Re: [Serusers] SER originating packets / incorrect checksum - sr-users

8 Sep 2005

Thanks for the reply Klaus.

The dump file I attached includes conversations both with the origin and destination PSTN.
 For simplicity, I changed references to the ser box's IP to [SERSERSERSER].  I also
changed the destination IP to [DESTINATIONDESTINATION] and the origin to [ORIGINORIGIN]

-----Original Message-----
From: Klaus Darilion &lt;klaus.mailinglists(a)pernau.at&gt;
Sent: Sep 7, 2005 3:47 PM
To: Jose Delancy &lt;josedelancy(a)earthlink.net&gt;
Cc: serusers(a)lists.iptel.org
Subject: Re: [Serusers] SER originating packets / incorrect checksum

did you sniff at the PC running ser? Sometmes the checksum is calculated 
  in the NIC, thus tcpdump can't see them.

klaus

Jose Delancy wrote:

...
  Though conversations do to work, when I look at my raw
packets I see that I have an incorrect checksum on most packets originating from my SER
box.  I'm guessing there's some kind of ACK or loose_route issue here, but I am
unable to determine what it is.

 I have attached the dump.  Please advise.

 ------------------------------------------------------------------------

 Frame 3 (667 bytes on wire, 667 bytes captured)
     Arrival Time: Sep  6, 2005 16:15:38.119886000
     Time delta from previous packet: 4.481842000 seconds
     Time since reference or first frame: 4.490287000 seconds
     Frame Number: 3
     Packet Length: 667 bytes
     Capture Length: 667 bytes
     Protocols in frame: eth:ip:udp:sip:sdp
 Ethernet II, Src: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]), Dst: Intel_[SER_MAC]
(00:0e:0c:[SER_MAC])
     Destination: Intel_[SER_MAC] (00:0e:0c:[SER_MAC])
     Source: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC])
     Type: IP (0x0800)
 Internet Protocol, Src: [ORIGINORIGIN] ([ORIGINORIGIN]), Dst: [SERSERSERSER]
([SERSERSERSER])
     Version: 4
     Header length: 20 bytes
     Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
         0000 00.. = Differentiated Services Codepoint: Default (0x00)
         .... ..0. = ECN-Capable Transport (ECT): 0
         .... ...0 = ECN-CE: 0
     Total Length: 653
     Identification: 0x4e77 (20087)
     Flags: 0x04 (Don't Fragment)
         0... = Reserved bit: Not set
         .1.. = Don't fragment: Set
         ..0. = More fragments: Not set
     Fragment offset: 0
     Time to live: 236
     Protocol: UDP (0x11)
     Header checksum: 0xd847 [correct]
     Source: [ORIGINORIGIN] ([ORIGINORIGIN])
     Destination: [SERSERSERSER] ([SERSERSERSER])
 User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
     Source port: 5060 (5060)
     Destination port: 5060 (5060)
     Length: 633
     Checksum: 0xe490 [correct]
 Session Initiation Protocol
     Request-Line: INVITE sip:15551234567@[SERSERSERSER]:5060 SIP/2.0
         Method: INVITE
         Resent Packet: False
     Message Header
         Via: SIP/2.0/UDP [ORIGINORIGIN]:5060
         To: 15551234567<sip:15551234567@[SERSERSERSER]:5060>
             SIP Display info: 15551234567
             SIP to address: sip:15551234567@[SERSERSERSER]:5060
         From: 15559876543<sip:15559876543@[ORIGINORIGIN]:5060>;tag=1126048899
             SIP Display info: 15559876543
             SIP from address: sip:15559876543@[ORIGINORIGIN]:5060
             SIP tag: 1126048899
         Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN]
         CSeq: 1 INVITE
         Max-Forwards: 70
         Subject: ORIGIN
         Contact: <sip:15559876543@[ORIGINORIGIN]:5060>
             Contact Binding: <sip:15559876543@[ORIGINORIGIN]:5060>
                 URI: <sip:15559876543@[ORIGINORIGIN]:5060>
                     SIP contact address: sip:15559876543@[ORIGINORIGIN]:5060
         Content-Type: application/sdp
         Content-Length: 212
     Message body
         Session Description Protocol
             Session Description Protocol Version (v): 0
             Owner/Creator, Session Id (o): username 3335037699 0 IN IP4 [CREATORCREATOR]
                 Owner Username: username
                 Session ID: 3335037699
                 Session Version: 0
                 Owner Network Type: IN
                 Owner Address Type: IP4
                 Owner Address: [CREATORCREATOR]
             Session Name (s): username
             Connection Information (c): IN IP4 [CREATORCREATOR]
                 Connection Network Type: IN
                 Connection Address Type: IP4
                 Connection Address: [CREATORCREATOR]
             Time Description, active time (t): 3335037699 0
                 Session Start Time: 3335037699
                 Session Stop Time: 0
             Media Description, name and address (m): audio 46786 RTP/AVP 18
                 Media Type: audio
                 Media Port: 46786
                 Media Proto: RTP/AVP
                 Media Format: ITU-T G.729
             Media Attribute (a): rtpmap:18 G729/8000
                 Media Attribute Fieldname: rtpmap
                 Media Attribute Value: 18 G729/8000
             Media Attribute (a): rtpmap:101 telephone-event/8000
                 Media Attribute Fieldname: rtpmap
                 Media Attribute Value: 101 telephone-event/8000
             Media Attribute (a): sendrecv

