did you sniff at the PC running ser? Sometmes the checksum is calculated
in the NIC, thus tcpdump can't see them.
klaus
Jose Delancy wrote:
Though conversations do to work, when I look at my raw
packets I see that I have an incorrect checksum on most packets originating from my SER
box. I'm guessing there's some kind of ACK or loose_route issue here, but I am
unable to determine what it is.
I have attached the dump. Please advise.
------------------------------------------------------------------------
Frame 3 (667 bytes on wire, 667 bytes captured)
Arrival Time: Sep 6, 2005 16:15:38.119886000
Time delta from previous packet: 4.481842000 seconds
Time since reference or first frame: 4.490287000 seconds
Frame Number: 3
Packet Length: 667 bytes
Capture Length: 667 bytes
Protocols in frame: eth:ip:udp:sip:sdp
Ethernet II, Src: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]), Dst: Intel_[SER_MAC]
(00:0e:0c:[SER_MAC])
Destination: Intel_[SER_MAC] (00:0e:0c:[SER_MAC])
Source: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC])
Type: IP (0x0800)
Internet Protocol, Src: [ORIGINORIGIN] ([ORIGINORIGIN]), Dst: [SERSERSERSER]
([SERSERSERSER])
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 653
Identification: 0x4e77 (20087)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 236
Protocol: UDP (0x11)
Header checksum: 0xd847 [correct]
Source: [ORIGINORIGIN] ([ORIGINORIGIN])
Destination: [SERSERSERSER] ([SERSERSERSER])
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 633
Checksum: 0xe490 [correct]
Session Initiation Protocol
Request-Line: INVITE sip:15551234567@[SERSERSERSER]:5060 SIP/2.0
Method: INVITE
Resent Packet: False
Message Header
Via: SIP/2.0/UDP [ORIGINORIGIN]:5060
To: 15551234567<sip:15551234567@[SERSERSERSER]:5060>
SIP Display info: 15551234567
SIP to address: sip:15551234567@[SERSERSERSER]:5060
From: 15559876543<sip:15559876543@[ORIGINORIGIN]:5060>;tag=1126048899
SIP Display info: 15559876543
SIP from address: sip:15559876543@[ORIGINORIGIN]:5060
SIP tag: 1126048899
Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN]
CSeq: 1 INVITE
Max-Forwards: 70
Subject: ORIGIN
Contact: <sip:15559876543@[ORIGINORIGIN]:5060>
Contact Binding: <sip:15559876543@[ORIGINORIGIN]:5060>
URI: <sip:15559876543@[ORIGINORIGIN]:5060>
SIP contact address: sip:15559876543@[ORIGINORIGIN]:5060
Content-Type: application/sdp
Content-Length: 212
Message body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): username 3335037699 0 IN IP4 [CREATORCREATOR]
Owner Username: username
Session ID: 3335037699
Session Version: 0
Owner Network Type: IN
Owner Address Type: IP4
Owner Address: [CREATORCREATOR]
Session Name (s): username
Connection Information (c): IN IP4 [CREATORCREATOR]
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: [CREATORCREATOR]
Time Description, active time (t): 3335037699 0
Session Start Time: 3335037699
Session Stop Time: 0
Media Description, name and address (m): audio 46786 RTP/AVP 18
Media Type: audio
Media Port: 46786
Media Proto: RTP/AVP
Media Format: ITU-T G.729
Media Attribute (a): rtpmap:18 G729/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 18 G729/8000
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 101 telephone-event/8000
Media Attribute (a): sendrecv
Frame 4 (593 bytes on wire, 593 bytes captured)
Arrival Time: Sep 6, 2005 16:15:38.319683000
Time delta from previous packet: 0.199797000 seconds
Time since reference or first frame: 4.690084000 seconds
Frame Number: 4
Packet Length: 593 bytes
Capture Length: 593 bytes
Protocols in frame: eth:ip:udp:sip
Ethernet II, Src: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]), Dst: Cisco_[ORG_MAC]
(00:05:01:[ORG_MAC])
Destination: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC])
Source: Intel_[SER_MAC] (00:0e:0c:[SER_MAC])
