Frame 3 (667 bytes on wire, 667 bytes captured) Arrival Time: Sep 6, 2005 16:15:38.119886000 Time delta from previous packet: 4.481842000 seconds Time since reference or first frame: 4.490287000 seconds Frame Number: 3 Packet Length: 667 bytes Capture Length: 667 bytes Protocols in frame: eth:ip:udp:sip:sdp Ethernet II, Src: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]), Dst: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]) Destination: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]) Source: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]) Type: IP (0x0800) Internet Protocol, Src: [ORIGINORIGIN] ([ORIGINORIGIN]), Dst: [SERSERSERSER] ([SERSERSERSER]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 653 Identification: 0x4e77 (20087) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 236 Protocol: UDP (0x11) Header checksum: 0xd847 [correct] Source: [ORIGINORIGIN] ([ORIGINORIGIN]) Destination: [SERSERSERSER] ([SERSERSERSER]) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 633 Checksum: 0xe490 [correct] Session Initiation Protocol Request-Line: INVITE sip:15551234567@[SERSERSERSER]:5060 SIP/2.0 Method: INVITE Resent Packet: False Message Header Via: SIP/2.0/UDP [ORIGINORIGIN]:5060 To: 15551234567 SIP Display info: 15551234567 SIP to address: sip:15551234567@[SERSERSERSER]:5060 From: 15559876543;tag=1126048899 SIP Display info: 15559876543 SIP from address: sip:15559876543@[ORIGINORIGIN]:5060 SIP tag: 1126048899 Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN] CSeq: 1 INVITE Max-Forwards: 70 Subject: ORIGIN Contact: Contact Binding: URI: SIP contact address: sip:15559876543@[ORIGINORIGIN]:5060 Content-Type: application/sdp Content-Length: 212 Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): username 3335037699 0 IN IP4 [CREATORCREATOR] Owner Username: username Session ID: 3335037699 Session Version: 0 Owner Network Type: IN Owner Address Type: IP4 Owner Address: [CREATORCREATOR] Session Name (s): username Connection Information (c): IN IP4 [CREATORCREATOR] Connection Network Type: IN Connection Address Type: IP4 Connection Address: [CREATORCREATOR] Time Description, active time (t): 3335037699 0 Session Start Time: 3335037699 Session Stop Time: 0 Media Description, name and address (m): audio 46786 RTP/AVP 18 Media Type: audio Media Port: 46786 Media Proto: RTP/AVP Media Format: ITU-T G.729 Media Attribute (a): rtpmap:18 G729/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 18 G729/8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): sendrecv Frame 4 (593 bytes on wire, 593 bytes captured) Arrival Time: Sep 6, 2005 16:15:38.319683000 Time delta from previous packet: 0.199797000 seconds Time since reference or first frame: 4.690084000 seconds Frame Number: 4 Packet Length: 593 bytes Capture Length: 593 bytes Protocols in frame: eth:ip:udp:sip Ethernet II, Src: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]), Dst: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]) Destination: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]) Source: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]) Type: IP (0x0800) Internet Protocol, Src: [SERSERSERSER] ([SERSERSERSER]), Dst: [ORIGINORIGIN] ([ORIGINORIGIN]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 579 Identification: 0x10e4 (4324) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc215 [correct] Source: [SERSERSERSER] ([SERSERSERSER]) Destination: [ORIGINORIGIN] ([ORIGINORIGIN]) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 559 Checksum: 0x67e1 [incorrect, should be 0x1814] Session Initiation Protocol Status-Line: SIP/2.0 100 trying -- your call is important to us Status-Code: 100 Resent Packet: False Message Header Via: SIP/2.0/UDP [ORIGINORIGIN]:5060 To: 15551234567 SIP Display info: 15551234567 SIP to address: sip:15551234567@[SERSERSERSER]:5060 From: 15559876543;tag=1126048899 SIP Display info: 15559876543 SIP from address: sip:15559876543@[ORIGINORIGIN]:5060 