 Frame 4 (593 bytes on wire, 593 bytes captured)
     Arrival Time: Sep  6, 2005 16:15:38.319683000
     Time delta from previous packet: 0.199797000 seconds
     Time since reference or first frame: 4.690084000 seconds
     Frame Number: 4
     Packet Length: 593 bytes
     Capture Length: 593 bytes
     Protocols in frame: eth:ip:udp:sip
 Ethernet II, Src: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]), Dst: Cisco_[ORG_MAC]
(00:05:01:[ORG_MAC])
     Destination: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC])
     Source: Intel_[SER_MAC] (00:0e:0c:[SER_MAC])
     Type: IP (0x0800)
 Internet Protocol, Src: [SERSERSERSER] ([SERSERSERSER]), Dst: [ORIGINORIGIN]
([ORIGINORIGIN])
     Version: 4
     Header length: 20 bytes
     Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00)
         0001 00.. = Differentiated Services Codepoint: Unknown (0x04)
         .... ..0. = ECN-Capable Transport (ECT): 0
         .... ...0 = ECN-CE: 0
     Total Length: 579
     Identification: 0x10e4 (4324)
     Flags: 0x04 (Don't Fragment)
         0... = Reserved bit: Not set
         .1.. = Don't fragment: Set
         ..0. = More fragments: Not set
     Fragment offset: 0
     Time to live: 64
     Protocol: UDP (0x11)
     Header checksum: 0xc215 [correct]
     Source: [SERSERSERSER] ([SERSERSERSER])
     Destination: [ORIGINORIGIN] ([ORIGINORIGIN])
 User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
     Source port: 5060 (5060)
     Destination port: 5060 (5060)
     Length: 559
     Checksum: 0x67e1 [incorrect, should be 0x1814]
 Session Initiation Protocol
     Status-Line: SIP/2.0 100 trying -- your call is important to us
         Status-Code: 100
         Resent Packet: False
     Message Header
         Via: SIP/2.0/UDP [ORIGINORIGIN]:5060
         To: 15551234567<sip:15551234567@[SERSERSERSER]:5060>
             SIP Display info: 15551234567
             SIP to address: sip:15551234567@[SERSERSERSER]:5060
         From: 15559876543<sip:15559876543@[ORIGINORIGIN]:5060>;tag=1126048899
             SIP Display info: 15559876543
             SIP from address: sip:15559876543@[ORIGINORIGIN]:5060
             SIP tag: 1126048899
         Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN]
         CSeq: 1 INVITE
         Server: Sip EXpress router (0.9.3 (i386/linux))
         Content-Length: 0
         Warning: 392 [SERSERSERSER]:5060 "Noisy feedback tells:  pid=4089
req_src_ip=[ORIGINORIGIN] req_src_port=5060 in_uri=sip:15551234567@[SERSERSERSER]:5060
out_uri=sip:5551234567@[DESTINATIONDESTINATION]:5060 via_cnt==1"

