Frame 164 (1125 bytes on wire, 1125 bytes captured) Arrival Time: May 28, 2004 16:04:37.077723000 Time delta from previous packet: 6.574665000 seconds Time since reference or first frame: 6.574665000 seconds Frame Number: 164 Packet Length: 1125 bytes Capture Length: 1125 bytes Ethernet II, Src: 00:d0:ba:80:34:cd, Dst: 00:09:6b:49:b6:7c Destination: 00:09:6b:49:b6:7c (Ibm_49:b6:7c) Source: 00:d0:ba:80:34:cd (Cisco_80:34:cd) Type: IP (0x0800) Internet Protocol, Src Addr: 192.168.65.10 (192.168.65.10), Dst Addr: 192.168.65.100 (192.168.65.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00) 0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 1111 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0xb36e (correct) Source: 192.168.65.10 (192.168.65.10) Destination: 192.168.65.100 (192.168.65.100) User Datagram Protocol, Src Port: 58555 (58555), Dst Port: 5060 (5060) Source port: 58555 (58555) Destination port: 5060 (5060) Length: 1091 Checksum: 0xd63f (correct) Session Initiation Protocol Request line: INVITE sip:1510@192.168.65.100:5060 SIP/2.0 Method: INVITE Message Header Via: SIP/2.0/UDP 192.168.65.10:5060 From: ;tag=50FAEE0-1A7A SIP from address: SIP tag: 50FAEE0-1A7A To: Date: Fri, 28 May 2004 20:04:37 GMT Call-ID: 146B3EB7-B01911D8-8AC38125-CAE2BCF0@192.168.65.10 Supported: timer,100rel Min-SE: 1800 Cisco-Guid: 342452799-2954432984-2327871781-3403857136 User-Agent: Cisco-SIPGateway/IOS-12.x Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO CSeq: 101 INVITE Max-Forwards: 6 Remote-Party-ID: ;party=calling;screen=yes;privacy=off Timestamp: 1085774677 Contact: Expires: 180 Allow-Events: telephone-event Content-Type: application/sdp Content-Length: 308 Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): CiscoSystemsSIP-GW-UserAgent 4728 848 IN IP4 192.168.65.10 Owner Username: CiscoSystemsSIP-GW-UserAgent Session ID: 4728 Session Version: 848 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 192.168.65.10 Session Name (s): SIP Call Connection Information (c): IN IP4 192.168.65.10 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 192.168.65.10 Time Description, active time (t): 0 0 Session Start Time: 0 Session Start Time: 0 Media Description, name and address (m): audio 16526 RTP/AVP 8 3 18 101 Media Type: audio Media Port: 16526 Media Proto: RTP/AVP Media Format: 8 Media Format: 3 Media Format: 18 Media Format: 101 Connection Information (c): IN IP4 192.168.65.10 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 192.168.65.10 Media Attribute (a): rtpmap:8 PCMA/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 8 PCMA/8000 Media Attribute (a): rtpmap:3 GSM/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 3 GSM/8000 Media Attribute (a): rtpmap:18 G729/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 18 G729/8000 Media Attribute (a): fmtp:18 annexb=yes Media Attribute Fieldname: fmtp Media Attribute Value: 18 annexb=yes Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-16 Frame 165 (410 bytes on wire, 410 bytes captured) Arrival Time: May 28, 2004 16:04:37.078131000 Time delta from previous packet: 0.000408000 seconds Time since reference or first frame: 6.575073000 seconds Frame Number: 165 Packet Length: 410 bytes Capture Length: 410 bytes Ethernet II, Src: 00:09:6b:49:b6:7c, Dst: 00:d0:ba:80:34:cd Destination: 00:d0:ba:80:34:cd (Cisco_80:34:cd) Source: 00:09:6b:49:b6:7c (Ibm_49:b6:7c) Type: IP (0x0800) Internet Protocol, Src Addr: 192.168.65.100 (192.168.65.100), Dst Addr: 192.168.65.10 (192.168.65.10) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 396 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3592 (correct) Source: 192.168.65.100 (192.168.65.100) Destination: 192.168.65.10 (192.168.65.10) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 376 Checksum: 0xc172 (correct) Session