;rport=5060
From: 3213084003 <sip:3213084003@209.114.219.69;user=phone>;tag=3518047997
SIP Display info: 3213084003
SIP from address: sip:3213084003@209.114.219.69
SIP tag: 3518047997
To: <sip:1001@209.114.219.69;user=phone>;tag=as6a4d6dad
SIP to address: sip:1001@209.114.219.69
SIP tag: as6a4d6dad
Call-ID: 1314847947@192.168.200.169
CSeq: 1 INVITE
User-Agent: HCC Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER
Contact: <sip:1001@209.114.219.69>
Content-Type: application/sdp
Content-Length: 291
Message body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): root 3032 3033 IN IP4 209.114.219.69
Owner Username: root
Session ID: 3032
Session Version: 3033
Owner Network Type: IN
Owner Address Type: IP4
Owner Address: 209.114.219.69
Session Name (s): session
Connection Information (c): IN IP4 209.114.219.69
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 209.114.219.69
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Media Description, name and address (m): audio 10204 RTP/AVP 0 8 3 18 101
Media Type: audio
Media Port: 10204
Media Proto: RTP/AVP
Media Format: ITU-T G.711 PCMU
Media Format: ITU-T G.711 PCMA
Media Format: GSM 06.10
Media Format: ITU-T G.729
Media Format: 101
Media Attribute (a): rtpmap:0 PCMU/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 0 PCMU/8000
Media Attribute (a): rtpmap:8 PCMA/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 8 PCMA/8000
Media Attribute (a): rtpmap:3 GSM/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 3 GSM/8000
Media Attribute (a): rtpmap:18 G729/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 18 G729/8000
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 101 telephone-event/8000
Media Attribute (a): fmtp:101 0-16
Media Attribute Fieldname: fmtp
Media Attribute Value: 101 0-16
Media Attribute (a): silenceSupp:off - - - -
Media Attribute Fieldname: silenceSupp
Media Attribute Value: off - - - -
0000 00 48 54 6f 8a d2 00 11 43 58 7a 18 08 00 45 18 .HTo....CXz...E.
0010 02 fc 0a a5 40 00 40 11 d3 a6 d1 72 db 45 d1 72 ....@.@....r.E.r
0020 db 62 13 c4 13 c4 02 e8 5c 87 53 49 50 2f 32 2e .b......\.SIP/2.
0030 30 20 32 30 30 20 4f 4b 0d 0a 56 69 61 3a 20 53 0 200 OK..Via: S
0040 49 50 2f 32 2e 30 2f 55 44 50 20 31 39 32 2e 31 IP/2.0/UDP 192.1
0050 36 38 2e 32 30 30 2e 31 36 39 3a 35 30 36 30 3b 68.200.169:5060;
0060 72 65 63 65 69 76 65 64 3d 32 30 39 2e 31 31 34 received=209.114
0070 2e 32 31 39 2e 39 38 3b 72 70 6f 72 74 3d 35 30 .219.98;rport=50
0080 36 30 0d 0a 46 72 6f 6d 3a 20 33 32 31 33 30 38 60..From: 321308
0090 34 30 30 33 20 3c 73 69 70 3a 33 32 31 33 30 38 4003 <sip:321308
00a0 34 30 30 33 40 32 30 39 2e 31 31 34 2e 32 31 39 4003@209.114.219
00b0 2e 36 39 3b 75 73 65 72 3d 70 68 6f 6e 65 3e 3b .69;user=phone>;
00c0 74 61 67 3d 33 35 31 38 30 34 37 39 39 37 0d 0a tag=3518047997..
00d0 54 6f 3a 20 3c 73 69 70 3a 31 30 30 31 40 32 30 To: <sip:1001@20
00e0 39 2e 31 31 34 2e 32 31 39 2e 36 39 3b 75 73 65 9.114.219.69;use
00f0 72 3d 70 68 6f 6e 65 3e 3b 74 61 67 3d 61 73 36 r=phone>;tag=as6
0100 61 34 64 36 64 61 64 0d 0a 43 61 6c 6c 2d 49 44 a4d6dad..Call-ID
0110 3a 20 31 33 31 34 38 34 37 39 34 37 40 31 39 32 : 1314847947@192
0120 2e 31 36 38 2e 32 30 30 2e 31 36 39 0d 0a 43 53 .168.200.169..CS
0130 65 71 3a 20 31 20 49 4e 56 49 54 45 0d 0a 55 73 eq: 1 INVITE..Us
0140 65 72 2d 41 67 65 6e 74 3a 20 48 43 43 20 41 73 er-Agent: HCC As
0150 74 65 72 69 73 6b 20 50 42 58 0d 0a 41 6c 6c 6f terisk PBX..Allo
0160 77 3a 20 49 4e 56 49 54 45 2c 20 41 43 4b 2c 20 w: INVITE, ACK,
0170 43 41 4e 43 45 4c 2c 20 4f 50 54 49 4f 4e 53 2c CANCEL, OPTIONS,
0180 20 42 59 45 2c 20 52 45 46 45 52 0d 0a 43 6f 6e BYE, REFER..Con
0190 74 61 63 74 3a 20 3c 73 69 70 3a 31 30 30 31 40 tact: <sip:1001@
01a0 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 0d 209.114.219.69>.
01b0 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 .Content-Type: a
01c0 70 70 6c 69 63 61 74 69 6f 6e 2f 73 64 70 0d 0a pplication/sdp..
01d0 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 Content-Length:
01e0 32 39 31 0d 0a 0d 0a 76 3d 30 0d 0a 6f 3d 72 6f 291....v=0..o=ro
01f0 6f 74 20 33 30 33 32 20 33 30 33 33 20 49 4e 20 ot 3032 3033 IN
0200 49 50 34 20 32 30 39 2e 31 31 34 2e 32 31 39 2e IP4 209.114.219.
0210 36 39 0d 0a 73 3d 73 65 73 73 69 6f 6e 0d 0a 63 69..s=session..c
0220 3d 49 4e 20 49 50 34 20 32 30 39 2e 31 31 34 2e =IN IP4 209.114.
0230 32 31 39 2e 36 39 0d 0a 74 3d 30 20 30 0d 0a 6d 219.69..t=0 0..m
0240 3d 61 75 64 69 6f 20 31 30 32 30 34 20 52 54 50 =audio 10204 RTP
0250 2f 41 56 50 20 30 20 38 20 33 20 31 38 20 31 30 /AVP 0 8 3 18 10
0260 31 0d 0a 61 3d 72 74 70 6d 61 70 3a 30 20 50 43 1..a=rtpmap:0 PC
0270 4d 55 2f 38 30 30 30 0d 0a 61 3d 72 74 70 6d 61 MU/8000..a=rtpma
0280 70 3a 38 20 50 43 4d 41 2f 38 30 30 30 0d 0a 61 p:8 PCMA/8000..a
0290 3d 72 74 70 6d 61 70 3a 33 20 47 53 4d 2f 38 30 =rtpmap:3 GSM/80
02a0 30 30 0d 0a 61 3d 72 74 70 6d 61 70 3a 31 38 20 00..a=rtpmap:18
02b0 47 37 32 39 2f 38 30 30 30 0d 0a 61 3d 72 74 70 G729/8000..a=rtp
02c0 6d 61 70 3a 31 30 31 20 74 65 6c 65 70 68 6f 6e map:101 telephon
02d0 65 2d 65 76 65 6e 74 2f 38 30 30 30 0d 0a 61 3d e-event/8000..a=
02e0 66 6d 74 70 3a 31 30 31 20 30 2d 31 36 0d 0a 61 fmtp:101 0-16..a
02f0 3d 73 69 6c 65 6e 63 65 53 75 70 70 3a 6f 66 66 =silenceSupp:off
0300 20 2d 20 2d 20 2d 20 2d 0d 0a - - - -..
No. Time Source Destination Protocol Info
10 0.391128 209.114.219.69 209.114.219.90 SIP/SDP Request: INVITE sip:003214093773@209.114.219.90:5060, with session description
Frame 10 (799 bytes on wire, 799 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.461436000
Time delta from previous packet: 0.000136000 seconds
Time since reference or first frame: 0.391128000 seconds
Frame Number: 10
Packet Length: 799 bytes
Capture Length: 799 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00
Destination: 00:b0:8e:35:44:00 (209.114.219.90)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 785
Identification: 0x0aa6 (2726)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xd398 (correct)
Source: 209.114.219.69 (209.114.219.69)
Destination: 209.114.219.90 (209.114.219.90)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 765
Checksum: 0x5c94 (incorrect, should be 0x2d35)
Session Initiation Protocol
Request-Line: INVITE sip:003214093773@209.114.219.90:5060 SIP/2.0
Method: INVITE
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK67ecdc04
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Contact: <sip:3213084003@209.114.219.69>
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
CSeq: 103 INVITE
User-Agent: HCC Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER
Content-Type: application/sdp
Content-Length: 270
Message body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): root 3032 3033 IN IP4 192.168.200.169
Owner Username: root
Session ID: 3032
Session Version: 3033
Owner Network Type: IN
Owner Address Type: IP4
Owner Address: 192.168.200.169
Session Name (s): session
Connection Information (c): IN IP4 192.168.200.169
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 192.168.200.169
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Media Description, name and address (m): audio 16384 RTP/AVP 0 8 18 101
Media Type: audio
Media Port: 16384
Media Proto: RTP/AVP
Media Format: ITU-T G.711 PCMU
Media Format: ITU-T G.711 PCMA
Media Format: ITU-T G.729
Media Format: 101
Media Attribute (a): rtpmap:0 PCMU/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 0 PCMU/8000
Media Attribute (a): rtpmap:8 PCMA/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 8 PCMA/8000
Media Attribute (a): rtpmap:18 G729/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 18 G729/8000
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 101 telephone-event/8000
Media Attribute (a): fmtp:101 0-16
Media Attribute Fieldname: fmtp
Media Attribute Value: 101 0-16
Media Attribute (a): silenceSupp:off - - - -
Media Attribute Fieldname: silenceSupp
Media Attribute Value: off - - - -
0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E.
0010 03 11 0a a6 40 00 40 11 d3 98 d1 72 db 45 d1 72 ....@.@....r.E.r
0020 db 5a 13 c4 13 c4 02 fd 5c 94 49 4e 56 49 54 45 .Z......\.INVITE
0030 20 73 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 sip:00321409377
0040 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3@209.114.219.90
0050 3a 35 30 36 30 20 53 49 50 2f 32 2e 30 0d 0a 56 :5060 SIP/2.0..V
0060 69 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 ia: SIP/2.0/UDP
0070 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 209.114.219.69:5
0080 30 36 30 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 060;branch=z9hG4
0090 62 4b 36 37 65 63 64 63 30 34 0d 0a 46 72 6f 6d bK67ecdc04..From
00a0 3a 20 22 33 32 31 33 30 38 34 30 30 33 22 20 3c : "3213084003" <
00b0 73 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 sip:3213084003@2
00c0 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 3b 74 09.114.219.69>;t
00d0 61 67 3d 61 73 37 32 31 63 32 32 63 34 0d 0a 54 ag=as721c22c4..T
00e0 6f 3a 20 3c 73 69 70 3a 30 30 33 32 31 34 30 39 o: <sip:00321409
00f0 33 37 37 33 40 32 30 39 2e 31 31 34 2e 32 31 39 3773@209.114.219
0100 2e 39 30 3e 3b 74 61 67 3d 34 44 30 39 39 32 38 .90>;tag=4D09928
0110 30 2d 37 41 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 0-7A..Contact: <
0120 73 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 sip:3213084003@2
0130 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 0d 0a 09.114.219.69>..
0140 43 61 6c 6c 2d 49 44 3a 20 35 33 37 62 32 66 38 Call-ID: 537b2f8
0150 38 32 36 38 61 33 62 66 34 31 63 39 32 61 65 65 8268a3bf41c92aee
0160 39 34 38 38 65 38 35 35 33 40 32 30 39 2e 31 31 9488e8553@209.11
0170 34 2e 32 31 39 2e 36 39 0d 0a 43 53 65 71 3a 20 4.219.69..CSeq:
0180 31 30 33 20 49 4e 56 49 54 45 0d 0a 55 73 65 72 103 INVITE..User
0190 2d 41 67 65 6e 74 3a 20 48 43 43 20 41 73 74 65 -Agent: HCC Aste
01a0 72 69 73 6b 20 50 42 58 0d 0a 41 6c 6c 6f 77 3a risk PBX..Allow:
01b0 20 49 4e 56 49 54 45 2c 20 41 43 4b 2c 20 43 41 INVITE, ACK, CA
01c0 4e 43 45 4c 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 NCEL, OPTIONS, B
01d0 59 45 2c 20 52 45 46 45 52 0d 0a 43 6f 6e 74 65 YE, REFER..Conte
01e0 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 nt-Type: applica
01f0 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f 6e 74 65 6e tion/sdp..Conten
0200 74 2d 4c 65 6e 67 74 68 3a 20 32 37 30 0d 0a 0d t-Length: 270...
0210 0a 76 3d 30 0d 0a 6f 3d 72 6f 6f 74 20 33 30 33 .v=0..o=root 303
0220 32 20 33 30 33 33 20 49 4e 20 49 50 34 20 31 39 2 3033 IN IP4 19
0230 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 0d 0a 73 2.168.200.169..s
0240 3d 73 65 73 73 69 6f 6e 0d 0a 63 3d 49 4e 20 49 =session..c=IN I
0250 50 34 20 31 39 32 2e 31 36 38 2e 32 30 30 2e 31 P4 192.168.200.1
0260 36 39 0d 0a 74 3d 30 20 30 0d 0a 6d 3d 61 75 64 69..t=0 0..m=aud
0270 69 6f 20 31 36 33 38 34 20 52 54 50 2f 41 56 50 io 16384 RTP/AVP
0280 20 30 20 38 20 31 38 20 31 30 31 0d 0a 61 3d 72 0 8 18 101..a=r
0290 74 70 6d 61 70 3a 30 20 50 43 4d 55 2f 38 30 30 tpmap:0 PCMU/800
02a0 30 0d 0a 61 3d 72 74 70 6d 61 70 3a 38 20 50 43 0..a=rtpmap:8 PC
02b0 4d 41 2f 38 30 30 30 0d 0a 61 3d 72 74 70 6d 61 MA/8000..a=rtpma
02c0 70 3a 31 38 20 47 37 32 39 2f 38 30 30 30 0d 0a p:18 G729/8000..
02d0 61 3d 72 74 70 6d 61 70 3a 31 30 31 20 74 65 6c a=rtpmap:101 tel
02e0 65 70 68 6f 6e 65 2d 65 76 65 6e 74 2f 38 30 30 ephone-event/800
02f0 30 0d 0a 61 3d 66 6d 74 70 3a 31 30 31 20 30 2d 0..a=fmtp:101 0-
0300 31 36 0d 0a 61 3d 73 69 6c 65 6e 63 65 53 75 70 16..a=silenceSup
0310 70 3a 6f 66 66 20 2d 20 2d 20 2d 20 2d 0d 0a p:off - - - -..
No. Time Source Destination Protocol Info
11 0.393772 209.114.219.98 209.114.219.69 RTP Payload type=ITU-T G.729, SSRC=3448847109, Seq=437, Time=70960
Frame 11 (74 bytes on wire, 74 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.464080000
Time delta from previous packet: 0.002644000 seconds
Time since reference or first frame: 0.393772000 seconds
Frame Number: 11
Packet Length: 74 bytes
Capture Length: 74 bytes
Ethernet II, Src: 00:48:54:6f:8a:d2, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:48:54:6f:8a:d2 (209.114.219.98)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.98 (209.114.219.98), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 60
Identification: 0x01bb (443)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 249
Protocol: UDP (0x11)
Header checksum: 0x6668 (correct)
Source: 209.114.219.98 (209.114.219.98)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 16384 (16384), Dst Port: 10204 (10204)
Source port: 16384 (16384)
Destination port: 10204 (10204)
Length: 40
Checksum: 0x3581 (correct)
Real-Time Transport Protocol
Stream setup by SDP (frame 9)
Setup frame: 9
Setup Method: SDP
10.. .... = Version: RFC 1889 Version (2)
..0. .... = Padding: False
...0 .... = Extension: False
.... 0000 = Contributing source identifiers count: 0
0... .... = Marker: False
.001 0010 = Payload type: ITU-T G.729 (18)
Sequence number: 437
Timestamp: 70960
Synchronization Source identifier: 3448847109
Payload: 10DFC2406733CB93425E787AEA810DC2...
0000 00 11 43 58 7a 18 00 48 54 6f 8a d2 08 00 45 00 ..CXz..HTo....E.
0010 00 3c 01 bb 00 00 f9 11 66 68 d1 72 db 62 d1 72 .<......fh.r.b.r
0020 db 45 40 00 27 dc 00 28 35 81 80 12 01 b5 00 01 .E@.'..(5.......
0030 15 30 cd 91 3b 05 10 df c2 40 67 33 cb 93 42 5e .0..;....@g3..B^
0040 78 7a ea 81 0d c2 17 c7 98 58 xz.......X
No. Time Source Destination Protocol Info
12 0.393978 209.114.219.69 209.114.219.90 RTP Payload type=ITU-T G.729, SSRC=444875168, Seq=26154, Time=80
Frame 12 (74 bytes on wire, 74 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.464286000
Time delta from previous packet: 0.000206000 seconds
Time since reference or first frame: 0.393978000 seconds
Frame Number: 12
Packet Length: 74 bytes
Capture Length: 74 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00
Destination: 00:b0:8e:35:44:00 (209.114.219.90)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 60
Identification: 0x0000 (0)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xe113 (correct)
Source: 209.114.219.69 (209.114.219.69)
Destination: 209.114.219.90 (209.114.219.90)
User Datagram Protocol, Src Port: 10770 (10770), Dst Port: 17302 (17302)
Source port: 10770 (10770)
Destination port: 17302 (17302)
Length: 40
Checksum: 0x0000 (none)
Real-Time Transport Protocol
Stream setup by SDP (frame 56)
Setup frame: 56
Setup Method: SDP
10.. .... = Version: RFC 1889 Version (2)
..0. .... = Padding: False
...0 .... = Extension: False
.... 0000 = Contributing source identifiers count: 0
0... .... = Marker: False
.001 0010 = Payload type: ITU-T G.729 (18)
Sequence number: 26154
Timestamp: 80
Synchronization Source identifier: 444875168
Payload: 10DFC2406733CB93425E787AEA810DC2...
0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E.
0010 00 3c 00 00 40 00 40 11 e1 13 d1 72 db 45 d1 72 .<..@.@....r.E.r
0020 db 5a 2a 12 43 96 00 28 00 00 80 12 66 2a 00 00 .Z*.C..(....f*..
0030 00 50 1a 84 41 a0 10 df c2 40 67 33 cb 93 42 5e .P..A....@g3..B^
0040 78 7a ea 81 0d c2 17 c7 98 58 xz.......X
No. Time Source Destination Protocol Info
13 0.395849 209.114.219.90 209.114.219.69 RTCP Receiver Report
Frame 13 (90 bytes on wire, 90 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.466157000
Time delta from previous packet: 0.001871000 seconds
Time since reference or first frame: 0.395849000 seconds
Frame Number: 13
Packet Length: 90 bytes
Capture Length: 90 bytes
Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:b0:8e:35:44:00 (209.114.219.90)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00)
0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 76
Identification: 0x0000 (0)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 255
Protocol: UDP (0x11)
Header checksum: 0x61b3 (correct)
Source: 209.114.219.90 (209.114.219.90)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 17303 (17303), Dst Port: 10771 (10771)
Source port: 17303 (17303)
Destination port: 10771 (10771)
Length: 56
Checksum: 0xd582 (correct)
Real-time Transport Control Protocol
Stream setup by SDP (frame 54)
Setup frame: 54
Setup Method: SDP
10.. .... = Version: RFC 1889 Version (2)
..0. .... = Padding: False
...0 0000 = Reception report count: 0
Packet type: Receiver Report (201)
Length: 1
Sender SSRC: 387767130
Real-time Transport Control Protocol
Stream setup by SDP (frame 54)
Setup frame: 54
Setup Method: SDP
10.. .... = Version: RFC 1889 Version (2)
..0. .... = Padding: False
...0 0001 = Source count: 1
Packet type: Source description (202)
Length: 7
Chunk 1, SSRC/CSRC 387767130
Identifier: 387767130
SDES items
Type: CNAME (user and domain) (1)
Length: 20
Text: 0.0.0@209.114.219.90
Real-time Transport Control Protocol
Stream setup by SDP (frame 54)
Setup frame: 54
Setup Method: SDP
10.. .... = Version: RFC 1889 Version (2)
..0. .... = Padding: False
...0 0001 = Source count: 1
Packet type: Goodbye (203)
Length: 1
Identifier: 387767130
0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh
0010 00 4c 00 00 00 00 ff 11 61 b3 d1 72 db 5a d1 72 .L......a..r.Z.r
0020 db 45 43 97 2a 13 00 38 d5 82 80 c9 00 01 17 1c .EC.*..8........
0030 db 5a 81 ca 00 07 17 1c db 5a 01 14 30 2e 30 2e .Z.......Z..0.0.
0040 30 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 0@209.114.219.90
0050 00 00 81 cb 00 01 17 1c db 5a .........Z
No. Time Source Destination Protocol Info
14 0.396244 209.114.219.90 209.114.219.69 SIP Status: 100 Trying
Frame 14 (445 bytes on wire, 445 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.466552000
Time delta from previous packet: 0.000395000 seconds
Time since reference or first frame: 0.396244000 seconds
Frame Number: 14
Packet Length: 445 bytes
Capture Length: 445 bytes
Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:b0:8e:35:44:00 (209.114.219.90)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00)
0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 431
Identification: 0x351d (13597)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 255
Protocol: UDP (0x11)
Header checksum: 0x2b33 (correct)
Source: 209.114.219.90 (209.114.219.90)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060)
Source port: 56262 (56262)
Destination port: 5060 (5060)
Length: 411
Checksum: 0xe51c (correct)
Session Initiation Protocol
Status-Line: SIP/2.0 100 Trying
Status-Code: 100
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK67ecdc04
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Date: Wed, 05 Jan 2005 23:34:43 GMT
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
Server: Cisco-SIPGateway/IOS-12.x
CSeq: 103 INVITE
Allow-Events: telephone-event
Content-Length: 0
0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh
0010 01 af 35 1d 00 00 ff 11 2b 33 d1 72 db 5a d1 72 ..5.....+3.r.Z.r
0020 db 45 db c6 13 c4 01 9b e5 1c 53 49 50 2f 32 2e .E........SIP/2.
0030 30 20 31 30 30 20 54 72 79 69 6e 67 0d 0a 56 69 0 100 Trying..Vi
0040 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 a: SIP/2.0/UDP 2
0050 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 09.114.219.69:50
0060 36 30 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 60;branch=z9hG4b
0070 4b 36 37 65 63 64 63 30 34 0d 0a 46 72 6f 6d 3a K67ecdc04..From:
0080 20 22 33 32 31 33 30 38 34 30 30 33 22 20 3c 73 "3213084003" <s
0090 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 30 ip:3213084003@20
00a0 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 3b 74 61 9.114.219.69>;ta
00b0 67 3d 61 73 37 32 31 63 32 32 63 34 0d 0a 54 6f g=as721c22c4..To
00c0 3a 20 3c 73 69 70 3a 30 30 33 32 31 34 30 39 33 : <sip:003214093
00d0 37 37 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 773@209.114.219.
00e0 39 30 3e 3b 74 61 67 3d 34 44 30 39 39 32 38 30 90>;tag=4D099280
00f0 2d 37 41 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 -7A..Date: Wed,
0100 30 35 20 4a 61 6e 20 32 30 30 35 20 32 33 3a 33 05 Jan 2005 23:3
0110 34 3a 34 33 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 4:43 GMT..Call-I
0120 44 3a 20 35 33 37 62 32 66 38 38 32 36 38 61 33 D: 537b2f88268a3
0130 62 66 34 31 63 39 32 61 65 65 39 34 38 38 65 38 bf41c92aee9488e8
0140 35 35 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 553@209.114.219.
0150 36 39 0d 0a 53 65 72 76 65 72 3a 20 43 69 73 63 69..Server: Cisc
0160 6f 2d 53 49 50 47 61 74 65 77 61 79 2f 49 4f 53 o-SIPGateway/IOS
0170 2d 31 32 2e 78 0d 0a 43 53 65 71 3a 20 31 30 33 -12.x..CSeq: 103
0180 20 49 4e 56 49 54 45 0d 0a 41 6c 6c 6f 77 2d 45 INVITE..Allow-E
0190 76 65 6e 74 73 3a 20 74 65 6c 65 70 68 6f 6e 65 vents: telephone
01a0 2d 65 76 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d -event..Content-
01b0 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Length: 0....
No. Time Source Destination Protocol Info
15 0.397469 209.114.219.90 209.114.219.69 SIP/SDP Status: 200 OK, with session description
Frame 15 (892 bytes on wire, 892 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.467777000
Time delta from previous packet: 0.001225000 seconds
Time since reference or first frame: 0.397469000 seconds
Frame Number: 15
Packet Length: 892 bytes
Capture Length: 892 bytes
Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:b0:8e:35:44:00 (209.114.219.90)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00)
0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 878
Identification: 0x351e (13598)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 255
Protocol: UDP (0x11)
Header checksum: 0x2973 (correct)
Source: 209.114.219.90 (209.114.219.90)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060)
Source port: 56262 (56262)
Destination port: 5060 (5060)
Length: 858
Checksum: 0xdce4 (correct)
Session Initiation Protocol
Status-Line: SIP/2.0 200 OK
Status-Code: 200
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK67ecdc04
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Date: Wed, 05 Jan 2005 23:34:43 GMT
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
Server: Cisco-SIPGateway/IOS-12.x
CSeq: 103 INVITE
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER
Allow-Events: telephone-event
Contact: <sip:003214093773@209.114.219.90:5060>
Content-Type: application/sdp
Content-Length: 263
Message body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): CiscoSystemsSIP-GW-UserAgent 614 7260 IN IP4 209.114.219.90
Owner Username: CiscoSystemsSIP-GW-UserAgent
Session ID: 614
Session Version: 7260
Owner Network Type: IN
Owner Address Type: IP4
Owner Address: 209.114.219.90
Session Name (s): SIP Call
Connection Information (c): IN IP4 209.114.219.90
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 209.114.219.90
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Media Description, name and address (m): audio 17302 RTP/AVP 18 101
Media Type: audio
Media Port: 17302
Media Proto: RTP/AVP
Media Format: ITU-T G.729
Media Format: 101
Connection Information (c): IN IP4 209.114.219.90
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 209.114.219.90
Media Attribute (a): rtpmap:18 G729/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 18 G729/8000
Media Attribute (a): fmtp:18 annexb=no
Media Attribute Fieldname: fmtp
Media Attribute Value: 18 annexb=no
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 101 telephone-event/8000
Media Attribute (a): fmtp:101 0-16
Media Attribute Fieldname: fmtp
Media Attribute Value: 101 0-16
0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh
0010 03 6e 35 1e 00 00 ff 11 29 73 d1 72 db 5a d1 72 .n5.....)s.r.Z.r
0020 db 45 db c6 13 c4 03 5a dc e4 53 49 50 2f 32 2e .E.....Z..SIP/2.
0030 30 20 32 30 30 20 4f 4b 0d 0a 56 69 61 3a 20 53 0 200 OK..Via: S
0040 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 2e 31 IP/2.0/UDP 209.1
0050 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 3b 62 14.219.69:5060;b
0060 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 36 37 65 ranch=z9hG4bK67e
0070 63 64 63 30 34 0d 0a 46 72 6f 6d 3a 20 22 33 32 cdc04..From: "32
0080 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3a 33 13084003" <sip:3
0090 32 31 33 30 38 34 30 30 33 40 32 30 39 2e 31 31 213084003@209.11
00a0 34 2e 32 31 39 2e 36 39 3e 3b 74 61 67 3d 61 73 4.219.69>;tag=as
00b0 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 3c 73 721c22c4..To: <s
00c0 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 33 40 ip:003214093773@
00d0 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3e 3b 209.114.219.90>;
00e0 74 61 67 3d 34 44 30 39 39 32 38 30 2d 37 41 0d tag=4D099280-7A.
00f0 0a 44 61 74 65 3a 20 57 65 64 2c 20 30 35 20 4a .Date: Wed, 05 J
0100 61 6e 20 32 30 30 35 20 32 33 3a 33 34 3a 34 33 an 2005 23:34:43
0110 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 44 3a 20 35 GMT..Call-ID: 5
0120 33 37 62 32 66 38 38 32 36 38 61 33 62 66 34 31 37b2f88268a3bf41
0130 63 39 32 61 65 65 39 34 38 38 65 38 35 35 33 40 c92aee9488e8553@
0140 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 0d 0a 209.114.219.69..
0150 53 65 72 76 65 72 3a 20 43 69 73 63 6f 2d 53 49 Server: Cisco-SI
0160 50 47 61 74 65 77 61 79 2f 49 4f 53 2d 31 32 2e PGateway/IOS-12.
