25 Nov
2005
25 Nov
'05
3:26 p.m.
At 09:49 25.11.2005, Klaus Darilion wrote:
Jiri Kuthan wrote:
I think that actually the case without 5060 is fairly usual -- SER
opens up a TCP connection to a downstream agent. In that case,
SER uses ephemeral port number and frequently the agent registered
with an ephemeral number too (even if it used 5060, it may be behind
a NAT)
-jiri
What is tcp_analyze?
On a side-note: there is no easy TCP fitlering expression as both sides
of TCP connections may use ephemeral ports.
Yes, but usually at least one socket (the incoming) uses port 5060.