 Frame 5 (784 bytes on wire, 784 bytes captured)
     Arrival Time: Sep  6, 2005 16:15:38.319795000
     Time delta from previous packet: 0.000112000 seconds
     Time since reference or first frame: 4.690196000 seconds
     Frame Number: 5
     Packet Length: 784 bytes
     Capture Length: 784 bytes
     Protocols in frame: eth:ip:udp:sip:sdp
 Ethernet II, Src: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]), Dst: Cisco_[ORG_MAC]
(00:05:01:[ORG_MAC])
     Destination: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC])
     Source: Intel_[SER_MAC] (00:0e:0c:[SER_MAC])
     Type: IP (0x0800)
 Internet Protocol, Src: [SERSERSERSER] ([SERSERSERSER]), Dst: [DESTINATIONDESTINATION]
([DESTINATIONDESTINATION])
     Version: 4
     Header length: 20 bytes
     Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00)
         0001 00.. = Differentiated Services Codepoint: Unknown (0x04)
         .... ..0. = ECN-Capable Transport (ECT): 0
         .... ...0 = ECN-CE: 0
     Total Length: 770
     Identification: 0x10e5 (4325)
     Flags: 0x04 (Don't Fragment)
         0... = Reserved bit: Not set
         .1.. = Don't fragment: Set
         ..0. = More fragments: Not set
     Fragment offset: 0
     Time to live: 64
     Protocol: UDP (0x11)
     Header checksum: 0x3175 [correct]
     Source: [SERSERSERSER] ([SERSERSERSER])
     Destination: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION])
 User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
     Source port: 5060 (5060)
     Destination port: 5060 (5060)
     Length: 750
     Checksum: 0xf880 [incorrect, should be 0xcf39]
 Session Initiation Protocol
     Request-Line: INVITE sip:5551234567@[DESTINATIONDESTINATION]:5060 SIP/2.0
         Method: INVITE
         Resent Packet: False
     Message Header
         Record-Route: <sip:[SERSERSERSER];ftag=1126048899;lr=on>
         Via: SIP/2.0/UDP [SERSERSERSER];branch=z9hG4bK1458.76e37293.0
         Via: SIP/2.0/UDP [ORIGINORIGIN]:5060
         To: 15551234567<sip:15551234567@[SERSERSERSER]:5060>
             SIP Display info: 15551234567
             SIP to address: sip:15551234567@[SERSERSERSER]:5060
         From: 15559876543<sip:15559876543@[ORIGINORIGIN]:5060>;tag=1126048899
             SIP Display info: 15559876543
             SIP from address: sip:15559876543@[ORIGINORIGIN]:5060
             SIP tag: 1126048899
         Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN]
         CSeq: 1 INVITE
         Max-Forwards: 16
         Subject: ORIGIN
         Contact: <sip:15559876543@[ORIGINORIGIN]:5060>
             Contact Binding: <sip:15559876543@[ORIGINORIGIN]:5060>
                 URI: <sip:15559876543@[ORIGINORIGIN]:5060>
                     SIP contact address: sip:15559876543@[ORIGINORIGIN]:5060
         Content-Type: application/sdp
         Content-Length: 212
     Message body
         Session Description Protocol
             Session Description Protocol Version (v): 0
             Owner/Creator, Session Id (o): username 3335037699 0 IN IP4 [CREATORCREATOR]
                 Owner Username: username
                 Session ID: 3335037699
                 Session Version: 0
                 Owner Network Type: IN
                 Owner Address Type: IP4
                 Owner Address: [CREATORCREATOR]
             Session Name (s): username
             Connection Information (c): IN IP4 [CREATORCREATOR]
                 Connection Network Type: IN
                 Connection Address Type: IP4
                 Connection Address: [CREATORCREATOR]
             Time Description, active time (t): 3335037699 0
                 Session Start Time: 3335037699
                 Session Stop Time: 0
             Media Description, name and address (m): audio 46786 RTP/AVP 18
                 Media Type: audio
                 Media Port: 46786
                 Media Proto: RTP/AVP
                 Media Format: ITU-T G.729
             Media Attribute (a): rtpmap:18 G729/8000
                 Media Attribute Fieldname: rtpmap
                 Media Attribute Value: 18 G729/8000
             Media Attribute (a): rtpmap:101 telephone-event/8000
                 Media Attribute Fieldname: rtpmap
                 Media Attribute Value: 101 telephone-event/8000
             Media Attribute (a): sendrecv

 Frame 6 (373 bytes on wire, 373 bytes captured)
     Arrival Time: Sep  6, 2005 16:15:38.393215000
     Time delta from previous packet: 0.073420000 seconds
     Time since reference or first frame: 4.763616000 seconds
     Frame Number: 6
     Packet Length: 373 bytes
     Capture Length: 373 bytes
     Protocols in frame: eth:ip:udp:sip
 Ethernet II, Src: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]), Dst: Intel_[SER_MAC]
(00:0e:0c:[SER_MAC])
     Destination: Intel_[SER_MAC] (00:0e:0c:[SER_MAC])
     Source: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC])
     Type: IP (0x0800)
 Internet Protocol, Src: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION]), Dst:
[SERSERSERSER] ([SERSERSERSER])
     Version: 4
     Header length: 20 bytes
     Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
         0000 00.. = Differentiated Services Codepoint: Default (0x00)
         .... ..0. = ECN-Capable Transport (ECT): 0
         .... ...0 = ECN-CE: 0
     Total Length: 359
     Identification: 0x98de (39134)
     Flags: 0x04 (Don't Fragment)
         0... = Reserved bit: Not set
         .1.. = Don't fragment: Set
         ..0. = More fragments: Not set
     Fragment offset: 0
     Time to live: 238
     Protocol: UDP (0x11)
     Header checksum: 0xfd25 [correct]
     Source: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION])
     Destination: [SERSERSERSER] ([SERSERSERSER])
 User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
     Source port: 5060 (5060)
     Destination port: 5060 (5060)
     Length: 339
     Checksum: 0xef96 [correct]
 Session Initiation Protocol
     Status-Line: SIP/2.0 100 Trying
         Status-Code: 100
         Resent Packet: False
     Message Header
         Via: SIP/2.0/UDP [SERSERSERSER];branch=z9hG4bK1458.76e37293.0
         Via: SIP/2.0/UDP [ORIGINORIGIN]:5060
         From: 15559876543 <sip:15559876543@[ORIGINORIGIN]:5060>;tag=1126048899
             SIP Display info: 15559876543 
             SIP from address: sip:15559876543@[ORIGINORIGIN]:5060
             SIP tag: 1126048899
         To: 15551234567 <sip:15551234567@[SERSERSERSER]:5060>
             SIP Display info: 15551234567 
             SIP to address: sip:15551234567@[SERSERSERSER]:5060
         Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN]
         CSeq: 1 INVITE
         Content-Length: 0