0170 78 0d 0a 43 53 65 71 3a 20 31 30 33 20 49 4e 56 x..CSeq: 103 INV
0180 49 54 45 0d 0a 41 6c 6c 6f 77 3a 20 49 4e 56 49 ITE..Allow: INVI
0190 54 45 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 59 45 TE, OPTIONS, BYE
01a0 2c 20 43 41 4e 43 45 4c 2c 20 41 43 4b 2c 20 50 , CANCEL, ACK, P
01b0 52 41 43 4b 2c 20 43 4f 4d 45 54 2c 20 52 45 46 RACK, COMET, REF
01c0 45 52 2c 20 53 55 42 53 43 52 49 42 45 2c 20 4e ER, SUBSCRIBE, N
01d0 4f 54 49 46 59 2c 20 49 4e 46 4f 2c 20 55 50 44 OTIFY, INFO, UPD
01e0 41 54 45 2c 20 52 45 47 49 53 54 45 52 0d 0a 41 ATE, REGISTER..A
01f0 6c 6c 6f 77 2d 45 76 65 6e 74 73 3a 20 74 65 6c llow-Events: tel
0200 65 70 68 6f 6e 65 2d 65 76 65 6e 74 0d 0a 43 6f ephone-event..Co
0210 6e 74 61 63 74 3a 20 3c 73 69 70 3a 30 30 33 32 ntact: <sip:0032
0220 31 34 30 39 33 37 37 33 40 32 30 39 2e 31 31 34 14093773@209.114
0230 2e 32 31 39 2e 39 30 3a 35 30 36 30 3e 0d 0a 43 .219.90:5060>..C
0240 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 ontent-Type: app
0250 6c 69 63 61 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f lication/sdp..Co
0260 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 36 ntent-Length: 26
0270 33 0d 0a 0d 0a 76 3d 30 0d 0a 6f 3d 43 69 73 63 3....v=0..o=Cisc
0280 6f 53 79 73 74 65 6d 73 53 49 50 2d 47 57 2d 55 oSystemsSIP-GW-U
0290 73 65 72 41 67 65 6e 74 20 36 31 34 20 37 32 36 serAgent 614 726
02a0 30 20 49 4e 20 49 50 34 20 32 30 39 2e 31 31 34 0 IN IP4 209.114
02b0 2e 32 31 39 2e 39 30 0d 0a 73 3d 53 49 50 20 43 .219.90..s=SIP C
02c0 61 6c 6c 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 all..c=IN IP4 20
02d0 39 2e 31 31 34 2e 32 31 39 2e 39 30 0d 0a 74 3d 9.114.219.90..t=
02e0 30 20 30 0d 0a 6d 3d 61 75 64 69 6f 20 31 37 33 0 0..m=audio 173
02f0 30 32 20 52 54 50 2f 41 56 50 20 31 38 20 31 30 02 RTP/AVP 18 10
0300 31 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 39 2e 1..c=IN IP4 209.
0310 31 31 34 2e 32 31 39 2e 39 30 0d 0a 61 3d 72 74 114.219.90..a=rt
0320 70 6d 61 70 3a 31 38 20 47 37 32 39 2f 38 30 30 pmap:18 G729/800
0330 30 0d 0a 61 3d 66 6d 74 70 3a 31 38 20 61 6e 6e 0..a=fmtp:18 ann
0340 65 78 62 3d 6e 6f 0d 0a 61 3d 72 74 70 6d 61 70 exb=no..a=rtpmap
0350 3a 31 30 31 20 74 65 6c 65 70 68 6f 6e 65 2d 65 :101 telephone-e
0360 76 65 6e 74 2f 38 30 30 30 0d 0a 61 3d 66 6d 74 vent/8000..a=fmt
0370 70 3a 31 30 31 20 30 2d 31 36 0d 0a p:101 0-16..
No. Time Source Destination Protocol Info
16 0.397678 209.114.219.69 209.114.219.90 SIP Request: ACK sip:003214093773@209.114.219.90:5060
Frame 16 (441 bytes on wire, 441 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.467986000
Time delta from previous packet: 0.000209000 seconds
Time since reference or first frame: 0.397678000 seconds
Frame Number: 16
Packet Length: 441 bytes
Capture Length: 441 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00
Destination: 00:b0:8e:35:44:00 (209.114.219.90)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 427
Identification: 0x0aa7 (2727)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xd4fd (correct)
Source: 209.114.219.69 (209.114.219.69)
Destination: 209.114.219.90 (209.114.219.90)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 407
Checksum: 0x5b2e (incorrect, should be 0x8611)
Session Initiation Protocol
Request-Line: ACK sip:003214093773@209.114.219.90:5060 SIP/2.0
Method: ACK
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK6519fbb5
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Contact: <sip:3213084003@209.114.219.69>
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
CSeq: 103 ACK
User-Agent: HCC Asterisk PBX
Content-Length: 0
0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E.
0010 01 ab 0a a7 40 00 40 11 d4 fd d1 72 db 45 d1 72 ....@.@....r.E.r
0020 db 5a 13 c4 13 c4 01 97 5b 2e 41 43 4b 20 73 69 .Z......[.ACK si
0030 70 3a 30 30 33 32 31 34 30 39 33 37 37 33 40 32 p:003214093773@2
0040 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3a 35 30 09.114.219.90:50
0050 36 30 20 53 49 50 2f 32 2e 30 0d 0a 56 69 61 3a 60 SIP/2.0..Via:
0060 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 SIP/2.0/UDP 209
0070 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 .114.219.69:5060
0080 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 36 ;branch=z9hG4bK6
0090 35 31 39 66 62 62 35 0d 0a 46 72 6f 6d 3a 20 22 519fbb5..From: "
00a0 33 32 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3213084003" <sip
00b0 3a 33 32 31 33 30 38 34 30 30 33 40 32 30 39 2e :3213084003@209.
00c0 31 31 34 2e 32 31 39 2e 36 39 3e 3b 74 61 67 3d 114.219.69>;tag=
00d0 61 73 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 as721c22c4..To:
00e0 3c 73 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 <sip:00321409377
00f0 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3@209.114.219.90
0100 3e 3b 74 61 67 3d 34 44 30 39 39 32 38 30 2d 37 >;tag=4D099280-7
0110 41 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 73 69 70 A..Contact: <sip
0120 3a 33 32 31 33 30 38 34 30 30 33 40 32 30 39 2e :3213084003@209.
0130 31 31 34 2e 32 31 39 2e 36 39 3e 0d 0a 43 61 6c 114.219.69>..Cal
0140 6c 2d 49 44 3a 20 35 33 37 62 32 66 38 38 32 36 l-ID: 537b2f8826
0150 38 61 33 62 66 34 31 63 39 32 61 65 65 39 34 38 8a3bf41c92aee948
0160 38 65 38 35 35 33 40 32 30 39 2e 31 31 34 2e 32 8e8553@209.114.2
0170 31 39 2e 36 39 0d 0a 43 53 65 71 3a 20 31 30 33 19.69..CSeq: 103
0180 20 41 43 4b 0d 0a 55 73 65 72 2d 41 67 65 6e 74 ACK..User-Agent
0190 3a 20 48 43 43 20 41 73 74 65 72 69 73 6b 20 50 : HCC Asterisk P
01a0 42 58 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 BX..Content-Leng
01b0 74 68 3a 20 30 0d 0a 0d 0a th: 0....
No. Time Source Destination Protocol Info
17 0.397768 209.114.219.69 209.114.219.90 SIP/SDP Request: INVITE sip:003214093773@209.114.219.90:5060, with session description
Frame 17 (797 bytes on wire, 797 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.468076000
Time delta from previous packet: 0.000090000 seconds
Time since reference or first frame: 0.397768000 seconds
Frame Number: 17
Packet Length: 797 bytes
Capture Length: 797 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00
Destination: 00:b0:8e:35:44:00 (209.114.219.90)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 783
Identification: 0x0aa8 (2728)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xd398 (correct)
Source: 209.114.219.69 (209.114.219.69)
Destination: 209.114.219.90 (209.114.219.90)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 763
Checksum: 0x5c92 (incorrect, should be 0xe82f)
Session Initiation Protocol
Request-Line: INVITE sip:003214093773@209.114.219.90:5060 SIP/2.0
Method: INVITE
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK4b5867d0
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Contact: <sip:3213084003@209.114.219.69>
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
CSeq: 104 INVITE
User-Agent: HCC Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER
Content-Type: application/sdp
Content-Length: 268
Message body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): root 3032 3034 IN IP4 209.114.219.98
Owner Username: root
Session ID: 3032
Session Version: 3034
Owner Network Type: IN
Owner Address Type: IP4
Owner Address: 209.114.219.98
Session Name (s): session
Connection Information (c): IN IP4 209.114.219.98
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 209.114.219.98
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Media Description, name and address (m): audio 16384 RTP/AVP 0 8 18 101
Media Type: audio
Media Port: 16384
Media Proto: RTP/AVP
Media Format: ITU-T G.711 PCMU
Media Format: ITU-T G.711 PCMA
Media Format: ITU-T G.729
Media Format: 101
Media Attribute (a): rtpmap:0 PCMU/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 0 PCMU/8000
Media Attribute (a): rtpmap:8 PCMA/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 8 PCMA/8000
Media Attribute (a): rtpmap:18 G729/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 18 G729/8000
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 101 telephone-event/8000
Media Attribute (a): fmtp:101 0-16
Media Attribute Fieldname: fmtp
Media Attribute Value: 101 0-16
Media Attribute (a): silenceSupp:off - - - -
Media Attribute Fieldname: silenceSupp
Media Attribute Value: off - - - -
0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E.
0010 03 0f 0a a8 40 00 40 11 d3 98 d1 72 db 45 d1 72 ....@.@....r.E.r
0020 db 5a 13 c4 13 c4 02 fb 5c 92 49 4e 56 49 54 45 .Z......\.INVITE
0030 20 73 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 sip:00321409377
0040 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3@209.114.219.90
0050 3a 35 30 36 30 20 53 49 50 2f 32 2e 30 0d 0a 56 :5060 SIP/2.0..V
0060 69 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 ia: SIP/2.0/UDP
0070 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 209.114.219.69:5
0080 30 36 30 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 060;branch=z9hG4
0090 62 4b 34 62 35 38 36 37 64 30 0d 0a 46 72 6f 6d bK4b5867d0..From
00a0 3a 20 22 33 32 31 33 30 38 34 30 30 33 22 20 3c : "3213084003" <
00b0 73 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 sip:3213084003@2
00c0 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 3b 74 09.114.219.69>;t
00d0 61 67 3d 61 73 37 32 31 63 32 32 63 34 0d 0a 54 ag=as721c22c4..T
00e0 6f 3a 20 3c 73 69 70 3a 30 30 33 32 31 34 30 39 o: <sip:00321409
00f0 33 37 37 33 40 32 30 39 2e 31 31 34 2e 32 31 39 3773@209.114.219
0100 2e 39 30 3e 3b 74 61 67 3d 34 44 30 39 39 32 38 .90>;tag=4D09928
0110 30 2d 37 41 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 0-7A..Contact: <
0120 73 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 sip:3213084003@2
0130 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 0d 0a 09.114.219.69>..
0140 43 61 6c 6c 2d 49 44 3a 20 35 33 37 62 32 66 38 Call-ID: 537b2f8
0150 38 32 36 38 61 33 62 66 34 31 63 39 32 61 65 65 8268a3bf41c92aee
0160 39 34 38 38 65 38 35 35 33 40 32 30 39 2e 31 31 9488e8553@209.11
0170 34 2e 32 31 39 2e 36 39 0d 0a 43 53 65 71 3a 20 4.219.69..CSeq:
0180 31 30 34 20 49 4e 56 49 54 45 0d 0a 55 73 65 72 104 INVITE..User
0190 2d 41 67 65 6e 74 3a 20 48 43 43 20 41 73 74 65 -Agent: HCC Aste
01a0 72 69 73 6b 20 50 42 58 0d 0a 41 6c 6c 6f 77 3a risk PBX..Allow:
01b0 20 49 4e 56 49 54 45 2c 20 41 43 4b 2c 20 43 41 INVITE, ACK, CA
01c0 4e 43 45 4c 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 NCEL, OPTIONS, B
01d0 59 45 2c 20 52 45 46 45 52 0d 0a 43 6f 6e 74 65 YE, REFER..Conte
01e0 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 nt-Type: applica
01f0 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f 6e 74 65 6e tion/sdp..Conten
0200 74 2d 4c 65 6e 67 74 68 3a 20 32 36 38 0d 0a 0d t-Length: 268...
0210 0a 76 3d 30 0d 0a 6f 3d 72 6f 6f 74 20 33 30 33 .v=0..o=root 303
0220 32 20 33 30 33 34 20 49 4e 20 49 50 34 20 32 30 2 3034 IN IP4 20
0230 39 2e 31 31 34 2e 32 31 39 2e 39 38 0d 0a 73 3d 9.114.219.98..s=
0240 73 65 73 73 69 6f 6e 0d 0a 63 3d 49 4e 20 49 50 session..c=IN IP
0250 34 20 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 38 4 209.114.219.98
0260 0d 0a 74 3d 30 20 30 0d 0a 6d 3d 61 75 64 69 6f ..t=0 0..m=audio
0270 20 31 36 33 38 34 20 52 54 50 2f 41 56 50 20 30 16384 RTP/AVP 0
0280 20 38 20 31 38 20 31 30 31 0d 0a 61 3d 72 74 70 8 18 101..a=rtp
0290 6d 61 70 3a 30 20 50 43 4d 55 2f 38 30 30 30 0d map:0 PCMU/8000.
02a0 0a 61 3d 72 74 70 6d 61 70 3a 38 20 50 43 4d 41 .a=rtpmap:8 PCMA
02b0 2f 38 30 30 30 0d 0a 61 3d 72 74 70 6d 61 70 3a /8000..a=rtpmap:
02c0 31 38 20 47 37 32 39 2f 38 30 30 30 0d 0a 61 3d 18 G729/8000..a=
02d0 72 74 70 6d 61 70 3a 31 30 31 20 74 65 6c 65 70 rtpmap:101 telep
02e0 68 6f 6e 65 2d 65 76 65 6e 74 2f 38 30 30 30 0d hone-event/8000.
02f0 0a 61 3d 66 6d 74 70 3a 31 30 31 20 30 2d 31 36 .a=fmtp:101 0-16
0300 0d 0a 61 3d 73 69 6c 65 6e 63 65 53 75 70 70 3a ..a=silenceSupp:
0310 6f 66 66 20 2d 20 2d 20 2d 20 2d 0d 0a off - - - -..
No. Time Source Destination Protocol Info
18 0.402634 209.114.219.90 209.114.219.69 SIP Status: 100 Trying
Frame 18 (445 bytes on wire, 445 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.472942000
Time delta from previous packet: 0.004866000 seconds
Time since reference or first frame: 0.402634000 seconds
Frame Number: 18
Packet Length: 445 bytes
Capture Length: 445 bytes
Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:b0:8e:35:44:00 (209.114.219.90)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00)
0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 431
Identification: 0x351f (13599)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 255
Protocol: UDP (0x11)
Header checksum: 0x2b31 (correct)
Source: 209.114.219.90 (209.114.219.90)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060)
Source port: 56262 (56262)
Destination port: 5060 (5060)
Length: 411
Checksum: 0x1548 (correct)
Session Initiation Protocol
Status-Line: SIP/2.0 100 Trying
Status-Code: 100
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK4b5867d0
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Date: Wed, 05 Jan 2005 23:34:43 GMT
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
Server: Cisco-SIPGateway/IOS-12.x
CSeq: 104 INVITE
Allow-Events: telephone-event
Content-Length: 0
0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh
0010 01 af 35 1f 00 00 ff 11 2b 31 d1 72 db 5a d1 72 ..5.....+1.r.Z.r
0020 db 45 db c6 13 c4 01 9b 15 48 53 49 50 2f 32 2e .E.......HSIP/2.
0030 30 20 31 30 30 20 54 72 79 69 6e 67 0d 0a 56 69 0 100 Trying..Vi
0040 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 a: SIP/2.0/UDP 2
0050 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 09.114.219.69:50
0060 36 30 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 60;branch=z9hG4b
0070 4b 34 62 35 38 36 37 64 30 0d 0a 46 72 6f 6d 3a K4b5867d0..From:
0080 20 22 33 32 31 33 30 38 34 30 30 33 22 20 3c 73 "3213084003" <s
0090 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 30 ip:3213084003@20
00a0 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 3b 74 61 9.114.219.69>;ta
00b0 67 3d 61 73 37 32 31 63 32 32 63 34 0d 0a 54 6f g=as721c22c4..To
00c0 3a 20 3c 73 69 70 3a 30 30 33 32 31 34 30 39 33 : <sip:003214093
00d0 37 37 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 773@209.114.219.
00e0 39 30 3e 3b 74 61 67 3d 34 44 30 39 39 32 38 30 90>;tag=4D099280
00f0 2d 37 41 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 -7A..Date: Wed,
0100 30 35 20 4a 61 6e 20 32 30 30 35 20 32 33 3a 33 05 Jan 2005 23:3
0110 34 3a 34 33 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 4:43 GMT..Call-I
0120 44 3a 20 35 33 37 62 32 66 38 38 32 36 38 61 33 D: 537b2f88268a3
0130 62 66 34 31 63 39 32 61 65 65 39 34 38 38 65 38 bf41c92aee9488e8
0140 35 35 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 553@209.114.219.
0150 36 39 0d 0a 53 65 72 76 65 72 3a 20 43 69 73 63 69..Server: Cisc
0160 6f 2d 53 49 50 47 61 74 65 77 61 79 2f 49 4f 53 o-SIPGateway/IOS
0170 2d 31 32 2e 78 0d 0a 43 53 65 71 3a 20 31 30 34 -12.x..CSeq: 104
0180 20 49 4e 56 49 54 45 0d 0a 41 6c 6c 6f 77 2d 45 INVITE..Allow-E
0190 76 65 6e 74 73 3a 20 74 65 6c 65 70 68 6f 6e 65 vents: telephone
01a0 2d 65 76 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d -event..Content-
01b0 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Length: 0....
No. Time Source Destination Protocol Info
19 0.403859 209.114.219.90 209.114.219.69 SIP/SDP Status: 200 OK, with session description
Frame 19 (892 bytes on wire, 892 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.474167000
Time delta from previous packet: 0.001225000 seconds
Time since reference or first frame: 0.403859000 seconds
Frame Number: 19
Packet Length: 892 bytes
Capture Length: 892 bytes
Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:b0:8e:35:44:00 (209.114.219.90)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00)
0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 878
Identification: 0x3520 (13600)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 255
Protocol: UDP (0x11)
Header checksum: 0x2971 (correct)
Source: 209.114.219.90 (209.114.219.90)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060)
Source port: 56262 (56262)
Destination port: 5060 (5060)
Length: 858
Checksum: 0x0c10 (correct)
Session Initiation Protocol
Status-Line: SIP/2.0 200 OK
Status-Code: 200
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK4b5867d0
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Date: Wed, 05 Jan 2005 23:34:43 GMT
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
Server: Cisco-SIPGateway/IOS-12.x
CSeq: 104 INVITE
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER
Allow-Events: telephone-event
Contact: <sip:003214093773@209.114.219.90:5060>
Content-Type: application/sdp
Content-Length: 263
Message body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): CiscoSystemsSIP-GW-UserAgent 614 7261 IN IP4 209.114.219.90
Owner Username: CiscoSystemsSIP-GW-UserAgent
Session ID: 614
Session Version: 7261
Owner Network Type: IN
Owner Address Type: IP4
Owner Address: 209.114.219.90
Session Name (s): SIP Call
Connection Information (c): IN IP4 209.114.219.90
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 209.114.219.90
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Media Description, name and address (m): audio 17302 RTP/AVP 18 101
Media Type: audio
Media Port: 17302
Media Proto: RTP/AVP
Media Format: ITU-T G.729
Media Format: 101
Connection Information (c): IN IP4 209.114.219.90
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 209.114.219.90
Media Attribute (a): rtpmap:18 G729/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 18 G729/8000
Media Attribute (a): fmtp:18 annexb=no
Media Attribute Fieldname: fmtp
Media Attribute Value: 18 annexb=no
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 101 telephone-event/8000
Media Attribute (a): fmtp:101 0-16
Media Attribute Fieldname: fmtp
Media Attribute Value: 101 0-16
0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh
0010 03 6e 35 20 00 00 ff 11 29 71 d1 72 db 5a d1 72 .n5 ....)q.r.Z.r
0020 db 45 db c6 13 c4 03 5a 0c 10 53 49 50 2f 32 2e .E.....Z..SIP/2.
0030 30 20 32 30 30 20 4f 4b 0d 0a 56 69 61 3a 20 53 0 200 OK..Via: S
0040 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 2e 31 IP/2.0/UDP 209.1
0050 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 3b 62 14.219.69:5060;b
0060 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 34 62 35 ranch=z9hG4bK4b5
0070 38 36 37 64 30 0d 0a 46 72 6f 6d 3a 20 22 33 32 867d0..From: "32
0080 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3a 33 13084003" <sip:3
0090 32 31 33 30 38 34 30 30 33 40 32 30 39 2e 31 31 213084003@209.11
00a0 34 2e 32 31 39 2e 36 39 3e 3b 74 61 67 3d 61 73 4.219.69>;tag=as
00b0 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 3c 73 721c22c4..To: <s
00c0 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 33 40 ip:003214093773@
00d0 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3e 3b 209.114.219.90>;
00e0 74 61 67 3d 34 44 30 39 39 32 38 30 2d 37 41 0d tag=4D099280-7A.
00f0 0a 44 61 74 65 3a 20 57 65 64 2c 20 30 35 20 4a .Date: Wed, 05 J
0100 61 6e 20 32 30 30 35 20 32 33 3a 33 34 3a 34 33 an 2005 23:34:43
0110 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 44 3a 20 35 GMT..Call-ID: 5
0120 33 37 62 32 66 38 38 32 36 38 61 33 62 66 34 31 37b2f88268a3bf41
0130 63 39 32 61 65 65 39 34 38 38 65 38 35 35 33 40 c92aee9488e8553@
0140 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 0d 0a 209.114.219.69..
0150 53 65 72 76 65 72 3a 20 43 69 73 63 6f 2d 53 49 Server: Cisco-SI
0160 50 47 61 74 65 77 61 79 2f 49 4f 53 2d 31 32 2e PGateway/IOS-12.
0170 78 0d 0a 43 53 65 71 3a 20 31 30 34 20 49 4e 56 x..CSeq: 104 INV
0180 49 54 45 0d 0a 41 6c 6c 6f 77 3a 20 49 4e 56 49 ITE..Allow: INVI
0190 54 45 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 59 45 TE, OPTIONS, BYE
01a0 2c 20 43 41 4e 43 45 4c 2c 20 41 43 4b 2c 20 50 , CANCEL, ACK, P
01b0 52 41 43 4b 2c 20 43 4f 4d 45 54 2c 20 52 45 46 RACK, COMET, REF
01c0 45 52 2c 20 53 55 42 53 43 52 49 42 45 2c 20 4e ER, SUBSCRIBE, N
01d0 4f 54 49 46 59 2c 20 49 4e 46 4f 2c 20 55 50 44 OTIFY, INFO, UPD
01e0 41 54 45 2c 20 52 45 47 49 53 54 45 52 0d 0a 41 ATE, REGISTER..A
01f0 6c 6c 6f 77 2d 45 76 65 6e 74 73 3a 20 74 65 6c llow-Events: tel
0200 65 70 68 6f 6e 65 2d 65 76 65 6e 74 0d 0a 43 6f ephone-event..Co
0210 6e 74 61 63 74 3a 20 3c 73 69 70 3a 30 30 33 32 ntact: <sip:0032
0220 31 34 30 39 33 37 37 33 40 32 30 39 2e 31 31 34 14093773@209.114
0230 2e 32 31 39 2e 39 30 3a 35 30 36 30 3e 0d 0a 43 .219.90:5060>..C
0240 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 ontent-Type: app
0250 6c 69 63 61 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f lication/sdp..Co
0260 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 36 ntent-Length: 26
0270 33 0d 0a 0d 0a 76 3d 30 0d 0a 6f 3d 43 69 73 63 3....v=0..o=Cisc
0280 6f 53 79 73 74 65 6d 73 53 49 50 2d 47 57 2d 55 oSystemsSIP-GW-U
0290 73 65 72 41 67 65 6e 74 20 36 31 34 20 37 32 36 serAgent 614 726
02a0 31 20 49 4e 20 49 50 34 20 32 30 39 2e 31 31 34 1 IN IP4 209.114
02b0 2e 32 31 39 2e 39 30 0d 0a 73 3d 53 49 50 20 43 .219.90..s=SIP C
02c0 61 6c 6c 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 all..c=IN IP4 20
02d0 39 2e 31 31 34 2e 32 31 39 2e 39 30 0d 0a 74 3d 9.114.219.90..t=
02e0 30 20 30 0d 0a 6d 3d 61 75 64 69 6f 20 31 37 33 0 0..m=audio 173
02f0 30 32 20 52 54 50 2f 41 56 50 20 31 38 20 31 30 02 RTP/AVP 18 10
0300 31 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 39 2e 1..c=IN IP4 209.
0310 31 31 34 2e 32 31 39 2e 39 30 0d 0a 61 3d 72 74 114.219.90..a=rt
0320 70 6d 61 70 3a 31 38 20 47 37 32 39 2f 38 30 30 pmap:18 G729/800
0330 30 0d 0a 61 3d 66 6d 74 70 3a 31 38 20 61 6e 6e 0..a=fmtp:18 ann
0340 65 78 62 3d 6e 6f 0d 0a 61 3d 72 74 70 6d 61 70 exb=no..a=rtpmap
0350 3a 31 30 31 20 74 65 6c 65 70 68 6f 6e 65 2d 65 :101 telephone-e
0360 76 65 6e 74 2f 38 30 30 30 0d 0a 61 3d 66 6d 74 vent/8000..a=fmt
0370 70 3a 31 30 31 20 30 2d 31 36 0d 0a p:101 0-16..
No. Time Source Destination Protocol Info
20 0.403996 209.114.219.69 209.114.219.90 SIP Request: ACK sip:003214093773@209.114.219.90:5060
Frame 20 (441 bytes on wire, 441 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.474304000
Time delta from previous packet: 0.000137000 seconds
Time since reference or first frame: 0.403996000 seconds
Frame Number: 20
Packet Length: 441 bytes
Capture Length: 441 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00
Destination: 00:b0:8e:35:44:00 (209.114.219.90)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 427
Identification: 0x0aa9 (2729)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xd4fb (correct)
Source: 209.114.219.69 (209.114.219.69)
Destination: 209.114.219.90 (209.114.219.90)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 407
Checksum: 0x5b2e (incorrect, should be 0x846b)
Session Initiation Protocol
Request-Line: ACK sip:003214093773@209.114.219.90:5060 SIP/2.0
Method: ACK
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK6734289d
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Contact: <sip:3213084003@209.114.219.69>
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
CSeq: 104 ACK
User-Agent: HCC Asterisk PBX
Content-Length: 0
0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E.
0010 01 ab 0a a9 40 00 40 11 d4 fb d1 72 db 45 d1 72 ....@.@....r.E.r
0020 db 5a 13 c4 13 c4 01 97 5b 2e 41 43 4b 20 73 69 .Z......[.ACK si
0030 70 3a 30 30 33 32 31 34 30 39 33 37 37 33 40 32 p:003214093773@2
0040 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3a 35 30 09.114.219.90:50
0050 36 30 20 53 49 50 2f 32 2e 30 0d 0a 56 69 61 3a 60 SIP/2.0..Via:
0060 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 SIP/2.0/UDP 209
0070 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 .114.219.69:5060
0080 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 36 ;branch=z9hG4bK6
0090 37 33 34 32 38 39 64 0d 0a 46 72 6f 6d 3a 20 22 734289d..From: "
00a0 33 32 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3213084003" <sip
00b0 3a 33 32 31 33 30 38 34 30 30 33 40 32 30 39 2e :3213084003@209.
00c0 31 31 34 2e 32 31 39 2e 36 39 3e 3b 74 61 67 3d 114.219.69>;tag=
00d0 61 73 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 as721c22c4..To:
00e0 3c 73 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 <sip:00321409377
00f0 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3@209.114.219.90
0100 3e 3b 74 61 67 3d 34 44 30 39 39 32 38 30 2d 37 >;tag=4D099280-7
0110 41 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 73 69 70 A..Contact: <sip
0120 3a 33 32 31 33 30 38 34 30 30 33 40 32 30 39 2e :3213084003@209.
0130 31 31 34 2e 32 31 39 2e 36 39 3e 0d 0a 43 61 6c 114.219.69>..Cal
0140 6c 2d 49 44 3a 20 35 33 37 62 32 66 38 38 32 36 l-ID: 537b2f8826
0150 38 61 33 62 66 34 31 63 39 32 61 65 65 39 34 38 8a3bf41c92aee948
0160 38 65 38 35 35 33 40 32 30 39 2e 31 31 34 2e 32 8e8553@209.114.2
0170 31 39 2e 36 39 0d 0a 43 53 65 71 3a 20 31 30 34 19.69..CSeq: 104
0180 20 41 43 4b 0d 0a 55 73 65 72 2d 41 67 65 6e 74 ACK..User-Agent
0190 3a 20 48 43 43 20 41 73 74 65 72 69 73 6b 20 50 : HCC Asterisk P
01a0 42 58 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 BX..Content-Leng
01b0 74 68 3a 20 30 0d 0a 0d 0a th: 0....
