[Serusers] RADIUS

I have been away from this project for a while, but am back onto it now. I have SER 8.12 installed, with the RADIUS module. SER comes up fine. Below you will find information on my configuration, including: - ser.cfg file - ngrep - ethereal capture The ethereal and ngrep where two different sessions, but just minutes away from each other. Each time I just clicked on sign in. I am using MS Messenger 7.26 Scott Morris Enterprise Network Engineer DOE - ORAU / ORISE 865-576-4672 SER.CFG ====================================== # # $Id: ser.cfg,v 1.21.4.1 2003/11/10 15:35:15 andrei Exp $ # # simple quick-start config script # # ----------- global configuration parameters ------------------------ #debug=3 # debug level (cmd line: -dddddddddd) #fork=yes #log_stderror=no # (cmd line: -E) /* Uncomment these lines to enter debugging mode debug=7 fork=no log_stderror=yes */ debug=7 # fork=no log_stderror=yes check_via=no # (cmd. line: -v) dns=no # (cmd. line: -r) rev_dns=no # (cmd. line: -R) port=5060 children=4 fifo="/tmp/ser_fifo" alias=orau.gov # ------------------ module loading ---------------------------------- # Uncomment this if you want to use SQL database #loadmodule "/usr/lib/ser/modules/mysql.so" loadmodule "/usr/lib/ser/modules/sl.so" loadmodule "/usr/lib/ser/modules/tm.so" loadmodule "/usr/lib/ser/modules/rr.so" loadmodule "/usr/lib/ser/modules/maxfwd.so" loadmodule "/usr/lib/ser/modules/usrloc.so" loadmodule "/usr/lib/ser/modules/registrar.so" # Uncomment this if you want digest authentication # mysql.so must be loaded ! #loadmodule "/usr/lib/ser/modules/auth.so" #loadmodule "/usr/lib/ser/modules/auth_db.so" loadmodule "/usr/lib/ser/modules/auth.so" loadmodule "/usr/lib/ser/modules/auth_radius.so" # ----------------- setting module-specific parameters --------------- # -- usrloc params -- modparam("usrloc", "db_mode", 0) # Uncomment this if you want to use SQL database # for persistent storage and comment the previous line #modparam("usrloc", "db_mode", 2) # -- auth params -- # Uncomment if you are using auth module # # modparam("auth_db", "calculate_ha1", yes) # # If you set "calculate_ha1" parameter to yes (which true in this config), # uncomment also the following parameter) # # modparam("auth_db", "password_column", "password") # -- rr params -- # add value to ;lr param to make some broken UAs happy modparam("rr", "enable_full_lr", 1) # --auth_radius params modparam("auth_radius", "radius_config", "/etc/radiusclient/radiusclient.conf") modparam("auth_radius", "service_type", 15) # ------------------------- request routing logic ------------------- # main routing logic route{ # initial sanity checks -- messages with # max_forwards==0, or excessively long requests if (!mf_process_maxfwd_header("10")) { sl_send_reply("483","Too Many Hops"); break; }; if ( msg:len > max_len ) { sl_send_reply("513", "Message too big"); break; }; # we record-route all messages -- to make sure that # subsequent messages will go through our proxy; that's # particularly good if upstream and downstream entities # use different transport protocol record_route(); # loose-route processing if (loose_route()) { t_relay(); break; }; # if the request is for other domain use UsrLoc # (in case, it does not work, use the following command # with proper names and addresses in it) if (uri=="orau.gov") { if (method=="REGISTER") { # Uncomment this if you want to use digest authentication if (!radius_www_authorize("orau.gov")) { www_challenge("orau.gov", "0"); break; }; save("location"); break; }; # native SIP destinations are handled using our USRLOC DB if (!lookup("location")) { sl_send_reply("404", "Not Found"); break; }; }; # forward to current uri now; use stateful forwarding; that # works reliably even if we forward from TCP to UDP if (!t_relay()) { sl_reply_error(); }; } ============================================================================ == NGREP ====================================== interface: eth0 (10.0.0.0/255.255.0.0) # U 10.0.1.13:3325 -> 10.0.2.1:5060 REGISTER sip:orau.gov SIP/2.0..Via: SIP/2.0/UDP 10.0.1.13:15697..From: <sip :morriss@orau.gov>;tag=e4a3e8dc-9a85-4297-9f6c-8139a998e242..To: <sip:morri ss@orau.gov>..Call-ID: 88a81dfe-c805-4e8d-95e2-09dcf4845b8b@10.0.1.13..CSeq : 1 REGISTER..Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO , SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"..User-Agent: Windows RTC/1. 0..Expires: 1200..Event: registration..Allow-Events: presence..Content-Leng th: 0.... # U 10.0.1.13:3325 -> 10.0.2.1:5060 REGISTER sip:orau.gov SIP/2.0..Via: SIP/2.0/UDP 10.0.1.13:15697..From: <sip :morriss@orau.gov>;tag=e4a3e8dc-9a85-4297-9f6c-8139a998e242..To: <sip:morri ss@orau.gov>..Call-ID: 88a81dfe-c805-4e8d-95e2-09dcf4845b8b@10.0.1.13..CSeq : 1 REGISTER..Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO , SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"..User-Agent: Windows RTC/1. 0..Expires: 1200..Event: registration..Allow-Events: presence..Content-Leng th: 0.... # U 10.0.1.13:3325 -> 10.0.2.1:5060 REGISTER sip:orau.gov SIP/2.0..Via: SIP/2.0/UDP 10.0.1.13:15697..From: <sip :morriss@orau.gov>;tag=e4a3e8dc-9a85-4297-9f6c-8139a998e242..To: <sip:morri ss@orau.gov>..Call-ID: 88a81dfe-c805-4e8d-95e2-09dcf4845b8b@10.0.1.13..CSeq : 1 REGISTER..Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO , SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"..User-Agent: Windows RTC/1. 0..Expires: 1200..Event: registration..Allow-Events: presence..Content-Leng th: 0.... # U 10.0.1.13:3325 -> 10.0.2.1:5060 REGISTER sip:orau.gov SIP/2.0..Via: SIP/2.0/UDP 10.0.1.13:15697..From: <sip :morriss@orau.gov>;tag=e4a3e8dc-9a85-4297-9f6c-8139a998e242..To: <sip:morri ss@orau.gov>..Call-ID: 88a81dfe-c805-4e8d-95e2-09dcf4845b8b@10.0.1.13..CSeq : 1 REGISTER..Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO , SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"..User-Agent: Windows RTC/1. 0..Expires: 1200..Event: registration..Allow-Events: presence..Content-Leng th: 0.... # U 10.0.1.13:3325 -> 10.0.2.1:5060 REGISTER sip:orau.gov SIP/2.0..Via: SIP/2.0/UDP 10.0.1.13:15697..From: <sip :morriss@orau.gov>;tag=e4a3e8dc-9a85-4297-9f6c-8139a998e242..To: <sip:morri ss@orau.gov>..Call-ID: 88a81dfe-c805-4e8d-95e2-09dcf4845b8b@10.0.1.13..CSeq : 1 REGISTER..Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO , SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"..User-Agent: Windows RTC/1. 0..Expires: 1200..Event: registration..Allow-Events: presence..Content-Leng th: 0.... # U 10.0.2.241:16001 -> 10.0.255.255:16001 ...L:.......DSAMessage..........ORBeline 2.0........@...:.......::.d....... . # U 10.0.1.13:3325 -> 10.0.2.1:5060 REGISTER sip:orau.gov SIP/2.0..Via: SIP/2.0/UDP 10.0.1.13:15697..From: <sip :morriss@orau.gov>;tag=e4a3e8dc-9a85-4297-9f6c-8139a998e242..To: <sip:morri ss@orau.gov>..Call-ID: 88a81dfe-c805-4e8d-95e2-09dcf4845b8b@10.0.1.13..CSeq : 1 REGISTER..Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO , SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"..User-Agent: Windows RTC/1. 0..Expires: 1200..Event: registration..Allow-Events: presence..Content-Leng th: 0.... # U 10.0.1.13:3325 -> 10.0.2.1:5060 REGISTER sip:orau.gov SIP/2.0..Via: SIP/2.0/UDP 10.0.1.13:15697..From: <sip :morriss@orau.gov>;tag=e4a3e8dc-9a85-4297-9f6c-8139a998e242..To: <sip:morri ss@orau.gov>..Call-ID: 88a81dfe-c805-4e8d-95e2-09dcf4845b8b@10.0.1.13..CSeq : 1 REGISTER..Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO , SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"..User-Agent: Windows RTC/1. 0..Expires: 1200..Event: registration..Allow-Events: presence..Content-Leng th: 0.... # T 143.101.10.0 -> 1.64.0.0 +1540@8:46 ..........[..e...@............................ # U 10.0.1.13:3325 -> 10.0.2.1:5060 REGISTER sip:orau.gov SIP/2.0..Via: SIP/2.0/UDP 10.0.1.13:15697..From: <sip :morriss@orau.gov>;tag=e4a3e8dc-9a85-4297-9f6c-8139a998e242..To: <sip:morri ss@orau.gov>..Call-ID: 88a81dfe-c805-4e8d-95e2-09dcf4845b8b@10.0.1.13..CSeq : 1 REGISTER..Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO , SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"..User-Agent: Windows RTC/1. 0..Expires: 1200..Event: registration..Allow-Events: presence..Content-Leng th: 0.... # U 10.0.1.13:3325 -> 10.0.2.1:5060 REGISTER sip:orau.gov SIP/2.0..Via: SIP/2.0/UDP 10.0.1.13:15697..From: <sip :morriss@orau.gov>;tag=e4a3e8dc-9a85-4297-9f6c-8139a998e242..To: <sip:morri ss@orau.gov>..Call-ID: 88a81dfe-c805-4e8d-95e2-09dcf4845b8b@10.0.1.13..CSeq : 1 REGISTER..Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO , SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"..User-Agent: Windows RTC/1. 0..Expires: 1200..Event: registration..Allow-Events: presence..Content-Leng th: 0.... # T 126.26.10.0 -> 2.242.0.0 +1540@8:46 ..........[=~..............2.................. # T 48.240.10.0 -> 1.13.0.0 +1540@8:46 ..........[.0................................. # U 10.0.1.13:3325 -> 10.0.2.1:5060 REGISTER sip:orau.gov SIP/2.0..Via: SIP/2.0/UDP 10.0.1.13:15697..From: <sip :morriss@orau.gov>;tag=e4a3e8dc-9a85-4297-9f6c-8139a998e242..To: <sip:morri ss@orau.gov>..Call-ID: 88a81dfe-c805-4e8d-95e2-09dcf4845b8b@10.0.1.13..CSeq : 1 REGISTER..Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO , SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"..User-Agent: Windows RTC/1. 0..Expires: 1200..Event: registration..Allow-Events: presence..Content-Leng th: 0.... # U 10.0.2.252:3253 -> 10.0.255.255:2301 ...0...@<... # U 10.0.1.13:3325 -> 10.0.2.1:5060 REGISTER sip:orau.gov SIP/2.0..Via: SIP/2.0/UDP 10.0.1.13:15697..From: <sip :morriss@orau.gov>;tag=e4a3e8dc-9a85-4297-9f6c-8139a998e242..To: <sip:morri ss@orau.gov>..Call-ID: 88a81dfe-c805-4e8d-95e2-09dcf4845b8b@10.0.1.13..CSeq : 1 REGISTER..Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO , SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"..User-Agent: Windows RTC/1. 0..Expires: 1200..Event: registration..Allow-Events: presence..Content-Leng th: 0.... # T 138.61.10.0 -> 2.244.0.0 +1540@8:46 ..........[..=........................[..=.... # T 143.101.10.0 -> 1.64.0.0 +1540@8:46 ..........[..e...@............................ # T 48.240.10.0 -> 1.13.0.0 +1540@8:46 ..........[.0................................. exit 100 received, 0 dropped ============================================================================ == Ethereal =========================================== No. Time Source Destination Protocol Info 1 0.000000 10.0.2.217 Broadcast ARP Who has 10.0.1.1? Tell 10.0.2.217 Frame 1 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: 00:50:8b:f1:d5:23, Dst: ff:ff:ff:ff:ff:ff Address Resolution Protocol (request) No. Time Source Destination Protocol Info 2 0.000019 10.0.2.217 Broadcast ARP Who has 10.0.1.1? Tell 10.0.2.217 Frame 2 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: 00:50:8b:f1:d5:23, Dst: ff:ff:ff:ff:ff:ff Address Resolution Protocol (request) No. Time Source Destination Protocol Info 3 1.501283 10.0.1.13 10.0.2.1 SIP Request: REGISTER sip:orau.gov Frame 3 (501 bytes on wire, 501 bytes captured) Ethernet II, Src: 00:06:5b:81:30:f0, Dst: 00:06:5b:ef:8f:7e Internet Protocol, Src Addr: 10.0.1.13 (10.0.1.13), Dst Addr: 10.0.2.1 (10.0.2.1) User Datagram Protocol, Src Port: 3291 (3291), Dst Port: 5060 (5060) Session Initiation Protocol Request-Line: REGISTER sip:orau.gov SIP/2.0 Method: REGISTER Resent Packet: False Message Header Via: SIP/2.0/UDP 10.0.1.13:15697 From: <sip:morriss@orau.gov>;tag=b64bd88c-901c-4958-a5a1-1570600ece91 SIP from address: sip:morriss@orau.gov SIP tag: b64bd88c-901c-4958-a5a1-1570600ece91 To: <sip:morriss@orau.gov> SIP to address: sip:morriss@orau.gov Call-ID: 4d4f3706-5bfd-459e-af27-6a46d534d1ce(a)10.0.1.13 CSeq: 1 REGISTER Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO, SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK" User-Agent: Windows RTC/1.0 Expires: 1200 Event: registration Allow-Events: presence Content-Length: 0 No. Time Source Destination Protocol Info 4 2.005709 10.0.1.13 10.0.2.1 SIP Request: REGISTER sip:orau.gov Frame 4 (501 bytes on wire, 501 bytes captured) Ethernet II, Src: 00:06:5b:81:30:f0, Dst: 00:06:5b:ef:8f:7e Internet Protocol, Src Addr: 10.0.1.13 (10.0.1.13), Dst Addr: 10.0.2.1 (10.0.2.1) User Datagram Protocol, Src Port: 3291 (3291), Dst Port: 5060 (5060) Session Initiation Protocol Request-Line: REGISTER sip:orau.gov SIP/2.0 Method: REGISTER Resent Packet: True Suspected resend of frame: 3 Message Header Via: SIP/2.0/UDP 10.0.1.13:15697 From: <sip:morriss@orau.gov>;tag=b64bd88c-901c-4958-a5a1-1570600ece91 SIP from address: sip:morriss@orau.gov SIP tag: b64bd88c-901c-4958-a5a1-1570600ece91 To: <sip:morriss@orau.gov> SIP to address: sip:morriss@orau.gov Call-ID: 4d4f3706-5bfd-459e-af27-6a46d534d1ce(a)10.0.1.13 CSeq: 1 REGISTER Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO, SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK" User-Agent: Windows RTC/1.0 Expires: 1200 Event: registration Allow-Events: presence Content-Length: 0 No. Time Source Destination Protocol Info 5 3.003893 10.0.1.13 10.0.2.1 SIP Request: REGISTER sip:orau.gov Frame 5 (501 bytes on wire, 501 bytes captured) Ethernet II, Src: 00:06:5b:81:30:f0, Dst: 00:06:5b:ef:8f:7e Internet Protocol, Src Addr: 10.0.1.13 (10.0.1.13), Dst Addr: 10.0.2.1 (10.0.2.1) User Datagram Protocol, Src Port: 3291 (3291), Dst Port: 5060 (5060) Session Initiation Protocol Request-Line: REGISTER sip:orau.gov SIP/2.0 Method: REGISTER Resent Packet: True Suspected resend of frame: 3 Message Header Via: SIP/2.0/UDP 10.0.1.13:15697 From: <sip:morriss@orau.gov>;tag=b64bd88c-901c-4958-a5a1-1570600ece91 SIP from address: sip:morriss@orau.gov SIP tag: b64bd88c-901c-4958-a5a1-1570600ece91 To: <sip:morriss@orau.gov> SIP to address: sip:morriss@orau.gov Call-ID: 4d4f3706-5bfd-459e-af27-6a46d534d1ce(a)10.0.1.13 CSeq: 1 REGISTER Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO, SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK" User-Agent: Windows RTC/1.0 Expires: 1200 Event: registration Allow-Events: presence Content-Length: 0 No. Time Source Destination Protocol Info 6 3.392548 10.0.2.232 Broadcast ARP Who has 10.5.10.6? Tell 10.0.2.232 Frame 6 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: 00:b0:d0:b5:09:cc, Dst: ff:ff:ff:ff:ff:ff Address Resolution Protocol (request) No. Time Source Destination Protocol Info 7 4.944656 10.0.1.50 224.0.0.5 OSPF Hello Packet Frame 7 (86 bytes on wire, 86 bytes captured) Ethernet II, Src: 00:06:52:db:50:09, Dst: 01:00:5e:00:00:05 Internet Protocol, Src Addr: 10.0.1.50 (10.0.1.50), Dst Addr: 224.0.0.5 (224.0.0.5) Open Shortest Path First No. Time Source Destination Protocol Info 8 5.006277 10.0.1.13 10.0.2.1 SIP Request: REGISTER sip:orau.gov Frame 8 (501 bytes on wire, 501 bytes captured) Ethernet II, Src: 00:06:5b:81:30:f0, Dst: 00:06:5b:ef:8f:7e Internet Protocol, Src Addr: 10.0.1.13 (10.0.1.13), Dst Addr: 10.0.2.1 (10.0.2.1) User Datagram Protocol, Src Port: 3291 (3291), Dst Port: 5060 (5060) Session Initiation Protocol Request-Line: REGISTER sip:orau.gov SIP/2.0 Method: REGISTER Resent Packet: True Suspected resend of frame: 3 Message Header Via: SIP/2.0/UDP 10.0.1.13:15697 From: <sip:morriss@orau.gov>;tag=b64bd88c-901c-4958-a5a1-1570600ece91 SIP from address: sip:morriss@orau.gov SIP tag: b64bd88c-901c-4958-a5a1-1570600ece91 To: <sip:morriss@orau.gov> SIP to address: sip:morriss@orau.gov Call-ID: 4d4f3706-5bfd-459e-af27-6a46d534d1ce(a)10.0.1.13 CSeq: 1 REGISTER Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO, SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK" User-Agent: Windows RTC/1.0 Expires: 1200 Event: registration Allow-Events: presence Content-Length: 0 No. Time Source Destination Protocol Info 9 6.879451 10.0.2.252 10.0.255.255 UDP Source port: 3253 Destination port: 2301 Frame 9 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: 00:60:cf:21:7d:d7, Dst: ff:ff:ff:ff:ff:ff Internet Protocol, Src Addr: 10.0.2.252 (10.0.2.252), Dst Addr: 10.0.255.255 (10.0.255.255) User Datagram Protocol, Src Port: 3253 (3253), Dst Port: 2301 (2301) Data (12 bytes) 0000 01 00 00 30 c2 0c 9d 40 3c 00 00 00 ...0...