SIP tag: 1126048899 Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN] CSeq: 1 INVITE Server: Sip EXpress router (0.9.3 (i386/linux)) Content-Length: 0 Warning: 392 [SERSERSERSER]:5060 "Noisy feedback tells: pid=4089 req_src_ip=[ORIGINORIGIN] req_src_port=5060 in_uri=sip:15551234567@[SERSERSERSER]:5060 out_uri=sip:5551234567@[DESTINATIONDESTINATION]:5060 via_cnt==1" Frame 5 (784 bytes on wire, 784 bytes captured) Arrival Time: Sep 6, 2005 16:15:38.319795000 Time delta from previous packet: 0.000112000 seconds Time since reference or first frame: 4.690196000 seconds Frame Number: 5 Packet Length: 784 bytes Capture Length: 784 bytes Protocols in frame: eth:ip:udp:sip:sdp Ethernet II, Src: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]), Dst: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]) Destination: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]) Source: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]) Type: IP (0x0800) Internet Protocol, Src: [SERSERSERSER] ([SERSERSERSER]), Dst: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 770 Identification: 0x10e5 (4325) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3175 [correct] Source: [SERSERSERSER] ([SERSERSERSER]) Destination: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION]) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 750 Checksum: 0xf880 [incorrect, should be 0xcf39] Session Initiation Protocol Request-Line: INVITE sip:5551234567@[DESTINATIONDESTINATION]:5060 SIP/2.0 Method: INVITE Resent Packet: False Message Header Record-Route: Via: SIP/2.0/UDP [SERSERSERSER];branch=z9hG4bK1458.76e37293.0 Via: SIP/2.0/UDP [ORIGINORIGIN]:5060 To: 15551234567 SIP Display info: 15551234567 SIP to address: sip:15551234567@[SERSERSERSER]:5060 From: 15559876543;tag=1126048899 SIP Display info: 15559876543 SIP from address: sip:15559876543@[ORIGINORIGIN]:5060 SIP tag: 1126048899 Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN] CSeq: 1 INVITE Max-Forwards: 16 Subject: ORIGIN Contact: Contact Binding: URI: SIP contact address: sip:15559876543@[ORIGINORIGIN]:5060 Content-Type: application/sdp Content-Length: 212 Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): username 3335037699 0 IN IP4 [CREATORCREATOR] Owner Username: username Session ID: 3335037699 Session Version: 0 Owner Network Type: IN Owner Address Type: IP4 Owner Address: [CREATORCREATOR] Session Name (s): username Connection Information (c): IN IP4 [CREATORCREATOR] Connection Network Type: IN Connection Address Type: IP4 Connection Address: [CREATORCREATOR] Time Description, active time (t): 3335037699 0 Session Start Time: 3335037699 Session Stop Time: 0 Media Description, name and address (m): audio 46786 RTP/AVP 18 Media Type: audio Media Port: 46786 Media Proto: RTP/AVP Media Format: ITU-T G.729 Media Attribute (a): rtpmap:18 G729/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 18 G729/8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): sendrecv Frame 6 (373 bytes on wire, 373 bytes captured) Arrival Time: Sep 6, 2005 16:15:38.393215000 Time delta from previous packet: 0.073420000 seconds Time since reference or first frame: 4.763616000 seconds Frame Number: 6 Packet Length: 373 bytes Capture Length: 373 bytes Protocols in frame: eth:ip:udp:sip Ethernet II, Src: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]), Dst: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]) Destination: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]) Source: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]) Type: IP (0x0800) Internet Protocol, Src: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION]), Dst: [SERSERSERSER] ([SERSERSERSER]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 359 Identification: 0x98de (39134) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 238 Protocol: UDP (0x11) Header checksum: 0xfd25 [correct] Source: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION]) Destination: [SERSERSERSER] ([SERSERSERSER]) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 339 Checksum: 0xef96 [correct] Session Initiation Protocol Status-Line: SIP/2.0 100 Trying Status-Code: 100 Resent Packet: False Message Header Via: SIP/2.0/UDP [SERSERSERSER];branch=z9hG4bK1458.76e37293.0 Via: SIP/2.0/UDP [ORIGINORIGIN]:5060 From: 15559876543 ;tag=1126048899 SIP Display info: 15559876543 SIP from address: sip:15559876543@[ORIGINORIGIN]:5060 SIP tag: 1126048899 To: 15551234567 SIP Display info: 15551234567 SIP to address: sip:15551234567@[SERSERSERSER]:5060 Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN] CSeq: 1 INVITE Content-Length: 0 Frame 15 (684 bytes on wire, 684 bytes captured) Arrival Time: Sep 6, 2005 16:15:43.510711000 Time delta from previous packet: 0.682532000 seconds Time since reference or first frame: 9.881112000 seconds Frame Number: 15 Packet Length: 684 bytes Capture Length: 684 bytes Protocols in frame: eth:ip:udp:sip:sdp Ethernet II, Src: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]), Dst: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]) Destination: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]) Source: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]) Type: IP (0x0800) Internet Protocol, Src: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION]), Dst: [SERSERSERSER] ([SERSERSERSER]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 670 Identification: 0x98e1 (39137) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 238 Protocol: UDP (0x11) Header checksum: 0xfbeb [correct] Source: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION]) Destination: [SERSERSERSER] ([SERSERSERSER]) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 650 Checksum: 0x2821 [correct] Session Initiation Protocol Status-Line: SIP/2.0 200 OK Status-Code: 200 Resent Packet: False Message Header To: 15551234567 ;tag=3335037343-448857 SIP Display info: 15551234567 SIP to address: sip:15551234567@[SERSERSERSER]:5060 SIP tag: 3335037343-448857 From: 15559876543 ;tag=1126048899 SIP Display info: 15559876543 SIP from address: sip:15559876543@[ORIGINORIGIN]:5060 SIP tag: 1126048899 Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN] CSeq: 1 INVITE Contact: sip:5551234567@[DESTINATIONDESTINATION]:5060 Contact Binding: sip:5551234567@[DESTINATIONDESTINATION]:5060 URI: sip:5551234567@[DESTINATIONDESTINATION]:5060\r SIP contact address: sip:5551234567@[DESTINATIONDESTINATION]:5060\r Content-Type: application/sdp Via: SIP/2.0/UDP [SERSERSERSER];branch=z9hG4bK1458.76e37293.0 Via: SIP/2.0/UDP [ORIGINORIGIN]:5060 Record-Route: Content-Length: 160 Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): version 1234 6726 IN IP4 [CREATOR2CREATOR2] Owner Username: version Session ID: 1234 Session Version: 6726 Owner Network Type: IN Owner Address Type: IP4 Owner Address: [CREATOR2CREATOR2] Session Name (s): sip call Connection Information (c): IN IP4 [CREATOR2CREATOR2] Connection Network Type: IN Connection Address Type: IP4 Connection Address: [CREATOR2CREATOR2] Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 17542 RTP/AVP 18 Media Type: audio Media Port: 17542 Media Proto: RTP/AVP Media Format: ITU-T G.729 Media Attribute (a): rtpmap:18 G729/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 18 G729/8000 Media Attribute (a): fmtp:18 annexb=no Media Attribute Fieldname: fmtp Media Attribute Value: 18 annexb=no Frame 16 (624 bytes on wire, 624 bytes captured) Arrival Time: Sep 6, 2005 16:15:43.517182000 Time delta from previous packet: 0.006471000 seconds Time since reference or first frame: 9.887583000 seconds Frame Number: 16 Packet Length: 624 bytes Capture Length: 624 bytes Protocols in frame: eth:ip:udp:sip:sdp Ethernet II, Src: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]), Dst: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]) Destination: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]) Source: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]) Type: IP (0x0800) Internet Protocol, Src: [SERSERSERSER] ([SERSERSERSER]), Dst: [ORIGINORIGIN] ([ORIGINORIGIN]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 610 Identification: 0x10ea (4330) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc1f0 [correct] Source: [SERSERSERSER] ([SERSERSERSER]) Destination: [ORIGINORIGIN] ([ORIGINORIGIN]) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 590 Checksum: 0x6800 [incorrect, should be 0x61da] Session Initiation Protocol Status-Line: SIP/2.0 200 OK Status-Code: 200 Resent Packet: False Message Header To: 15551234567 ;tag=3335037343-448857 SIP Display info: 15551234567 SIP to address: sip:15551234567@[SERSERSERSER]:5060 SIP tag: 3335037343-448857 From: 15559876543 ;tag=1126048899 SIP Display info: 15559876543 SIP from address: sip:15559876543@[ORIGINORIGIN]:5060 SIP tag: 1126048899 Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN] CSeq: 1 INVITE Contact: sip:5551234567@[DESTINATIONDESTINATION]:5060 Contact Binding: sip:5551234567@[DESTINATIONDESTINATION]:5060 URI: sip:5551234567@[DESTINATIONDESTINATION]:5060\r SIP contact address: sip:5551234567@[DESTINATIONDESTINATION]:5060\r Content-Type: application/sdp Via: SIP/2.0/UDP [ORIGINORIGIN]:5060 Record-Route: Content-Length: 160 Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): version 1234 6726 IN IP4 [CREATOR2CREATOR2] Owner Username: version Session ID: 1234 Session Version: 6726 Owner Network Type: IN Owner Address Type: IP4 Owner Address: [CREATOR2CREATOR2] Session Name (s): sip call Connection Information (c): IN IP4 [CREATOR2CREATOR2] Connection Network Type: IN Connection Address Type: IP4 Connection Address: [CREATOR2CREATOR2] Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 17542 RTP/AVP 18 Media Type: audio Media Port: 17542 Media Proto: RTP/AVP Media Format: ITU-T G.729 Media Attribute (a): rtpmap:18 G729/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 18 G729/8000 Media Attribute (a): fmtp:18 annexb=no Media Attribute Fieldname: fmtp Media Attribute Value: 18 annexb=no Frame 17 (365 bytes on wire, 365 bytes captured) Arrival Time: Sep 6, 2005 16:15:43.595159000 Time delta from previous packet: 0.077977000 seconds Time since reference or first frame: 9.965560000 seconds Frame Number: 17 Packet Length: 365 bytes Capture Length: 365 bytes Protocols in frame: eth:ip:udp:sip Ethernet II, Src: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]), Dst: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]) Destination: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]) Source: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]) Type: IP (0x0800) Internet Protocol, Src: [ORIGINORIGIN] ([ORIGINORIGIN]), Dst: [SERSERSERSER] ([SERSERSERSER]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 351 Identification: 0x4e79 (20089) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 236 Protocol: UDP (0x11) Header checksum: 0xd973 [correct] Source: [ORIGINORIGIN] ([ORIGINORIGIN]) Destination: [SERSERSERSER] ([SERSERSERSER]) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 331 Checksum: 0xa524 [correct] Session Initiation Protocol Request-Line: ACK sip:[SERSERSERSER];lr=on SIP/2.0 Method: ACK Resent Packet: False Message Header Via: SIP/2.0/UDP [ORIGINORIGIN]:5060 To: 15551234567 ;tag=3335037343-448857 SIP Display info: 15551234567 SIP to address: sip:15551234567@[SERSERSERSER]:5060 SIP tag: 3335037343-448857 From: 15559876543 ;tag=1126048899 SIP Display info: 15559876543 SIP from address: sip:15559876543@[ORIGINORIGIN]:5060 SIP tag: 1126048899 Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN] CSeq: 1 ACK Max-Forwards: 70 Content-Length: 0 Frame 18 (462 bytes on wire, 462 bytes captured) Arrival Time: Sep 6, 2005 16:15:43.616640000 Time delta from previous packet: 0.021481000 seconds Time since reference or first frame: 9.987041000 seconds Frame Number: 18 Packet Length: 462 bytes Capture