 Frame 15 (684 bytes on wire, 684 bytes captured)
     Arrival Time: Sep  6, 2005 16:15:43.510711000
     Time delta from previous packet: 0.682532000 seconds
     Time since reference or first frame: 9.881112000 seconds
     Frame Number: 15
     Packet Length: 684 bytes
     Capture Length: 684 bytes
     Protocols in frame: eth:ip:udp:sip:sdp
 Ethernet II, Src: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]), Dst: Intel_[SER_MAC]
(00:0e:0c:[SER_MAC])
     Destination: Intel_[SER_MAC] (00:0e:0c:[SER_MAC])
     Source: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC])
     Type: IP (0x0800)
 Internet Protocol, Src: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION]), Dst:
[SERSERSERSER] ([SERSERSERSER])
     Version: 4
     Header length: 20 bytes
     Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
         0000 00.. = Differentiated Services Codepoint: Default (0x00)
         .... ..0. = ECN-Capable Transport (ECT): 0
         .... ...0 = ECN-CE: 0
     Total Length: 670
     Identification: 0x98e1 (39137)
     Flags: 0x04 (Don't Fragment)
         0... = Reserved bit: Not set
         .1.. = Don't fragment: Set
         ..0. = More fragments: Not set
     Fragment offset: 0
     Time to live: 238
     Protocol: UDP (0x11)
     Header checksum: 0xfbeb [correct]
     Source: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION])
     Destination: [SERSERSERSER] ([SERSERSERSER])
 User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
     Source port: 5060 (5060)
     Destination port: 5060 (5060)
     Length: 650
     Checksum: 0x2821 [correct]
 Session Initiation Protocol
     Status-Line: SIP/2.0 200 OK
         Status-Code: 200
         Resent Packet: False
     Message Header
         To: 15551234567
<sip:15551234567@[SERSERSERSER]:5060>;tag=3335037343-448857
             SIP Display info: 15551234567 
             SIP to address: sip:15551234567@[SERSERSERSER]:5060
             SIP tag: 3335037343-448857
         From: 15559876543 <sip:15559876543@[ORIGINORIGIN]:5060>;tag=1126048899
             SIP Display info: 15559876543 
             SIP from address: sip:15559876543@[ORIGINORIGIN]:5060
             SIP tag: 1126048899
         Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN]
         CSeq: 1 INVITE
         Contact: sip:5551234567@[DESTINATIONDESTINATION]:5060
             Contact Binding: sip:5551234567@[DESTINATIONDESTINATION]:5060
                 URI: sip:5551234567@[DESTINATIONDESTINATION]:5060\r
                     SIP contact address: sip:5551234567@[DESTINATIONDESTINATION]:5060\r
         Content-Type: application/sdp
         Via: SIP/2.0/UDP [SERSERSERSER];branch=z9hG4bK1458.76e37293.0
         Via: SIP/2.0/UDP [ORIGINORIGIN]:5060
         Record-Route: <sip:[SERSERSERSER];ftag=1126048899;lr=on>
         Content-Length: 160
     Message body
         Session Description Protocol
             Session Description Protocol Version (v): 0
             Owner/Creator, Session Id (o): version 1234 6726 IN IP4 [CREATOR2CREATOR2]
                 Owner Username: version
                 Session ID: 1234
                 Session Version: 6726
                 Owner Network Type: IN
                 Owner Address Type: IP4
                 Owner Address: [CREATOR2CREATOR2]
             Session Name (s): sip call
             Connection Information (c): IN IP4 [CREATOR2CREATOR2]
                 Connection Network Type: IN
                 Connection Address Type: IP4
                 Connection Address: [CREATOR2CREATOR2]
             Time Description, active time (t): 0 0
                 Session Start Time: 0
                 Session Stop Time: 0
             Media Description, name and address (m): audio 17542 RTP/AVP 18
                 Media Type: audio
                 Media Port: 17542
                 Media Proto: RTP/AVP
                 Media Format: ITU-T G.729
             Media Attribute (a): rtpmap:18 G729/8000
                 Media Attribute Fieldname: rtpmap
                 Media Attribute Value: 18 G729/8000
             Media Attribute (a): fmtp:18 annexb=no
                 Media Attribute Fieldname: fmtp
                 Media Attribute Value: 18 annexb=no