No. Time Source Destination Protocol Info
21 0.413122 209.114.219.98 209.114.219.69 RTP Payload type=ITU-T G.729, SSRC=3448847109, Seq=438, Time=71120
Frame 21 (74 bytes on wire, 74 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.483430000
Time delta from previous packet: 0.009126000 seconds
Time since reference or first frame: 0.413122000 seconds
Frame Number: 21
Packet Length: 74 bytes
Capture Length: 74 bytes
Ethernet II, Src: 00:48:54:6f:8a:d2, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:48:54:6f:8a:d2 (209.114.219.98)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.98 (209.114.219.98), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 60
Identification: 0x01bc (444)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 249
Protocol: UDP (0x11)
Header checksum: 0x6667 (correct)
Source: 209.114.219.98 (209.114.219.98)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 16384 (16384), Dst Port: 10204 (10204)
Source port: 16384 (16384)
Destination port: 10204 (10204)
Length: 40
Checksum: 0xdf66 (correct)
Real-Time Transport Protocol
Stream setup by SDP (frame 9)
Setup frame: 9
Setup Method: SDP
10.. .... = Version: RFC 1889 Version (2)
..0. .... = Padding: False
...0 .... = Extension: False
.... 0000 = Contributing source identifiers count: 0
0... .... = Marker: False
.001 0010 = Payload type: ITU-T G.729 (18)
Sequence number: 438
Timestamp: 71120
Synchronization Source identifier: 3448847109
Payload: 40B8F8DA491249CC591B548FDF8A0D93...
0000 00 11 43 58 7a 18 00 48 54 6f 8a d2 08 00 45 00 ..CXz..HTo....E.
0010 00 3c 01 bc 00 00 f9 11 66 67 d1 72 db 62 d1 72 .<......fg.r.b.r
0020 db 45 40 00 27 dc 00 28 df 66 80 12 01 b6 00 01 .E@.'..(.f......
0030 15 d0 cd 91 3b 05 40 b8 f8 da 49 12 49 cc 59 1b ....;.@...I.I.Y.
0040 54 8f df 8a 0d 93 77 43 e0 1e T.....wC..
No. Time Source Destination Protocol Info
22 0.413174 209.114.219.69 209.114.219.90 RTP Payload type=ITU-T G.729, SSRC=444875168, Seq=26155, Time=240
Frame 22 (74 bytes on wire, 74 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.483482000
Time delta from previous packet: 0.000052000 seconds
Time since reference or first frame: 0.413174000 seconds
Frame Number: 22
Packet Length: 74 bytes
Capture Length: 74 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00
Destination: 00:b0:8e:35:44:00 (209.114.219.90)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 60
Identification: 0x0001 (1)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xe112 (correct)
Source: 209.114.219.69 (209.114.219.69)
Destination: 209.114.219.90 (209.114.219.90)
User Datagram Protocol, Src Port: 10770 (10770), Dst Port: 17302 (17302)
Source port: 10770 (10770)
Destination port: 17302 (17302)
Length: 40
Checksum: 0x0000 (none)
Real-Time Transport Protocol
Stream setup by SDP (frame 56)
Setup frame: 56
Setup Method: SDP
10.. .... = Version: RFC 1889 Version (2)
..0. .... = Padding: False
...0 .... = Extension: False
.... 0000 = Contributing source identifiers count: 0
0... .... = Marker: False
.001 0010 = Payload type: ITU-T G.729 (18)
Sequence number: 26155
Timestamp: 240
Synchronization Source identifier: 444875168
Payload: 40B8F8DA491249CC591B548FDF8A0D93...
0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E.
0010 00 3c 00 01 40 00 40 11 e1 12 d1 72 db 45 d1 72 .<..@.@....r.E.r
0020 db 5a 2a 12 43 96 00 28 00 00 80 12 66 2b 00 00 .Z*.C..(....f+..
0030 00 f0 1a 84 41 a0 40 b8 f8 da 49 12 49 cc 59 1b ....A.@...I.I.Y.
0040 54 8f df 8a 0d 93 77 43 e0 1e T.....wC..
No. Time Source Destination Protocol Info
23 0.427044 209.114.219.98 209.114.219.69 SIP Request: ACK sip:1001@209.114.219.69
Frame 23 (374 bytes on wire, 374 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.497352000
Time delta from previous packet: 0.013870000 seconds
Time since reference or first frame: 0.427044000 seconds
Frame Number: 23
Packet Length: 374 bytes
Capture Length: 374 bytes
Ethernet II, Src: 00:48:54:6f:8a:d2, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:48:54:6f:8a:d2 (209.114.219.98)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.98 (209.114.219.98), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 360
Identification: 0x01bd (445)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 249
Protocol: UDP (0x11)
Header checksum: 0x653a (correct)
Source: 209.114.219.98 (209.114.219.98)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 340
Checksum: 0xc66a (correct)
Session Initiation Protocol
Request-Line: ACK sip:1001@209.114.219.69 SIP/2.0
Method: ACK
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 192.168.200.169:5060
From: 3213084003 <sip:3213084003@209.114.219.69;user=phone>;tag=3518047997
SIP Display info: 3213084003
SIP from address: sip:3213084003@209.114.219.69
SIP tag: 3518047997
To: <sip:1001@209.114.219.69;user=phone>;tag=as6a4d6dad
SIP to address: sip:1001@209.114.219.69
SIP tag: as6a4d6dad
Call-ID: 1314847947@192.168.200.169
CSeq: 1 ACK
User-Agent: Cisco ATA 186 v3.1.0 atasip (040211A)
Content-Length: 0
0000 00 11 43 58 7a 18 00 48 54 6f 8a d2 08 00 45 00 ..CXz..HTo....E.
0010 01 68 01 bd 00 00 f9 11 65 3a d1 72 db 62 d1 72 .h......e:.r.b.r
0020 db 45 13 c4 13 c4 01 54 c6 6a 41 43 4b 20 73 69 .E.....T.jACK si
0030 70 3a 31 30 30 31 40 32 30 39 2e 31 31 34 2e 32 p:1001@209.114.2
0040 31 39 2e 36 39 20 53 49 50 2f 32 2e 30 0d 0a 56 19.69 SIP/2.0..V
0050 69 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 ia: SIP/2.0/UDP
0060 31 39 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 3a 192.168.200.169:
0070 35 30 36 30 0d 0a 46 72 6f 6d 3a 20 33 32 31 33 5060..From: 3213
0080 30 38 34 30 30 33 20 3c 73 69 70 3a 33 32 31 33 084003 <sip:3213
0090 30 38 34 30 30 33 40 32 30 39 2e 31 31 34 2e 32 084003@209.114.2
00a0 31 39 2e 36 39 3b 75 73 65 72 3d 70 68 6f 6e 65 19.69;user=phone
00b0 3e 3b 74 61 67 3d 33 35 31 38 30 34 37 39 39 37 >;tag=3518047997
00c0 0d 0a 54 6f 3a 20 3c 73 69 70 3a 31 30 30 31 40 ..To: <sip:1001@
00d0 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3b 75 209.114.219.69;u
00e0 73 65 72 3d 70 68 6f 6e 65 3e 3b 74 61 67 3d 61 ser=phone>;tag=a
00f0 73 36 61 34 64 36 64 61 64 0d 0a 43 61 6c 6c 2d s6a4d6dad..Call-
0100 49 44 3a 20 31 33 31 34 38 34 37 39 34 37 40 31 ID: 1314847947@1
0110 39 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 0d 0a 92.168.200.169..
0120 43 53 65 71 3a 20 31 20 41 43 4b 0d 0a 55 73 65 CSeq: 1 ACK..Use
0130 72 2d 41 67 65 6e 74 3a 20 43 69 73 63 6f 20 41 r-Agent: Cisco A
0140 54 41 20 31 38 36 20 20 76 33 2e 31 2e 30 20 61 TA 186 v3.1.0 a
0150 74 61 73 69 70 20 28 30 34 30 32 31 31 41 29 0d tasip (040211A).
0160 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a .Content-Length:
0170 20 30 0d 0a 0d 0a 0....
No. Time Source Destination Protocol Info
24 0.427290 209.114.219.69 209.114.219.98 SIP/SDP Request: INVITE sip:3213084003@192.168.200.169:5060, with session description
Frame 24 (738 bytes on wire, 738 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.497598000
Time delta from previous packet: 0.000246000 seconds
Time since reference or first frame: 0.427290000 seconds
Frame Number: 24
Packet Length: 738 bytes
Capture Length: 738 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:48:54:6f:8a:d2
Destination: 00:48:54:6f:8a:d2 (209.114.219.98)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.98 (209.114.219.98)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 724
Identification: 0x0aaa (2730)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xd3c9 (correct)
Source: 209.114.219.69 (209.114.219.69)
Destination: 209.114.219.98 (209.114.219.98)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 704
Checksum: 0x5c5f (incorrect, should be 0x79f5)
Session Initiation Protocol
Request-Line: INVITE sip:3213084003@192.168.200.169:5060 SIP/2.0
Method: INVITE
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK569565cd;rport
From: <sip:1001@209.114.219.69;user=phone>;tag=as6a4d6dad
SIP from address: sip:1001@209.114.219.69
SIP tag: as6a4d6dad
To: 3213084003 <sip:3213084003@209.114.219.69;user=phone>;tag=3518047997
SIP Display info: 3213084003
SIP to address: sip:3213084003@209.114.219.69
SIP tag: 3518047997
Contact: <sip:1001@209.114.219.69>
Call-ID: 1314847947@192.168.200.169
CSeq: 102 INVITE
User-Agent: HCC Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER
Content-Type: application/sdp
Content-Length: 220
Message body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): root 3032 3034 IN IP4 209.114.219.90
Owner Username: root
Session ID: 3032
Session Version: 3034
Owner Network Type: IN
Owner Address Type: IP4
Owner Address: 209.114.219.90
Session Name (s): session
Connection Information (c): IN IP4 209.114.219.90
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 209.114.219.90
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Media Description, name and address (m): audio 17302 RTP/AVP 18 101
Media Type: audio
Media Port: 17302
Media Proto: RTP/AVP
Media Format: ITU-T G.729
Media Format: 101
Media Attribute (a): rtpmap:18 G729/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 18 G729/8000
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 101 telephone-event/8000
Media Attribute (a): fmtp:101 0-16
Media Attribute Fieldname: fmtp
Media Attribute Value: 101 0-16
Media Attribute (a): silenceSupp:off - - - -
Media Attribute Fieldname: silenceSupp
Media Attribute Value: off - - - -
0000 00 48 54 6f 8a d2 00 11 43 58 7a 18 08 00 45 18 .HTo....CXz...E.
0010 02 d4 0a aa 40 00 40 11 d3 c9 d1 72 db 45 d1 72 ....@.@....r.E.r
0020 db 62 13 c4 13 c4 02 c0 5c 5f 49 4e 56 49 54 45 .b......\_INVITE
0030 20 73 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 sip:3213084003@
0040 31 39 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 3a 192.168.200.169:
0050 35 30 36 30 20 53 49 50 2f 32 2e 30 0d 0a 56 69 5060 SIP/2.0..Vi
0060 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 a: SIP/2.0/UDP 2
0070 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 09.114.219.69:50
0080 36 30 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 60;branch=z9hG4b
0090 4b 35 36 39 35 36 35 63 64 3b 72 70 6f 72 74 0d K569565cd;rport.
00a0 0a 46 72 6f 6d 3a 20 3c 73 69 70 3a 31 30 30 31 .From: <sip:1001
00b0 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3b @209.114.219.69;
00c0 75 73 65 72 3d 70 68 6f 6e 65 3e 3b 74 61 67 3d user=phone>;tag=
00d0 61 73 36 61 34 64 36 64 61 64 0d 0a 54 6f 3a 20 as6a4d6dad..To:
00e0 33 32 31 33 30 38 34 30 30 33 20 3c 73 69 70 3a 3213084003 <sip:
00f0 33 32 31 33 30 38 34 30 30 33 40 32 30 39 2e 31 3213084003@209.1
0100 31 34 2e 32 31 39 2e 36 39 3b 75 73 65 72 3d 70 14.219.69;user=p
0110 68 6f 6e 65 3e 3b 74 61 67 3d 33 35 31 38 30 34 hone>;tag=351804
0120 37 39 39 37 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 7997..Contact: <
0130 73 69 70 3a 31 30 30 31 40 32 30 39 2e 31 31 34 sip:1001@209.114
0140 2e 32 31 39 2e 36 39 3e 0d 0a 43 61 6c 6c 2d 49 .219.69>..Call-I
0150 44 3a 20 31 33 31 34 38 34 37 39 34 37 40 31 39 D: 1314847947@19
0160 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 0d 0a 43 2.168.200.169..C
0170 53 65 71 3a 20 31 30 32 20 49 4e 56 49 54 45 0d Seq: 102 INVITE.
0180 0a 55 73 65 72 2d 41 67 65 6e 74 3a 20 48 43 43 .User-Agent: HCC
0190 20 41 73 74 65 72 69 73 6b 20 50 42 58 0d 0a 41 Asterisk PBX..A
01a0 6c 6c 6f 77 3a 20 49 4e 56 49 54 45 2c 20 41 43 llow: INVITE, AC
01b0 4b 2c 20 43 41 4e 43 45 4c 2c 20 4f 50 54 49 4f K, CANCEL, OPTIO
01c0 4e 53 2c 20 42 59 45 2c 20 52 45 46 45 52 0d 0a NS, BYE, REFER..
01d0 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 Content-Type: ap
01e0 70 6c 69 63 61 74 69 6f 6e 2f 73 64 70 0d 0a 43 plication/sdp..C
01f0 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 ontent-Length: 2
0200 32 30 0d 0a 0d 0a 76 3d 30 0d 0a 6f 3d 72 6f 6f 20....v=0..o=roo
0210 74 20 33 30 33 32 20 33 30 33 34 20 49 4e 20 49 t 3032 3034 IN I
0220 50 34 20 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 P4 209.114.219.9
0230 30 0d 0a 73 3d 73 65 73 73 69 6f 6e 0d 0a 63 3d 0..s=session..c=
0240 49 4e 20 49 50 34 20 32 30 39 2e 31 31 34 2e 32 IN IP4 209.114.2
0250 31 39 2e 39 30 0d 0a 74 3d 30 20 30 0d 0a 6d 3d 19.90..t=0 0..m=
0260 61 75 64 69 6f 20 31 37 33 30 32 20 52 54 50 2f audio 17302 RTP/
0270 41 56 50 20 31 38 20 31 30 31 0d 0a 61 3d 72 74 AVP 18 101..a=rt
0280 70 6d 61 70 3a 31 38 20 47 37 32 39 2f 38 30 30 pmap:18 G729/800
0290 30 0d 0a 61 3d 72 74 70 6d 61 70 3a 31 30 31 20 0..a=rtpmap:101
02a0 74 65 6c 65 70 68 6f 6e 65 2d 65 76 65 6e 74 2f telephone-event/
02b0 38 30 30 30 0d 0a 61 3d 66 6d 74 70 3a 31 30 31 8000..a=fmtp:101
02c0 20 30 2d 31 36 0d 0a 61 3d 73 69 6c 65 6e 63 65 0-16..a=silence
02d0 53 75 70 70 3a 6f 66 66 20 2d 20 2d 20 2d 20 2d Supp:off - - - -
02e0 0d 0a ..
No. Time Source Destination Protocol Info
25 0.433507 209.114.219.98 209.114.219.69 RTP Payload type=ITU-T G.729, SSRC=3448847109, Seq=439, Time=71280
Frame 25 (74 bytes on wire, 74 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.503815000
Time delta from previous packet: 0.006217000 seconds
Time since reference or first frame: 0.433507000 seconds
Frame Number: 25
Packet Length: 74 bytes
Capture Length: 74 bytes
Ethernet II, Src: 00:48:54:6f:8a:d2, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:48:54:6f:8a:d2 (209.114.219.98)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.98 (209.114.219.98), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 60
Identification: 0x01be (446)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 249
Protocol: UDP (0x11)
Header checksum: 0x6665 (correct)
Source: 209.114.219.98 (209.114.219.98)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 16384 (16384), Dst Port: 10204 (10204)
Source port: 16384 (16384)
Destination port: 10204 (10204)
Length: 40
Checksum: 0x47d9 (correct)
Real-Time Transport Protocol
Stream setup by SDP (frame 9)
Setup frame: 9
Setup Method: SDP
10.. .... = Version: RFC 1889 Version (2)
..0. .... = Padding: False
...0 .... = Extension: False
.... 0000 = Contributing source identifiers count: 0
0... .... = Marker: False
.001 0010 = Payload type: ITU-T G.729 (18)
Sequence number: 439
Timestamp: 71280
Synchronization Source identifier: 3448847109
Payload: 10E3E58F7FFEDC26CA90511021F8A12A...
0000 00 11 43 58 7a 18 00 48 54 6f 8a d2 08 00 45 00 ..CXz..HTo....E.
0010 00 3c 01 be 00 00 f9 11 66 65 d1 72 db 62 d1 72 .<......fe.r.b.r
0020 db 45 40 00 27 dc 00 28 47 d9 80 12 01 b7 00 01 .E@.'..(G.......
0030 16 70 cd 91 3b 05 10 e3 e5 8f 7f fe dc 26 ca 90 .p..;........&..
0040 51 10 21 f8 a1 2a 4b 66 d8 c6 Q.!..*Kf..
No. Time Source Destination Protocol Info
26 0.433571 209.114.219.69 209.114.219.90 RTP Payload type=ITU-T G.729, SSRC=444875168, Seq=26156, Time=400
Frame 26 (74 bytes on wire, 74 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.503879000
Time delta from previous packet: 0.000064000 seconds
Time since reference or first frame: 0.433571000 seconds
Frame Number: 26
Packet Length: 74 bytes
Capture Length: 74 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00
Destination: 00:b0:8e:35:44:00 (209.114.219.90)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 60
Identification: 0x0002 (2)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xe111 (correct)
Source: 209.114.219.69 (209.114.219.69)
Destination: 209.114.219.90 (209.114.219.90)
User Datagram Protocol, Src Port: 10770 (10770), Dst Port: 17302 (17302)
Source port: 10770 (10770)
Destination port: 17302 (17302)
Length: 40
Checksum: 0x0000 (none)
Real-Time Transport Protocol
Stream setup by SDP (frame 56)
Setup frame: 56
Setup Method: SDP
10.. .... = Version: RFC 1889 Version (2)
..0. .... = Padding: False
...0 .... = Extension: False
.... 0000 = Contributing source identifiers count: 0
0... .... = Marker: False
.001 0010 = Payload type: ITU-T G.729 (18)
Sequence number: 26156
Timestamp: 400
Synchronization Source identifier: 444875168
Payload: 10E3E58F7FFEDC26CA90511021F8A12A...
0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E.
0010 00 3c 00 02 40 00 40 11 e1 11 d1 72 db 45 d1 72 .<..@.@....r.E.r
0020 db 5a 2a 12 43 96 00 28 00 00 80 12 66 2c 00 00 .Z*.C..(....f,..
0030 01 90 1a 84 41 a0 10 e3 e5 8f 7f fe dc 26 ca 90 ....A........&..
0040 51 10 21 f8 a1 2a 4b 66 d8 c6 Q.!..*Kf..
No. Time Source Destination Protocol Info
27 0.454019 209.114.219.98 209.114.219.69 RTP Payload type=ITU-T G.729, SSRC=3448847109, Seq=440, Time=71440
Frame 27 (74 bytes on wire, 74 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.524327000
Time delta from previous packet: 0.020448000 seconds
Time since reference or first frame: 0.454019000 seconds
Frame Number: 27
Packet Length: 74 bytes
Capture Length: 74 bytes
Ethernet II, Src: 00:48:54:6f:8a:d2, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:48:54:6f:8a:d2 (209.114.219.98)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.98 (209.114.219.98), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 60
Identification: 0x01bf (447)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 249
Protocol: UDP (0x11)
Header checksum: 0x6664 (correct)
Source: 209.114.219.98 (209.114.219.98)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 16384 (16384), Dst Port: 10204 (10204)
Source port: 16384 (16384)
Destination port: 10204 (10204)
Length: 40
Checksum: 0x173a (correct)
Real-Time Transport Protocol
Stream setup by SDP (frame 9)
Setup frame: 9
Setup Method: SDP
10.. .... = Version: RFC 1889 Version (2)
..0. .... = Padding: False
...0 .... = Extension: False
.... 0000 = Contributing source identifiers count: 0
0... .... = Marker: False
.001 0010 = Payload type: ITU-T G.729 (18)
Sequence number: 440
Timestamp: 71440
Synchronization Source identifier: 3448847109
Payload: 40A2E1EDB75351930C52583381C1CB13...
0000 00 11 43 58 7a 18 00 48 54 6f 8a d2 08 00 45 00 ..CXz..HTo....E.
0010 00 3c 01 bf 00 00 f9 11 66 64 d1 72 db 62 d1 72 .<......fd.r.b.r
0020 db 45 40 00 27 dc 00 28 17 3a 80 12 01 b8 00 01 .E@.'..(.:......
0030 17 10 cd 91 3b 05 40 a2 e1 ed b7 53 51 93 0c 52 ....;.@....SQ..R
0040 58 33 81 c1 cb 13 42 61 66 54 X3....BafT
No. Time Source Destination Protocol Info
28 0.454065 209.114.219.69 209.114.219.90 RTP Payload type=ITU-T G.729, SSRC=444875168, Seq=26157, Time=560
Frame 28 (74 bytes on wire, 74 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.524373000
Time delta from previous packet: 0.000046000 seconds
Time since reference or first frame: 0.454065000 seconds
Frame Number: 28
Packet Length: 74 bytes
Capture Length: 74 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00
Destination: 00:b0:8e:35:44:00 (209.114.219.90)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 60
Identification: 0x0003 (3)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xe110 (correct)
Source: 209.114.219.69 (209.114.219.69)
Destination: 209.114.219.90 (209.114.219.90)
User Datagram Protocol, Src Port: 10770 (10770), Dst Port: 17302 (17302)
Source port: 10770 (10770)
Destination port: 17302 (17302)
Length: 40
Checksum: 0x0000 (none)
Real-Time Transport Protocol
Stream setup by SDP (frame 56)
Setup frame: 56
Setup Method: SDP
10.. .... = Version: RFC 1889 Version (2)
..0. .... = Padding: False
...0 .... = Extension: False
.... 0000 = Contributing source identifiers count: 0
0... .... = Marker: False
.001 0010 = Payload type: ITU-T G.729 (18)
Sequence number: 26157
Timestamp: 560
Synchronization Source identifier: 444875168
Payload: 40A2E1EDB75351930C52583381C1CB13...
0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E.
0010 00 3c 00 03 40 00 40 11 e1 10 d1 72 db 45 d1 72 .<..@.@....r.E.r
0020 db 5a 2a 12 43 96 00 28 00 00 80 12 66 2d 00 00 .Z*.C..(....f-..
0030 02 30 1a 84 41 a0 40 a2 e1 ed b7 53 51 93 0c 52 .0..A.@....SQ..R
0040 58 33 81 c1 cb 13 42 61 66 54 X3....BafT
No. Time Source Destination Protocol Info
29 0.472795 209.114.219.98 209.114.219.69 RTP Payload type=ITU-T G.729, SSRC=3448847109, Seq=441, Time=71600
Frame 29 (74 bytes on wire, 74 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.543103000
Time delta from previous packet: 0.018730000 seconds
Time since reference or first frame: 0.472795000 seconds
Frame Number: 29
Packet Length: 74 bytes
Capture Length: 74 bytes
Ethernet II, Src: 00:48:54:6f:8a:d2, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:48:54:6f:8a:d2 (209.114.219.98)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.98 (209.114.219.98), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 60
Identification: 0x01c0 (448)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 249
Protocol: UDP (0x11)
Header checksum: 0x6663 (correct)
Source: 209.114.219.98 (209.114.219.98)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 16384 (16384), Dst Port: 10204 (10204)
Source port: 16384 (16384)
Destination port: 10204 (10204)
Length: 40
Checksum: 0x5fe6 (correct)
Real-Time Transport Protocol
Stream setup by SDP (frame 9)
Setup frame: 9
Setup Method: SDP
10.. .... = Version: RFC 1889 Version (2)
..0. .... = Padding: False
...0 .... = Extension: False
.... 0000 = Contributing source identifiers count: 0
0... .... = Marker: False
.001 0010 = Payload type: ITU-T G.729 (18)
Sequence number: 441
Timestamp: 71600
Synchronization Source identifier: 3448847109
Payload: 7841E69237929A73C5D1722372038E3B...
0000 00 11 43 58 7a 18 00 48 54 6f 8a d2 08 00 45 00 ..CXz..HTo....E.
0010 00 3c 01 c0 00 00 f9 11 66 63 d1 72 db 62 d1 72 .<......fc.r.b.r
0020 db 45 40 00 27 dc 00 28 5f e6 80 12 01 b9 00 01 .E@.'..(_.......
0030 17 b0 cd 91 3b 05 78 41 e6 92 37 92 9a 73 c5 d1 ....;.xA..7..s..
0040 72 23 72 03 8e 3b 19 8d b9 9e r#r..;....
No. Time Source Destination Protocol Info
30 0.472940 209.114.219.69 209.114.219.90 RTP Payload type=ITU-T G.729, SSRC=444875168, Seq=26158, Time=720
Frame 30 (74 bytes on wire, 74 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.543248000
Time delta from previous packet: 0.000145000 seconds
Time since reference or first frame: 0.472940000 seconds
Frame Number: 30
Packet Length: 74 bytes
Capture Length: 74 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00
Destination: 00:b0:8e:35:44:00 (209.114.219.90)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 60
Identification: 0x0004 (4)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xe10f (correct)
Source: 209.114.219.69 (209.114.219.69)
Destination: 209.114.219.90 (209.114.219.90)
User Datagram Protocol, Src Port: 10770 (10770), Dst Port: 17302 (17302)
Source port: 10770 (10770)
Destination port: 17302 (17302)
Length: 40
Checksum: 0x0000 (none)
Real-Time Transport Protocol
Stream setup by SDP (frame 56)
Setup frame: 56
Setup Method: SDP
10.. .... = Version: RFC 1889 Version (2)
..0. .... = Padding: False
...0 .... = Extension: False
.... 0000 = Contributing source identifiers count: 0
0... .... = Marker: False
.001 0010 = Payload type: ITU-T G.729 (18)
Sequence number: 26158
Timestamp: 720
Synchronization Source identifier: 444875168
Payload: 7841E69237929A73C5D1722372038E3B...
0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E.
0010 00 3c 00 04 40 00 40 11 e1 0f d1 72 db 45 d1 72 .<..@.@....r.E.r
0020 db 5a 2a 12 43 96 00 28 00 00 80 12 66 2e 00 00 .Z*.C..(....f...
0030 02 d0 1a 84 41 a0 78 41 e6 92 37 92 9a 73 c5 d1 ....A.xA..7..s..
0040 72 23 72 03 8e 3b 19 8d b9 9e r#r..;....
No. Time Source Destination Protocol Info
31 0.480878 209.114.219.98 209.114.219.69 SIP/SDP Status: 200 OK, with session description
Frame 31 (794 bytes on wire, 794 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.551186000
Time delta from previous packet: 0.007938000 seconds
Time since reference or first frame: 0.480878000 seconds
Frame Number: 31
Packet Length: 794 bytes
Capture Length: 794 bytes
Ethernet II, Src: 00:48:54:6f:8a:d2, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:48:54:6f:8a:d2 (209.114.219.98)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.98 (209.114.219.98), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 780
Identification: 0x01c1 (449)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 249
Protocol: UDP (0x11)
Header checksum: 0x6392 (correct)
Source: 209.114.219.98 (209.114.219.98)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 760
Checksum: 0x2f7c (correct)
Session Initiation Protocol
Status-Line: SIP/2.0 200 OK
Status-Code: 200
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK569565cd;rport
From: <sip:1001@209.114.219.69;user=phone>;tag=as6a4d6dad
SIP from address: sip:1001@209.114.219.69
SIP tag: as6a4d6dad
To: 3213084003 <sip:3213084003@209.114.219.69;user=phone>;tag=3518047997
SIP Display info: 3213084003
SIP to address: sip:3213084003@209.114.219.69
SIP tag: 3518047997
Call-ID: 1314847947@192.168.200.169
CSeq: 102 INVITE
Contact: 3213084003 <sip:3213084003@192.168.200.169:5060;user=phone;transport=udp>
Server: Cisco ATA 186 v3.1.0 atasip (040211A)
Allow: ACK, BYE, CANCEL, INVITE, NOTIFY, OPTIONS, REFER, REGISTER
Content-Length: 228
Content-Type: application/sdp
Message body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): 3213084003 2371 2371 IN IP4 192.168.200.169
Owner Username: 3213084003
Session ID: 2371
Session Version: 2371
Owner Network Type: IN
Owner Address Type: IP4
Owner Address: 192.168.200.169
Session Name (s): ATA186 Call
Connection Information (c): IN IP4 192.168.200.169
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 192.168.200.169
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Media Description, name and address (m): audio 16384 RTP/AVP 18 101
Media Type: audio
Media Port: 16384
Media Proto: RTP/AVP
Media Format: ITU-T G.729
Media Format: 101
Media Attribute (a): rtpmap:18 G729/8000/1
Media Attribute Fieldname: rtpmap
Media Attribute Value: 18 G729/8000/1
Media Attribute (a): fmtp:18 annexb=no
Media Attribute Fieldname: fmtp
Media Attribute Value: 18 annexb=no
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 101 telephone-event/8000
Media Attribute (a): fmtp:101 0-15
Media Attribute Fieldname: fmtp
Media Attribute Value: 101 0-15
0000 00 11 43 58 7a 18 00 48 54 6f 8a d2 08 00 45 00 ..CXz..HTo....E.