Length: 462 bytes Protocols in frame: eth:ip:udp:sip Ethernet II, Src: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]), Dst: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]) Destination: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]) Source: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]) Type: IP (0x0800) Internet Protocol, Src: [SERSERSERSER] ([SERSERSERSER]), Dst: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 448 Identification: 0x10eb (4331) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x32b1 [correct] Source: [SERSERSERSER] ([SERSERSERSER]) Destination: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION]) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 428 Checksum: 0xf73e [incorrect, should be 0x4f55] Session Initiation Protocol Request-Line: ACK sip:[DESTINATIONDESTINATION];lr=on SIP/2.0 Method: ACK Resent Packet: False Message Header Record-Route: Via: SIP/2.0/UDP [SERSERSERSER];branch=0 Via: SIP/2.0/UDP [ORIGINORIGIN]:5060 To: 15551234567 ;tag=3335037343-448857 SIP Display info: 15551234567 SIP to address: sip:15551234567@[SERSERSERSER]:5060 SIP tag: 3335037343-448857 From: 15559876543 ;tag=1126048899 SIP Display info: 15559876543 SIP from address: sip:15559876543@[ORIGINORIGIN]:5060 SIP tag: 1126048899 Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN] CSeq: 1 ACK Max-Forwards: 16 Content-Length: 0 Frame 42 (376 bytes on wire, 376 bytes captured) Arrival Time: Sep 6, 2005 16:15:52.634007000 Time delta from previous packet: 0.067331000 seconds Time since reference or first frame: 19.004408000 seconds Frame Number: 42 Packet Length: 376 bytes Capture Length: 376 bytes Protocols in frame: eth:ip:udp:sip Ethernet II, Src: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]), Dst: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]) Destination: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]) Source: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]) Type: IP (0x0800) Internet Protocol, Src: [ORIGINORIGIN] ([ORIGINORIGIN]), Dst: [SERSERSERSER] ([SERSERSERSER]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 362 Identification: 0x4e7f (20095) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 236 Protocol: UDP (0x11) Header checksum: 0xd962 [correct] Source: [ORIGINORIGIN] ([ORIGINORIGIN]) Destination: [SERSERSERSER] ([SERSERSERSER]) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 342 Checksum: 0x58f3 [correct] Session Initiation Protocol Request-Line: BYE sip:15551234567@[SERSERSERSER]:5060 SIP/2.0 Method: BYE Resent Packet: False Message Header Via: SIP/2.0/UDP [ORIGINORIGIN]:5060 To: 15551234567 ;tag=3335037343-448857 SIP Display info: 15551234567 SIP to address: sip:15551234567@[SERSERSERSER]:5060 SIP tag: 3335037343-448857 From: 15559876543 ;tag=1126048899 SIP Display info: 15559876543 SIP from address: sip:15559876543@[ORIGINORIGIN]:5060 SIP tag: 1126048899 Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN] CSeq: 2 BYE Max-Forwards: 70 Content-Length: 0 Frame 43 (493 bytes on wire, 493 bytes captured) Arrival Time: Sep 6, 2005 16:15:52.660881000 Time delta from previous packet: 0.026874000 seconds Time since reference or first frame: 19.031282000 seconds Frame Number: 43 Packet Length: 493 bytes Capture Length: 493 bytes Protocols in frame: eth:ip:udp:sip Ethernet II, Src: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]), Dst: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]) Destination: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]) Source: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]) Type: IP (0x0800) Internet Protocol, Src: [SERSERSERSER] ([SERSERSERSER]), Dst: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 479 Identification: 0x10f7 (4343) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3286 [correct] Source: [SERSERSERSER] ([SERSERSERSER]) Destination: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION]) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 