Type: IP (0x0800)
Internet Protocol, Src: [SERSERSERSER] ([SERSERSERSER]), Dst: [ORIGINORIGIN]
([ORIGINORIGIN])
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00)
0001 00.. = Differentiated Services Codepoint: Unknown (0x04)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 579
Identification: 0x10e4 (4324)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xc215 [correct]
Source: [SERSERSERSER] ([SERSERSERSER])
Destination: [ORIGINORIGIN] ([ORIGINORIGIN])
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 559
Checksum: 0x67e1 [incorrect, should be 0x1814]
Session Initiation Protocol
Status-Line: SIP/2.0 100 trying -- your call is important to us
Status-Code: 100
Resent Packet: False
Message Header
Via: SIP/2.0/UDP [ORIGINORIGIN]:5060
To: 15551234567<sip:15551234567@[SERSERSERSER]:5060>
SIP Display info: 15551234567
SIP to address: sip:15551234567@[SERSERSERSER]:5060
From: 15559876543<sip:15559876543@[ORIGINORIGIN]:5060>;tag=1126048899
SIP Display info: 15559876543
SIP from address: sip:15559876543@[ORIGINORIGIN]:5060
SIP tag: 1126048899
Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN]
CSeq: 1 INVITE
Server: Sip EXpress router (0.9.3 (i386/linux))
Content-Length: 0
Warning: 392 [SERSERSERSER]:5060 "Noisy feedback tells: pid=4089
req_src_ip=[ORIGINORIGIN] req_src_port=5060 in_uri=sip:15551234567@[SERSERSERSER]:5060
out_uri=sip:5551234567@[DESTINATIONDESTINATION]:5060 via_cnt==1"
Frame 5 (784 bytes on wire, 784 bytes captured)
Arrival Time: Sep 6, 2005 16:15:38.319795000
Time delta from previous packet: 0.000112000 seconds
Time since reference or first frame: 4.690196000 seconds
Frame Number: 5
Packet Length: 784 bytes
Capture Length: 784 bytes
Protocols in frame: eth:ip:udp:sip:sdp
Ethernet II, Src: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]), Dst: Cisco_[ORG_MAC]
(00:05:01:[ORG_MAC])
Destination: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC])
Source: Intel_[SER_MAC] (00:0e:0c:[SER_MAC])
Type: IP (0x0800)
Internet Protocol, Src: [SERSERSERSER] ([SERSERSERSER]), Dst: [DESTINATIONDESTINATION]
([DESTINATIONDESTINATION])
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00)
0001 00.. = Differentiated Services Codepoint: Unknown (0x04)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 770
Identification: 0x10e5 (4325)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0x3175 [correct]
Source: [SERSERSERSER] ([SERSERSERSER])
Destination: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION])
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 750
Checksum: 0xf880 [incorrect, should be 0xcf39]
Session Initiation Protocol
Request-Line: INVITE sip:5551234567@[DESTINATIONDESTINATION]:5060 SIP/2.0
Method: INVITE
Resent Packet: False
Message Header
Record-Route: <sip:[SERSERSERSER];ftag=1126048899;lr=on>
Via: SIP/2.0/UDP [SERSERSERSER];branch=z9hG4bK1458.76e37293.0
Via: SIP/2.0/UDP [ORIGINORIGIN]:5060
To: 15551234567<sip:15551234567@[SERSERSERSER]:5060>
SIP Display info: 15551234567
SIP to address: sip:15551234567@[SERSERSERSER]:5060
From: 15559876543<sip:15559876543@[ORIGINORIGIN]:5060>;tag=1126048899
SIP Display info: 15559876543
SIP from address: sip:15559876543@[ORIGINORIGIN]:5060
SIP tag: 1126048899
Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN]
CSeq: 1 INVITE
Max-Forwards: 16
Subject: ORIGIN
Contact: <sip:15559876543@[ORIGINORIGIN]:5060>
Contact Binding: <sip:15559876543@[ORIGINORIGIN]:5060>
URI: <sip:15559876543@[ORIGINORIGIN]:5060>
SIP contact address: sip:15559876543@[ORIGINORIGIN]:5060
Content-Type: application/sdp
Content-Length: 212
Message body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): username 3335037699 0 IN IP4 [CREATORCREATOR]
Owner Username: username
Session ID: 3335037699
Session Version: 0
Owner Network Type: IN