 Frame 16 (624 bytes on wire, 624 bytes captured)
     Arrival Time: Sep  6, 2005 16:15:43.517182000
     Time delta from previous packet: 0.006471000 seconds
     Time since reference or first frame: 9.887583000 seconds
     Frame Number: 16
     Packet Length: 624 bytes
     Capture Length: 624 bytes
     Protocols in frame: eth:ip:udp:sip:sdp
 Ethernet II, Src: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]), Dst: Cisco_[ORG_MAC]
(00:05:01:[ORG_MAC])
     Destination: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC])
     Source: Intel_[SER_MAC] (00:0e:0c:[SER_MAC])
     Type: IP (0x0800)
 Internet Protocol, Src: [SERSERSERSER] ([SERSERSERSER]), Dst: [ORIGINORIGIN]
([ORIGINORIGIN])
     Version: 4
     Header length: 20 bytes
     Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00)
         0001 00.. = Differentiated Services Codepoint: Unknown (0x04)
         .... ..0. = ECN-Capable Transport (ECT): 0
         .... ...0 = ECN-CE: 0
     Total Length: 610
     Identification: 0x10ea (4330)
     Flags: 0x04 (Don't Fragment)
         0... = Reserved bit: Not set
         .1.. = Don't fragment: Set
         ..0. = More fragments: Not set
     Fragment offset: 0
     Time to live: 64
     Protocol: UDP (0x11)
     Header checksum: 0xc1f0 [correct]
     Source: [SERSERSERSER] ([SERSERSERSER])
     Destination: [ORIGINORIGIN] ([ORIGINORIGIN])
 User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
     Source port: 5060 (5060)
     Destination port: 5060 (5060)
     Length: 590
     Checksum: 0x6800 [incorrect, should be 0x61da]
 Session Initiation Protocol
     Status-Line: SIP/2.0 200 OK
         Status-Code: 200
         Resent Packet: False
     Message Header
         To: 15551234567
<sip:15551234567@[SERSERSERSER]:5060>;tag=3335037343-448857
             SIP Display info: 15551234567 
             SIP to address: sip:15551234567@[SERSERSERSER]:5060
             SIP tag: 3335037343-448857
         From: 15559876543 <sip:15559876543@[ORIGINORIGIN]:5060>;tag=1126048899
             SIP Display info: 15559876543 
             SIP from address: sip:15559876543@[ORIGINORIGIN]:5060
             SIP tag: 1126048899
         Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN]
         CSeq: 1 INVITE
         Contact: sip:5551234567@[DESTINATIONDESTINATION]:5060
             Contact Binding: sip:5551234567@[DESTINATIONDESTINATION]:5060
                 URI: sip:5551234567@[DESTINATIONDESTINATION]:5060\r
                     SIP contact address: sip:5551234567@[DESTINATIONDESTINATION]:5060\r
         Content-Type: application/sdp
         Via: SIP/2.0/UDP [ORIGINORIGIN]:5060
         Record-Route: <sip:[SERSERSERSER];ftag=1126048899;lr=on>
         Content-Length: 160
     Message body
         Session Description Protocol
             Session Description Protocol Version (v): 0
             Owner/Creator, Session Id (o): version 1234 6726 IN IP4 [CREATOR2CREATOR2]
                 Owner Username: version
                 Session ID: 1234
                 Session Version: 6726
                 Owner Network Type: IN
                 Owner Address Type: IP4
                 Owner Address: [CREATOR2CREATOR2]
             Session Name (s): sip call
             Connection Information (c): IN IP4 [CREATOR2CREATOR2]
                 Connection Network Type: IN
                 Connection Address Type: IP4
                 Connection Address: [CREATOR2CREATOR2]
             Time Description, active time (t): 0 0
                 Session Start Time: 0
                 Session Stop Time: 0
             Media Description, name and address (m): audio 17542 RTP/AVP 18
                 Media Type: audio
                 Media Port: 17542
                 Media Proto: RTP/AVP
                 Media Format: ITU-T G.729
             Media Attribute (a): rtpmap:18 G729/8000
                 Media Attribute Fieldname: rtpmap
                 Media Attribute Value: 18 G729/8000
             Media Attribute (a): fmtp:18 annexb=no
                 Media Attribute Fieldname: fmtp
                 Media Attribute Value: 18 annexb=no