459 Checksum: 0xf75d [incorrect, should be 0x9fb6] Session Initiation Protocol Request-Line: BYE sip:5551234567@[DESTINATIONDESTINATION]:5060 SIP/2.0 Method: BYE Resent Packet: False Message Header Record-Route: Via: SIP/2.0/UDP [SERSERSERSER];branch=z9hG4bKe358.270dac87.0 Via: SIP/2.0/UDP [ORIGINORIGIN]:5060 To: 15551234567 ;tag=3335037343-448857 SIP Display info: 15551234567 SIP to address: sip:15551234567@[SERSERSERSER]:5060 SIP tag: 3335037343-448857 From: 15559876543 ;tag=1126048899 SIP Display info: 15559876543 SIP from address: sip:15559876543@[ORIGINORIGIN]:5060 SIP tag: 1126048899 Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN] CSeq: 2 BYE Max-Forwards: 16 Content-Length: 0 Frame 44 (388 bytes on wire, 388 bytes captured) Arrival Time: Sep 6, 2005 16:15:52.733945000 Time delta from previous packet: 0.073064000 seconds Time since reference or first frame: 19.104346000 seconds Frame Number: 44 Packet Length: 388 bytes Capture Length: 388 bytes Protocols in frame: eth:ip:udp:sip Ethernet II, Src: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]), Dst: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]) Destination: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]) Source: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]) Type: IP (0x0800) Internet Protocol, Src: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION]), Dst: [SERSERSERSER] ([SERSERSERSER]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 374 Identification: 0x98e8 (39144) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 238 Protocol: UDP (0x11) Header checksum: 0xfd0c [correct] Source: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION]) Destination: [SERSERSERSER] ([SERSERSERSER]) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 354 Checksum: 0x275e [correct] Session Initiation Protocol Status-Line: SIP/2.0 200 OK Status-Code: 200 Resent Packet: False Message Header Via: SIP/2.0/UDP [SERSERSERSER];branch=z9hG4bKe358.270dac87.0 Via: SIP/2.0/UDP [ORIGINORIGIN]:5060 From: 15559876543 ;tag=1126048899 SIP Display info: 15559876543 SIP from address: sip:15559876543@[ORIGINORIGIN]:5060 SIP tag: 1126048899 To: 15551234567 ;tag=3335037343-448857 SIP Display info: 15551234567 SIP to address: sip:15551234567@[SERSERSERSER]:5060 SIP tag: 3335037343-448857 Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN] CSeq: 2 BYE Content-Length: 0 Frame 45 (328 bytes on wire, 328 bytes captured) Arrival Time: Sep 6, 2005 16:15:52.744301000 Time delta from previous packet: 0.010356000 seconds Time since reference or first frame: 19.114702000 seconds Frame Number: 45 Packet Length: 328 bytes Capture Length: 328 bytes Protocols in frame: eth:ip:udp:sip Ethernet II, Src: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]), Dst: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]) Destination: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]) Source: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]) Type: IP (0x0800) Internet Protocol, Src: [SERSERSERSER] ([SERSERSERSER]), Dst: [ORIGINORIGIN] ([ORIGINORIGIN]) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 314 Identification: 0x10f8 (4344) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc30a [correct] Source: [SERSERSERSER] ([SERSERSERSER]) Destination: [ORIGINORIGIN] ([ORIGINORIGIN]) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 294 Checksum: 0x66d8 [incorrect, should be 0x4fb2] Session Initiation Protocol Status-Line: SIP/2.0 200 OK Status-Code: 200 Resent Packet: False Message Header Via: SIP/2.0/UDP [ORIGINORIGIN]:5060 From: 15559876543 ;tag=1126048899 SIP Display info: 15559876543 SIP from address: sip:15559876543@[ORIGINORIGIN]:5060 SIP tag: 1126048899 To: 15551234567 ;tag=3335037343-448857 SIP Display info: 15551234567 SIP to address: sip:15551234567@[SERSERSERSER]:5060 SIP tag: 3335037343-448857 Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN] CSeq: 2 BYE Content-Length: 0