Owner Address Type: IP4
Owner Address: [CREATORCREATOR]
Session Name (s): username
Connection Information (c): IN IP4 [CREATORCREATOR]
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: [CREATORCREATOR]
Time Description, active time (t): 3335037699 0
Session Start Time: 3335037699
Session Stop Time: 0
Media Description, name and address (m): audio 46786 RTP/AVP 18
Media Type: audio
Media Port: 46786
Media Proto: RTP/AVP
Media Format: ITU-T G.729
Media Attribute (a): rtpmap:18 G729/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 18 G729/8000
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 101 telephone-event/8000
Media Attribute (a): sendrecv
Frame 6 (373 bytes on wire, 373 bytes captured)
Arrival Time: Sep 6, 2005 16:15:38.393215000
Time delta from previous packet: 0.073420000 seconds
Time since reference or first frame: 4.763616000 seconds
Frame Number: 6
Packet Length: 373 bytes
Capture Length: 373 bytes
Protocols in frame: eth:ip:udp:sip
Ethernet II, Src: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]), Dst: Intel_[SER_MAC]
(00:0e:0c:[SER_MAC])
Destination: Intel_[SER_MAC] (00:0e:0c:[SER_MAC])
Source: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC])
Type: IP (0x0800)
Internet Protocol, Src: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION]), Dst:
[SERSERSERSER] ([SERSERSERSER])
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 359
Identification: 0x98de (39134)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 238
Protocol: UDP (0x11)
Header checksum: 0xfd25 [correct]
Source: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION])
Destination: [SERSERSERSER] ([SERSERSERSER])
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 339
Checksum: 0xef96 [correct]
Session Initiation Protocol
Status-Line: SIP/2.0 100 Trying
Status-Code: 100
Resent Packet: False
Message Header
Via: SIP/2.0/UDP [SERSERSERSER];branch=z9hG4bK1458.76e37293.0
Via: SIP/2.0/UDP [ORIGINORIGIN]:5060
From: 15559876543 <sip:15559876543@[ORIGINORIGIN]:5060>;tag=1126048899
SIP Display info: 15559876543
SIP from address: sip:15559876543@[ORIGINORIGIN]:5060
SIP tag: 1126048899
To: 15551234567 <sip:15551234567@[SERSERSERSER]:5060>
SIP Display info: 15551234567
SIP to address: sip:15551234567@[SERSERSERSER]:5060
Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN]
CSeq: 1 INVITE
Content-Length: 0
Frame 15 (684 bytes on wire, 684 bytes captured)
Arrival Time: Sep 6, 2005 16:15:43.510711000
Time delta from previous packet: 0.682532000 seconds
Time since reference or first frame: 9.881112000 seconds
Frame Number: 15
Packet Length: 684 bytes
Capture Length: 684 bytes
Protocols in frame: eth:ip:udp:sip:sdp
Ethernet II, Src: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]), Dst: Intel_[SER_MAC]
(00:0e:0c:[SER_MAC])
Destination: Intel_[SER_MAC] (00:0e:0c:[SER_MAC])
Source: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC])
Type: IP (0x0800)
Internet Protocol, Src: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION]), Dst:
[SERSERSERSER] ([SERSERSERSER])
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 670
Identification: 0x98e1 (39137)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 238
Protocol: UDP (0x11)
Header checksum: 0xfbeb [correct]
Source: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION])
Destination: [SERSERSERSER] ([SERSERSERSER])
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 650
Checksum: 0x2821 [correct]
Session Initiation Protocol
Status-Line: SIP/2.0 200 OK
Status-Code: 200
Resent Packet: False
Message Header
To: 15551234567
<sip:15551234567@[SERSERSERSER]:5060>;tag=3335037343-448857
SIP Display info: 15551234567
SIP to address: sip:15551234567@[SERSERSERSER]:5060
SIP tag: 3335037343-448857
From: 15559876543 <sip:15559876543@[ORIGINORIGIN]:5060>;tag=1126048899