@<... No. Time Source Destination Protocol Info 10 7.743941 10.0.1.2 224.0.0.5 OSPF Hello Packet Frame 10 (86 bytes on wire, 86 bytes captured) Ethernet II, Src: 00:30:94:fa:83:e1, Dst: 01:00:5e:00:00:05 Internet Protocol, Src Addr: 10.0.1.2 (10.0.1.2), Dst Addr: 224.0.0.5 (224.0.0.5) Open Shortest Path First No. Time Source Destination Protocol Info 11 8.757128 10.0.1.1 224.0.0.5 OSPF Hello Packet Frame 11 (86 bytes on wire, 86 bytes captured) Ethernet II, Src: 00:0b:fd:96:cf:ff, Dst: 01:00:5e:00:00:05 Internet Protocol, Src Addr: 10.0.1.1 (10.0.1.1), Dst Addr: 224.0.0.5 (224.0.0.5) Open Shortest Path First No. Time Source Destination Protocol Info 12 9.013059 10.0.1.13 10.0.2.1 SIP Request: REGISTER sip:orau.gov Frame 12 (501 bytes on wire, 501 bytes captured) Ethernet II, Src: 00:06:5b:81:30:f0, Dst: 00:06:5b:ef:8f:7e Internet Protocol, Src Addr: 10.0.1.13 (10.0.1.13), Dst Addr: 10.0.2.1 (10.0.2.1) User Datagram Protocol, Src Port: 3291 (3291), Dst Port: 5060 (5060) Session Initiation Protocol Request-Line: REGISTER sip:orau.gov SIP/2.0 Method: REGISTER Resent Packet: True Suspected resend of frame: 3 Message Header Via: SIP/2.0/UDP 10.0.1.13:15697 From: <sip:morriss@orau.gov>;tag=b64bd88c-901c-4958-a5a1-1570600ece91 SIP from address: sip:morriss@orau.gov SIP tag: b64bd88c-901c-4958-a5a1-1570600ece91 To: <sip:morriss@orau.gov> SIP to address: sip:morriss@orau.gov Call-ID: 4d4f3706-5bfd-459e-af27-6a46d534d1ce(a)10.0.1.13 CSeq: 1 REGISTER Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO, SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK" User-Agent: Windows RTC/1.0 Expires: 1200 Event: registration Allow-Events: presence Content-Length: 0 No. Time Source Destination Protocol Info 13 10.556674 10.0.2.250 Broadcast ARP Who has 10.0.1.1? Tell 10.0.2.250 Frame 13 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: 00:50:8b:e1:f1:83, Dst: ff:ff:ff:ff:ff:ff Address Resolution Protocol (request) No. Time Source Destination Protocol Info 14 11.376499 10.0.2.243 Broadcast ARP Who has 10.0.1.2? Tell 10.0.2.243 Frame 14 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: 00:50:8b:64:44:90, Dst: ff:ff:ff:ff:ff:ff Address Resolution Protocol (request) No. Time Source Destination Protocol Info 15 11.412855 10.0.2.243 10.0.255.255 NBNS Name query NB IODINE.ORAU.NET<20> Frame 15 (92 bytes on wire, 92 bytes captured) Ethernet II, Src: 00:50:8b:64:44:90, Dst: ff:ff:ff:ff:ff:ff Internet Protocol, Src Addr: 10.0.2.243 (10.0.2.243), Dst Addr: 10.0.255.255 (10.0.255.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service Transaction ID: 0x9c3e Flags: 0x0110 (Name query) Questions: 1 Answer RRs: 0 Authority RRs: 0 Additional RRs: 0 Queries IODINE.ORAU.NET<20>: type NB, class inet Name: IODINE.ORAU.NET<20> (Server service) Type: NB Class: inet No. Time Source Destination Protocol Info 16 11.915643 Hewlett-_68:e1:c1 CDP/VTP CDP Cisco Discovery Protocol Frame 16 (142 bytes on wire, 142 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Cisco Discovery Protocol No. Time Source Destination Protocol Info 17 12.023576 10.0.1.2 224.0.0.5 OSPF LS Update Frame 17 (146 bytes on wire, 146 bytes captured) Ethernet II, Src: 00:30:94:fa:83:e1, Dst: 01:00:5e:00:00:05 Internet Protocol, Src Addr: 10.0.1.2 (10.0.1.2), Dst Addr: 224.0.0.5 (224.0.0.5) Open Shortest Path First No. Time Source Destination Protocol Info 18 12.162851 10.0.2.243 10.0.255.255 NBNS Name query NB IODINE.ORAU.NET<20> Frame 18 (92 bytes on wire, 92 bytes captured) Ethernet II, Src: 00:50:8b:64:44:90, Dst: ff:ff:ff:ff:ff:ff Internet Protocol, Src Addr: 10.0.2.243 (10.0.2.243), Dst Addr: 10.0.255.255 (10.0.255.