 Frame 17 (365 bytes on wire, 365 bytes captured)
     Arrival Time: Sep  6, 2005 16:15:43.595159000
     Time delta from previous packet: 0.077977000 seconds
     Time since reference or first frame: 9.965560000 seconds
     Frame Number: 17
     Packet Length: 365 bytes
     Capture Length: 365 bytes
     Protocols in frame: eth:ip:udp:sip
 Ethernet II, Src: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]), Dst: Intel_[SER_MAC]
(00:0e:0c:[SER_MAC])
     Destination: Intel_[SER_MAC] (00:0e:0c:[SER_MAC])
     Source: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC])
     Type: IP (0x0800)
 Internet Protocol, Src: [ORIGINORIGIN] ([ORIGINORIGIN]), Dst: [SERSERSERSER]
([SERSERSERSER])
     Version: 4
     Header length: 20 bytes
     Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
         0000 00.. = Differentiated Services Codepoint: Default (0x00)
         .... ..0. = ECN-Capable Transport (ECT): 0
         .... ...0 = ECN-CE: 0
     Total Length: 351
     Identification: 0x4e79 (20089)
     Flags: 0x04 (Don't Fragment)
         0... = Reserved bit: Not set
         .1.. = Don't fragment: Set
         ..0. = More fragments: Not set
     Fragment offset: 0
     Time to live: 236
     Protocol: UDP (0x11)
     Header checksum: 0xd973 [correct]
     Source: [ORIGINORIGIN] ([ORIGINORIGIN])
     Destination: [SERSERSERSER] ([SERSERSERSER])
 User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
     Source port: 5060 (5060)
     Destination port: 5060 (5060)
     Length: 331
     Checksum: 0xa524 [correct]
 Session Initiation Protocol
     Request-Line: ACK sip:[SERSERSERSER];lr=on SIP/2.0
         Method: ACK
         Resent Packet: False
     Message Header
         Via: SIP/2.0/UDP [ORIGINORIGIN]:5060
         To: 15551234567
<sip:15551234567@[SERSERSERSER]:5060>;tag=3335037343-448857
             SIP Display info: 15551234567 
             SIP to address: sip:15551234567@[SERSERSERSER]:5060
             SIP tag: 3335037343-448857
         From: 15559876543 <sip:15559876543@[ORIGINORIGIN]:5060>;tag=1126048899
             SIP Display info: 15559876543 
             SIP from address: sip:15559876543@[ORIGINORIGIN]:5060
             SIP tag: 1126048899
         Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN]
         CSeq: 1 ACK
         Max-Forwards: 70
         Content-Length: 0

 Frame 18 (462 bytes on wire, 462 bytes captured)
     Arrival Time: Sep  6, 2005 16:15:43.616640000
     Time delta from previous packet: 0.021481000 seconds
     Time since reference or first frame: 9.987041000 seconds
     Frame Number: 18
     Packet Length: 462 bytes
     Capture Length: 462 bytes
     Protocols in frame: eth:ip:udp:sip
 Ethernet II, Src: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]), Dst: Cisco_[ORG_MAC]
(00:05:01:[ORG_MAC])
     Destination: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC])
     Source: Intel_[SER_MAC] (00:0e:0c:[SER_MAC])
     Type: IP (0x0800)
 Internet Protocol, Src: [SERSERSERSER] ([SERSERSERSER]), Dst: [DESTINATIONDESTINATION]
([DESTINATIONDESTINATION])
     Version: 4
     Header length: 20 bytes
     Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00)
         0001 00.. = Differentiated Services Codepoint: Unknown (0x04)
         .... ..0. = ECN-Capable Transport (ECT): 0
         .... ...0 = ECN-CE: 0
     Total Length: 448
     Identification: 0x10eb (4331)
     Flags: 0x04 (Don't Fragment)
         0... = Reserved bit: Not set
         .1.. = Don't fragment: Set
         ..0. = More fragments: Not set
     Fragment offset: 0
     Time to live: 64
     Protocol: UDP (0x11)
     Header checksum: 0x32b1 [correct]
     Source: [SERSERSERSER] ([SERSERSERSER])
     Destination: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION])
 User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
     Source port: 5060 (5060)
     Destination port: 5060 (5060)
     Length: 428
     Checksum: 0xf73e [incorrect, should be 0x4f55]
 Session Initiation Protocol
     Request-Line: ACK sip:[DESTINATIONDESTINATION];lr=on SIP/2.0
         Method: ACK
         Resent Packet: False
     Message Header
         Record-Route: <sip:[SERSERSERSER];ftag=1126048899;lr=on>
         Via: SIP/2.0/UDP [SERSERSERSER];branch=0
         Via: SIP/2.0/UDP [ORIGINORIGIN]:5060
         To: 15551234567
<sip:15551234567@[SERSERSERSER]:5060>;tag=3335037343-448857
             SIP Display info: 15551234567 
             SIP to address: sip:15551234567@[SERSERSERSER]:5060
             SIP tag: 3335037343-448857
         From: 15559876543 <sip:15559876543@[ORIGINORIGIN]:5060>;tag=1126048899
             SIP Display info: 15559876543 
             SIP from address: sip:15559876543@[ORIGINORIGIN]:5060
             SIP tag: 1126048899
         Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN]
         CSeq: 1 ACK
         Max-Forwards: 16
         Content-Length: 0