0010 03 0c 01 c1 00 00 f9 11 63 92 d1 72 db 62 d1 72 ........c..r.b.r
0020 db 45 13 c4 13 c4 02 f8 2f 7c 53 49 50 2f 32 2e .E....../|SIP/2.
0030 30 20 32 30 30 20 4f 4b 0d 0a 56 69 61 3a 20 53 0 200 OK..Via: S
0040 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 2e 31 IP/2.0/UDP 209.1
0050 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 3b 62 14.219.69:5060;b
0060 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 35 36 39 ranch=z9hG4bK569
0070 35 36 35 63 64 3b 72 70 6f 72 74 0d 0a 46 72 6f 565cd;rport..Fro
0080 6d 3a 20 3c 73 69 70 3a 31 30 30 31 40 32 30 39 m: <sip:1001@209
0090 2e 31 31 34 2e 32 31 39 2e 36 39 3b 75 73 65 72 .114.219.69;user
00a0 3d 70 68 6f 6e 65 3e 3b 74 61 67 3d 61 73 36 61 =phone>;tag=as6a
00b0 34 64 36 64 61 64 0d 0a 54 6f 3a 20 33 32 31 33 4d6dad..To: 3213
00c0 30 38 34 30 30 33 20 3c 73 69 70 3a 33 32 31 33 084003 <sip:3213
00d0 30 38 34 30 30 33 40 32 30 39 2e 31 31 34 2e 32 084003@209.114.2
00e0 31 39 2e 36 39 3b 75 73 65 72 3d 70 68 6f 6e 65 19.69;user=phone
00f0 3e 3b 74 61 67 3d 33 35 31 38 30 34 37 39 39 37 >;tag=3518047997
0100 0d 0a 43 61 6c 6c 2d 49 44 3a 20 31 33 31 34 38 ..Call-ID: 13148
0110 34 37 39 34 37 40 31 39 32 2e 31 36 38 2e 32 30 47947@192.168.20
0120 30 2e 31 36 39 0d 0a 43 53 65 71 3a 20 31 30 32 0.169..CSeq: 102
0130 20 49 4e 56 49 54 45 0d 0a 43 6f 6e 74 61 63 74 INVITE..Contact
0140 3a 20 33 32 31 33 30 38 34 30 30 33 20 3c 73 69 : 3213084003 <si
0150 70 3a 33 32 31 33 30 38 34 30 30 33 40 31 39 32 p:3213084003@192
0160 2e 31 36 38 2e 32 30 30 2e 31 36 39 3a 35 30 36 .168.200.169:506
0170 30 3b 75 73 65 72 3d 70 68 6f 6e 65 3b 74 72 61 0;user=phone;tra
0180 6e 73 70 6f 72 74 3d 75 64 70 3e 0d 0a 53 65 72 nsport=udp>..Ser
0190 76 65 72 3a 20 43 69 73 63 6f 20 41 54 41 20 31 ver: Cisco ATA 1
01a0 38 36 20 20 76 33 2e 31 2e 30 20 61 74 61 73 69 86 v3.1.0 atasi
01b0 70 20 28 30 34 30 32 31 31 41 29 0d 0a 41 6c 6c p (040211A)..All
01c0 6f 77 3a 20 41 43 4b 2c 20 42 59 45 2c 20 43 41 ow: ACK, BYE, CA
01d0 4e 43 45 4c 2c 20 49 4e 56 49 54 45 2c 20 4e 4f NCEL, INVITE, NO
01e0 54 49 46 59 2c 20 4f 50 54 49 4f 4e 53 2c 20 52 TIFY, OPTIONS, R
01f0 45 46 45 52 2c 20 52 45 47 49 53 54 45 52 0d 0a EFER, REGISTER..
0200 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 Content-Length:
0210 32 32 38 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 228..Content-Typ
0220 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 73 e: application/s
0230 64 70 0d 0a 0d 0a 76 3d 30 0d 0a 6f 3d 33 32 31 dp....v=0..o=321
0240 33 30 38 34 30 30 33 20 32 33 37 31 20 32 33 37 3084003 2371 237
0250 31 20 49 4e 20 49 50 34 20 31 39 32 2e 31 36 38 1 IN IP4 192.168
0260 2e 32 30 30 2e 31 36 39 0d 0a 73 3d 41 54 41 31 .200.169..s=ATA1
0270 38 36 20 43 61 6c 6c 0d 0a 63 3d 49 4e 20 49 50 86 Call..c=IN IP
0280 34 20 31 39 32 2e 31 36 38 2e 32 30 30 2e 31 36 4 192.168.200.16
0290 39 0d 0a 74 3d 30 20 30 0d 0a 6d 3d 61 75 64 69 9..t=0 0..m=audi
02a0 6f 20 31 36 33 38 34 20 52 54 50 2f 41 56 50 20 o 16384 RTP/AVP
02b0 31 38 20 31 30 31 0d 0a 61 3d 72 74 70 6d 61 70 18 101..a=rtpmap
02c0 3a 31 38 20 47 37 32 39 2f 38 30 30 30 2f 31 0d :18 G729/8000/1.
02d0 0a 61 3d 66 6d 74 70 3a 31 38 20 61 6e 6e 65 78 .a=fmtp:18 annex
02e0 62 3d 6e 6f 0d 0a 61 3d 72 74 70 6d 61 70 3a 31 b=no..a=rtpmap:1
02f0 30 31 20 74 65 6c 65 70 68 6f 6e 65 2d 65 76 65 01 telephone-eve
0300 6e 74 2f 38 30 30 30 0d 0a 61 3d 66 6d 74 70 3a nt/8000..a=fmtp:
0310 31 30 31 20 30 2d 31 35 0d 0a 101 0-15..
No. Time Source Destination Protocol Info
32 0.481061 209.114.219.69 209.114.219.98 SIP Request: ACK sip:3213084003@192.168.200.169:5060
Frame 32 (430 bytes on wire, 430 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.551369000
Time delta from previous packet: 0.000183000 seconds
Time since reference or first frame: 0.481061000 seconds
Frame Number: 32
Packet Length: 430 bytes
Capture Length: 430 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:48:54:6f:8a:d2
Destination: 00:48:54:6f:8a:d2 (209.114.219.98)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.98 (209.114.219.98)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 416
Identification: 0x0aab (2731)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xd4fc (correct)
Source: 209.114.219.69 (209.114.219.69)
Destination: 209.114.219.98 (209.114.219.98)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 396
Checksum: 0x5b2b (incorrect, should be 0x983b)
Session Initiation Protocol
Request-Line: ACK sip:3213084003@192.168.200.169:5060 SIP/2.0
Method: ACK
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK714ab40f;rport
From: <sip:1001@209.114.219.69;user=phone>;tag=as6a4d6dad
SIP from address: sip:1001@209.114.219.69
SIP tag: as6a4d6dad
To: 3213084003 <sip:3213084003@209.114.219.69;user=phone>;tag=3518047997
SIP Display info: 3213084003
SIP to address: sip:3213084003@209.114.219.69
SIP tag: 3518047997
Contact: <sip:1001@209.114.219.69>
Call-ID: 1314847947@192.168.200.169
CSeq: 102 ACK
User-Agent: HCC Asterisk PBX
Content-Length: 0
0000 00 48 54 6f 8a d2 00 11 43 58 7a 18 08 00 45 18 .HTo....CXz...E.
0010 01 a0 0a ab 40 00 40 11 d4 fc d1 72 db 45 d1 72 ....@.@....r.E.r
0020 db 62 13 c4 13 c4 01 8c 5b 2b 41 43 4b 20 73 69 .b......[+ACK si
0030 70 3a 33 32 31 33 30 38 34 30 30 33 40 31 39 32 p:3213084003@192
0040 2e 31 36 38 2e 32 30 30 2e 31 36 39 3a 35 30 36 .168.200.169:506
0050 30 20 53 49 50 2f 32 2e 30 0d 0a 56 69 61 3a 20 0 SIP/2.0..Via:
0060 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 2e SIP/2.0/UDP 209.
0070 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 3b 114.219.69:5060;
0080 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 37 31 branch=z9hG4bK71
0090 34 61 62 34 30 66 3b 72 70 6f 72 74 0d 0a 46 72 4ab40f;rport..Fr
00a0 6f 6d 3a 20 3c 73 69 70 3a 31 30 30 31 40 32 30 om: <sip:1001@20
00b0 39 2e 31 31 34 2e 32 31 39 2e 36 39 3b 75 73 65 9.114.219.69;use
00c0 72 3d 70 68 6f 6e 65 3e 3b 74 61 67 3d 61 73 36 r=phone>;tag=as6
00d0 61 34 64 36 64 61 64 0d 0a 54 6f 3a 20 33 32 31 a4d6dad..To: 321
00e0 33 30 38 34 30 30 33 20 3c 73 69 70 3a 33 32 31 3084003 <sip:321
00f0 33 30 38 34 30 30 33 40 32 30 39 2e 31 31 34 2e 3084003@209.114.
0100 32 31 39 2e 36 39 3b 75 73 65 72 3d 70 68 6f 6e 219.69;user=phon
0110 65 3e 3b 74 61 67 3d 33 35 31 38 30 34 37 39 39 e>;tag=351804799
0120 37 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 73 69 70 7..Contact: <sip
0130 3a 31 30 30 31 40 32 30 39 2e 31 31 34 2e 32 31 :1001@209.114.21
0140 39 2e 36 39 3e 0d 0a 43 61 6c 6c 2d 49 44 3a 20 9.69>..Call-ID:
0150 31 33 31 34 38 34 37 39 34 37 40 31 39 32 2e 31 1314847947@192.1
0160 36 38 2e 32 30 30 2e 31 36 39 0d 0a 43 53 65 71 68.200.169..CSeq
0170 3a 20 31 30 32 20 41 43 4b 0d 0a 55 73 65 72 2d : 102 ACK..User-
0180 41 67 65 6e 74 3a 20 48 43 43 20 41 73 74 65 72 Agent: HCC Aster
0190 69 73 6b 20 50 42 58 0d 0a 43 6f 6e 74 65 6e 74 isk PBX..Content
01a0 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a -Length: 0....
No. Time Source Destination Protocol Info
33 0.481183 209.114.219.69 209.114.219.90 SIP/SDP Request: INVITE sip:003214093773@209.114.219.90:5060, with session description
Frame 33 (751 bytes on wire, 751 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.551491000
Time delta from previous packet: 0.000122000 seconds
Time since reference or first frame: 0.481183000 seconds
Frame Number: 33
Packet Length: 751 bytes
Capture Length: 751 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00
Destination: 00:b0:8e:35:44:00 (209.114.219.90)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 737
Identification: 0x0aac (2732)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xd3c2 (correct)
Source: 209.114.219.69 (209.114.219.69)
Destination: 209.114.219.90 (209.114.219.90)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 717
Checksum: 0x5c64 (incorrect, should be 0x6532)
Session Initiation Protocol
Request-Line: INVITE sip:003214093773@209.114.219.90:5060 SIP/2.0
Method: INVITE
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK0cb3e938
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Contact: <sip:3213084003@209.114.219.69>
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
CSeq: 105 INVITE
User-Agent: HCC Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER
Content-Type: application/sdp
Content-Length: 222
Message body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): root 3032 3035 IN IP4 192.168.200.169
Owner Username: root
Session ID: 3032
Session Version: 3035
Owner Network Type: IN
Owner Address Type: IP4
Owner Address: 192.168.200.169
Session Name (s): session
Connection Information (c): IN IP4 192.168.200.169
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 192.168.200.169
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Media Description, name and address (m): audio 16384 RTP/AVP 18 101
Media Type: audio
Media Port: 16384
Media Proto: RTP/AVP
Media Format: ITU-T G.729
Media Format: 101
Media Attribute (a): rtpmap:18 G729/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 18 G729/8000
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 101 telephone-event/8000
Media Attribute (a): fmtp:101 0-16
Media Attribute Fieldname: fmtp
Media Attribute Value: 101 0-16
Media Attribute (a): silenceSupp:off - - - -
Media Attribute Fieldname: silenceSupp
Media Attribute Value: off - - - -
0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E.
0010 02 e1 0a ac 40 00 40 11 d3 c2 d1 72 db 45 d1 72 ....@.@....r.E.r
0020 db 5a 13 c4 13 c4 02 cd 5c 64 49 4e 56 49 54 45 .Z......\dINVITE
0030 20 73 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 sip:00321409377
0040 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3@209.114.219.90
0050 3a 35 30 36 30 20 53 49 50 2f 32 2e 30 0d 0a 56 :5060 SIP/2.0..V
0060 69 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 ia: SIP/2.0/UDP
0070 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 209.114.219.69:5
0080 30 36 30 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 060;branch=z9hG4
0090 62 4b 30 63 62 33 65 39 33 38 0d 0a 46 72 6f 6d bK0cb3e938..From
00a0 3a 20 22 33 32 31 33 30 38 34 30 30 33 22 20 3c : "3213084003" <
00b0 73 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 sip:3213084003@2
00c0 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 3b 74 09.114.219.69>;t
00d0 61 67 3d 61 73 37 32 31 63 32 32 63 34 0d 0a 54 ag=as721c22c4..T
00e0 6f 3a 20 3c 73 69 70 3a 30 30 33 32 31 34 30 39 o: <sip:00321409
00f0 33 37 37 33 40 32 30 39 2e 31 31 34 2e 32 31 39 3773@209.114.219
0100 2e 39 30 3e 3b 74 61 67 3d 34 44 30 39 39 32 38 .90>;tag=4D09928
0110 30 2d 37 41 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 0-7A..Contact: <
0120 73 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 sip:3213084003@2
0130 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 0d 0a 09.114.219.69>..
0140 43 61 6c 6c 2d 49 44 3a 20 35 33 37 62 32 66 38 Call-ID: 537b2f8
0150 38 32 36 38 61 33 62 66 34 31 63 39 32 61 65 65 8268a3bf41c92aee
0160 39 34 38 38 65 38 35 35 33 40 32 30 39 2e 31 31 9488e8553@209.11
0170 34 2e 32 31 39 2e 36 39 0d 0a 43 53 65 71 3a 20 4.219.69..CSeq:
0180 31 30 35 20 49 4e 56 49 54 45 0d 0a 55 73 65 72 105 INVITE..User
0190 2d 41 67 65 6e 74 3a 20 48 43 43 20 41 73 74 65 -Agent: HCC Aste
01a0 72 69 73 6b 20 50 42 58 0d 0a 41 6c 6c 6f 77 3a risk PBX..Allow:
01b0 20 49 4e 56 49 54 45 2c 20 41 43 4b 2c 20 43 41 INVITE, ACK, CA
01c0 4e 43 45 4c 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 NCEL, OPTIONS, B
01d0 59 45 2c 20 52 45 46 45 52 0d 0a 43 6f 6e 74 65 YE, REFER..Conte
01e0 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 nt-Type: applica
01f0 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f 6e 74 65 6e tion/sdp..Conten
0200 74 2d 4c 65 6e 67 74 68 3a 20 32 32 32 0d 0a 0d t-Length: 222...
0210 0a 76 3d 30 0d 0a 6f 3d 72 6f 6f 74 20 33 30 33 .v=0..o=root 303
0220 32 20 33 30 33 35 20 49 4e 20 49 50 34 20 31 39 2 3035 IN IP4 19
0230 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 0d 0a 73 2.168.200.169..s
0240 3d 73 65 73 73 69 6f 6e 0d 0a 63 3d 49 4e 20 49 =session..c=IN I
0250 50 34 20 31 39 32 2e 31 36 38 2e 32 30 30 2e 31 P4 192.168.200.1
0260 36 39 0d 0a 74 3d 30 20 30 0d 0a 6d 3d 61 75 64 69..t=0 0..m=aud
0270 69 6f 20 31 36 33 38 34 20 52 54 50 2f 41 56 50 io 16384 RTP/AVP
0280 20 31 38 20 31 30 31 0d 0a 61 3d 72 74 70 6d 61 18 101..a=rtpma
0290 70 3a 31 38 20 47 37 32 39 2f 38 30 30 30 0d 0a p:18 G729/8000..
02a0 61 3d 72 74 70 6d 61 70 3a 31 30 31 20 74 65 6c a=rtpmap:101 tel
02b0 65 70 68 6f 6e 65 2d 65 76 65 6e 74 2f 38 30 30 ephone-event/800
02c0 30 0d 0a 61 3d 66 6d 74 70 3a 31 30 31 20 30 2d 0..a=fmtp:101 0-
02d0 31 36 0d 0a 61 3d 73 69 6c 65 6e 63 65 53 75 70 16..a=silenceSup
02e0 70 3a 6f 66 66 20 2d 20 2d 20 2d 20 2d 0d 0a p:off - - - -..
No. Time Source Destination Protocol Info
34 0.484891 209.114.219.90 209.114.219.69 SIP Status: 100 Trying
Frame 34 (445 bytes on wire, 445 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.555199000
Time delta from previous packet: 0.003708000 seconds
Time since reference or first frame: 0.484891000 seconds
Frame Number: 34
Packet Length: 445 bytes
Capture Length: 445 bytes
Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:b0:8e:35:44:00 (209.114.219.90)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00)
0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 431
Identification: 0x3521 (13601)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 255
Protocol: UDP (0x11)
Header checksum: 0x2b2f (correct)
Source: 209.114.219.90 (209.114.219.90)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060)
Source port: 56262 (56262)
Destination port: 5060 (5060)
Length: 411
Checksum: 0x0f20 (correct)
Session Initiation Protocol
Status-Line: SIP/2.0 100 Trying
Status-Code: 100
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK0cb3e938
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Date: Wed, 05 Jan 2005 23:34:43 GMT
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
Server: Cisco-SIPGateway/IOS-12.x
CSeq: 105 INVITE
Allow-Events: telephone-event
Content-Length: 0
0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh
0010 01 af 35 21 00 00 ff 11 2b 2f d1 72 db 5a d1 72 ..5!....+/.r.Z.r
0020 db 45 db c6 13 c4 01 9b 0f 20 53 49 50 2f 32 2e .E....... SIP/2.
0030 30 20 31 30 30 20 54 72 79 69 6e 67 0d 0a 56 69 0 100 Trying..Vi
0040 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 a: SIP/2.0/UDP 2
0050 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 09.114.219.69:50
0060 36 30 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 60;branch=z9hG4b
0070 4b 30 63 62 33 65 39 33 38 0d 0a 46 72 6f 6d 3a K0cb3e938..From:
0080 20 22 33 32 31 33 30 38 34 30 30 33 22 20 3c 73 "3213084003" <s
0090 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 30 ip:3213084003@20
00a0 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 3b 74 61 9.114.219.69>;ta
00b0 67 3d 61 73 37 32 31 63 32 32 63 34 0d 0a 54 6f g=as721c22c4..To
00c0 3a 20 3c 73 69 70 3a 30 30 33 32 31 34 30 39 33 : <sip:003214093
00d0 37 37 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 773@209.114.219.
00e0 39 30 3e 3b 74 61 67 3d 34 44 30 39 39 32 38 30 90>;tag=4D099280
00f0 2d 37 41 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 -7A..Date: Wed,
0100 30 35 20 4a 61 6e 20 32 30 30 35 20 32 33 3a 33 05 Jan 2005 23:3
0110 34 3a 34 33 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 4:43 GMT..Call-I
0120 44 3a 20 35 33 37 62 32 66 38 38 32 36 38 61 33 D: 537b2f88268a3
0130 62 66 34 31 63 39 32 61 65 65 39 34 38 38 65 38 bf41c92aee9488e8
0140 35 35 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 553@209.114.219.
0150 36 39 0d 0a 53 65 72 76 65 72 3a 20 43 69 73 63 69..Server: Cisc
0160 6f 2d 53 49 50 47 61 74 65 77 61 79 2f 49 4f 53 o-SIPGateway/IOS
0170 2d 31 32 2e 78 0d 0a 43 53 65 71 3a 20 31 30 35 -12.x..CSeq: 105
0180 20 49 4e 56 49 54 45 0d 0a 41 6c 6c 6f 77 2d 45 INVITE..Allow-E
0190 76 65 6e 74 73 3a 20 74 65 6c 65 70 68 6f 6e 65 vents: telephone
01a0 2d 65 76 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d -event..Content-
01b0 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Length: 0....
No. Time Source Destination Protocol Info
35 0.486116 209.114.219.90 209.114.219.69 SIP/SDP Status: 200 OK, with session description
Frame 35 (892 bytes on wire, 892 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.556424000
Time delta from previous packet: 0.001225000 seconds
Time since reference or first frame: 0.486116000 seconds
Frame Number: 35
Packet Length: 892 bytes
Capture Length: 892 bytes
Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:b0:8e:35:44:00 (209.114.219.90)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00)
0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 878
Identification: 0x3522 (13602)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 255
Protocol: UDP (0x11)
Header checksum: 0x296f (correct)
Source: 209.114.219.90 (209.114.219.90)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060)
Source port: 56262 (56262)
Destination port: 5060 (5060)
Length: 858
Checksum: 0x04e8 (correct)
Session Initiation Protocol
Status-Line: SIP/2.0 200 OK
Status-Code: 200
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK0cb3e938
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Date: Wed, 05 Jan 2005 23:34:43 GMT
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
Server: Cisco-SIPGateway/IOS-12.x
CSeq: 105 INVITE
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER
Allow-Events: telephone-event
Contact: <sip:003214093773@209.114.219.90:5060>
Content-Type: application/sdp
Content-Length: 263
Message body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): CiscoSystemsSIP-GW-UserAgent 614 7262 IN IP4 209.114.219.90
Owner Username: CiscoSystemsSIP-GW-UserAgent
Session ID: 614
Session Version: 7262
Owner Network Type: IN
Owner Address Type: IP4
Owner Address: 209.114.219.90
Session Name (s): SIP Call
Connection Information (c): IN IP4 209.114.219.90
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 209.114.219.90
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Media Description, name and address (m): audio 17302 RTP/AVP 18 101
Media Type: audio
Media Port: 17302
Media Proto: RTP/AVP
Media Format: ITU-T G.729
Media Format: 101
Connection Information (c): IN IP4 209.114.219.90
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 209.114.219.90
Media Attribute (a): rtpmap:18 G729/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 18 G729/8000
Media Attribute (a): fmtp:18 annexb=no
Media Attribute Fieldname: fmtp
Media Attribute Value: 18 annexb=no
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 101 telephone-event/8000
Media Attribute (a): fmtp:101 0-16
Media Attribute Fieldname: fmtp
Media Attribute Value: 101 0-16
0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh
0010 03 6e 35 22 00 00 ff 11 29 6f d1 72 db 5a d1 72 .n5"....)o.r.Z.r
0020 db 45 db c6 13 c4 03 5a 04 e8 53 49 50 2f 32 2e .E.....Z..SIP/2.
0030 30 20 32 30 30 20 4f 4b 0d 0a 56 69 61 3a 20 53 0 200 OK..Via: S
0040 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 2e 31 IP/2.0/UDP 209.1
0050 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 3b 62 14.219.69:5060;b
0060 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 30 63 62 ranch=z9hG4bK0cb
0070 33 65 39 33 38 0d 0a 46 72 6f 6d 3a 20 22 33 32 3e938..From: "32
0080 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3a 33 13084003" <sip:3
0090 32 31 33 30 38 34 30 30 33 40 32 30 39 2e 31 31 213084003@209.11
00a0 34 2e 32 31 39 2e 36 39 3e 3b 74 61 67 3d 61 73 4.219.69>;tag=as
00b0 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 3c 73 721c22c4..To: <s
00c0 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 33 40 ip:003214093773@
00d0 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3e 3b 209.114.219.90>;
00e0 74 61 67 3d 34 44 30 39 39 32 38 30 2d 37 41 0d tag=4D099280-7A.
00f0 0a 44 61 74 65 3a 20 57 65 64 2c 20 30 35 20 4a .Date: Wed, 05 J
0100 61 6e 20 32 30 30 35 20 32 33 3a 33 34 3a 34 33 an 2005 23:34:43
0110 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 44 3a 20 35 GMT..Call-ID: 5
0120 33 37 62 32 66 38 38 32 36 38 61 33 62 66 34 31 37b2f88268a3bf41
0130 63 39 32 61 65 65 39 34 38 38 65 38 35 35 33 40 c92aee9488e8553@
0140 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 0d 0a 209.114.219.69..
0150 53 65 72 76 65 72 3a 20 43 69 73 63 6f 2d 53 49 Server: Cisco-SI
0160 50 47 61 74 65 77 61 79 2f 49 4f 53 2d 31 32 2e PGateway/IOS-12.
0170 78 0d 0a 43 53 65 71 3a 20 31 30 35 20 49 4e 56 x..CSeq: 105 INV
0180 49 54 45 0d 0a 41 6c 6c 6f 77 3a 20 49 4e 56 49 ITE..Allow: INVI
0190 54 45 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 59 45 TE, OPTIONS, BYE
01a0 2c 20 43 41 4e 43 45 4c 2c 20 41 43 4b 2c 20 50 , CANCEL, ACK, P
01b0 52 41 43 4b 2c 20 43 4f 4d 45 54 2c 20 52 45 46 RACK, COMET, REF
01c0 45 52 2c 20 53 55 42 53 43 52 49 42 45 2c 20 4e ER, SUBSCRIBE, N
01d0 4f 54 49 46 59 2c 20 49 4e 46 4f 2c 20 55 50 44 OTIFY, INFO, UPD
01e0 41 54 45 2c 20 52 45 47 49 53 54 45 52 0d 0a 41 ATE, REGISTER..A
01f0 6c 6c 6f 77 2d 45 76 65 6e 74 73 3a 20 74 65 6c llow-Events: tel
0200 65 70 68 6f 6e 65 2d 65 76 65 6e 74 0d 0a 43 6f ephone-event..Co
0210 6e 74 61 63 74 3a 20 3c 73 69 70 3a 30 30 33 32 ntact: <sip:0032
0220 31 34 30 39 33 37 37 33 40 32 30 39 2e 31 31 34 14093773@209.114
0230 2e 32 31 39 2e 39 30 3a 35 30 36 30 3e 0d 0a 43 .219.90:5060>..C
0240 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 ontent-Type: app
0250 6c 69 63 61 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f lication/sdp..Co
0260 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 36 ntent-Length: 26
0270 33 0d 0a 0d 0a 76 3d 30 0d 0a 6f 3d 43 69 73 63 3....v=0..o=Cisc
0280 6f 53 79 73 74 65 6d 73 53 49 50 2d 47 57 2d 55 oSystemsSIP-GW-U
0290 73 65 72 41 67 65 6e 74 20 36 31 34 20 37 32 36 serAgent 614 726
02a0 32 20 49 4e 20 49 50 34 20 32 30 39 2e 31 31 34 2 IN IP4 209.114
02b0 2e 32 31 39 2e 39 30 0d 0a 73 3d 53 49 50 20 43 .219.90..s=SIP C
02c0 61 6c 6c 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 all..c=IN IP4 20
02d0 39 2e 31 31 34 2e 32 31 39 2e 39 30 0d 0a 74 3d 9.114.219.90..t=
02e0 30 20 30 0d 0a 6d 3d 61 75 64 69 6f 20 31 37 33 0 0..m=audio 173
02f0 30 32 20 52 54 50 2f 41 56 50 20 31 38 20 31 30 02 RTP/AVP 18 10
0300 31 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 39 2e 1..c=IN IP4 209.
0310 31 31 34 2e 32 31 39 2e 39 30 0d 0a 61 3d 72 74 114.219.90..a=rt
0320 70 6d 61 70 3a 31 38 20 47 37 32 39 2f 38 30 30 pmap:18 G729/800
0330 30 0d 0a 61 3d 66 6d 74 70 3a 31 38 20 61 6e 6e 0..a=fmtp:18 ann
0340 65 78 62 3d 6e 6f 0d 0a 61 3d 72 74 70 6d 61 70 exb=no..a=rtpmap
0350 3a 31 30 31 20 74 65 6c 65 70 68 6f 6e 65 2d 65 :101 telephone-e
0360 76 65 6e 74 2f 38 30 30 30 0d 0a 61 3d 66 6d 74 vent/8000..a=fmt
0370 70 3a 31 30 31 20 30 2d 31 36 0d 0a p:101 0-16..
No. Time Source Destination Protocol Info
36 0.486262 209.114.219.69 209.114.219.90 SIP Request: ACK sip:003214093773@209.114.219.90:5060
Frame 36 (441 bytes on wire, 441 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.556570000
Time delta from previous packet: 0.000146000 seconds
Time since reference or first frame: 0.486262000 seconds
Frame Number: 36
Packet Length: 441 bytes
Capture Length: 441 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00
Destination: 00:b0:8e:35:44:00 (209.114.219.90)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 427
Identification: 0x0aad (2733)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xd4f7 (correct)
Source: 209.114.219.69 (209.114.219.69)
Destination: 209.114.219.90 (209.114.219.90)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 407
Checksum: 0x5b2e (incorrect, should be 0xbd41)
Session Initiation Protocol
Request-Line: ACK sip:003214093773@209.114.219.90:5060 SIP/2.0
Method: ACK
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK34b26127
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Contact: <sip:3213084003@209.114.219.69>
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
CSeq: 105 ACK
User-Agent: HCC Asterisk PBX
Content-Length: 0
0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E.