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service Transaction ID: 0x9c3e Flags: 0x0110 (Name query) Questions: 1 Answer RRs: 0 Authority RRs: 0 Additional RRs: 0 Queries IODINE.ORAU.NET<20>: type NB, class inet Name: IODINE.ORAU.NET<20> (Server service) Type: NB Class: inet No. Time Source Destination Protocol Info 19 12.912809 10.0.2.243 10.0.255.255 NBNS Name query NB IODINE.ORAU.NET<20> Frame 19 (92 bytes on wire, 92 bytes captured) Ethernet II, Src: 00:50:8b:64:44:90, Dst: ff:ff:ff:ff:ff:ff Internet Protocol, Src Addr: 10.0.2.243 (10.0.2.243), Dst Addr: 10.0.255.255 (10.0.255.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service Transaction ID: 0x9c3e Flags: 0x0110 (Name query) Questions: 1 Answer RRs: 0 Authority RRs: 0 Additional RRs: 0 Queries IODINE.ORAU.NET<20>: type NB, class inet Name: IODINE.ORAU.NET<20> (Server service) Type: NB Class: inet No. Time Source Destination Protocol Info 20 13.017827 10.0.1.13 10.0.2.1 SIP Request: REGISTER sip:orau.gov Frame 20 (501 bytes on wire, 501 bytes captured) Ethernet II, Src: 00:06:5b:81:30:f0, Dst: 00:06:5b:ef:8f:7e Internet Protocol, Src Addr: 10.0.1.13 (10.0.1.13), Dst Addr: 10.0.2.1 (10.0.2.1) User Datagram Protocol, Src Port: 3291 (3291), Dst Port: 5060 (5060) Session Initiation Protocol Request-Line: REGISTER sip:orau.gov SIP/2.0 Method: REGISTER Resent Packet: True Suspected resend of frame: 3 Message Header Via: SIP/2.0/UDP 10.0.1.13:15697 From: <sip:morriss@orau.gov>;tag=b64bd88c-901c-4958-a5a1-1570600ece91 SIP from address: sip:morriss@orau.gov SIP tag: b64bd88c-901c-4958-a5a1-1570600ece91 To: <sip:morriss@orau.gov> SIP to address: sip:morriss@orau.gov Call-ID: 4d4f3706-5bfd-459e-af27-6a46d534d1ce(a)10.0.1.13 CSeq: 1 REGISTER Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO, SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK" User-Agent: Windows RTC/1.0 Expires: 1200 Event: registration Allow-Events: presence Content-Length: 0 No. Time Source Destination Protocol Info 21 14.522423 10.0.1.50 224.0.0.6 OSPF LS Acknowledge Frame 21 (78 bytes on wire, 78 bytes captured) Ethernet II, Src: 00:06:52:db:50:09, Dst: 01:00:5e:00:00:06 Internet Protocol, Src Addr: 10.0.1.50 (10.0.1.50), Dst Addr: 224.0.0.6 (224.0.0.6) Open Shortest Path First No. Time Source Destination Protocol Info 22 14.524020 10.0.1.1 224.0.0.5 OSPF LS Acknowledge Frame 22 (78 bytes on wire, 78 bytes captured) Ethernet II, Src: 00:0b:fd:96:cf:ff, Dst: 01:00:5e:00:00:05 Internet Protocol, Src Addr: 10.0.1.1 (10.0.1.1), Dst Addr: 224.0.0.5 (224.0.0.5) Open Shortest Path First No. Time Source Destination Protocol Info 23 14.966627 10.0.1.50 224.0.0.5 OSPF Hello Packet Frame 23 (86 bytes on wire, 86 bytes captured) Ethernet II, Src: 00:06:52:db:50:09, Dst: 01:00:5e:00:00:05 Internet Protocol, Src Addr: 10.0.1.50 (10.0.1.50), Dst Addr: 224.0.0.5 (224.0.0.5) Open Shortest Path First No. Time Source Destination Protocol Info 24 17.024611 10.0.1.13 10.0.2.1 SIP Request: REGISTER sip:orau.gov Frame 24 (501 bytes on wire, 501 bytes captured) Ethernet II, Src: 00:06:5b:81:30:f0, Dst: 00:06:5b:ef:8f:7e Internet Protocol, Src Addr: 10.0.1.13 (10.0.1.13), Dst Addr: 10.0.2.1 (10.0.2.1) User Datagram Protocol, Src Port: 3291 (3291), Dst Port: 5060 (5060) Session Initiation Protocol Request-Line: REGISTER sip:orau.gov SIP/2.0 Method: REGISTER Resent Packet: True Suspected resend of frame: 3 Message Header Via: SIP/2.0/UDP 10.0.1.13:15697 From: <sip:morriss@orau.gov>;tag=b64bd88c-901c-4958-a5a1-1570600ece91 SIP from address: sip:morriss@orau.gov SIP tag: b64bd88c-901c-4958-a5a1-1570600ece91 To: <sip:morriss@orau.gov> SIP to address: sip:morriss@orau.gov Call-ID: 4d4f3706-5bfd-459e-af27-6a46d534d1ce(a)10.0.1.13 CSeq: 1 REGISTER Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO, SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK" User-Agent: Windows RTC/1.0 Expires: 1200 Event: registration Allow-Events: presence Content-Length: 0 No. Time Source Destination Protocol Info 25 17.747378 10.0.1.2 224.0.0.5 OSPF Hello Packet Frame 25 (86 bytes on wire, 86 bytes captured) Ethernet II, Src: 00:30:94:fa:83:e1, Dst: 01:00:5e:00:00:05 Internet Protocol, Src Addr: 10.0.1.2 (10.0.1.2), Dst Addr: 224.0.0.5 (224.0.0.5) Open Shortest Path First No. Time Source Destination Protocol Info 26 18.755187 10.0.1.1 224.0.0.5 OSPF Hello Packet Frame 26 (86 bytes on wire, 86 bytes captured) Ethernet II, Src: 00:0b:fd:96:cf:ff, Dst: 01:00:5e:00:00:05 Internet Protocol, Src Addr: 10.0.1.1 (10.0.1.1), Dst Addr: 224.0.0.5 (224.0.0.5) Open Shortest Path First No. Time Source Destination Protocol Info 27 20.705560 10.0.2.217 Broadcast ARP Who has 10.0.2.223? Tell 10.0.2.217 Frame 27 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: 00:50:8b:f1:d5:23, Dst: ff:ff:ff:ff:ff:ff Address Resolution Protocol (request) No. Time Source Destination Protocol Info 28 21.030388 10.0.1.13 10.0.2.1 SIP Request: REGISTER sip:orau.gov Frame 28 (501 bytes on wire, 501 bytes captured) Ethernet II, Src: 00:06:5b:81:30:f0, Dst: 00:06:5b:ef:8f:7e Internet Protocol, Src Addr: 10.0.1.13 (10.0.1.13), Dst Addr: 10.0.2.1 (10.0.2.1) User Datagram Protocol, Src Port: 3291 (3291), Dst Port: 5060 (5060) Session Initiation Protocol Request-Line: REGISTER sip:orau.gov SIP/2.0 Method: REGISTER Resent Packet: True Suspected resend of frame: 3 Message Header Via: SIP/2.0/UDP 10.0.1.13:15697 From: <sip:morriss@orau.gov>;tag=b64bd88c-901c-4958-a5a1-1570600ece91 SIP from address: sip:morriss@orau.gov SIP tag: b64bd88c-901c-4958-a5a1-1570600ece91 To: <sip:morriss@orau.gov> SIP to address: sip:morriss@orau.gov Call-ID: 4d4f3706-5bfd-459e-af27-6a46d534d1ce(a)10.0.1.13 CSeq: 1 REGISTER Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO, SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK" User-Agent: Windows RTC/1.0 Expires: 1200 Event: registration Allow-Events: presence Content-Length: 0 No. Time Source Destination Protocol Info 29 22.987519 10.0.2.252 Broadcast ARP Who has 10.0.1.50? Tell 10.0.2.252 Frame 29 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: 00:60:cf:21:7d:d7, Dst: ff:ff:ff:ff:ff:ff Address Resolution Protocol (request) No. Time Source Destination Protocol Info 30 24.964522 10.0.1.50 224.0.0.5 OSPF Hello Packet Frame 30 (86 bytes on wire, 86 bytes captured) Ethernet II, Src: 00:06:52:db:50:09, Dst: 01:00:5e:00:00:05 Internet Protocol, Src Addr: 10.0.1.50 (10.0.1.50), Dst Addr: 224.0.0.5 (224.0.0.5) Open Shortest Path First No. Time Source Destination Protocol Info 31 25.036175 10.0.1.13 10.0.2.1 SIP Request: REGISTER sip:orau.gov Frame 31 (501 bytes on wire, 501 bytes captured) Ethernet II, Src: 00:06:5b:81:30:f0, Dst: 00:06:5b:ef:8f:7e Internet Protocol, Src Addr: 10.0.1.13 (10.0.1.13), Dst Addr: 10.0.2.1 (10.0.2.1) User Datagram Protocol, Src Port: 3291 (3291), Dst Port: 5060 (5060) Session Initiation Protocol Request-Line: REGISTER sip:orau.gov SIP/2.0 Method: REGISTER Resent Packet: True Suspected resend of frame: 3 Message Header Via: SIP/2.0/UDP 10.0.1.13:15697 From: <sip:morriss@orau.gov>;tag=b64bd88c-901c-4958-a5a1-1570600ece91 SIP from address: sip:morriss@orau.gov SIP tag: b64bd88c-901c-4958-a5a1-1570600ece91 To: <sip:morriss@orau.gov> SIP to address: sip:morriss@orau.gov Call-ID: 4d4f3706-5bfd-459e-af27-6a46d534d1ce(a)10.0.1.13 CSeq: 1 REGISTER Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO, SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK" User-Agent: Windows RTC/1.0 Expires: 1200 Event: registration Allow-Events: presence Content-Length: 0 No. Time Source Destination Protocol Info 32 27.745516 10.0.1.2 224.0.0.5 OSPF Hello Packet Frame 32 (86 bytes on wire, 86 bytes captured) Ethernet II, Src: 00:30:94:fa:83:e1, Dst: 01:00:5e:00:00:05 Internet Protocol, Src Addr: 10.0.1.2 (10.0.1.2), Dst Addr: 224.0.0.5 (224.0.0.5) Open Shortest Path First No. Time Source Destination Protocol Info 