SIP Display info: 15559876543
SIP from address: sip:15559876543@[ORIGINORIGIN]:5060
SIP tag: 1126048899
Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN]
CSeq: 1 INVITE
Contact: sip:5551234567@[DESTINATIONDESTINATION]:5060
Contact Binding: sip:5551234567@[DESTINATIONDESTINATION]:5060
URI: sip:5551234567@[DESTINATIONDESTINATION]:5060\r
SIP contact address: sip:5551234567@[DESTINATIONDESTINATION]:5060\r
Content-Type: application/sdp
Via: SIP/2.0/UDP [SERSERSERSER];branch=z9hG4bK1458.76e37293.0
Via: SIP/2.0/UDP [ORIGINORIGIN]:5060
Record-Route: <sip:[SERSERSERSER];ftag=1126048899;lr=on>
Content-Length: 160
Message body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): version 1234 6726 IN IP4 [CREATOR2CREATOR2]
Owner Username: version
Session ID: 1234
Session Version: 6726
Owner Network Type: IN
Owner Address Type: IP4
Owner Address: [CREATOR2CREATOR2]
Session Name (s): sip call
Connection Information (c): IN IP4 [CREATOR2CREATOR2]
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: [CREATOR2CREATOR2]
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Media Description, name and address (m): audio 17542 RTP/AVP 18
Media Type: audio
Media Port: 17542
Media Proto: RTP/AVP
Media Format: ITU-T G.729
Media Attribute (a): rtpmap:18 G729/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 18 G729/8000
Media Attribute (a): fmtp:18 annexb=no
Media Attribute Fieldname: fmtp
Media Attribute Value: 18 annexb=no
Frame 16 (624 bytes on wire, 624 bytes captured)
Arrival Time: Sep 6, 2005 16:15:43.517182000
Time delta from previous packet: 0.006471000 seconds
Time since reference or first frame: 9.887583000 seconds
Frame Number: 16
Packet Length: 624 bytes
Capture Length: 624 bytes
Protocols in frame: eth:ip:udp:sip:sdp
Ethernet II, Src: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]), Dst: Cisco_[ORG_MAC]
(00:05:01:[ORG_MAC])
Destination: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC])
Source: Intel_[SER_MAC] (00:0e:0c:[SER_MAC])
Type: IP (0x0800)
Internet Protocol, Src: [SERSERSERSER] ([SERSERSERSER]), Dst: [ORIGINORIGIN]
([ORIGINORIGIN])
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00)
0001 00.. = Differentiated Services Codepoint: Unknown (0x04)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 610
Identification: 0x10ea (4330)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xc1f0 [correct]
Source: [SERSERSERSER] ([SERSERSERSER])
Destination: [ORIGINORIGIN] ([ORIGINORIGIN])
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 590
Checksum: 0x6800 [incorrect, should be 0x61da]
Session Initiation Protocol
Status-Line: SIP/2.0 200 OK
Status-Code: 200
Resent Packet: False
Message Header
To: 15551234567
<sip:15551234567@[SERSERSERSER]:5060>;tag=3335037343-448857
SIP Display info: 15551234567
SIP to address: sip:15551234567@[SERSERSERSER]:5060
SIP tag: 3335037343-448857
From: 15559876543 <sip:15559876543@[ORIGINORIGIN]:5060>;tag=1126048899
SIP Display info: 15559876543
SIP from address: sip:15559876543@[ORIGINORIGIN]:5060
SIP tag: 1126048899
Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN]
CSeq: 1 INVITE
Contact: sip:5551234567@[DESTINATIONDESTINATION]:5060
Contact Binding: sip:5551234567@[DESTINATIONDESTINATION]:5060
URI: sip:5551234567@[DESTINATIONDESTINATION]:5060\r
SIP contact address: sip:5551234567@[DESTINATIONDESTINATION]:5060\r
Content-Type: application/sdp
Via: SIP/2.0/UDP [ORIGINORIGIN]:5060
Record-Route: <sip:[SERSERSERSER];ftag=1126048899;lr=on>
Content-Length: 160
Message body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): version 1234 6726 IN IP4 [CREATOR2CREATOR2]
Owner Username: version
Session ID: 1234
Session Version: 6726
Owner Network Type: IN
Owner Address Type: IP4
Owner Address: [CREATOR2CREATOR2]
Session Name (s): sip call