0010 01 ab 0a ad 40 00 40 11 d4 f7 d1 72 db 45 d1 72 ....@.@....r.E.r
0020 db 5a 13 c4 13 c4 01 97 5b 2e 41 43 4b 20 73 69 .Z......[.ACK si
0030 70 3a 30 30 33 32 31 34 30 39 33 37 37 33 40 32 p:003214093773@2
0040 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3a 35 30 09.114.219.90:50
0050 36 30 20 53 49 50 2f 32 2e 30 0d 0a 56 69 61 3a 60 SIP/2.0..Via:
0060 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 SIP/2.0/UDP 209
0070 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 .114.219.69:5060
0080 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 33 ;branch=z9hG4bK3
0090 34 62 32 36 31 32 37 0d 0a 46 72 6f 6d 3a 20 22 4b26127..From: "
00a0 33 32 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3213084003" <sip
00b0 3a 33 32 31 33 30 38 34 30 30 33 40 32 30 39 2e :3213084003@209.
00c0 31 31 34 2e 32 31 39 2e 36 39 3e 3b 74 61 67 3d 114.219.69>;tag=
00d0 61 73 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 as721c22c4..To:
00e0 3c 73 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 <sip:00321409377
00f0 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3@209.114.219.90
0100 3e 3b 74 61 67 3d 34 44 30 39 39 32 38 30 2d 37 >;tag=4D099280-7
0110 41 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 73 69 70 A..Contact: <sip
0120 3a 33 32 31 33 30 38 34 30 30 33 40 32 30 39 2e :3213084003@209.
0130 31 31 34 2e 32 31 39 2e 36 39 3e 0d 0a 43 61 6c 114.219.69>..Cal
0140 6c 2d 49 44 3a 20 35 33 37 62 32 66 38 38 32 36 l-ID: 537b2f8826
0150 38 61 33 62 66 34 31 63 39 32 61 65 65 39 34 38 8a3bf41c92aee948
0160 38 65 38 35 35 33 40 32 30 39 2e 31 31 34 2e 32 8e8553@209.114.2
0170 31 39 2e 36 39 0d 0a 43 53 65 71 3a 20 31 30 35 19.69..CSeq: 105
0180 20 41 43 4b 0d 0a 55 73 65 72 2d 41 67 65 6e 74 ACK..User-Agent
0190 3a 20 48 43 43 20 41 73 74 65 72 69 73 6b 20 50 : HCC Asterisk P
01a0 42 58 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 BX..Content-Leng
01b0 74 68 3a 20 30 0d 0a 0d 0a th: 0....
No. Time Source Destination Protocol Info
37 0.493877 209.114.219.98 209.114.219.69 RTP Payload type=ITU-T G.729, SSRC=3448847109, Seq=442, Time=71760
Frame 37 (74 bytes on wire, 74 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.564185000
Time delta from previous packet: 0.007615000 seconds
Time since reference or first frame: 0.493877000 seconds
Frame Number: 37
Packet Length: 74 bytes
Capture Length: 74 bytes
Ethernet II, Src: 00:48:54:6f:8a:d2, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:48:54:6f:8a:d2 (209.114.219.98)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.98 (209.114.219.98), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 60
Identification: 0x01c2 (450)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 249
Protocol: UDP (0x11)
Header checksum: 0x6661 (correct)
Source: 209.114.219.98 (209.114.219.98)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 16384 (16384), Dst Port: 10204 (10204)
Source port: 16384 (16384)
Destination port: 10204 (10204)
Length: 40
Checksum: 0xc1e7 (correct)
Real-Time Transport Protocol
Stream setup by SDP (frame 9)
Setup frame: 9
Setup Method: SDP
10.. .... = Version: RFC 1889 Version (2)
..0. .... = Padding: False
...0 .... = Extension: False
.... 0000 = Contributing source identifiers count: 0
0... .... = Marker: False
.001 0010 = Payload type: ITU-T G.729 (18)
Sequence number: 442
Timestamp: 71760
Synchronization Source identifier: 3448847109
Payload: 40BD319B74C2541A389A78452EA154A2...
0000 00 11 43 58 7a 18 00 48 54 6f 8a d2 08 00 45 00 ..CXz..HTo....E.
0010 00 3c 01 c2 00 00 f9 11 66 61 d1 72 db 62 d1 72 .<......fa.r.b.r
0020 db 45 40 00 27 dc 00 28 c1 e7 80 12 01 ba 00 01 .E@.'..(........
0030 18 50 cd 91 3b 05 40 bd 31 9b 74 c2 54 1a 38 9a .P..;.@.1.t.T.8.
0040 78 45 2e a1 54 a2 90 ec d9 52 xE..T....R
No. Time Source Destination Protocol Info
38 0.493944 209.114.219.69 209.114.219.90 RTP Payload type=ITU-T G.729, SSRC=444875168, Seq=26159, Time=880
Frame 38 (74 bytes on wire, 74 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.564252000
Time delta from previous packet: 0.000067000 seconds
Time since reference or first frame: 0.493944000 seconds
Frame Number: 38
Packet Length: 74 bytes
Capture Length: 74 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00
Destination: 00:b0:8e:35:44:00 (209.114.219.90)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 60
Identification: 0x0005 (5)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xe10e (correct)
Source: 209.114.219.69 (209.114.219.69)
Destination: 209.114.219.90 (209.114.219.90)
User Datagram Protocol, Src Port: 10770 (10770), Dst Port: 17302 (17302)
Source port: 10770 (10770)
Destination port: 17302 (17302)
Length: 40
Checksum: 0x0000 (none)
Real-Time Transport Protocol
Stream setup by SDP (frame 56)
Setup frame: 56
Setup Method: SDP
10.. .... = Version: RFC 1889 Version (2)
..0. .... = Padding: False
...0 .... = Extension: False
.... 0000 = Contributing source identifiers count: 0
0... .... = Marker: False
.001 0010 = Payload type: ITU-T G.729 (18)
Sequence number: 26159
Timestamp: 880
Synchronization Source identifier: 444875168
Payload: 40BD319B74C2541A389A78452EA154A2...
0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E.
0010 00 3c 00 05 40 00 40 11 e1 0e d1 72 db 45 d1 72 .<..@.@....r.E.r
0020 db 5a 2a 12 43 96 00 28 00 00 80 12 66 2f 00 00 .Z*.C..(....f/..
0030 03 70 1a 84 41 a0 40 bd 31 9b 74 c2 54 1a 38 9a .p..A.@.1.t.T.8.
0040 78 45 2e a1 54 a2 90 ec d9 52 xE..T....R
No. Time Source Destination Protocol Info
39 0.494029 209.114.219.69 209.114.219.90 SIP/SDP Request: INVITE sip:003214093773@209.114.219.90:5060, with session description
Frame 39 (749 bytes on wire, 749 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.564337000
Time delta from previous packet: 0.000085000 seconds
Time since reference or first frame: 0.494029000 seconds
Frame Number: 39
Packet Length: 749 bytes
Capture Length: 749 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00
Destination: 00:b0:8e:35:44:00 (209.114.219.90)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 735
Identification: 0x0aae (2734)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xd3c2 (correct)
Source: 209.114.219.69 (209.114.219.69)
Destination: 209.114.219.90 (209.114.219.90)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 715
Checksum: 0x5c62 (incorrect, should be 0x53d5)
Session Initiation Protocol
Request-Line: INVITE sip:003214093773@209.114.219.90:5060 SIP/2.0
Method: INVITE
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK332f738b
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Contact: <sip:3213084003@209.114.219.69>
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
CSeq: 106 INVITE
User-Agent: HCC Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER
Content-Type: application/sdp
Content-Length: 220
Message body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): root 3032 3036 IN IP4 209.114.219.98
Owner Username: root
Session ID: 3032
Session Version: 3036
Owner Network Type: IN
Owner Address Type: IP4
Owner Address: 209.114.219.98
Session Name (s): session
Connection Information (c): IN IP4 209.114.219.98
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 209.114.219.98
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Media Description, name and address (m): audio 16384 RTP/AVP 18 101
Media Type: audio
Media Port: 16384
Media Proto: RTP/AVP
Media Format: ITU-T G.729
Media Format: 101
Media Attribute (a): rtpmap:18 G729/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 18 G729/8000
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 101 telephone-event/8000
Media Attribute (a): fmtp:101 0-16
Media Attribute Fieldname: fmtp
Media Attribute Value: 101 0-16
Media Attribute (a): silenceSupp:off - - - -
Media Attribute Fieldname: silenceSupp
Media Attribute Value: off - - - -
0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E.
0010 02 df 0a ae 40 00 40 11 d3 c2 d1 72 db 45 d1 72 ....@.@....r.E.r
0020 db 5a 13 c4 13 c4 02 cb 5c 62 49 4e 56 49 54 45 .Z......\bINVITE
0030 20 73 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 sip:00321409377
0040 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3@209.114.219.90
0050 3a 35 30 36 30 20 53 49 50 2f 32 2e 30 0d 0a 56 :5060 SIP/2.0..V
0060 69 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 ia: SIP/2.0/UDP
0070 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 209.114.219.69:5
0080 30 36 30 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 060;branch=z9hG4
0090 62 4b 33 33 32 66 37 33 38 62 0d 0a 46 72 6f 6d bK332f738b..From
00a0 3a 20 22 33 32 31 33 30 38 34 30 30 33 22 20 3c : "3213084003" <
00b0 73 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 sip:3213084003@2
00c0 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 3b 74 09.114.219.69>;t
00d0 61 67 3d 61 73 37 32 31 63 32 32 63 34 0d 0a 54 ag=as721c22c4..T
00e0 6f 3a 20 3c 73 69 70 3a 30 30 33 32 31 34 30 39 o: <sip:00321409
00f0 33 37 37 33 40 32 30 39 2e 31 31 34 2e 32 31 39 3773@209.114.219
0100 2e 39 30 3e 3b 74 61 67 3d 34 44 30 39 39 32 38 .90>;tag=4D09928
0110 30 2d 37 41 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 0-7A..Contact: <
0120 73 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 sip:3213084003@2
0130 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 0d 0a 09.114.219.69>..
0140 43 61 6c 6c 2d 49 44 3a 20 35 33 37 62 32 66 38 Call-ID: 537b2f8
0150 38 32 36 38 61 33 62 66 34 31 63 39 32 61 65 65 8268a3bf41c92aee
0160 39 34 38 38 65 38 35 35 33 40 32 30 39 2e 31 31 9488e8553@209.11
0170 34 2e 32 31 39 2e 36 39 0d 0a 43 53 65 71 3a 20 4.219.69..CSeq:
0180 31 30 36 20 49 4e 56 49 54 45 0d 0a 55 73 65 72 106 INVITE..User
0190 2d 41 67 65 6e 74 3a 20 48 43 43 20 41 73 74 65 -Agent: HCC Aste
01a0 72 69 73 6b 20 50 42 58 0d 0a 41 6c 6c 6f 77 3a risk PBX..Allow:
01b0 20 49 4e 56 49 54 45 2c 20 41 43 4b 2c 20 43 41 INVITE, ACK, CA
01c0 4e 43 45 4c 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 NCEL, OPTIONS, B
01d0 59 45 2c 20 52 45 46 45 52 0d 0a 43 6f 6e 74 65 YE, REFER..Conte
01e0 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 nt-Type: applica
01f0 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f 6e 74 65 6e tion/sdp..Conten
0200 74 2d 4c 65 6e 67 74 68 3a 20 32 32 30 0d 0a 0d t-Length: 220...
0210 0a 76 3d 30 0d 0a 6f 3d 72 6f 6f 74 20 33 30 33 .v=0..o=root 303
0220 32 20 33 30 33 36 20 49 4e 20 49 50 34 20 32 30 2 3036 IN IP4 20
0230 39 2e 31 31 34 2e 32 31 39 2e 39 38 0d 0a 73 3d 9.114.219.98..s=
0240 73 65 73 73 69 6f 6e 0d 0a 63 3d 49 4e 20 49 50 session..c=IN IP
0250 34 20 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 38 4 209.114.219.98
0260 0d 0a 74 3d 30 20 30 0d 0a 6d 3d 61 75 64 69 6f ..t=0 0..m=audio
0270 20 31 36 33 38 34 20 52 54 50 2f 41 56 50 20 31 16384 RTP/AVP 1
0280 38 20 31 30 31 0d 0a 61 3d 72 74 70 6d 61 70 3a 8 101..a=rtpmap:
0290 31 38 20 47 37 32 39 2f 38 30 30 30 0d 0a 61 3d 18 G729/8000..a=
02a0 72 74 70 6d 61 70 3a 31 30 31 20 74 65 6c 65 70 rtpmap:101 telep
02b0 68 6f 6e 65 2d 65 76 65 6e 74 2f 38 30 30 30 0d hone-event/8000.
02c0 0a 61 3d 66 6d 74 70 3a 31 30 31 20 30 2d 31 36 .a=fmtp:101 0-16
02d0 0d 0a 61 3d 73 69 6c 65 6e 63 65 53 75 70 70 3a ..a=silenceSupp:
02e0 6f 66 66 20 2d 20 2d 20 2d 20 2d 0d 0a off - - - -..
No. Time Source Destination Protocol Info
40 0.497712 209.114.219.90 209.114.219.69 SIP Status: 100 Trying
Frame 40 (445 bytes on wire, 445 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.568020000
Time delta from previous packet: 0.003683000 seconds
Time since reference or first frame: 0.497712000 seconds
Frame Number: 40
Packet Length: 445 bytes
Capture Length: 445 bytes
Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:b0:8e:35:44:00 (209.114.219.90)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00)
0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 431
Identification: 0x3523 (13603)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 255
Protocol: UDP (0x11)
Header checksum: 0x2b2d (correct)
Source: 209.114.219.90 (209.114.219.90)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060)
Source port: 56262 (56262)
Destination port: 5060 (5060)
Length: 411
Checksum: 0xe874 (correct)
Session Initiation Protocol
Status-Line: SIP/2.0 100 Trying
Status-Code: 100
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK332f738b
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Date: Wed, 05 Jan 2005 23:34:43 GMT
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
Server: Cisco-SIPGateway/IOS-12.x
CSeq: 106 INVITE
Allow-Events: telephone-event
Content-Length: 0
0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh
0010 01 af 35 23 00 00 ff 11 2b 2d d1 72 db 5a d1 72 ..5#....+-.r.Z.r
0020 db 45 db c6 13 c4 01 9b e8 74 53 49 50 2f 32 2e .E.......tSIP/2.
0030 30 20 31 30 30 20 54 72 79 69 6e 67 0d 0a 56 69 0 100 Trying..Vi
0040 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 a: SIP/2.0/UDP 2
0050 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 09.114.219.69:50
0060 36 30 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 60;branch=z9hG4b
0070 4b 33 33 32 66 37 33 38 62 0d 0a 46 72 6f 6d 3a K332f738b..From:
0080 20 22 33 32 31 33 30 38 34 30 30 33 22 20 3c 73 "3213084003" <s
0090 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 30 ip:3213084003@20
00a0 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 3b 74 61 9.114.219.69>;ta
00b0 67 3d 61 73 37 32 31 63 32 32 63 34 0d 0a 54 6f g=as721c22c4..To
00c0 3a 20 3c 73 69 70 3a 30 30 33 32 31 34 30 39 33 : <sip:003214093
00d0 37 37 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 773@209.114.219.
00e0 39 30 3e 3b 74 61 67 3d 34 44 30 39 39 32 38 30 90>;tag=4D099280
00f0 2d 37 41 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 -7A..Date: Wed,
0100 30 35 20 4a 61 6e 20 32 30 30 35 20 32 33 3a 33 05 Jan 2005 23:3
0110 34 3a 34 33 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 4:43 GMT..Call-I
0120 44 3a 20 35 33 37 62 32 66 38 38 32 36 38 61 33 D: 537b2f88268a3
0130 62 66 34 31 63 39 32 61 65 65 39 34 38 38 65 38 bf41c92aee9488e8
0140 35 35 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 553@209.114.219.
0150 36 39 0d 0a 53 65 72 76 65 72 3a 20 43 69 73 63 69..Server: Cisc
0160 6f 2d 53 49 50 47 61 74 65 77 61 79 2f 49 4f 53 o-SIPGateway/IOS
0170 2d 31 32 2e 78 0d 0a 43 53 65 71 3a 20 31 30 36 -12.x..CSeq: 106
0180 20 49 4e 56 49 54 45 0d 0a 41 6c 6c 6f 77 2d 45 INVITE..Allow-E
0190 76 65 6e 74 73 3a 20 74 65 6c 65 70 68 6f 6e 65 vents: telephone
01a0 2d 65 76 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d -event..Content-
01b0 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Length: 0....
No. Time Source Destination Protocol Info
41 0.499103 209.114.219.90 209.114.219.69 SIP/SDP Status: 200 OK, with session description
Frame 41 (892 bytes on wire, 892 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.569411000
Time delta from previous packet: 0.001391000 seconds
Time since reference or first frame: 0.499103000 seconds
Frame Number: 41
Packet Length: 892 bytes
Capture Length: 892 bytes
Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:b0:8e:35:44:00 (209.114.219.90)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00)
0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 878
Identification: 0x3524 (13604)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 255
Protocol: UDP (0x11)
Header checksum: 0x296d (correct)
Source: 209.114.219.90 (209.114.219.90)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060)
Source port: 56262 (56262)
Destination port: 5060 (5060)
Length: 858
Checksum: 0xdd3c (correct)
Session Initiation Protocol
Status-Line: SIP/2.0 200 OK
Status-Code: 200
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK332f738b
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Date: Wed, 05 Jan 2005 23:34:43 GMT
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
Server: Cisco-SIPGateway/IOS-12.x
CSeq: 106 INVITE
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER
Allow-Events: telephone-event
Contact: <sip:003214093773@209.114.219.90:5060>
Content-Type: application/sdp
Content-Length: 263
Message body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): CiscoSystemsSIP-GW-UserAgent 614 7263 IN IP4 209.114.219.90
Owner Username: CiscoSystemsSIP-GW-UserAgent
Session ID: 614
Session Version: 7263
Owner Network Type: IN
Owner Address Type: IP4
Owner Address: 209.114.219.90
Session Name (s): SIP Call
Connection Information (c): IN IP4 209.114.219.90
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 209.114.219.90
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Media Description, name and address (m): audio 17302 RTP/AVP 18 101
Media Type: audio
Media Port: 17302
Media Proto: RTP/AVP
Media Format: ITU-T G.729
Media Format: 101
Connection Information (c): IN IP4 209.114.219.90
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 209.114.219.90
Media Attribute (a): rtpmap:18 G729/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 18 G729/8000
Media Attribute (a): fmtp:18 annexb=no
Media Attribute Fieldname: fmtp
Media Attribute Value: 18 annexb=no
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 101 telephone-event/8000
Media Attribute (a): fmtp:101 0-16
Media Attribute Fieldname: fmtp
Media Attribute Value: 101 0-16
0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh
0010 03 6e 35 24 00 00 ff 11 29 6d d1 72 db 5a d1 72 .n5$....)m.r.Z.r
0020 db 45 db c6 13 c4 03 5a dd 3c 53 49 50 2f 32 2e .E.....Z.<SIP/2.
0030 30 20 32 30 30 20 4f 4b 0d 0a 56 69 61 3a 20 53 0 200 OK..Via: S
0040 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 2e 31 IP/2.0/UDP 209.1
0050 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 3b 62 14.219.69:5060;b
0060 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 33 33 32 ranch=z9hG4bK332
0070 66 37 33 38 62 0d 0a 46 72 6f 6d 3a 20 22 33 32 f738b..From: "32
0080 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3a 33 13084003" <sip:3
0090 32 31 33 30 38 34 30 30 33 40 32 30 39 2e 31 31 213084003@209.11
00a0 34 2e 32 31 39 2e 36 39 3e 3b 74 61 67 3d 61 73 4.219.69>;tag=as
00b0 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 3c 73 721c22c4..To: <s
00c0 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 33 40 ip:003214093773@
00d0 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3e 3b 209.114.219.90>;
00e0 74 61 67 3d 34 44 30 39 39 32 38 30 2d 37 41 0d tag=4D099280-7A.
00f0 0a 44 61 74 65 3a 20 57 65 64 2c 20 30 35 20 4a .Date: Wed, 05 J
0100 61 6e 20 32 30 30 35 20 32 33 3a 33 34 3a 34 33 an 2005 23:34:43
0110 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 44 3a 20 35 GMT..Call-ID: 5
0120 33 37 62 32 66 38 38 32 36 38 61 33 62 66 34 31 37b2f88268a3bf41
0130 63 39 32 61 65 65 39 34 38 38 65 38 35 35 33 40 c92aee9488e8553@
0140 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 0d 0a 209.114.219.69..
0150 53 65 72 76 65 72 3a 20 43 69 73 63 6f 2d 53 49 Server: Cisco-SI
0160 50 47 61 74 65 77 61 79 2f 49 4f 53 2d 31 32 2e PGateway/IOS-12.
0170 78 0d 0a 43 53 65 71 3a 20 31 30 36 20 49 4e 56 x..CSeq: 106 INV
0180 49 54 45 0d 0a 41 6c 6c 6f 77 3a 20 49 4e 56 49 ITE..Allow: INVI
0190 54 45 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 59 45 TE, OPTIONS, BYE
01a0 2c 20 43 41 4e 43 45 4c 2c 20 41 43 4b 2c 20 50 , CANCEL, ACK, P
01b0 52 41 43 4b 2c 20 43 4f 4d 45 54 2c 20 52 45 46 RACK, COMET, REF
01c0 45 52 2c 20 53 55 42 53 43 52 49 42 45 2c 20 4e ER, SUBSCRIBE, N
01d0 4f 54 49 46 59 2c 20 49 4e 46 4f 2c 20 55 50 44 OTIFY, INFO, UPD
01e0 41 54 45 2c 20 52 45 47 49 53 54 45 52 0d 0a 41 ATE, REGISTER..A
01f0 6c 6c 6f 77 2d 45 76 65 6e 74 73 3a 20 74 65 6c llow-Events: tel
0200 65 70 68 6f 6e 65 2d 65 76 65 6e 74 0d 0a 43 6f ephone-event..Co
0210 6e 74 61 63 74 3a 20 3c 73 69 70 3a 30 30 33 32 ntact: <sip:0032
0220 31 34 30 39 33 37 37 33 40 32 30 39 2e 31 31 34 14093773@209.114
0230 2e 32 31 39 2e 39 30 3a 35 30 36 30 3e 0d 0a 43 .219.90:5060>..C
0240 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 ontent-Type: app
0250 6c 69 63 61 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f lication/sdp..Co
0260 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 36 ntent-Length: 26
0270 33 0d 0a 0d 0a 76 3d 30 0d 0a 6f 3d 43 69 73 63 3....v=0..o=Cisc
0280 6f 53 79 73 74 65 6d 73 53 49 50 2d 47 57 2d 55 oSystemsSIP-GW-U
0290 73 65 72 41 67 65 6e 74 20 36 31 34 20 37 32 36 serAgent 614 726
02a0 33 20 49 4e 20 49 50 34 20 32 30 39 2e 31 31 34 3 IN IP4 209.114
02b0 2e 32 31 39 2e 39 30 0d 0a 73 3d 53 49 50 20 43 .219.90..s=SIP C
02c0 61 6c 6c 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 all..c=IN IP4 20
02d0 39 2e 31 31 34 2e 32 31 39 2e 39 30 0d 0a 74 3d 9.114.219.90..t=
02e0 30 20 30 0d 0a 6d 3d 61 75 64 69 6f 20 31 37 33 0 0..m=audio 173
02f0 30 32 20 52 54 50 2f 41 56 50 20 31 38 20 31 30 02 RTP/AVP 18 10
0300 31 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 39 2e 1..c=IN IP4 209.
0310 31 31 34 2e 32 31 39 2e 39 30 0d 0a 61 3d 72 74 114.219.90..a=rt
0320 70 6d 61 70 3a 31 38 20 47 37 32 39 2f 38 30 30 pmap:18 G729/800
0330 30 0d 0a 61 3d 66 6d 74 70 3a 31 38 20 61 6e 6e 0..a=fmtp:18 ann
0340 65 78 62 3d 6e 6f 0d 0a 61 3d 72 74 70 6d 61 70 exb=no..a=rtpmap
0350 3a 31 30 31 20 74 65 6c 65 70 68 6f 6e 65 2d 65 :101 telephone-e
0360 76 65 6e 74 2f 38 30 30 30 0d 0a 61 3d 66 6d 74 vent/8000..a=fmt
0370 70 3a 31 30 31 20 30 2d 31 36 0d 0a p:101 0-16..
No. Time Source Destination Protocol Info
42 0.499241 209.114.219.69 209.114.219.90 SIP Request: ACK sip:003214093773@209.114.219.90:5060
Frame 42 (441 bytes on wire, 441 bytes captured)
Arrival Time: Jan 5, 2005 21:54:12.569549000
Time delta from previous packet: 0.000138000 seconds
Time since reference or first frame: 0.499241000 seconds
Frame Number: 42
Packet Length: 441 bytes
Capture Length: 441 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00
Destination: 00:b0:8e:35:44:00 (209.114.219.90)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 427
Identification: 0x0aaf (2735)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xd4f5 (correct)
Source: 209.114.219.69 (209.114.219.69)
Destination: 209.114.219.90 (209.114.219.90)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 407
Checksum: 0x5b2e (incorrect, should be 0x8a34)
Session Initiation Protocol
Request-Line: ACK sip:003214093773@209.114.219.90:5060 SIP/2.0
Method: ACK
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK7ef87252
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Contact: <sip:3213084003@209.114.219.69>
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
CSeq: 106 ACK
User-Agent: HCC Asterisk PBX
Content-Length: 0
0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E.
0010 01 ab 0a af 40 00 40 11 d4 f5 d1 72 db 45 d1 72 ....@.@....r.E.r
0020 db 5a 13 c4 13 c4 01 97 5b 2e 41 43 4b 20 73 69 .Z......[.ACK si
0030 70 3a 30 30 33 32 31 34 30 39 33 37 37 33 40 32 p:003214093773@2
0040 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3a 35 30 09.114.219.90:50
0050 36 30 20 53 49 50 2f 32 2e 30 0d 0a 56 69 61 3a 60 SIP/2.0..Via:
0060 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 SIP/2.0/UDP 209
0070 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 .114.219.69:5060
0080 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 37 ;branch=z9hG4bK7
0090 65 66 38 37 32 35 32 0d 0a 46 72 6f 6d 3a 20 22 ef87252..From: "
00a0 33 32 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3213084003" <sip
00b0 3a 33 32 31 33 30 38 34 30 30 33 40 32 30 39 2e :3213084003@209.
00c0 31 31 34 2e 32 31 39 2e 36 39 3e 3b 74 61 67 3d 114.219.69>;tag=
00d0 61 73 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 as721c22c4..To:
00e0 3c 73 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 <sip:00321409377
00f0 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3@209.114.219.90
0100 3e 3b 74 61 67 3d 34 44 30 39 39 32 38 30 2d 37 >;tag=4D099280-7
0110 41 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 73 69 70 A..Contact: <sip
0120 3a 33 32 31 33 30 38 34 30 30 33 40 32 30 39 2e :3213084003@209.
0130 31 31 34 2e 32 31 39 2e 36 39 3e 0d 0a 43 61 6c 114.219.69>..Cal
0140 6c 2d 49 44 3a 20 35 33 37 62 32 66 38 38 32 36 l-ID: 537b2f8826
0150 38 61 33 62 66 34 31 63 39 32 61 65 65 39 34 38 8a3bf41c92aee948
0160 38 65 38 35 35 33 40 32 30 39 2e 31 31 34 2e 32 8e8553@209.114.2
0170 31 39 2e 36 39 0d 0a 43 53 65 71 3a 20 31 30 36 19.69..CSeq: 106
0180 20 41 43 4b 0d 0a 55 73 65 72 2d 41 67 65 6e 74 ACK..User-Agent
0190 3a 20 48 43 43 20 41 73 74 65 72 69 73 6b 20 50 : HCC Asterisk P
01a0 42 58 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 BX..Content-Leng
01b0 74 68 3a 20 30 0d 0a 0d 0a th: 0....
No. Time Source Destination Protocol Info
43 2.992681 209.114.219.98 209.114.219.69 ARP Who has 209.114.219.69? Tell 209.114.219.98
Frame 43 (60 bytes on wire, 60 bytes captured)
Arrival Time: Jan 5, 2005 21:54:15.062989000
Time delta from previous packet: 2.493440000 seconds
Time since reference or first frame: 2.992681000 seconds
Frame Number: 43
Packet Length: 60 bytes
Capture Length: 60 bytes
Ethernet II, Src: 00:48:54:6f:8a:d2, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:48:54:6f:8a:d2 (209.114.219.98)
Type: ARP (0x0806)
Trailer: 00000000000000000000000000000000...
Address Resolution Protocol (request)
Hardware type: Ethernet (0x0001)
Protocol type: IP (0x0800)
Hardware size: 6
Protocol size: 4
Opcode: request (0x0001)
Sender MAC address: 00:48:54:6f:8a:d2 (209.114.219.98)
Sender IP address: 209.114.219.98 (209.114.219.98)
Target MAC address: 00:00:00:00:00:00 (00:00:00_00:00:00)
Target IP address: 209.114.219.69 (209.114.219.69)
0000 00 11 43 58 7a 18 00 48 54 6f 8a d2 08 06 00 01 ..CXz..HTo......
0010 08 00 06 04 00 01 00 48 54 6f 8a d2 d1 72 db 62 .......HTo...r.b
0020 00 00 00 00 00 00 d1 72 db 45 00 00 00 00 00 00 .......r.E......
0030 00 00 00 00 00 00 00 00 00 00 00 00 ............