33 28.753300 10.0.1.1 224.0.0.5 OSPF Hello Packet Frame 33 (86 bytes on wire, 86 bytes captured) Ethernet II, Src: 00:0b:fd:96:cf:ff, Dst: 01:00:5e:00:00:05 Internet Protocol, Src Addr: 10.0.1.1 (10.0.1.1), Dst Addr: 224.0.0.5 (224.0.0.5) Open Shortest Path First No. Time Source Destination Protocol Info 34 29.038943 10.0.1.13 10.0.2.1 SIP Request: REGISTER sip:orau.gov Frame 34 (501 bytes on wire, 501 bytes captured) Ethernet II, Src: 00:06:5b:81:30:f0, Dst: 00:06:5b:ef:8f:7e Internet Protocol, Src Addr: 10.0.1.13 (10.0.1.13), Dst Addr: 10.0.2.1 (10.0.2.1) User Datagram Protocol, Src Port: 3291 (3291), Dst Port: 5060 (5060) Session Initiation Protocol Request-Line: REGISTER sip:orau.gov SIP/2.0 Method: REGISTER Resent Packet: True Suspected resend of frame: 3 Message Header Via: SIP/2.0/UDP 10.0.1.13:15697 From: <sip:morriss@orau.gov>;tag=b64bd88c-901c-4958-a5a1-1570600ece91 SIP from address: sip:morriss@orau.gov SIP tag: b64bd88c-901c-4958-a5a1-1570600ece91 To: <sip:morriss@orau.gov> SIP to address: sip:morriss@orau.gov Call-ID: 4d4f3706-5bfd-459e-af27-6a46d534d1ce(a)10.0.1.13 CSeq: 1 REGISTER Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO, SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK" User-Agent: Windows RTC/1.0 Expires: 1200 Event: registration Allow-Events: presence Content-Length: 0 No. Time Source Destination Protocol Info 35 33.044770 10.0.1.13 10.0.2.1 SIP Request: REGISTER sip:orau.gov Frame 35 (501 bytes on wire, 501 bytes captured) Ethernet II, Src: 00:06:5b:81:30:f0, Dst: 00:06:5b:ef:8f:7e Internet Protocol, Src Addr: 10.0.1.13 (10.0.1.13), Dst Addr: 10.0.2.1 (10.0.2.1) User Datagram Protocol, Src Port: 3291 (3291), Dst Port: 5060 (5060) Session Initiation Protocol Request-Line: REGISTER sip:orau.gov SIP/2.0 Method: REGISTER Resent Packet: True Suspected resend of frame: 3 Message Header Via: SIP/2.0/UDP 10.0.1.13:15697 From: <sip:morriss@orau.gov>;tag=b64bd88c-901c-4958-a5a1-1570600ece91 SIP from address: sip:morriss@orau.gov SIP tag: b64bd88c-901c-4958-a5a1-1570600ece91 To: <sip:morriss@orau.gov> SIP to address: sip:morriss@orau.gov Call-ID: 4d4f3706-5bfd-459e-af27-6a46d534d1ce(a)10.0.1.13 CSeq: 1 REGISTER Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO, SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK" User-Agent: Windows RTC/1.0 Expires: 1200 Event: registration Allow-Events: presence Content-Length: 0 No. Time Source Destination Protocol Info 36 34.962535 10.0.1.50 224.0.0.5 OSPF Hello Packet Frame 36 (86 bytes on wire, 86 bytes captured) Ethernet II, Src: 00:06:52:db:50:09, Dst: 01:00:5e:00:00:05 Internet Protocol, Src Addr: 10.0.1.50 (10.0.1.50), Dst Addr: 224.0.0.5 (224.0.0.5) Open Shortest Path First No. Time Source Destination Protocol Info 37 37.467951 Hewlett-_68:e1:80 09:00:09:00:00:67 HPEXT U, func=UI; DSAP HP Extended LLC Individual, SSAP HP Extended LLC Command; HPEXT; DXSAP 0623, SXSAP 0623 Frame 37 (91 bytes on wire, 91 bytes captured) IEEE 802.3 Ethernet Logical-Link Control HP Extended Local-Link Control Data (67 bytes) 0000 03 01 01 0a 20 48 50 20 34 30 30 30 4d 00 02 08 .... HP 4000M... 0010 43 2e 30 39 2e 31 36 00 03 0a 4d 43 43 2d 34 30 C.09.16...MCC-40 0020 30 30 4d 00 05 04 0a 00 01 81 07 01 00 08 02 00 00M............. 0030 3c 09 02 01 01 0a 04 00 00 00 92 0e 06 00 10 83 <............... 0040 68 e1 80 h.. No. Time Source Destination Protocol Info 38 37.742795 10.0.1.2 224.0.0.5 OSPF Hello Packet Frame 38 (86 bytes on wire, 86 bytes captured) Ethernet II, Src: 00:30:94:fa:83:e1, Dst: 01:00:5e:00:00:05 Internet Protocol, Src Addr: 10.0.1.2 (10.0.1.2), Dst Addr: 224.0.0.5 (224.0.0.5) Open Shortest Path First No. Time Source Destination Protocol Info 39 38.751386 10.0.1.1 224.0.0.5 OSPF Hello Packet Frame 39 (86 bytes on wire, 86 bytes captured) Ethernet II, Src: 00:0b:fd:96:cf:ff, Dst: 01:00:5e:00:00:05 Internet Protocol, Src Addr: 10.0.1.1 (10.0.1.1), Dst Addr: 224.0.0.5 (224.0.0.5) Open Shortest Path First