Connection Information (c): IN IP4 [CREATOR2CREATOR2]
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: [CREATOR2CREATOR2]
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Media Description, name and address (m): audio 17542 RTP/AVP 18
Media Type: audio
Media Port: 17542
Media Proto: RTP/AVP
Media Format: ITU-T G.729
Media Attribute (a): rtpmap:18 G729/8000
Media Attribute Fieldname: rtpmap
Media Attribute Value: 18 G729/8000
Media Attribute (a): fmtp:18 annexb=no
Media Attribute Fieldname: fmtp
Media Attribute Value: 18 annexb=no
Frame 17 (365 bytes on wire, 365 bytes captured)
Arrival Time: Sep 6, 2005 16:15:43.595159000
Time delta from previous packet: 0.077977000 seconds
Time since reference or first frame: 9.965560000 seconds
Frame Number: 17
Packet Length: 365 bytes
Capture Length: 365 bytes
Protocols in frame: eth:ip:udp:sip
Ethernet II, Src: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]), Dst: Intel_[SER_MAC]
(00:0e:0c:[SER_MAC])
Destination: Intel_[SER_MAC] (00:0e:0c:[SER_MAC])
Source: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC])
Type: IP (0x0800)
Internet Protocol, Src: [ORIGINORIGIN] ([ORIGINORIGIN]), Dst: [SERSERSERSER]
([SERSERSERSER])
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 351
Identification: 0x4e79 (20089)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 236
Protocol: UDP (0x11)
Header checksum: 0xd973 [correct]
Source: [ORIGINORIGIN] ([ORIGINORIGIN])
Destination: [SERSERSERSER] ([SERSERSERSER])
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 331
Checksum: 0xa524 [correct]
Session Initiation Protocol
Request-Line: ACK sip:[SERSERSERSER];lr=on SIP/2.0
Method: ACK
Resent Packet: False
Message Header
Via: SIP/2.0/UDP [ORIGINORIGIN]:5060
To: 15551234567
<sip:15551234567@[SERSERSERSER]:5060>;tag=3335037343-448857
SIP Display info: 15551234567
SIP to address: sip:15551234567@[SERSERSERSER]:5060
SIP tag: 3335037343-448857
From: 15559876543 <sip:15559876543@[ORIGINORIGIN]:5060>;tag=1126048899
SIP Display info: 15559876543
SIP from address: sip:15559876543@[ORIGINORIGIN]:5060
SIP tag: 1126048899
Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN]
CSeq: 1 ACK
Max-Forwards: 70
Content-Length: 0
Frame 18 (462 bytes on wire, 462 bytes captured)
Arrival Time: Sep 6, 2005 16:15:43.616640000
Time delta from previous packet: 0.021481000 seconds
Time since reference or first frame: 9.987041000 seconds
Frame Number: 18
Packet Length: 462 bytes
Capture Length: 462 bytes
Protocols in frame: eth:ip:udp:sip
Ethernet II, Src: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]), Dst: Cisco_[ORG_MAC]
(00:05:01:[ORG_MAC])
Destination: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC])
Source: Intel_[SER_MAC] (00:0e:0c:[SER_MAC])
Type: IP (0x0800)
Internet Protocol, Src: [SERSERSERSER] ([SERSERSERSER]), Dst: [DESTINATIONDESTINATION]
([DESTINATIONDESTINATION])
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00)
0001 00.. = Differentiated Services Codepoint: Unknown (0x04)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 448
Identification: 0x10eb (4331)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0x32b1 [correct]
Source: [SERSERSERSER] ([SERSERSERSER])
Destination: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION])
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 428
Checksum: 0xf73e [incorrect, should be 0x4f55]
Session Initiation Protocol
Request-Line: ACK sip:[DESTINATIONDESTINATION];lr=on SIP/2.0
Method: ACK
Resent Packet: False
Message Header
Record-Route: <sip:[SERSERSERSER];ftag=1126048899;lr=on>
Via: SIP/2.0/UDP [SERSERSERSER];branch=0
Via: SIP/2.0/UDP [ORIGINORIGIN]:5060
To: 15551234567
<sip:15551234567@[SERSERSERSER]:5060>;tag=3335037343-448857
SIP Display info: 15551234567
SIP to address: sip:15551234567@[SERSERSERSER]:5060