No. Time Source Destination Protocol Info
44 2.992693 209.114.219.69 209.114.219.98 ARP 209.114.219.69 is at 00:11:43:58:7a:18
Frame 44 (42 bytes on wire, 42 bytes captured)
Arrival Time: Jan 5, 2005 21:54:15.063001000
Time delta from previous packet: 0.000012000 seconds
Time since reference or first frame: 2.992693000 seconds
Frame Number: 44
Packet Length: 42 bytes
Capture Length: 42 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:48:54:6f:8a:d2
Destination: 00:48:54:6f:8a:d2 (209.114.219.98)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: ARP (0x0806)
Address Resolution Protocol (reply)
Hardware type: Ethernet (0x0001)
Protocol type: IP (0x0800)
Hardware size: 6
Protocol size: 4
Opcode: reply (0x0002)
Sender MAC address: 00:11:43:58:7a:18 (209.114.219.69)
Sender IP address: 209.114.219.69 (209.114.219.69)
Target MAC address: 00:48:54:6f:8a:d2 (209.114.219.98)
Target IP address: 209.114.219.98 (209.114.219.98)
0000 00 48 54 6f 8a d2 00 11 43 58 7a 18 08 06 00 01 .HTo....CXz.....
0010 08 00 06 04 00 02 00 11 43 58 7a 18 d1 72 db 45 ........CXz..r.E
0020 00 48 54 6f 8a d2 d1 72 db 62 .HTo...r.b
No. Time Source Destination Protocol Info
45 7.886927 209.114.219.98 209.114.219.69 SIP/SDP Request: INVITE sip:1001@209.114.219.69, with session description
Frame 45 (797 bytes on wire, 797 bytes captured)
Arrival Time: Jan 5, 2005 21:54:19.957235000
Time delta from previous packet: 4.894234000 seconds
Time since reference or first frame: 7.886927000 seconds
Frame Number: 45
Packet Length: 797 bytes
Capture Length: 797 bytes
Ethernet II, Src: 00:48:54:6f:8a:d2, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:48:54:6f:8a:d2 (209.114.219.98)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.98 (209.114.219.98), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 783
Identification: 0x0333 (819)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 249
Protocol: UDP (0x11)
Header checksum: 0x621d (correct)
Source: 209.114.219.98 (209.114.219.98)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 763
Checksum: 0xc390 (correct)
Session Initiation Protocol
Request-Line: INVITE sip:1001@209.114.219.69 SIP/2.0
Method: INVITE
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 192.168.200.169:5060
From: 3213084003 <sip:3213084003@209.114.219.69;user=phone>;tag=3518047997
SIP Display info: 3213084003
SIP from address: sip:3213084003@209.114.219.69
SIP tag: 3518047997
To: <sip:1001@209.114.219.69;user=phone>;tag=as6a4d6dad
SIP to address: sip:1001@209.114.219.69
SIP tag: as6a4d6dad
Call-ID: 1314847947@192.168.200.169
CSeq: 2 INVITE
Contact: 3213084003 <sip:3213084003@192.168.200.169:5060;user=phone;transport=udp>
User-Agent: Cisco ATA 186 v3.1.0 atasip (040211A)
Expires: 10
Allow: ACK, BYE, CANCEL, INVITE, NOTIFY, OPTIONS, REFER, REGISTER
Content-Length: 220
Content-Type: application/sdp
Message body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): 3213084003 3113 3113 IN IP4 192.168.200.169
Owner Username: 3213084003
Session ID: 3113
Session Version: 3113
Owner Network Type: IN
Owner Address Type: IP4
Owner Address: 192.168.200.169
Session Name (s): ATA186 Call
Connection Information (c): IN IP4 0.0.0.0
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 0.0.0.0
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Media Description, name and address (m): audio 16384 RTP/AVP 18 101
Media Type: audio
Media Port: 16384
Media Proto: RTP/AVP
Media Format: ITU-T G.729
Media Format: 101
Media Attribute (a): rtpmap:18 G729/8000/1
Media Attribute Fieldname: rtpmap
Media Attribute Value: 18 G729/8000/1
Media Attribute (a): fmtp:18 annexb=no
Media Attribute Fieldname: fmtp
Media Attribute Value: 18 annexb=no
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 101 telephone-event/8000
Media Attribute (a): fmtp:101 0-15
Media Attribute Fieldname: fmtp
Media Attribute Value: 101 0-15
0000 00 11 43 58 7a 18 00 48 54 6f 8a d2 08 00 45 00 ..CXz..HTo....E.
0010 03 0f 03 33 00 00 f9 11 62 1d d1 72 db 62 d1 72 ...3....b..r.b.r
0020 db 45 13 c4 13 c4 02 fb c3 90 49 4e 56 49 54 45 .E........INVITE
0030 20 73 69 70 3a 31 30 30 31 40 32 30 39 2e 31 31 sip:1001@209.11
0040 34 2e 32 31 39 2e 36 39 20 53 49 50 2f 32 2e 30 4.219.69 SIP/2.0
0050 0d 0a 56 69 61 3a 20 53 49 50 2f 32 2e 30 2f 55 ..Via: SIP/2.0/U
0060 44 50 20 31 39 32 2e 31 36 38 2e 32 30 30 2e 31 DP 192.168.200.1
0070 36 39 3a 35 30 36 30 0d 0a 46 72 6f 6d 3a 20 33 69:5060..From: 3
0080 32 31 33 30 38 34 30 30 33 20 3c 73 69 70 3a 33 213084003 <sip:3
0090 32 31 33 30 38 34 30 30 33 40 32 30 39 2e 31 31 213084003@209.11
00a0 34 2e 32 31 39 2e 36 39 3b 75 73 65 72 3d 70 68 4.219.69;user=ph
00b0 6f 6e 65 3e 3b 74 61 67 3d 33 35 31 38 30 34 37 one>;tag=3518047
00c0 39 39 37 0d 0a 54 6f 3a 20 3c 73 69 70 3a 31 30 997..To: <sip:10
00d0 30 31 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 01@209.114.219.6
00e0 39 3b 75 73 65 72 3d 70 68 6f 6e 65 3e 3b 74 61 9;user=phone>;ta
00f0 67 3d 61 73 36 61 34 64 36 64 61 64 0d 0a 43 61 g=as6a4d6dad..Ca
0100 6c 6c 2d 49 44 3a 20 31 33 31 34 38 34 37 39 34 ll-ID: 131484794
0110 37 40 31 39 32 2e 31 36 38 2e 32 30 30 2e 31 36 7@192.168.200.16
0120 39 0d 0a 43 53 65 71 3a 20 32 20 49 4e 56 49 54 9..CSeq: 2 INVIT
0130 45 0d 0a 43 6f 6e 74 61 63 74 3a 20 33 32 31 33 E..Contact: 3213
0140 30 38 34 30 30 33 20 3c 73 69 70 3a 33 32 31 33 084003 <sip:3213
0150 30 38 34 30 30 33 40 31 39 32 2e 31 36 38 2e 32 084003@192.168.2
0160 30 30 2e 31 36 39 3a 35 30 36 30 3b 75 73 65 72 00.169:5060;user
0170 3d 70 68 6f 6e 65 3b 74 72 61 6e 73 70 6f 72 74 =phone;transport
0180 3d 75 64 70 3e 0d 0a 55 73 65 72 2d 41 67 65 6e =udp>..User-Agen
0190 74 3a 20 43 69 73 63 6f 20 41 54 41 20 31 38 36 t: Cisco ATA 186
01a0 20 20 76 33 2e 31 2e 30 20 61 74 61 73 69 70 20 v3.1.0 atasip
01b0 28 30 34 30 32 31 31 41 29 0d 0a 45 78 70 69 72 (040211A)..Expir
01c0 65 73 3a 20 31 30 0d 0a 41 6c 6c 6f 77 3a 20 41 es: 10..Allow: A
01d0 43 4b 2c 20 42 59 45 2c 20 43 41 4e 43 45 4c 2c CK, BYE, CANCEL,
01e0 20 49 4e 56 49 54 45 2c 20 4e 4f 54 49 46 59 2c INVITE, NOTIFY,
01f0 20 4f 50 54 49 4f 4e 53 2c 20 52 45 46 45 52 2c OPTIONS, REFER,
0200 20 52 45 47 49 53 54 45 52 0d 0a 43 6f 6e 74 65 REGISTER..Conte
0210 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 32 30 0d 0a nt-Length: 220..
0220 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 Content-Type: ap
0230 70 6c 69 63 61 74 69 6f 6e 2f 73 64 70 0d 0a 0d plication/sdp...
0240 0a 76 3d 30 0d 0a 6f 3d 33 32 31 33 30 38 34 30 .v=0..o=32130840
0250 30 33 20 33 31 31 33 20 33 31 31 33 20 49 4e 20 03 3113 3113 IN
0260 49 50 34 20 31 39 32 2e 31 36 38 2e 32 30 30 2e IP4 192.168.200.
0270 31 36 39 0d 0a 73 3d 41 54 41 31 38 36 20 43 61 169..s=ATA186 Ca
0280 6c 6c 0d 0a 63 3d 49 4e 20 49 50 34 20 30 2e 30 ll..c=IN IP4 0.0
0290 2e 30 2e 30 0d 0a 74 3d 30 20 30 0d 0a 6d 3d 61 .0.0..t=0 0..m=a
02a0 75 64 69 6f 20 31 36 33 38 34 20 52 54 50 2f 41 udio 16384 RTP/A
02b0 56 50 20 31 38 20 31 30 31 0d 0a 61 3d 72 74 70 VP 18 101..a=rtp
02c0 6d 61 70 3a 31 38 20 47 37 32 39 2f 38 30 30 30 map:18 G729/8000
02d0 2f 31 0d 0a 61 3d 66 6d 74 70 3a 31 38 20 61 6e /1..a=fmtp:18 an
02e0 6e 65 78 62 3d 6e 6f 0d 0a 61 3d 72 74 70 6d 61 nexb=no..a=rtpma
02f0 70 3a 31 30 31 20 74 65 6c 65 70 68 6f 6e 65 2d p:101 telephone-
0300 65 76 65 6e 74 2f 38 30 30 30 0d 0a 61 3d 66 6d event/8000..a=fm
0310 74 70 3a 31 30 31 20 30 2d 31 35 0d 0a tp:101 0-15..
No. Time Source Destination Protocol Info
46 7.887243 209.114.219.69 209.114.219.98 SIP/SDP Status: 200 OK, with session description
Frame 46 (707 bytes on wire, 707 bytes captured)
Arrival Time: Jan 5, 2005 21:54:19.957551000
Time delta from previous packet: 0.000316000 seconds
Time since reference or first frame: 7.887243000 seconds
Frame Number: 46
Packet Length: 707 bytes
Capture Length: 707 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:48:54:6f:8a:d2
Destination: 00:48:54:6f:8a:d2 (209.114.219.98)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.98 (209.114.219.98)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 693
Identification: 0x0ab1 (2737)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xd3e1 (correct)
Source: 209.114.219.69 (209.114.219.69)
Destination: 209.114.219.98 (209.114.219.98)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 673
Checksum: 0x5c40 (incorrect, should be 0x5591)
Session Initiation Protocol
Status-Line: SIP/2.0 200 OK
Status-Code: 200
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 192.168.200.169:5060;received=209.114.219.98;rport=5060
From: 3213084003 <sip:3213084003@209.114.219.69;user=phone>;tag=3518047997
SIP Display info: 3213084003
SIP from address: sip:3213084003@209.114.219.69
SIP tag: 3518047997
To: <sip:1001@209.114.219.69;user=phone>;tag=as6a4d6dad
SIP to address: sip:1001@209.114.219.69
SIP tag: as6a4d6dad
Call-ID: 1314847947@192.168.200.169
CSeq: 2 INVITE
User-Agent: HCC Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER
Contact: <sip:1001@209.114.219.69>
Content-Type: application/sdp
Content-Length: 220
Message body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): root 3032 3035 IN IP4 209.114.219.90
Owner Username: root
Session ID: 3032
Session Version: 3035
Owner Network Type: IN
Owner Address Type: IP4
Owner Address: 209.114.219.90
Session Name (s): session
Connection Information (c): IN IP4 209.114.219.90
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 209.114.219.90
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Media Description, name and address (m): audio 17302 RTP/AVP 18 101
Media Type: audio
Media Port: 17302
Media Proto: RTP/AVP
Media Format: ITU-T G.729
Media Format: 101
Media Attribute (a): rtpmap:18 G729/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 18 G729/8000
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 101 telephone-event/8000
Media Attribute (a): fmtp:101 0-16
Media Attribute Fieldname: fmtp
Media Attribute Value: 101 0-16
Media Attribute (a): silenceSupp:off - - - -
Media Attribute Fieldname: silenceSupp
Media Attribute Value: off - - - -
0000 00 48 54 6f 8a d2 00 11 43 58 7a 18 08 00 45 18 .HTo....CXz...E.
0010 02 b5 0a b1 40 00 40 11 d3 e1 d1 72 db 45 d1 72 ....@.@....r.E.r
0020 db 62 13 c4 13 c4 02 a1 5c 40 53 49 50 2f 32 2e .b......\@SIP/2.
0030 30 20 32 30 30 20 4f 4b 0d 0a 56 69 61 3a 20 53 0 200 OK..Via: S
0040 49 50 2f 32 2e 30 2f 55 44 50 20 31 39 32 2e 31 IP/2.0/UDP 192.1
0050 36 38 2e 32 30 30 2e 31 36 39 3a 35 30 36 30 3b 68.200.169:5060;
0060 72 65 63 65 69 76 65 64 3d 32 30 39 2e 31 31 34 received=209.114
0070 2e 32 31 39 2e 39 38 3b 72 70 6f 72 74 3d 35 30 .219.98;rport=50
0080 36 30 0d 0a 46 72 6f 6d 3a 20 33 32 31 33 30 38 60..From: 321308
0090 34 30 30 33 20 3c 73 69 70 3a 33 32 31 33 30 38 4003 <sip:321308
00a0 34 30 30 33 40 32 30 39 2e 31 31 34 2e 32 31 39 4003@209.114.219
00b0 2e 36 39 3b 75 73 65 72 3d 70 68 6f 6e 65 3e 3b .69;user=phone>;
00c0 74 61 67 3d 33 35 31 38 30 34 37 39 39 37 0d 0a tag=3518047997..
00d0 54 6f 3a 20 3c 73 69 70 3a 31 30 30 31 40 32 30 To: <sip:1001@20
00e0 39 2e 31 31 34 2e 32 31 39 2e 36 39 3b 75 73 65 9.114.219.69;use
00f0 72 3d 70 68 6f 6e 65 3e 3b 74 61 67 3d 61 73 36 r=phone>;tag=as6
0100 61 34 64 36 64 61 64 0d 0a 43 61 6c 6c 2d 49 44 a4d6dad..Call-ID
0110 3a 20 31 33 31 34 38 34 37 39 34 37 40 31 39 32 : 1314847947@192
0120 2e 31 36 38 2e 32 30 30 2e 31 36 39 0d 0a 43 53 .168.200.169..CS
0130 65 71 3a 20 32 20 49 4e 56 49 54 45 0d 0a 55 73 eq: 2 INVITE..Us
0140 65 72 2d 41 67 65 6e 74 3a 20 48 43 43 20 41 73 er-Agent: HCC As
0150 74 65 72 69 73 6b 20 50 42 58 0d 0a 41 6c 6c 6f terisk PBX..Allo
0160 77 3a 20 49 4e 56 49 54 45 2c 20 41 43 4b 2c 20 w: INVITE, ACK,
0170 43 41 4e 43 45 4c 2c 20 4f 50 54 49 4f 4e 53 2c CANCEL, OPTIONS,
0180 20 42 59 45 2c 20 52 45 46 45 52 0d 0a 43 6f 6e BYE, REFER..Con
0190 74 61 63 74 3a 20 3c 73 69 70 3a 31 30 30 31 40 tact: <sip:1001@
01a0 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 0d 209.114.219.69>.
01b0 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 .Content-Type: a
01c0 70 70 6c 69 63 61 74 69 6f 6e 2f 73 64 70 0d 0a pplication/sdp..
01d0 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 Content-Length:
01e0 32 32 30 0d 0a 0d 0a 76 3d 30 0d 0a 6f 3d 72 6f 220....v=0..o=ro
01f0 6f 74 20 33 30 33 32 20 33 30 33 35 20 49 4e 20 ot 3032 3035 IN
0200 49 50 34 20 32 30 39 2e 31 31 34 2e 32 31 39 2e IP4 209.114.219.
0210 39 30 0d 0a 73 3d 73 65 73 73 69 6f 6e 0d 0a 63 90..s=session..c
0220 3d 49 4e 20 49 50 34 20 32 30 39 2e 31 31 34 2e =IN IP4 209.114.
0230 32 31 39 2e 39 30 0d 0a 74 3d 30 20 30 0d 0a 6d 219.90..t=0 0..m
0240 3d 61 75 64 69 6f 20 31 37 33 30 32 20 52 54 50 =audio 17302 RTP
0250 2f 41 56 50 20 31 38 20 31 30 31 0d 0a 61 3d 72 /AVP 18 101..a=r
0260 74 70 6d 61 70 3a 31 38 20 47 37 32 39 2f 38 30 tpmap:18 G729/80
0270 30 30 0d 0a 61 3d 72 74 70 6d 61 70 3a 31 30 31 00..a=rtpmap:101
0280 20 74 65 6c 65 70 68 6f 6e 65 2d 65 76 65 6e 74 telephone-event
0290 2f 38 30 30 30 0d 0a 61 3d 66 6d 74 70 3a 31 30 /8000..a=fmtp:10
02a0 31 20 30 2d 31 36 0d 0a 61 3d 73 69 6c 65 6e 63 1 0-16..a=silenc
02b0 65 53 75 70 70 3a 6f 66 66 20 2d 20 2d 20 2d 20 eSupp:off - - -
02c0 2d 0d 0a -..
No. Time Source Destination Protocol Info
47 7.887503 209.114.219.69 209.114.219.90 SIP/SDP Request: INVITE sip:003214093773@209.114.219.90:5060, with session description
Frame 47 (820 bytes on wire, 820 bytes captured)
Arrival Time: Jan 5, 2005 21:54:19.957811000
Time delta from previous packet: 0.000260000 seconds
Time since reference or first frame: 7.887503000 seconds
Frame Number: 47
Packet Length: 820 bytes
Capture Length: 820 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00
Destination: 00:b0:8e:35:44:00 (209.114.219.90)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 806
Identification: 0x0ab2 (2738)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xd377 (correct)
Source: 209.114.219.69 (209.114.219.69)
Destination: 209.114.219.90 (209.114.219.90)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 786
Checksum: 0x5ca9 (incorrect, should be 0x12a8)
Session Initiation Protocol
Request-Line: INVITE sip:003214093773@209.114.219.90:5060 SIP/2.0
Method: INVITE
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK5df422a7
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Contact: <sip:3213084003@209.114.219.69>
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
CSeq: 107 INVITE
User-Agent: HCC Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER
Content-Type: application/sdp
Content-Length: 291
Message body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): root 3032 3037 IN IP4 209.114.219.69
Owner Username: root
Session ID: 3032
Session Version: 3037
Owner Network Type: IN
Owner Address Type: IP4
Owner Address: 209.114.219.69
Session Name (s): session
Connection Information (c): IN IP4 209.114.219.69
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 209.114.219.69
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Media Description, name and address (m): audio 10770 RTP/AVP 0 8 3 18 101
Media Type: audio
Media Port: 10770
Media Proto: RTP/AVP
Media Format: ITU-T G.711 PCMU
Media Format: ITU-T G.711 PCMA
Media Format: GSM 06.10
Media Format: ITU-T G.729
Media Format: 101
Media Attribute (a): rtpmap:0 PCMU/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 0 PCMU/8000
Media Attribute (a): rtpmap:8 PCMA/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 8 PCMA/8000
Media Attribute (a): rtpmap:3 GSM/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 3 GSM/8000
Media Attribute (a): rtpmap:18 G729/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 18 G729/8000
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 101 telephone-event/8000
Media Attribute (a): fmtp:101 0-16
Media Attribute Fieldname: fmtp
Media Attribute Value: 101 0-16
Media Attribute (a): silenceSupp:off - - - -
Media Attribute Fieldname: silenceSupp
Media Attribute Value: off - - - -
0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E.
0010 03 26 0a b2 40 00 40 11 d3 77 d1 72 db 45 d1 72 .&..@.@..w.r.E.r
0020 db 5a 13 c4 13 c4 03 12 5c a9 49 4e 56 49 54 45 .Z......\.INVITE
0030 20 73 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 sip:00321409377
0040 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3@209.114.219.90
0050 3a 35 30 36 30 20 53 49 50 2f 32 2e 30 0d 0a 56 :5060 SIP/2.0..V
0060 69 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 ia: SIP/2.0/UDP
0070 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 209.114.219.69:5
0080 30 36 30 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 060;branch=z9hG4
0090 62 4b 35 64 66 34 32 32 61 37 0d 0a 46 72 6f 6d bK5df422a7..From
00a0 3a 20 22 33 32 31 33 30 38 34 30 30 33 22 20 3c : "3213084003" <
00b0 73 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 sip:3213084003@2
00c0 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 3b 74 09.114.219.69>;t
00d0 61 67 3d 61 73 37 32 31 63 32 32 63 34 0d 0a 54 ag=as721c22c4..T
00e0 6f 3a 20 3c 73 69 70 3a 30 30 33 32 31 34 30 39 o: <sip:00321409
00f0 33 37 37 33 40 32 30 39 2e 31 31 34 2e 32 31 39 3773@209.114.219
0100 2e 39 30 3e 3b 74 61 67 3d 34 44 30 39 39 32 38 .90>;tag=4D09928
0110 30 2d 37 41 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 0-7A..Contact: <
0120 73 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 sip:3213084003@2
0130 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 0d 0a 09.114.219.69>..
0140 43 61 6c 6c 2d 49 44 3a 20 35 33 37 62 32 66 38 Call-ID: 537b2f8
0150 38 32 36 38 61 33 62 66 34 31 63 39 32 61 65 65 8268a3bf41c92aee
0160 39 34 38 38 65 38 35 35 33 40 32 30 39 2e 31 31 9488e8553@209.11
0170 34 2e 32 31 39 2e 36 39 0d 0a 43 53 65 71 3a 20 4.219.69..CSeq:
0180 31 30 37 20 49 4e 56 49 54 45 0d 0a 55 73 65 72 107 INVITE..User
0190 2d 41 67 65 6e 74 3a 20 48 43 43 20 41 73 74 65 -Agent: HCC Aste
01a0 72 69 73 6b 20 50 42 58 0d 0a 41 6c 6c 6f 77 3a risk PBX..Allow:
01b0 20 49 4e 56 49 54 45 2c 20 41 43 4b 2c 20 43 41 INVITE, ACK, CA
01c0 4e 43 45 4c 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 NCEL, OPTIONS, B
01d0 59 45 2c 20 52 45 46 45 52 0d 0a 43 6f 6e 74 65 YE, REFER..Conte
01e0 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 nt-Type: applica
01f0 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f 6e 74 65 6e tion/sdp..Conten
0200 74 2d 4c 65 6e 67 74 68 3a 20 32 39 31 0d 0a 0d t-Length: 291...
0210 0a 76 3d 30 0d 0a 6f 3d 72 6f 6f 74 20 33 30 33 .v=0..o=root 303
0220 32 20 33 30 33 37 20 49 4e 20 49 50 34 20 32 30 2 3037 IN IP4 20
0230 39 2e 31 31 34 2e 32 31 39 2e 36 39 0d 0a 73 3d 9.114.219.69..s=
0240 73 65 73 73 69 6f 6e 0d 0a 63 3d 49 4e 20 49 50 session..c=IN IP
0250 34 20 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 4 209.114.219.69
0260 0d 0a 74 3d 30 20 30 0d 0a 6d 3d 61 75 64 69 6f ..t=0 0..m=audio
0270 20 31 30 37 37 30 20 52 54 50 2f 41 56 50 20 30 10770 RTP/AVP 0
0280 20 38 20 33 20 31 38 20 31 30 31 0d 0a 61 3d 72 8 3 18 101..a=r
0290 74 70 6d 61 70 3a 30 20 50 43 4d 55 2f 38 30 30 tpmap:0 PCMU/800
02a0 30 0d 0a 61 3d 72 74 70 6d 61 70 3a 38 20 50 43 0..a=rtpmap:8 PC
02b0 4d 41 2f 38 30 30 30 0d 0a 61 3d 72 74 70 6d 61 MA/8000..a=rtpma
02c0 70 3a 33 20 47 53 4d 2f 38 30 30 30 0d 0a 61 3d p:3 GSM/8000..a=
02d0 72 74 70 6d 61 70 3a 31 38 20 47 37 32 39 2f 38 rtpmap:18 G729/8
02e0 30 30 30 0d 0a 61 3d 72 74 70 6d 61 70 3a 31 30 000..a=rtpmap:10
02f0 31 20 74 65 6c 65 70 68 6f 6e 65 2d 65 76 65 6e 1 telephone-even
0300 74 2f 38 30 30 30 0d 0a 61 3d 66 6d 74 70 3a 31 t/8000..a=fmtp:1
0310 30 31 20 30 2d 31 36 0d 0a 61 3d 73 69 6c 65 6e 01 0-16..a=silen
0320 63 65 53 75 70 70 3a 6f 66 66 20 2d 20 2d 20 2d ceSupp:off - - -
0330 20 2d 0d 0a -..
No. Time Source Destination Protocol Info
48 7.893405 209.114.219.90 209.114.219.69 SIP Status: 100 Trying
Frame 48 (445 bytes on wire, 445 bytes captured)
Arrival Time: Jan 5, 2005 21:54:19.963713000
Time delta from previous packet: 0.005902000 seconds
Time since reference or first frame: 7.893405000 seconds
Frame Number: 48
Packet Length: 445 bytes
Capture Length: 445 bytes
Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:b0:8e:35:44:00 (209.114.219.90)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00)
0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 431
Identification: 0x3525 (13605)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 255
Protocol: UDP (0x11)
Header checksum: 0x2b2b (correct)
Source: 209.114.219.90 (209.114.219.90)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060)
Source port: 56262 (56262)
Destination port: 5060 (5060)
Length: 411
Checksum: 0x141d (correct)
Session Initiation Protocol
Status-Line: SIP/2.0 100 Trying
Status-Code: 100
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK5df422a7
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Date: Wed, 05 Jan 2005 23:34:50 GMT
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
Server: Cisco-SIPGateway/IOS-12.x
CSeq: 107 INVITE
Allow-Events: telephone-event
Content-Length: 0
0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh
0010 01 af 35 25 00 00 ff 11 2b 2b d1 72 db 5a d1 72 ..5%....++.r.Z.r
0020 db 45 db c6 13 c4 01 9b 14 1d 53 49 50 2f 32 2e .E........SIP/2.
0030 30 20 31 30 30 20 54 72 79 69 6e 67 0d 0a 56 69 0 100 Trying..Vi
0040 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 a: SIP/2.0/UDP 2
0050 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 09.114.219.69:50
0060 36 30 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 60;branch=z9hG4b
0070 4b 35 64 66 34 32 32 61 37 0d 0a 46 72 6f 6d 3a K5df422a7..From:
0080 20 22 33 32 31 33 30 38 34 30 30 33 22 20 3c 73 "3213084003" <s
0090 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 30 ip:3213084003@20
00a0 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 3b 74 61 9.114.219.69>;ta
00b0 67 3d 61 73 37 32 31 63 32 32 63 34 0d 0a 54 6f g=as721c22c4..To
00c0 3a 20 3c 73 69 70 3a 30 30 33 32 31 34 30 39 33 : <sip:003214093
00d0 37 37 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 773@209.114.219.
00e0 39 30 3e 3b 74 61 67 3d 34 44 30 39 39 32 38 30 90>;tag=4D099280
00f0 2d 37 41 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 -7A..Date: Wed,
0100 30 35 20 4a 61 6e 20 32 30 30 35 20 32 33 3a 33 05 Jan 2005 23:3
0110 34 3a 35 30 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 4:50 GMT..Call-I
0120 44 3a 20 35 33 37 62 32 66 38 38 32 36 38 61 33 D: 537b2f88268a3
0130 62 66 34 31 63 39 32 61 65 65 39 34 38 38 65 38 bf41c92aee9488e8
0140 35 35 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 553@209.114.219.
0150 36 39 0d 0a 53 65 72 76 65 72 3a 20 43 69 73 63 69..Server: Cisc
0160 6f 2d 53 49 50 47 61 74 65 77 61 79 2f 49 4f 53 o-SIPGateway/IOS
0170 2d 31 32 2e 78 0d 0a 43 53 65 71 3a 20 31 30 37 -12.x..CSeq: 107
0180 20 49 4e 56 49 54 45 0d 0a 41 6c 6c 6f 77 2d 45 INVITE..Allow-E
0190 76 65 6e 74 73 3a 20 74 65 6c 65 70 68 6f 6e 65 vents: telephone
01a0 2d 65 76 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d -event..Content-
01b0 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Length: 0....