 Frame 42 (376 bytes on wire, 376 bytes captured)
     Arrival Time: Sep  6, 2005 16:15:52.634007000
     Time delta from previous packet: 0.067331000 seconds
     Time since reference or first frame: 19.004408000 seconds
     Frame Number: 42
     Packet Length: 376 bytes
     Capture Length: 376 bytes
     Protocols in frame: eth:ip:udp:sip
 Ethernet II, Src: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]), Dst: Intel_[SER_MAC]
(00:0e:0c:[SER_MAC])
     Destination: Intel_[SER_MAC] (00:0e:0c:[SER_MAC])
     Source: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC])
     Type: IP (0x0800)
 Internet Protocol, Src: [ORIGINORIGIN] ([ORIGINORIGIN]), Dst: [SERSERSERSER]
([SERSERSERSER])
     Version: 4
     Header length: 20 bytes
     Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
         0000 00.. = Differentiated Services Codepoint: Default (0x00)
         .... ..0. = ECN-Capable Transport (ECT): 0
         .... ...0 = ECN-CE: 0
     Total Length: 362
     Identification: 0x4e7f (20095)
     Flags: 0x04 (Don't Fragment)
         0... = Reserved bit: Not set
         .1.. = Don't fragment: Set
         ..0. = More fragments: Not set
     Fragment offset: 0
     Time to live: 236
     Protocol: UDP (0x11)
     Header checksum: 0xd962 [correct]
     Source: [ORIGINORIGIN] ([ORIGINORIGIN])
     Destination: [SERSERSERSER] ([SERSERSERSER])
 User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
     Source port: 5060 (5060)
     Destination port: 5060 (5060)
     Length: 342
     Checksum: 0x58f3 [correct]
 Session Initiation Protocol
     Request-Line: BYE sip:15551234567@[SERSERSERSER]:5060 SIP/2.0
         Method: BYE
         Resent Packet: False
     Message Header
         Via: SIP/2.0/UDP [ORIGINORIGIN]:5060
         To: 15551234567
<sip:15551234567@[SERSERSERSER]:5060>;tag=3335037343-448857
             SIP Display info: 15551234567 
             SIP to address: sip:15551234567@[SERSERSERSER]:5060
             SIP tag: 3335037343-448857
         From: 15559876543 <sip:15559876543@[ORIGINORIGIN]:5060>;tag=1126048899
             SIP Display info: 15559876543 
             SIP from address: sip:15559876543@[ORIGINORIGIN]:5060
             SIP tag: 1126048899
         Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN]
         CSeq: 2 BYE
         Max-Forwards: 70
         Content-Length: 0

 Frame 43 (493 bytes on wire, 493 bytes captured)
     Arrival Time: Sep  6, 2005 16:15:52.660881000
     Time delta from previous packet: 0.026874000 seconds
     Time since reference or first frame: 19.031282000 seconds
     Frame Number: 43
     Packet Length: 493 bytes
     Capture Length: 493 bytes
     Protocols in frame: eth:ip:udp:sip
 Ethernet II, Src: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]), Dst: Cisco_[ORG_MAC]
(00:05:01:[ORG_MAC])
     Destination: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC])
     Source: Intel_[SER_MAC] (00:0e:0c:[SER_MAC])
     Type: IP (0x0800)
 Internet Protocol, Src: [SERSERSERSER] ([SERSERSERSER]), Dst: [DESTINATIONDESTINATION]
([DESTINATIONDESTINATION])
     Version: 4
     Header length: 20 bytes
     Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00)
         0001 00.. = Differentiated Services Codepoint: Unknown (0x04)
         .... ..0. = ECN-Capable Transport (ECT): 0
         .... ...0 = ECN-CE: 0
     Total Length: 479
     Identification: 0x10f7 (4343)
     Flags: 0x04 (Don't Fragment)
         0... = Reserved bit: Not set
         .1.. = Don't fragment: Set
         ..0. = More fragments: Not set
     Fragment offset: 0
     Time to live: 64
     Protocol: UDP (0x11)
     Header checksum: 0x3286 [correct]
     Source: [SERSERSERSER] ([SERSERSERSER])
     Destination: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION])
 User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
     Source port: 5060 (5060)
     Destination port: 5060 (5060)
     Length: 459
     Checksum: 0xf75d [incorrect, should be 0x9fb6]
 Session Initiation Protocol
     Request-Line: BYE sip:5551234567@[DESTINATIONDESTINATION]:5060 SIP/2.0
         Method: BYE
         Resent Packet: False
     Message Header
         Record-Route: <sip:[SERSERSERSER];ftag=1126048899;lr=on>
         Via: SIP/2.0/UDP [SERSERSERSER];branch=z9hG4bKe358.270dac87.0
         Via: SIP/2.0/UDP [ORIGINORIGIN]:5060
         To: 15551234567
<sip:15551234567@[SERSERSERSER]:5060>;tag=3335037343-448857
             SIP Display info: 15551234567 
             SIP to address: sip:15551234567@[SERSERSERSER]:5060
             SIP tag: 3335037343-448857
         From: 15559876543 <sip:15559876543@[ORIGINORIGIN]:5060>;tag=1126048899
             SIP Display info: 15559876543 
             SIP from address: sip:15559876543@[ORIGINORIGIN]:5060
             SIP tag: 1126048899
         Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN]
         CSeq: 2 BYE
         Max-Forwards: 16
         Content-Length: 0