SIP tag: 3335037343-448857
From: 15559876543 <sip:15559876543@[ORIGINORIGIN]:5060>;tag=1126048899
SIP Display info: 15559876543
SIP from address: sip:15559876543@[ORIGINORIGIN]:5060
SIP tag: 1126048899
Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN]
CSeq: 1 ACK
Max-Forwards: 16
Content-Length: 0
Frame 42 (376 bytes on wire, 376 bytes captured)
Arrival Time: Sep 6, 2005 16:15:52.634007000
Time delta from previous packet: 0.067331000 seconds
Time since reference or first frame: 19.004408000 seconds
Frame Number: 42
Packet Length: 376 bytes
Capture Length: 376 bytes
Protocols in frame: eth:ip:udp:sip
Ethernet II, Src: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]), Dst: Intel_[SER_MAC]
(00:0e:0c:[SER_MAC])
Destination: Intel_[SER_MAC] (00:0e:0c:[SER_MAC])
Source: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC])
Type: IP (0x0800)
Internet Protocol, Src: [ORIGINORIGIN] ([ORIGINORIGIN]), Dst: [SERSERSERSER]
([SERSERSERSER])
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 362
Identification: 0x4e7f (20095)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 236
Protocol: UDP (0x11)
Header checksum: 0xd962 [correct]
Source: [ORIGINORIGIN] ([ORIGINORIGIN])
Destination: [SERSERSERSER] ([SERSERSERSER])
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 342
Checksum: 0x58f3 [correct]
Session Initiation Protocol
Request-Line: BYE sip:15551234567@[SERSERSERSER]:5060 SIP/2.0
Method: BYE
Resent Packet: False
Message Header
Via: SIP/2.0/UDP [ORIGINORIGIN]:5060
To: 15551234567
<sip:15551234567@[SERSERSERSER]:5060>;tag=3335037343-448857
SIP Display info: 15551234567
SIP to address: sip:15551234567@[SERSERSERSER]:5060
SIP tag: 3335037343-448857
From: 15559876543 <sip:15559876543@[ORIGINORIGIN]:5060>;tag=1126048899
SIP Display info: 15559876543
SIP from address: sip:15559876543@[ORIGINORIGIN]:5060
SIP tag: 1126048899
Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN]
CSeq: 2 BYE
Max-Forwards: 70
Content-Length: 0
Frame 43 (493 bytes on wire, 493 bytes captured)
Arrival Time: Sep 6, 2005 16:15:52.660881000
Time delta from previous packet: 0.026874000 seconds
Time since reference or first frame: 19.031282000 seconds
Frame Number: 43
Packet Length: 493 bytes
Capture Length: 493 bytes
Protocols in frame: eth:ip:udp:sip
Ethernet II, Src: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]), Dst: Cisco_[ORG_MAC]
(00:05:01:[ORG_MAC])
Destination: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC])
Source: Intel_[SER_MAC] (00:0e:0c:[SER_MAC])
Type: IP (0x0800)
Internet Protocol, Src: [SERSERSERSER] ([SERSERSERSER]), Dst: [DESTINATIONDESTINATION]
([DESTINATIONDESTINATION])
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00)
0001 00.. = Differentiated Services Codepoint: Unknown (0x04)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 479
Identification: 0x10f7 (4343)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0x3286 [correct]
Source: [SERSERSERSER] ([SERSERSERSER])
Destination: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION])
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 459
Checksum: 0xf75d [incorrect, should be 0x9fb6]
Session Initiation Protocol
Request-Line: BYE sip:5551234567@[DESTINATIONDESTINATION]:5060 SIP/2.0
Method: BYE
Resent Packet: False
Message Header
Record-Route: <sip:[SERSERSERSER];ftag=1126048899;lr=on>
Via: SIP/2.0/UDP [SERSERSERSER];branch=z9hG4bKe358.270dac87.0
Via: SIP/2.0/UDP [ORIGINORIGIN]:5060
To: 15551234567
<sip:15551234567@[SERSERSERSER]:5060>;tag=3335037343-448857
SIP Display info: 15551234567
SIP to address: sip:15551234567@[SERSERSERSER]:5060
SIP tag: 3335037343-448857
From: 15559876543 <sip:15559876543@[ORIGINORIGIN]:5060>;tag=1126048899
SIP Display info: 15559876543
SIP from address: sip:15559876543@[ORIGINORIGIN]:5060
SIP tag: 1126048899
Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN]
CSeq: 2 BYE
Max-Forwards: 16
Content-Length: 0
Frame 44 (388 bytes on wire, 388 bytes captured)
Arrival Time: Sep 6, 2005 16:15:52.733945000
Time delta from previous packet: 0.073064000 seconds
Time since reference or first frame: 19.104346000 seconds
Frame Number: 44
Packet Length: 388 bytes
Capture Length: 388 bytes
Protocols in frame: eth:ip:udp:sip
Ethernet II, Src: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC]), Dst: Intel_[SER_MAC]
(00:0e:0c:[SER_MAC])
Destination: Intel_[SER_MAC] (00:0e:0c:[SER_MAC])
Source: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC])
Type: IP (0x0800)
Internet Protocol, Src: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION]), Dst:
[SERSERSERSER] ([SERSERSERSER])
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 374
Identification: 0x98e8 (39144)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 238
Protocol: UDP (0x11)
Header checksum: 0xfd0c [correct]
Source: [DESTINATIONDESTINATION] ([DESTINATIONDESTINATION])
Destination: [SERSERSERSER] ([SERSERSERSER])
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 354
Checksum: 0x275e [correct]
Session Initiation Protocol
Status-Line: SIP/2.0 200 OK
Status-Code: 200
Resent Packet: False
Message Header
Via: SIP/2.0/UDP [SERSERSERSER];branch=z9hG4bKe358.270dac87.0
Via: SIP/2.0/UDP [ORIGINORIGIN]:5060
From: 15559876543 <sip:15559876543@[ORIGINORIGIN]:5060>;tag=1126048899
SIP Display info: 15559876543
SIP from address: sip:15559876543@[ORIGINORIGIN]:5060
SIP tag: 1126048899
To: 15551234567
<sip:15551234567@[SERSERSERSER]:5060>;tag=3335037343-448857
SIP Display info: 15551234567
SIP to address: sip:15551234567@[SERSERSERSER]:5060
SIP tag: 3335037343-448857
Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN]
CSeq: 2 BYE
Content-Length: 0
Frame 45 (328 bytes on wire, 328 bytes captured)
Arrival Time: Sep 6, 2005 16:15:52.744301000
Time delta from previous packet: 0.010356000 seconds
Time since reference or first frame: 19.114702000 seconds
Frame Number: 45
Packet Length: 328 bytes
Capture Length: 328 bytes
Protocols in frame: eth:ip:udp:sip
Ethernet II, Src: Intel_[SER_MAC] (00:0e:0c:[SER_MAC]), Dst: Cisco_[ORG_MAC]
(00:05:01:[ORG_MAC])
Destination: Cisco_[ORG_MAC] (00:05:01:[ORG_MAC])
Source: Intel_[SER_MAC] (00:0e:0c:[SER_MAC])
Type: IP (0x0800)
Internet Protocol, Src: [SERSERSERSER] ([SERSERSERSER]), Dst: [ORIGINORIGIN]
([ORIGINORIGIN])
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00)
0001 00.. = Differentiated Services Codepoint: Unknown (0x04)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 314
Identification: 0x10f8 (4344)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xc30a [correct]
Source: [SERSERSERSER] ([SERSERSERSER])
Destination: [ORIGINORIGIN] ([ORIGINORIGIN])
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Source port: 5060 (5060)
Destination port: 5060 (5060)
Length: 294
Checksum: 0x66d8 [incorrect, should be 0x4fb2]
Session Initiation Protocol
Status-Line: SIP/2.0 200 OK
Status-Code: 200
Resent Packet: False
Message Header
Via: SIP/2.0/UDP [ORIGINORIGIN]:5060
From: 15559876543 <sip:15559876543@[ORIGINORIGIN]:5060>;tag=1126048899
SIP Display info: 15559876543
SIP from address: sip:15559876543@[ORIGINORIGIN]:5060
SIP tag: 1126048899
To: 15551234567
<sip:15551234567@[SERSERSERSER]:5060>;tag=3335037343-448857
SIP Display info: 15551234567
SIP to address: sip:15551234567@[SERSERSERSER]:5060
SIP tag: 3335037343-448857
Call-ID: F9CE10731F2C11DA85380000004213C4@[ORIGINORIGIN]
CSeq: 2 BYE
Content-Length: 0
------------------------------------------------------------------------
_______________________________________________
Serusers mailing list
serusers(a)lists.iptel.org
http://lists.iptel.org/mailman/listinfo/serusers