No. Time Source Destination Protocol Info
49 7.894628 209.114.219.90 209.114.219.69 SIP/SDP Status: 200 OK, with session description
Frame 49 (892 bytes on wire, 892 bytes captured)
Arrival Time: Jan 5, 2005 21:54:19.964936000
Time delta from previous packet: 0.001223000 seconds
Time since reference or first frame: 7.894628000 seconds
Frame Number: 49
Packet Length: 892 bytes
Capture Length: 892 bytes
Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:b0:8e:35:44:00 (209.114.219.90)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00)
0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 878
Identification: 0x3526 (13606)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 255
Protocol: UDP (0x11)
Header checksum: 0x296b (correct)
Source: 209.114.219.90 (209.114.219.90)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060)
Source port: 56262 (56262)
Destination port: 5060 (5060)
Length: 858
Checksum: 0x07e5 (correct)
Session Initiation Protocol
Status-Line: SIP/2.0 200 OK
Status-Code: 200
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK5df422a7
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Date: Wed, 05 Jan 2005 23:34:50 GMT
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
Server: Cisco-SIPGateway/IOS-12.x
CSeq: 107 INVITE
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER
Allow-Events: telephone-event
Contact: <sip:003214093773@209.114.219.90:5060>
Content-Type: application/sdp
Content-Length: 263
Message body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): CiscoSystemsSIP-GW-UserAgent 614 7264 IN IP4 209.114.219.90
Owner Username: CiscoSystemsSIP-GW-UserAgent
Session ID: 614
Session Version: 7264
Owner Network Type: IN
Owner Address Type: IP4
Owner Address: 209.114.219.90
Session Name (s): SIP Call
Connection Information (c): IN IP4 209.114.219.90
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 209.114.219.90
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Media Description, name and address (m): audio 17302 RTP/AVP 18 101
Media Type: audio
Media Port: 17302
Media Proto: RTP/AVP
Media Format: ITU-T G.729
Media Format: 101
Connection Information (c): IN IP4 209.114.219.90
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 209.114.219.90
Media Attribute (a): rtpmap:18 G729/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 18 G729/8000
Media Attribute (a): fmtp:18 annexb=no
Media Attribute Fieldname: fmtp
Media Attribute Value: 18 annexb=no
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 101 telephone-event/8000
Media Attribute (a): fmtp:101 0-16
Media Attribute Fieldname: fmtp
Media Attribute Value: 101 0-16
0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh
0010 03 6e 35 26 00 00 ff 11 29 6b d1 72 db 5a d1 72 .n5&....)k.r.Z.r
0020 db 45 db c6 13 c4 03 5a 07 e5 53 49 50 2f 32 2e .E.....Z..SIP/2.
0030 30 20 32 30 30 20 4f 4b 0d 0a 56 69 61 3a 20 53 0 200 OK..Via: S
0040 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 2e 31 IP/2.0/UDP 209.1
0050 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 3b 62 14.219.69:5060;b
0060 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 35 64 66 ranch=z9hG4bK5df
0070 34 32 32 61 37 0d 0a 46 72 6f 6d 3a 20 22 33 32 422a7..From: "32
0080 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3a 33 13084003" <sip:3
0090 32 31 33 30 38 34 30 30 33 40 32 30 39 2e 31 31 213084003@209.11
00a0 34 2e 32 31 39 2e 36 39 3e 3b 74 61 67 3d 61 73 4.219.69>;tag=as
00b0 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 3c 73 721c22c4..To: <s
00c0 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 33 40 ip:003214093773@
00d0 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3e 3b 209.114.219.90>;
00e0 74 61 67 3d 34 44 30 39 39 32 38 30 2d 37 41 0d tag=4D099280-7A.
00f0 0a 44 61 74 65 3a 20 57 65 64 2c 20 30 35 20 4a .Date: Wed, 05 J
0100 61 6e 20 32 30 30 35 20 32 33 3a 33 34 3a 35 30 an 2005 23:34:50
0110 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 44 3a 20 35 GMT..Call-ID: 5
0120 33 37 62 32 66 38 38 32 36 38 61 33 62 66 34 31 37b2f88268a3bf41
0130 63 39 32 61 65 65 39 34 38 38 65 38 35 35 33 40 c92aee9488e8553@
0140 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 0d 0a 209.114.219.69..
0150 53 65 72 76 65 72 3a 20 43 69 73 63 6f 2d 53 49 Server: Cisco-SI
0160 50 47 61 74 65 77 61 79 2f 49 4f 53 2d 31 32 2e PGateway/IOS-12.
0170 78 0d 0a 43 53 65 71 3a 20 31 30 37 20 49 4e 56 x..CSeq: 107 INV
0180 49 54 45 0d 0a 41 6c 6c 6f 77 3a 20 49 4e 56 49 ITE..Allow: INVI
0190 54 45 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 59 45 TE, OPTIONS, BYE
01a0 2c 20 43 41 4e 43 45 4c 2c 20 41 43 4b 2c 20 50 , CANCEL, ACK, P
01b0 52 41 43 4b 2c 20 43 4f 4d 45 54 2c 20 52 45 46 RACK, COMET, REF
01c0 45 52 2c 20 53 55 42 53 43 52 49 42 45 2c 20 4e ER, SUBSCRIBE, N
01d0 4f 54 49 46 59 2c 20 49 4e 46 4f 2c 20 55 50 44 OTIFY, INFO, UPD
01e0 41 54 45 2c 20 52 45 47 49 53 54 45 52 0d 0a 41 ATE, REGISTER..A
01f0 6c 6c 6f 77 2d 45 76 65 6e 74 73 3a 20 74 65 6c llow-Events: tel
0200 65 70 68 6f 6e 65 2d 65 76 65 6e 74 0d 0a 43 6f ephone-event..Co
0210 6e 74 61 63 74 3a 20 3c 73 69 70 3a 30 30 33 32 ntact: <sip:0032
0220 31 34 30 39 33 37 37 33 40 32 30 39 2e 31 31 34 14093773@209.114
0230 2e 32 31 39 2e 39 30 3a 35 30 36 30 3e 0d 0a 43 .219.90:5060>..C
0240 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 ontent-Type: app
0250 6c 69 63 61 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f lication/sdp..Co
0260 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 36 ntent-Length: 26
0270 33 0d 0a 0d 0a 76 3d 30 0d 0a 6f 3d 43 69 73 63 3....v=0..o=Cisc
0280 6f 53 79 73 74 65 6d 73 53 49 50 2d 47 57 2d 55 oSystemsSIP-GW-U
0290 73 65 72 41 67 65 6e 74 20 36 31 34 20 37 32 36 serAgent 614 726
02a0 34 20 49 4e 20 49 50 34 20 32 30 39 2e 31 31 34 4 IN IP4 209.114
02b0 2e 32 31 39 2e 39 30 0d 0a 73 3d 53 49 50 20 43 .219.90..s=SIP C
02c0 61 6c 6c 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 all..c=IN IP4 20
02d0 39 2e 31 31 34 2e 32 31 39 2e 39 30 0d 0a 74 3d 9.114.219.90..t=
02e0 30 20 30 0d 0a 6d 3d 61 75 64 69 6f 20 31 37 33 0 0..m=audio 173
02f0 30 32 20 52 54 50 2f 41 56 50 20 31 38 20 31 30 02 RTP/AVP 18 10
0300 31 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 39 2e 1..c=IN IP4 209.
0310 31 31 34 2e 32 31 39 2e 39 30 0d 0a 61 3d 72 74 114.219.90..a=rt
0320 70 6d 61 70 3a 31 38 20 47 37 32 39 2f 38 30 30 pmap:18 G729/800
0330 30 0d 0a 61 3d 66 6d 74 70 3a 31 38 20 61 6e 6e 0..a=fmtp:18 ann
0340 65 78 62 3d 6e 6f 0d 0a 61 3d 72 74 70 6d 61 70 exb=no..a=rtpmap
0350 3a 31 30 31 20 74 65 6c 65 70 68 6f 6e 65 2d 65 :101 telephone-e
0360 76 65 6e 74 2f 38 30 30 30 0d 0a 61 3d 66 6d 74 vent/8000..a=fmt
0370 70 3a 31 30 31 20 30 2d 31 36 0d 0a p:101 0-16..
No. Time Source Destination Protocol Info
50 7.894808 209.114.219.69 209.114.219.90 SIP Request: ACK sip:003214093773@209.114.219.90:5060
Frame 50 (441 bytes on wire, 441 bytes captured)
Arrival Time: Jan 5, 2005 21:54:19.965116000
Time delta from previous packet: 0.000180000 seconds
Time since reference or first frame: 7.894808000 seconds
Frame Number: 50
Packet Length: 441 bytes
Capture Length: 441 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00
Destination: 00:b0:8e:35:44:00 (209.114.219.90)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 427
Identification: 0x0ab3 (2739)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xd4f1 (correct)
Source: 209.114.219.69 (209.114.219.69)
Destination: 209.114.219.90 (209.114.219.90)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 407
Checksum: 0x5b2e (incorrect, should be 0x5a3a)
Session Initiation Protocol
Request-Line: ACK sip:003214093773@209.114.219.90:5060 SIP/2.0
Method: ACK
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK6f6dc532
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Contact: <sip:3213084003@209.114.219.69>
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
CSeq: 107 ACK
User-Agent: HCC Asterisk PBX
Content-Length: 0
0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E.
0010 01 ab 0a b3 40 00 40 11 d4 f1 d1 72 db 45 d1 72 ....@.@....r.E.r
0020 db 5a 13 c4 13 c4 01 97 5b 2e 41 43 4b 20 73 69 .Z......[.ACK si
0030 70 3a 30 30 33 32 31 34 30 39 33 37 37 33 40 32 p:003214093773@2
0040 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3a 35 30 09.114.219.90:50
0050 36 30 20 53 49 50 2f 32 2e 30 0d 0a 56 69 61 3a 60 SIP/2.0..Via:
0060 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 SIP/2.0/UDP 209
0070 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 .114.219.69:5060
0080 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 36 ;branch=z9hG4bK6
0090 66 36 64 63 35 33 32 0d 0a 46 72 6f 6d 3a 20 22 f6dc532..From: "
00a0 33 32 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3213084003" <sip
00b0 3a 33 32 31 33 30 38 34 30 30 33 40 32 30 39 2e :3213084003@209.
00c0 31 31 34 2e 32 31 39 2e 36 39 3e 3b 74 61 67 3d 114.219.69>;tag=
00d0 61 73 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 as721c22c4..To:
00e0 3c 73 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 <sip:00321409377
00f0 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3@209.114.219.90
0100 3e 3b 74 61 67 3d 34 44 30 39 39 32 38 30 2d 37 >;tag=4D099280-7
0110 41 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 73 69 70 A..Contact: <sip
0120 3a 33 32 31 33 30 38 34 30 30 33 40 32 30 39 2e :3213084003@209.
0130 31 31 34 2e 32 31 39 2e 36 39 3e 0d 0a 43 61 6c 114.219.69>..Cal
0140 6c 2d 49 44 3a 20 35 33 37 62 32 66 38 38 32 36 l-ID: 537b2f8826
0150 38 61 33 62 66 34 31 63 39 32 61 65 65 39 34 38 8a3bf41c92aee948
0160 38 65 38 35 35 33 40 32 30 39 2e 31 31 34 2e 32 8e8553@209.114.2
0170 31 39 2e 36 39 0d 0a 43 53 65 71 3a 20 31 30 37 19.69..CSeq: 107
0180 20 41 43 4b 0d 0a 55 73 65 72 2d 41 67 65 6e 74 ACK..User-Agent
0190 3a 20 48 43 43 20 41 73 74 65 72 69 73 6b 20 50 : HCC Asterisk P
01a0 42 58 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 BX..Content-Leng
01b0 74 68 3a 20 30 0d 0a 0d 0a th: 0....
No. Time Source Destination Protocol Info
51 7.916835 209.114.219.98 209.114.219.69 SIP Request: ACK sip:1001@209.114.219.69
Frame 51 (374 bytes on wire, 374 bytes captured)
Arrival Time: Jan 5, 2005 21:54:19.987143000
Time delta from previous packet: 0.022027000 seconds
Time since reference or first frame: 7.916835000 seconds
Frame Number: 51
Packet Length: 374 bytes
Capture Length: 374 bytes
Ethernet II, Src: 00:48:54:6f:8a:d2, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:48:54:6f:8a:d2 (209.114.219.98)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.98 (209.114.219.98), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 360
Identification: 0x0334 (820)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 249
Protocol: UDP (0x11)
Header checksum: 0x63c3 (correct)
Source: 209.114.219.98 (209.114.219.98)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 340
Checksum: 0xc56a (correct)
Session Initiation Protocol
Request-Line: ACK sip:1001@209.114.219.69 SIP/2.0
Method: ACK
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 192.168.200.169:5060
From: 3213084003 <sip:3213084003@209.114.219.69;user=phone>;tag=3518047997
SIP Display info: 3213084003
SIP from address: sip:3213084003@209.114.219.69
SIP tag: 3518047997
To: <sip:1001@209.114.219.69;user=phone>;tag=as6a4d6dad
SIP to address: sip:1001@209.114.219.69
SIP tag: as6a4d6dad
Call-ID: 1314847947@192.168.200.169
CSeq: 2 ACK
User-Agent: Cisco ATA 186 v3.1.0 atasip (040211A)
Content-Length: 0
0000 00 11 43 58 7a 18 00 48 54 6f 8a d2 08 00 45 00 ..CXz..HTo....E.
0010 01 68 03 34 00 00 f9 11 63 c3 d1 72 db 62 d1 72 .h.4....c..r.b.r
0020 db 45 13 c4 13 c4 01 54 c5 6a 41 43 4b 20 73 69 .E.....T.jACK si
0030 70 3a 31 30 30 31 40 32 30 39 2e 31 31 34 2e 32 p:1001@209.114.2
0040 31 39 2e 36 39 20 53 49 50 2f 32 2e 30 0d 0a 56 19.69 SIP/2.0..V
0050 69 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 ia: SIP/2.0/UDP
0060 31 39 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 3a 192.168.200.169:
0070 35 30 36 30 0d 0a 46 72 6f 6d 3a 20 33 32 31 33 5060..From: 3213
0080 30 38 34 30 30 33 20 3c 73 69 70 3a 33 32 31 33 084003 <sip:3213
0090 30 38 34 30 30 33 40 32 30 39 2e 31 31 34 2e 32 084003@209.114.2
00a0 31 39 2e 36 39 3b 75 73 65 72 3d 70 68 6f 6e 65 19.69;user=phone
00b0 3e 3b 74 61 67 3d 33 35 31 38 30 34 37 39 39 37 >;tag=3518047997
00c0 0d 0a 54 6f 3a 20 3c 73 69 70 3a 31 30 30 31 40 ..To: <sip:1001@
00d0 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3b 75 209.114.219.69;u
00e0 73 65 72 3d 70 68 6f 6e 65 3e 3b 74 61 67 3d 61 ser=phone>;tag=a
00f0 73 36 61 34 64 36 64 61 64 0d 0a 43 61 6c 6c 2d s6a4d6dad..Call-
0100 49 44 3a 20 31 33 31 34 38 34 37 39 34 37 40 31 ID: 1314847947@1
0110 39 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 0d 0a 92.168.200.169..
0120 43 53 65 71 3a 20 32 20 41 43 4b 0d 0a 55 73 65 CSeq: 2 ACK..Use
0130 72 2d 41 67 65 6e 74 3a 20 43 69 73 63 6f 20 41 r-Agent: Cisco A
0140 54 41 20 31 38 36 20 20 76 33 2e 31 2e 30 20 61 TA 186 v3.1.0 a
0150 74 61 73 69 70 20 28 30 34 30 32 31 31 41 29 0d tasip (040211A).
0160 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a .Content-Length:
0170 20 30 0d 0a 0d 0a 0....
No. Time Source Destination Protocol Info
52 9.721768 209.114.219.98 209.114.219.69 SIP Request: BYE sip:1001@209.114.219.69
Frame 52 (374 bytes on wire, 374 bytes captured)
Arrival Time: Jan 5, 2005 21:54:21.792076000
Time delta from previous packet: 1.804933000 seconds
Time since reference or first frame: 9.721768000 seconds
Frame Number: 52
Packet Length: 374 bytes
Capture Length: 374 bytes
Ethernet II, Src: 00:48:54:6f:8a:d2, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:48:54:6f:8a:d2 (209.114.219.98)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.98 (209.114.219.98), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 360
Identification: 0x0335 (821)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 249
Protocol: UDP (0x11)
Header checksum: 0x63c2 (correct)
Source: 209.114.219.98 (209.114.219.98)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 340
Checksum: 0xce3e (correct)
Session Initiation Protocol
Request-Line: BYE sip:1001@209.114.219.69 SIP/2.0
Method: BYE
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 192.168.200.169:5060
From: 3213084003 <sip:3213084003@209.114.219.69;user=phone>;tag=3518047997
SIP Display info: 3213084003
SIP from address: sip:3213084003@209.114.219.69
SIP tag: 3518047997
To: <sip:1001@209.114.219.69;user=phone>;tag=as6a4d6dad
SIP to address: sip:1001@209.114.219.69
SIP tag: as6a4d6dad
Call-ID: 1314847947@192.168.200.169
CSeq: 3 BYE
User-Agent: Cisco ATA 186 v3.1.0 atasip (040211A)
Content-Length: 0
0000 00 11 43 58 7a 18 00 48 54 6f 8a d2 08 00 45 00 ..CXz..HTo....E.
0010 01 68 03 35 00 00 f9 11 63 c2 d1 72 db 62 d1 72 .h.5....c..r.b.r
0020 db 45 13 c4 13 c4 01 54 ce 3e 42 59 45 20 73 69 .E.....T.>BYE si
0030 70 3a 31 30 30 31 40 32 30 39 2e 31 31 34 2e 32 p:1001@209.114.2
0040 31 39 2e 36 39 20 53 49 50 2f 32 2e 30 0d 0a 56 19.69 SIP/2.0..V
0050 69 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 ia: SIP/2.0/UDP
0060 31 39 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 3a 192.168.200.169:
0070 35 30 36 30 0d 0a 46 72 6f 6d 3a 20 33 32 31 33 5060..From: 3213
0080 30 38 34 30 30 33 20 3c 73 69 70 3a 33 32 31 33 084003 <sip:3213
0090 30 38 34 30 30 33 40 32 30 39 2e 31 31 34 2e 32 084003@209.114.2
00a0 31 39 2e 36 39 3b 75 73 65 72 3d 70 68 6f 6e 65 19.69;user=phone
00b0 3e 3b 74 61 67 3d 33 35 31 38 30 34 37 39 39 37 >;tag=3518047997
00c0 0d 0a 54 6f 3a 20 3c 73 69 70 3a 31 30 30 31 40 ..To: <sip:1001@
00d0 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3b 75 209.114.219.69;u
00e0 73 65 72 3d 70 68 6f 6e 65 3e 3b 74 61 67 3d 61 ser=phone>;tag=a
00f0 73 36 61 34 64 36 64 61 64 0d 0a 43 61 6c 6c 2d s6a4d6dad..Call-
0100 49 44 3a 20 31 33 31 34 38 34 37 39 34 37 40 31 ID: 1314847947@1
0110 39 32 2e 31 36 38 2e 32 30 30 2e 31 36 39 0d 0a 92.168.200.169..
0120 43 53 65 71 3a 20 33 20 42 59 45 0d 0a 55 73 65 CSeq: 3 BYE..Use
0130 72 2d 41 67 65 6e 74 3a 20 43 69 73 63 6f 20 41 r-Agent: Cisco A
0140 54 41 20 31 38 36 20 20 76 33 2e 31 2e 30 20 61 TA 186 v3.1.0 a
0150 74 61 73 69 70 20 28 30 34 30 32 31 31 41 29 0d tasip (040211A).
0160 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a .Content-Length:
0170 20 30 0d 0a 0d 0a 0....
No. Time Source Destination Protocol Info
53 9.721965 209.114.219.69 209.114.219.98 SIP Status: 200 OK
Frame 53 (451 bytes on wire, 451 bytes captured)
Arrival Time: Jan 5, 2005 21:54:21.792273000
Time delta from previous packet: 0.000197000 seconds
Time since reference or first frame: 9.721965000 seconds
Frame Number: 53
Packet Length: 451 bytes
Capture Length: 451 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:48:54:6f:8a:d2
Destination: 00:48:54:6f:8a:d2 (209.114.219.98)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.98 (209.114.219.98)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 437
Identification: 0x0ab4 (2740)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xd4de (correct)
Source: 209.114.219.69 (209.114.219.69)
Destination: 209.114.219.98 (209.114.219.98)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 417
Checksum: 0x5b40 (incorrect, should be 0xfc35)
Session Initiation Protocol
Status-Line: SIP/2.0 200 OK
Status-Code: 200
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 192.168.200.169:5060;received=209.114.219.98;rport=5060
From: 3213084003 <sip:3213084003@209.114.219.69;user=phone>;tag=3518047997
SIP Display info: 3213084003
SIP from address: sip:3213084003@209.114.219.69
SIP tag: 3518047997
To: <sip:1001@209.114.219.69;user=phone>;tag=as6a4d6dad
SIP to address: sip:1001@209.114.219.69
SIP tag: as6a4d6dad
Call-ID: 1314847947@192.168.200.169
CSeq: 3 BYE
User-Agent: HCC Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER
Contact: <sip:1001@209.114.219.69>
Content-Length: 0
0000 00 48 54 6f 8a d2 00 11 43 58 7a 18 08 00 45 18 .HTo....CXz...E.
0010 01 b5 0a b4 40 00 40 11 d4 de d1 72 db 45 d1 72 ....@.@....r.E.r
0020 db 62 13 c4 13 c4 01 a1 5b 40 53 49 50 2f 32 2e .b......[@SIP/2.
0030 30 20 32 30 30 20 4f 4b 0d 0a 56 69 61 3a 20 53 0 200 OK..Via: S
0040 49 50 2f 32 2e 30 2f 55 44 50 20 31 39 32 2e 31 IP/2.0/UDP 192.1
0050 36 38 2e 32 30 30 2e 31 36 39 3a 35 30 36 30 3b 68.200.169:5060;
0060 72 65 63 65 69 76 65 64 3d 32 30 39 2e 31 31 34 received=209.114
0070 2e 32 31 39 2e 39 38 3b 72 70 6f 72 74 3d 35 30 .219.98;rport=50
0080 36 30 0d 0a 46 72 6f 6d 3a 20 33 32 31 33 30 38 60..From: 321308
0090 34 30 30 33 20 3c 73 69 70 3a 33 32 31 33 30 38 4003 <sip:321308
00a0 34 30 30 33 40 32 30 39 2e 31 31 34 2e 32 31 39 4003@209.114.219
00b0 2e 36 39 3b 75 73 65 72 3d 70 68 6f 6e 65 3e 3b .69;user=phone>;
00c0 74 61 67 3d 33 35 31 38 30 34 37 39 39 37 0d 0a tag=3518047997..
00d0 54 6f 3a 20 3c 73 69 70 3a 31 30 30 31 40 32 30 To: <sip:1001@20
00e0 39 2e 31 31 34 2e 32 31 39 2e 36 39 3b 75 73 65 9.114.219.69;use
00f0 72 3d 70 68 6f 6e 65 3e 3b 74 61 67 3d 61 73 36 r=phone>;tag=as6
0100 61 34 64 36 64 61 64 0d 0a 43 61 6c 6c 2d 49 44 a4d6dad..Call-ID
0110 3a 20 31 33 31 34 38 34 37 39 34 37 40 31 39 32 : 1314847947@192
0120 2e 31 36 38 2e 32 30 30 2e 31 36 39 0d 0a 43 53 .168.200.169..CS
0130 65 71 3a 20 33 20 42 59 45 0d 0a 55 73 65 72 2d eq: 3 BYE..User-
0140 41 67 65 6e 74 3a 20 48 43 43 20 41 73 74 65 72 Agent: HCC Aster
0150 69 73 6b 20 50 42 58 0d 0a 41 6c 6c 6f 77 3a 20 isk PBX..Allow:
0160 49 4e 56 49 54 45 2c 20 41 43 4b 2c 20 43 41 4e INVITE, ACK, CAN
0170 43 45 4c 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 59 CEL, OPTIONS, BY
0180 45 2c 20 52 45 46 45 52 0d 0a 43 6f 6e 74 61 63 E, REFER..Contac
0190 74 3a 20 3c 73 69 70 3a 31 30 30 31 40 32 30 39 t: <sip:1001@209
01a0 2e 31 31 34 2e 32 31 39 2e 36 39 3e 0d 0a 43 6f .114.219.69>..Co
01b0 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d ntent-Length: 0.
01c0 0a 0d 0a ...
No. Time Source Destination Protocol Info
54 9.722119 209.114.219.69 209.114.219.90 SIP/SDP Request: INVITE sip:003214093773@209.114.219.90:5060, with session description
Frame 54 (820 bytes on wire, 820 bytes captured)
Arrival Time: Jan 5, 2005 21:54:21.792427000
Time delta from previous packet: 0.000154000 seconds
Time since reference or first frame: 9.722119000 seconds
Frame Number: 54
Packet Length: 820 bytes
Capture Length: 820 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00
Destination: 00:b0:8e:35:44:00 (209.114.219.90)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 806
Identification: 0x0ab5 (2741)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xd374 (correct)
Source: 209.114.219.69 (209.114.219.69)
Destination: 209.114.219.90 (209.114.219.90)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 786
Checksum: 0x5ca9 (incorrect, should be 0x14a3)
Session Initiation Protocol
Request-Line: INVITE sip:003214093773@209.114.219.90:5060 SIP/2.0
Method: INVITE
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK3502cfe8
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Contact: <sip:3213084003@209.114.219.69>
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
CSeq: 108 INVITE
User-Agent: HCC Asterisk PBX
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER
Content-Type: application/sdp
Content-Length: 291
Message body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): root 3032 3038 IN IP4 209.114.219.69
Owner Username: root
Session ID: 3032
Session Version: 3038
Owner Network Type: IN
Owner Address Type: IP4
Owner Address: 209.114.219.69
Session Name (s): session
Connection Information (c): IN IP4 209.114.219.69
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 209.114.219.69
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Media Description, name and address (m): audio 10770 RTP/AVP 0 8 3 18 101
Media Type: audio
Media Port: 10770
Media Proto: RTP/AVP
Media Format: ITU-T G.711 PCMU
Media Format: ITU-T G.711 PCMA
Media Format: GSM 06.10
Media Format: ITU-T G.729
Media Format: 101
Media Attribute (a): rtpmap:0 PCMU/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 0 PCMU/8000
Media Attribute (a): rtpmap:8 PCMA/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 8 PCMA/8000
Media Attribute (a): rtpmap:3 GSM/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 3 GSM/8000
Media Attribute (a): rtpmap:18 G729/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 18 G729/8000
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 101 telephone-event/8000
Media Attribute (a): fmtp:101 0-16
Media Attribute Fieldname: fmtp
Media Attribute Value: 101 0-16
Media Attribute (a): silenceSupp:off - - - -
Media Attribute Fieldname: silenceSupp
Media Attribute Value: off - - - -
0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E.
0010 03 26 0a b5 40 00 40 11 d3 74 d1 72 db 45 d1 72 .&..@.@..t.r.E.r
0020 db 5a 13 c4 13 c4 03 12 5c a9 49 4e 56 49 54 45 .Z......\.INVITE
0030 20 73 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 sip:00321409377
0040 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3@209.114.219.90
0050 3a 35 30 36 30 20 53 49 50 2f 32 2e 30 0d 0a 56 :5060 SIP/2.0..V
0060 69 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 ia: SIP/2.0/UDP
0070 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 209.114.219.69:5
0080 30 36 30 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 060;branch=z9hG4
0090 62 4b 33 35 30 32 63 66 65 38 0d 0a 46 72 6f 6d bK3502cfe8..From
00a0 3a 20 22 33 32 31 33 30 38 34 30 30 33 22 20 3c : "3213084003" <
00b0 73 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 sip:3213084003@2
00c0 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 3b 74 09.114.219.69>;t
00d0 61 67 3d 61 73 37 32 31 63 32 32 63 34 0d 0a 54 ag=as721c22c4..T
00e0 6f 3a 20 3c 73 69 70 3a 30 30 33 32 31 34 30 39 o: <sip:00321409
00f0 33 37 37 33 40 32 30 39 2e 31 31 34 2e 32 31 39 3773@209.114.219
0100 2e 39 30 3e 3b 74 61 67 3d 34 44 30 39 39 32 38 .90>;tag=4D09928
0110 30 2d 37 41 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 0-7A..Contact: <
0120 73 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 sip:3213084003@2
0130 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 0d 0a 09.114.219.69>..
0140 43 61 6c 6c 2d 49 44 3a 20 35 33 37 62 32 66 38 Call-ID: 537b2f8
0150 38 32 36 38 61 33 62 66 34 31 63 39 32 61 65 65 8268a3bf41c92aee
0160 39 34 38 38 65 38 35 35 33 40 32 30 39 2e 31 31 9488e8553@209.11
0170 34 2e 32 31 39 2e 36 39 0d 0a 43 53 65 71 3a 20 4.219.69..CSeq:
0180 31 30 38 20 49 4e 56 49 54 45 0d 0a 55 73 65 72 108 INVITE..User
0190 2d 41 67 65 6e 74 3a 20 48 43 43 20 41 73 74 65 -Agent: HCC Aste
01a0 72 69 73 6b 20 50 42 58 0d 0a 41 6c 6c 6f 77 3a risk PBX..Allow:
01b0 20 49 4e 56 49 54 45 2c 20 41 43 4b 2c 20 43 41 INVITE, ACK, CA
01c0 4e 43 45 4c 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 NCEL, OPTIONS, B
01d0 59 45 2c 20 52 45 46 45 52 0d 0a 43 6f 6e 74 65 YE, REFER..Conte
01e0 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 nt-Type: applica
01f0 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f 6e 74 65 6e tion/sdp..Conten
0200 74 2d 4c 65 6e 67 74 68 3a 20 32 39 31 0d 0a 0d t-Length: 291...