 Frame 44 (388 bytes on wire, 388 bytes captured)
     Arrival Time: Sep  6, 2005 16:15:52.733945000
     Time delta from previous packet: 0.073064000 seconds
     Time since reference or first frame: 19.104346000 seconds
     Frame Number: 44
     Packet Length: 388 bytes
     Capture Length: 388 bytes
     Protocols in frame: eth:ip:udp:sip
 Ethernet II, Src: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]), Dst: Intel_[SER_MAC]
(00:0e:0c:[SER_MAC])
     Destination: Intel_[SER_MAC] (00:0e:0c:[SER_MAC])
     Source: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC])
     Type: IP (0x0800)
 Internet Protocol, Src: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION]), Dst:
[SERSERSERSER] ([SERSERSERSER])
     Version: 4
     Header length: 20 bytes
     Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
         0000 00.. = Differentiated Services Codepoint: Default (0x00)
         .... ..0. = ECN-Capable Transport (ECT): 0
         .... ...0 = ECN-CE: 0
     Total Length: 374
     Identification: 0x98e8 (39144)
     Flags: 0x04 (Don't Fragment)
         0... = Reserved bit: Not set
         .1.. = Don't fragment: Set
         ..0. = More fragments: Not set
     Fragment offset: 0
     Time to live: 238
     Protocol: UDP (0x11)
     Header checksum: 0xfd0c [correct]
     Source: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION])
     Destination: [SERSERSERSER] ([SERSERSERSER])
 User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
     Source port: 5060 (5060)
     Destination port: 5060 (5060)
     Length: 354
     Checksum: 0x275e [correct]
 Session Initiation Protocol
     Status-Line: SIP/2.0 200 OK
         Status-Code: 200
         Resent Packet: False
     Message Header
         Via: SIP/2.0/UDP [SERSERSERSER];branch=z9hG4bKe358.270dac87.0
         Via: SIP/2.0/UDP [ORIGINORIGIN]:5060
         From: 15559876543 <sip:15559876543@[ORIGINORIGIN]:5060>;tag=1126048899
             SIP Display info: 15559876543 
             SIP from address: sip:15559876543@[ORIGINORIGIN]:5060
             SIP tag: 1126048899
         To: 15551234567
<sip:15551234567@[SERSERSERSER]:5060>;tag=3335037343-448857
             SIP Display info: 15551234567 
             SIP to address: sip:15551234567@[SERSERSERSER]:5060
             SIP tag: 3335037343-448857
         Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN]
         CSeq: 2 BYE
         Content-Length: 0

 Frame 45 (328 bytes on wire, 328 bytes captured)
     Arrival Time: Sep  6, 2005 16:15:52.744301000
     Time delta from previous packet: 0.010356000 seconds
     Time since reference or first frame: 19.114702000 seconds
     Frame Number: 45
     Packet Length: 328 bytes
     Capture Length: 328 bytes
     Protocols in frame: eth:ip:udp:sip
 Ethernet II, Src: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]), Dst: Cisco_[ORG_MAC]
(00:05:01:[ORG_MAC])
     Destination: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC])
     Source: Intel_[SER_MAC] (00:0e:0c:[SER_MAC])
     Type: IP (0x0800)
 Internet Protocol, Src: [SERSERSERSER] ([SERSERSERSER]), Dst: [ORIGINORIGIN]
([ORIGINORIGIN])
     Version: 4
     Header length: 20 bytes
     Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00)
         0001 00.. = Differentiated Services Codepoint: Unknown (0x04)
         .... ..0. = ECN-Capable Transport (ECT): 0
         .... ...0 = ECN-CE: 0
     Total Length: 314
     Identification: 0x10f8 (4344)
     Flags: 0x04 (Don't Fragment)
         0... = Reserved bit: Not set
         .1.. = Don't fragment: Set
         ..0. = More fragments: Not set
     Fragment offset: 0
     Time to live: 64
     Protocol: UDP (0x11)
     Header checksum: 0xc30a [correct]
     Source: [SERSERSERSER] ([SERSERSERSER])
     Destination: [ORIGINORIGIN] ([ORIGINORIGIN])
 User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
     Source port: 5060 (5060)
     Destination port: 5060 (5060)
     Length: 294
     Checksum: 0x66d8 [incorrect, should be 0x4fb2]
 Session Initiation Protocol
     Status-Line: SIP/2.0 200 OK
         Status-Code: 200
         Resent Packet: False
     Message Header
         Via: SIP/2.0/UDP [ORIGINORIGIN]:5060
         From: 15559876543 <sip:15559876543@[ORIGINORIGIN]:5060>;tag=1126048899
             SIP Display info: 15559876543 
             SIP from address: sip:15559876543@[ORIGINORIGIN]:5060
             SIP tag: 1126048899
         To: 15551234567
<sip:15551234567@[SERSERSERSER]:5060>;tag=3335037343-448857
             SIP Display info: 15551234567 
             SIP to address: sip:15551234567@[SERSERSERSER]:5060
             SIP tag: 3335037343-448857
         Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN]
         CSeq: 2 BYE
         Content-Length: 0

 ------------------------------------------------------------------------

 _______________________________________________
 Serusers mailing list
 serusers(a)lists.iptel.org
 http://lists.iptel.org/mailman/listinfo/serusers 