0210 0a 76 3d 30 0d 0a 6f 3d 72 6f 6f 74 20 33 30 33 .v=0..o=root 303
0220 32 20 33 30 33 38 20 49 4e 20 49 50 34 20 32 30 2 3038 IN IP4 20
0230 39 2e 31 31 34 2e 32 31 39 2e 36 39 0d 0a 73 3d 9.114.219.69..s=
0240 73 65 73 73 69 6f 6e 0d 0a 63 3d 49 4e 20 49 50 session..c=IN IP
0250 34 20 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 4 209.114.219.69
0260 0d 0a 74 3d 30 20 30 0d 0a 6d 3d 61 75 64 69 6f ..t=0 0..m=audio
0270 20 31 30 37 37 30 20 52 54 50 2f 41 56 50 20 30 10770 RTP/AVP 0
0280 20 38 20 33 20 31 38 20 31 30 31 0d 0a 61 3d 72 8 3 18 101..a=r
0290 74 70 6d 61 70 3a 30 20 50 43 4d 55 2f 38 30 30 tpmap:0 PCMU/800
02a0 30 0d 0a 61 3d 72 74 70 6d 61 70 3a 38 20 50 43 0..a=rtpmap:8 PC
02b0 4d 41 2f 38 30 30 30 0d 0a 61 3d 72 74 70 6d 61 MA/8000..a=rtpma
02c0 70 3a 33 20 47 53 4d 2f 38 30 30 30 0d 0a 61 3d p:3 GSM/8000..a=
02d0 72 74 70 6d 61 70 3a 31 38 20 47 37 32 39 2f 38 rtpmap:18 G729/8
02e0 30 30 30 0d 0a 61 3d 72 74 70 6d 61 70 3a 31 30 000..a=rtpmap:10
02f0 31 20 74 65 6c 65 70 68 6f 6e 65 2d 65 76 65 6e 1 telephone-even
0300 74 2f 38 30 30 30 0d 0a 61 3d 66 6d 74 70 3a 31 t/8000..a=fmtp:1
0310 30 31 20 30 2d 31 36 0d 0a 61 3d 73 69 6c 65 6e 01 0-16..a=silen
0320 63 65 53 75 70 70 3a 6f 66 66 20 2d 20 2d 20 2d ceSupp:off - - -
0330 20 2d 0d 0a -..
No. Time Source Destination Protocol Info
55 9.725827 209.114.219.90 209.114.219.69 SIP Status: 100 Trying
Frame 55 (445 bytes on wire, 445 bytes captured)
Arrival Time: Jan 5, 2005 21:54:21.796135000
Time delta from previous packet: 0.003708000 seconds
Time since reference or first frame: 9.725827000 seconds
Frame Number: 55
Packet Length: 445 bytes
Capture Length: 445 bytes
Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:b0:8e:35:44:00 (209.114.219.90)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00)
0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 431
Identification: 0x3527 (13607)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 255
Protocol: UDP (0x11)
Header checksum: 0x2b29 (correct)
Source: 209.114.219.90 (209.114.219.90)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060)
Source port: 56262 (56262)
Destination port: 5060 (5060)
Length: 411
Checksum: 0x101d (correct)
Session Initiation Protocol
Status-Line: SIP/2.0 100 Trying
Status-Code: 100
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK3502cfe8
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Date: Wed, 05 Jan 2005 23:34:52 GMT
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
Server: Cisco-SIPGateway/IOS-12.x
CSeq: 108 INVITE
Allow-Events: telephone-event
Content-Length: 0
0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh
0010 01 af 35 27 00 00 ff 11 2b 29 d1 72 db 5a d1 72 ..5'....+).r.Z.r
0020 db 45 db c6 13 c4 01 9b 10 1d 53 49 50 2f 32 2e .E........SIP/2.
0030 30 20 31 30 30 20 54 72 79 69 6e 67 0d 0a 56 69 0 100 Trying..Vi
0040 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 a: SIP/2.0/UDP 2
0050 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 09.114.219.69:50
0060 36 30 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 60;branch=z9hG4b
0070 4b 33 35 30 32 63 66 65 38 0d 0a 46 72 6f 6d 3a K3502cfe8..From:
0080 20 22 33 32 31 33 30 38 34 30 30 33 22 20 3c 73 "3213084003" <s
0090 69 70 3a 33 32 31 33 30 38 34 30 30 33 40 32 30 ip:3213084003@20
00a0 39 2e 31 31 34 2e 32 31 39 2e 36 39 3e 3b 74 61 9.114.219.69>;ta
00b0 67 3d 61 73 37 32 31 63 32 32 63 34 0d 0a 54 6f g=as721c22c4..To
00c0 3a 20 3c 73 69 70 3a 30 30 33 32 31 34 30 39 33 : <sip:003214093
00d0 37 37 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 773@209.114.219.
00e0 39 30 3e 3b 74 61 67 3d 34 44 30 39 39 32 38 30 90>;tag=4D099280
00f0 2d 37 41 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 -7A..Date: Wed,
0100 30 35 20 4a 61 6e 20 32 30 30 35 20 32 33 3a 33 05 Jan 2005 23:3
0110 34 3a 35 32 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 4:52 GMT..Call-I
0120 44 3a 20 35 33 37 62 32 66 38 38 32 36 38 61 33 D: 537b2f88268a3
0130 62 66 34 31 63 39 32 61 65 65 39 34 38 38 65 38 bf41c92aee9488e8
0140 35 35 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 553@209.114.219.
0150 36 39 0d 0a 53 65 72 76 65 72 3a 20 43 69 73 63 69..Server: Cisc
0160 6f 2d 53 49 50 47 61 74 65 77 61 79 2f 49 4f 53 o-SIPGateway/IOS
0170 2d 31 32 2e 78 0d 0a 43 53 65 71 3a 20 31 30 38 -12.x..CSeq: 108
0180 20 49 4e 56 49 54 45 0d 0a 41 6c 6c 6f 77 2d 45 INVITE..Allow-E
0190 76 65 6e 74 73 3a 20 74 65 6c 65 70 68 6f 6e 65 vents: telephone
01a0 2d 65 76 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d -event..Content-
01b0 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Length: 0....
No. Time Source Destination Protocol Info
56 9.727052 209.114.219.90 209.114.219.69 SIP/SDP Status: 200 OK, with session description
Frame 56 (892 bytes on wire, 892 bytes captured)
Arrival Time: Jan 5, 2005 21:54:21.797360000
Time delta from previous packet: 0.001225000 seconds
Time since reference or first frame: 9.727052000 seconds
Frame Number: 56
Packet Length: 892 bytes
Capture Length: 892 bytes
Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:b0:8e:35:44:00 (209.114.219.90)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00)
0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 878
Identification: 0x3528 (13608)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 255
Protocol: UDP (0x11)
Header checksum: 0x2969 (correct)
Source: 209.114.219.90 (209.114.219.90)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060)
Source port: 56262 (56262)
Destination port: 5060 (5060)
Length: 858
Checksum: 0x03e5 (correct)
Session Initiation Protocol
Status-Line: SIP/2.0 200 OK
Status-Code: 200
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK3502cfe8
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Date: Wed, 05 Jan 2005 23:34:52 GMT
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
Server: Cisco-SIPGateway/IOS-12.x
CSeq: 108 INVITE
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER
Allow-Events: telephone-event
Contact: <sip:003214093773@209.114.219.90:5060>
Content-Type: application/sdp
Content-Length: 263
Message body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): CiscoSystemsSIP-GW-UserAgent 614 7264 IN IP4 209.114.219.90
Owner Username: CiscoSystemsSIP-GW-UserAgent
Session ID: 614
Session Version: 7264
Owner Network Type: IN
Owner Address Type: IP4
Owner Address: 209.114.219.90
Session Name (s): SIP Call
Connection Information (c): IN IP4 209.114.219.90
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 209.114.219.90
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Media Description, name and address (m): audio 17302 RTP/AVP 18 101
Media Type: audio
Media Port: 17302
Media Proto: RTP/AVP
Media Format: ITU-T G.729
Media Format: 101
Connection Information (c): IN IP4 209.114.219.90
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 209.114.219.90
Media Attribute (a): rtpmap:18 G729/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 18 G729/8000
Media Attribute (a): fmtp:18 annexb=no
Media Attribute Fieldname: fmtp
Media Attribute Value: 18 annexb=no
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 101 telephone-event/8000
Media Attribute (a): fmtp:101 0-16
Media Attribute Fieldname: fmtp
Media Attribute Value: 101 0-16
0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh
0010 03 6e 35 28 00 00 ff 11 29 69 d1 72 db 5a d1 72 .n5(....)i.r.Z.r
0020 db 45 db c6 13 c4 03 5a 03 e5 53 49 50 2f 32 2e .E.....Z..SIP/2.
0030 30 20 32 30 30 20 4f 4b 0d 0a 56 69 61 3a 20 53 0 200 OK..Via: S
0040 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 2e 31 IP/2.0/UDP 209.1
0050 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 3b 62 14.219.69:5060;b
0060 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 33 35 30 ranch=z9hG4bK350
0070 32 63 66 65 38 0d 0a 46 72 6f 6d 3a 20 22 33 32 2cfe8..From: "32
0080 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3a 33 13084003" <sip:3
0090 32 31 33 30 38 34 30 30 33 40 32 30 39 2e 31 31 213084003@209.11
00a0 34 2e 32 31 39 2e 36 39 3e 3b 74 61 67 3d 61 73 4.219.69>;tag=as
00b0 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 3c 73 721c22c4..To: <s
00c0 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 33 40 ip:003214093773@
00d0 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3e 3b 209.114.219.90>;
00e0 74 61 67 3d 34 44 30 39 39 32 38 30 2d 37 41 0d tag=4D099280-7A.
00f0 0a 44 61 74 65 3a 20 57 65 64 2c 20 30 35 20 4a .Date: Wed, 05 J
0100 61 6e 20 32 30 30 35 20 32 33 3a 33 34 3a 35 32 an 2005 23:34:52
0110 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 44 3a 20 35 GMT..Call-ID: 5
0120 33 37 62 32 66 38 38 32 36 38 61 33 62 66 34 31 37b2f88268a3bf41
0130 63 39 32 61 65 65 39 34 38 38 65 38 35 35 33 40 c92aee9488e8553@
0140 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 0d 0a 209.114.219.69..
0150 53 65 72 76 65 72 3a 20 43 69 73 63 6f 2d 53 49 Server: Cisco-SI
0160 50 47 61 74 65 77 61 79 2f 49 4f 53 2d 31 32 2e PGateway/IOS-12.
0170 78 0d 0a 43 53 65 71 3a 20 31 30 38 20 49 4e 56 x..CSeq: 108 INV
0180 49 54 45 0d 0a 41 6c 6c 6f 77 3a 20 49 4e 56 49 ITE..Allow: INVI
0190 54 45 2c 20 4f 50 54 49 4f 4e 53 2c 20 42 59 45 TE, OPTIONS, BYE
01a0 2c 20 43 41 4e 43 45 4c 2c 20 41 43 4b 2c 20 50 , CANCEL, ACK, P
01b0 52 41 43 4b 2c 20 43 4f 4d 45 54 2c 20 52 45 46 RACK, COMET, REF
01c0 45 52 2c 20 53 55 42 53 43 52 49 42 45 2c 20 4e ER, SUBSCRIBE, N
01d0 4f 54 49 46 59 2c 20 49 4e 46 4f 2c 20 55 50 44 OTIFY, INFO, UPD
01e0 41 54 45 2c 20 52 45 47 49 53 54 45 52 0d 0a 41 ATE, REGISTER..A
01f0 6c 6c 6f 77 2d 45 76 65 6e 74 73 3a 20 74 65 6c llow-Events: tel
0200 65 70 68 6f 6e 65 2d 65 76 65 6e 74 0d 0a 43 6f ephone-event..Co
0210 6e 74 61 63 74 3a 20 3c 73 69 70 3a 30 30 33 32 ntact: <sip:0032
0220 31 34 30 39 33 37 37 33 40 32 30 39 2e 31 31 34 14093773@209.114
0230 2e 32 31 39 2e 39 30 3a 35 30 36 30 3e 0d 0a 43 .219.90:5060>..C
0240 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 ontent-Type: app
0250 6c 69 63 61 74 69 6f 6e 2f 73 64 70 0d 0a 43 6f lication/sdp..Co
0260 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 36 ntent-Length: 26
0270 33 0d 0a 0d 0a 76 3d 30 0d 0a 6f 3d 43 69 73 63 3....v=0..o=Cisc
0280 6f 53 79 73 74 65 6d 73 53 49 50 2d 47 57 2d 55 oSystemsSIP-GW-U
0290 73 65 72 41 67 65 6e 74 20 36 31 34 20 37 32 36 serAgent 614 726
02a0 34 20 49 4e 20 49 50 34 20 32 30 39 2e 31 31 34 4 IN IP4 209.114
02b0 2e 32 31 39 2e 39 30 0d 0a 73 3d 53 49 50 20 43 .219.90..s=SIP C
02c0 61 6c 6c 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 all..c=IN IP4 20
02d0 39 2e 31 31 34 2e 32 31 39 2e 39 30 0d 0a 74 3d 9.114.219.90..t=
02e0 30 20 30 0d 0a 6d 3d 61 75 64 69 6f 20 31 37 33 0 0..m=audio 173
02f0 30 32 20 52 54 50 2f 41 56 50 20 31 38 20 31 30 02 RTP/AVP 18 10
0300 31 0d 0a 63 3d 49 4e 20 49 50 34 20 32 30 39 2e 1..c=IN IP4 209.
0310 31 31 34 2e 32 31 39 2e 39 30 0d 0a 61 3d 72 74 114.219.90..a=rt
0320 70 6d 61 70 3a 31 38 20 47 37 32 39 2f 38 30 30 pmap:18 G729/800
0330 30 0d 0a 61 3d 66 6d 74 70 3a 31 38 20 61 6e 6e 0..a=fmtp:18 ann
0340 65 78 62 3d 6e 6f 0d 0a 61 3d 72 74 70 6d 61 70 exb=no..a=rtpmap
0350 3a 31 30 31 20 74 65 6c 65 70 68 6f 6e 65 2d 65 :101 telephone-e
0360 76 65 6e 74 2f 38 30 30 30 0d 0a 61 3d 66 6d 74 vent/8000..a=fmt
0370 70 3a 31 30 31 20 30 2d 31 36 0d 0a p:101 0-16..
No. Time Source Destination Protocol Info
57 9.727222 209.114.219.69 209.114.219.90 SIP Request: ACK sip:003214093773@209.114.219.90:5060
Frame 57 (441 bytes on wire, 441 bytes captured)
Arrival Time: Jan 5, 2005 21:54:21.797530000
Time delta from previous packet: 0.000170000 seconds
Time since reference or first frame: 9.727222000 seconds
Frame Number: 57
Packet Length: 441 bytes
Capture Length: 441 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00
Destination: 00:b0:8e:35:44:00 (209.114.219.90)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 427
Identification: 0x0ab6 (2742)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xd4ee (correct)
Source: 209.114.219.69 (209.114.219.69)
Destination: 209.114.219.90 (209.114.219.90)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 407
Checksum: 0x5b2e (incorrect, should be 0x853b)
Session Initiation Protocol
Request-Line: ACK sip:003214093773@209.114.219.90:5060 SIP/2.0
Method: ACK
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK5e9819a0
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Contact: <sip:3213084003@209.114.219.69>
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
CSeq: 108 ACK
User-Agent: HCC Asterisk PBX
Content-Length: 0
0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E.
0010 01 ab 0a b6 40 00 40 11 d4 ee d1 72 db 45 d1 72 ....@.@....r.E.r
0020 db 5a 13 c4 13 c4 01 97 5b 2e 41 43 4b 20 73 69 .Z......[.ACK si
0030 70 3a 30 30 33 32 31 34 30 39 33 37 37 33 40 32 p:003214093773@2
0040 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3a 35 30 09.114.219.90:50
0050 36 30 20 53 49 50 2f 32 2e 30 0d 0a 56 69 61 3a 60 SIP/2.0..Via:
0060 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 SIP/2.0/UDP 209
0070 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 .114.219.69:5060
0080 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 35 ;branch=z9hG4bK5
0090 65 39 38 31 39 61 30 0d 0a 46 72 6f 6d 3a 20 22 e9819a0..From: "
00a0 33 32 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3213084003" <sip
00b0 3a 33 32 31 33 30 38 34 30 30 33 40 32 30 39 2e :3213084003@209.
00c0 31 31 34 2e 32 31 39 2e 36 39 3e 3b 74 61 67 3d 114.219.69>;tag=
00d0 61 73 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 as721c22c4..To:
00e0 3c 73 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 <sip:00321409377
00f0 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3@209.114.219.90
0100 3e 3b 74 61 67 3d 34 44 30 39 39 32 38 30 2d 37 >;tag=4D099280-7
0110 41 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 73 69 70 A..Contact: <sip
0120 3a 33 32 31 33 30 38 34 30 30 33 40 32 30 39 2e :3213084003@209.
0130 31 31 34 2e 32 31 39 2e 36 39 3e 0d 0a 43 61 6c 114.219.69>..Cal
0140 6c 2d 49 44 3a 20 35 33 37 62 32 66 38 38 32 36 l-ID: 537b2f8826
0150 38 61 33 62 66 34 31 63 39 32 61 65 65 39 34 38 8a3bf41c92aee948
0160 38 65 38 35 35 33 40 32 30 39 2e 31 31 34 2e 32 8e8553@209.114.2
0170 31 39 2e 36 39 0d 0a 43 53 65 71 3a 20 31 30 38 19.69..CSeq: 108
0180 20 41 43 4b 0d 0a 55 73 65 72 2d 41 67 65 6e 74 ACK..User-Agent
0190 3a 20 48 43 43 20 41 73 74 65 72 69 73 6b 20 50 : HCC Asterisk P
01a0 42 58 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 BX..Content-Leng
01b0 74 68 3a 20 30 0d 0a 0d 0a th: 0....
No. Time Source Destination Protocol Info
58 9.727294 209.114.219.69 209.114.219.90 SIP Request: BYE sip:003214093773@209.114.219.90:5060
Frame 58 (441 bytes on wire, 441 bytes captured)
Arrival Time: Jan 5, 2005 21:54:21.797602000
Time delta from previous packet: 0.000072000 seconds
Time since reference or first frame: 9.727294000 seconds
Frame Number: 58
Packet Length: 441 bytes
Capture Length: 441 bytes
Ethernet II, Src: 00:11:43:58:7a:18, Dst: 00:b0:8e:35:44:00
Destination: 00:b0:8e:35:44:00 (209.114.219.90)
Source: 00:11:43:58:7a:18 (209.114.219.69)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.69 (209.114.219.69), Dst Addr: 209.114.219.90 (209.114.219.90)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x18 (DSCP 0x06: Unknown DSCP; ECN: 0x00)
0001 10.. = Differentiated Services Codepoint: Unknown (0x06)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 427
Identification: 0x0ab7 (2743)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xd4ed (correct)
Source: 209.114.219.69 (209.114.219.69)
Destination: 209.114.219.90 (209.114.219.90)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 407
Checksum: 0x5b2e (incorrect, should be 0xaf2e)
Session Initiation Protocol
Request-Line: BYE sip:003214093773@209.114.219.90:5060 SIP/2.0
Method: BYE
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK6211b226
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Contact: <sip:3213084003@209.114.219.69>
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
CSeq: 109 BYE
User-Agent: HCC Asterisk PBX
Content-Length: 0
0000 00 b0 8e 35 44 00 00 11 43 58 7a 18 08 00 45 18 ...5D...CXz...E.
0010 01 ab 0a b7 40 00 40 11 d4 ed d1 72 db 45 d1 72 ....@.@....r.E.r
0020 db 5a 13 c4 13 c4 01 97 5b 2e 42 59 45 20 73 69 .Z......[.BYE si
0030 70 3a 30 30 33 32 31 34 30 39 33 37 37 33 40 32 p:003214093773@2
0040 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3a 35 30 09.114.219.90:50
0050 36 30 20 53 49 50 2f 32 2e 30 0d 0a 56 69 61 3a 60 SIP/2.0..Via:
0060 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 SIP/2.0/UDP 209
0070 2e 31 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 .114.219.69:5060
0080 3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 36 ;branch=z9hG4bK6
0090 32 31 31 62 32 32 36 0d 0a 46 72 6f 6d 3a 20 22 211b226..From: "
00a0 33 32 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3213084003" <sip
00b0 3a 33 32 31 33 30 38 34 30 30 33 40 32 30 39 2e :3213084003@209.
00c0 31 31 34 2e 32 31 39 2e 36 39 3e 3b 74 61 67 3d 114.219.69>;tag=
00d0 61 73 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 as721c22c4..To:
00e0 3c 73 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 <sip:00321409377
00f0 33 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3@209.114.219.90
0100 3e 3b 74 61 67 3d 34 44 30 39 39 32 38 30 2d 37 >;tag=4D099280-7
0110 41 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 73 69 70 A..Contact: <sip
0120 3a 33 32 31 33 30 38 34 30 30 33 40 32 30 39 2e :3213084003@209.
0130 31 31 34 2e 32 31 39 2e 36 39 3e 0d 0a 43 61 6c 114.219.69>..Cal
0140 6c 2d 49 44 3a 20 35 33 37 62 32 66 38 38 32 36 l-ID: 537b2f8826
0150 38 61 33 62 66 34 31 63 39 32 61 65 65 39 34 38 8a3bf41c92aee948
0160 38 65 38 35 35 33 40 32 30 39 2e 31 31 34 2e 32 8e8553@209.114.2
0170 31 39 2e 36 39 0d 0a 43 53 65 71 3a 20 31 30 39 19.69..CSeq: 109
0180 20 42 59 45 0d 0a 55 73 65 72 2d 41 67 65 6e 74 BYE..User-Agent
0190 3a 20 48 43 43 20 41 73 74 65 72 69 73 6b 20 50 : HCC Asterisk P
01a0 42 58 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 BX..Content-Leng
01b0 74 68 3a 20 30 0d 0a 0d 0a th: 0....
No. Time Source Destination Protocol Info
59 9.732878 209.114.219.90 209.114.219.69 SIP Status: 200 OK
Frame 59 (407 bytes on wire, 407 bytes captured)
Arrival Time: Jan 5, 2005 21:54:21.803186000
Time delta from previous packet: 0.005584000 seconds
Time since reference or first frame: 9.732878000 seconds
Frame Number: 59
Packet Length: 407 bytes
Capture Length: 407 bytes
Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:b0:8e:35:44:00 (209.114.219.90)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00)
0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 393
Identification: 0x3529 (13609)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 255
Protocol: UDP (0x11)
Header checksum: 0x2b4d (correct)
Source: 209.114.219.90 (209.114.219.90)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 56262 (56262), Dst Port: 5060 (5060)
Source port: 56262 (56262)
Destination port: 5060 (5060)
Length: 373
Checksum: 0x03e3 (correct)
Session Initiation Protocol
Status-Line: SIP/2.0 200 OK
Status-Code: 200
Resent Packet: False
Message Header
Via: SIP/2.0/UDP 209.114.219.69:5060;branch=z9hG4bK6211b226
From: "3213084003" <sip:3213084003@209.114.219.69>;tag=as721c22c4
SIP Display info: "3213084003"
SIP from address: sip:3213084003@209.114.219.69
SIP tag: as721c22c4
To: <sip:003214093773@209.114.219.90>;tag=4D099280-7A
SIP to address: sip:003214093773@209.114.219.90
SIP tag: 4D099280-7A
Date: Wed, 05 Jan 2005 23:34:52 GMT
Call-ID: 537b2f88268a3bf41c92aee9488e8553@209.114.219.69
Server: Cisco-SIPGateway/IOS-12.x
Content-Length: 0
CSeq: 109 BYE
0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh
0010 01 89 35 29 00 00 ff 11 2b 4d d1 72 db 5a d1 72 ..5)....+M.r.Z.r
0020 db 45 db c6 13 c4 01 75 03 e3 53 49 50 2f 32 2e .E.....u..SIP/2.
0030 30 20 32 30 30 20 4f 4b 0d 0a 56 69 61 3a 20 53 0 200 OK..Via: S
0040 49 50 2f 32 2e 30 2f 55 44 50 20 32 30 39 2e 31 IP/2.0/UDP 209.1
0050 31 34 2e 32 31 39 2e 36 39 3a 35 30 36 30 3b 62 14.219.69:5060;b
0060 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 36 32 31 ranch=z9hG4bK621
0070 31 62 32 32 36 0d 0a 46 72 6f 6d 3a 20 22 33 32 1b226..From: "32
0080 31 33 30 38 34 30 30 33 22 20 3c 73 69 70 3a 33 13084003" <sip:3
0090 32 31 33 30 38 34 30 30 33 40 32 30 39 2e 31 31 213084003@209.11
00a0 34 2e 32 31 39 2e 36 39 3e 3b 74 61 67 3d 61 73 4.219.69>;tag=as
00b0 37 32 31 63 32 32 63 34 0d 0a 54 6f 3a 20 3c 73 721c22c4..To: <s
00c0 69 70 3a 30 30 33 32 31 34 30 39 33 37 37 33 40 ip:003214093773@
00d0 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 3e 3b 209.114.219.90>;
00e0 74 61 67 3d 34 44 30 39 39 32 38 30 2d 37 41 0d tag=4D099280-7A.
00f0 0a 44 61 74 65 3a 20 57 65 64 2c 20 30 35 20 4a .Date: Wed, 05 J
0100 61 6e 20 32 30 30 35 20 32 33 3a 33 34 3a 35 32 an 2005 23:34:52
0110 20 47 4d 54 0d 0a 43 61 6c 6c 2d 49 44 3a 20 35 GMT..Call-ID: 5
0120 33 37 62 32 66 38 38 32 36 38 61 33 62 66 34 31 37b2f88268a3bf41
0130 63 39 32 61 65 65 39 34 38 38 65 38 35 35 33 40 c92aee9488e8553@
0140 32 30 39 2e 31 31 34 2e 32 31 39 2e 36 39 0d 0a 209.114.219.69..
0150 53 65 72 76 65 72 3a 20 43 69 73 63 6f 2d 53 49 Server: Cisco-SI
0160 50 47 61 74 65 77 61 79 2f 49 4f 53 2d 31 32 2e PGateway/IOS-12.
0170 78 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 x..Content-Lengt
0180 68 3a 20 30 0d 0a 43 53 65 71 3a 20 31 30 39 20 h: 0..CSeq: 109
0190 42 59 45 0d 0a 0d 0a BYE....
No. Time Source Destination Protocol Info
60 9.733006 209.114.219.90 209.114.219.69 RTCP Receiver Report
Frame 60 (90 bytes on wire, 90 bytes captured)
Arrival Time: Jan 5, 2005 21:54:21.803314000
Time delta from previous packet: 0.000128000 seconds
Time since reference or first frame: 9.733006000 seconds
Frame Number: 60
Packet Length: 90 bytes
Capture Length: 90 bytes
Ethernet II, Src: 00:b0:8e:35:44:00, Dst: 00:11:43:58:7a:18
Destination: 00:11:43:58:7a:18 (209.114.219.69)
Source: 00:b0:8e:35:44:00 (209.114.219.90)
Type: IP (0x0800)
Internet Protocol, Src Addr: 209.114.219.90 (209.114.219.90), Dst Addr: 209.114.219.69 (209.114.219.69)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00)
0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 76
Identification: 0x0000 (0)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 255
Protocol: UDP (0x11)
Header checksum: 0x61b3 (correct)
Source: 209.114.219.90 (209.114.219.90)
Destination: 209.114.219.69 (209.114.219.69)
User Datagram Protocol, Src Port: 17303 (17303), Dst Port: 10771 (10771)
Source port: 17303 (17303)
Destination port: 10771 (10771)
Length: 56
Checksum: 0xf097 (correct)
Real-time Transport Control Protocol
Stream setup by SDP (frame 54)
Setup frame: 54
Setup Method: SDP
10.. .... = Version: RFC 1889 Version (2)
..0. .... = Padding: False
...0 0000 = Reception report count: 0
Packet type: Receiver Report (201)
Length: 1
Sender SSRC: 236313434
Real-time Transport Control Protocol
Stream setup by SDP (frame 54)
Setup frame: 54
Setup Method: SDP
10.. .... = Version: RFC 1889 Version (2)
..0. .... = Padding: False
...0 0001 = Source count: 1
Packet type: Source description (202)
Length: 7
Chunk 1, SSRC/CSRC 236313434
Identifier: 236313434
SDES items
Type: CNAME (user and domain) (1)
Length: 20
Text: 0.0.0@209.114.219.90
Real-time Transport Control Protocol
Stream setup by SDP (frame 54)
Setup frame: 54
Setup Method: SDP
10.. .... = Version: RFC 1889 Version (2)
..0. .... = Padding: False
...0 0001 = Source count: 1
Packet type: Goodbye (203)
Length: 1
Identifier: 236313434
0000 00 11 43 58 7a 18 00 b0 8e 35 44 00 08 00 45 68 ..CXz....5D...Eh
0010 00 4c 00 00 00 00 ff 11 61 b3 d1 72 db 5a d1 72 .L......a..r.Z.r
0020 db 45 43 97 2a 13 00 38 f0 97 80 c9 00 01 0e 15 .EC.*..8........
0030 db 5a 81 ca 00 07 0e 15 db 5a 01 14 30 2e 30 2e .Z.......Z..0.0.
0040 30 40 32 30 39 2e 31 31 34 2e 32 31 39 2e 39 30 0@209.114.219.90
0050 00 00 81 cb 00 01 0e 15 db 5a .........Z