Initiation Protocol Status line: SIP/2.0 100 Trying Status-Code: 100 Message Header Via: SIP/2.0/UDP 192.168.65.10:5060 From: ;tag=50FAEE0-1A7A SIP from address: SIP tag: 50FAEE0-1A7A To: ;tag=as2479ceb2 SIP to address: SIP tag: as2479ceb2 Call-ID: 146B3EB7-B01911D8-8AC38125-CAE2BCF0@192.168.65.10 CSeq: 101 INVITE User-Agent: Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER Contact: Content-Length: 0 Frame 172 (790 bytes on wire, 790 bytes captured) Arrival Time: May 28, 2004 16:04:37.079226000 Time delta from previous packet: 0.001095000 seconds Time since reference or first frame: 6.576168000 seconds Frame Number: 172 Packet Length: 790 bytes Capture Length: 790 bytes Ethernet II, Src: 00:09:6b:49:b6:7c, Dst: 00:0b:5f:92:5c:e0 Destination: 00:0b:5f:92:5c:e0 (Cisco_92:5c:e0) Source: 00:09:6b:49:b6:7c (Ibm_49:b6:7c) Type: IP (0x0800) Internet Protocol, Src Addr: 192.168.65.100 (192.168.65.100), Dst Addr: 192.168.65.113 (192.168.65.113) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 776 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x33af (correct) Source: 192.168.65.100 (192.168.65.100) Destination: 192.168.65.113 (192.168.65.113) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 756 Checksum: 0x9fd9 (correct) Session Initiation Protocol Request line: INVITE sip:1510@192.168.65.113 SIP/2.0 Method: INVITE Message Header Via: SIP/2.0/UDP 192.168.65.100:5060;branch=z9hG4bK7634aadb From: "095292423" ;tag=as2a1eebe8 SIP from address: "095292423" SIP tag: as2a1eebe8 To: Contact: Call-ID: 26ad4a7a549d76365dfec3bc5fe32794@192.168.65.100 CSeq: 102 INVITE User-Agent: Asterisk PBX Date: Fri, 28 May 2004 20:04:37 GMT Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER Content-Type: application/sdp Content-Length: 268 Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): root 8793 8793 IN IP4 192.168.65.100 Owner Username: root Session ID: 8793 Session Version: 8793 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 192.168.65.100 Session Name (s): session Connection Information (c): IN IP4 192.168.65.100 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 192.168.65.100 Time Description, active time (t): 0 0 Session Start Time: 0 Session Start Time: 0 Media Description, name and address (m): audio 33046 RTP/AVP 3 2 8 101 Media Type: audio Media Port: 33046 Media Proto: RTP/AVP Media Format: 3 Media Format: 2 Media Format: 8 Media Format: 101 Media Attribute (a): rtpmap:3 GSM/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 3 GSM/8000 Media Attribute (a): rtpmap:2 G726-32/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 2 G726-32/8000 Media Attribute (a): rtpmap:8 PCMA/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 8 PCMA/8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-16 Media Attribute (a): silenceSupp:off - - - - Media Attribute Fieldname: silenceSupp Media Attribute Value: off - - - - Frame 175 (410 bytes on wire, 410 bytes captured) Arrival Time: May 28, 2004 16:04:37.371460000 Time delta from previous packet: 0.292234000 seconds Time since reference or first frame: 6.868402000 seconds Frame Number: 175 Packet Length: 410 bytes Capture Length: 410 bytes Ethernet II, Src: 00:0b:5f:92:5c:e0, Dst: 00:09:6b:49:b6:7c Destination: 00:09:6b:49:b6:7c (Ibm_49:b6:7c) Source: 00:0b:5f:92:5c:e0 (Cisco_92:5c:e0) Type: IP (0x0800) Internet Protocol, Src Addr: 192.168.65.113 (192.168.65.113), Dst Addr: 192.168.65.100 (192.168.65.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x60 (DSCP 0x18: Class Selector 3; ECN: 0x00) 0110 00.. = Differentiated Services Codepoint: Class Selector 3 (0x18) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 396 Identification: 0x7a54 (31316) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfa86 (correct) Source: 192.168.65.113 (192.168.65.113) Destination: 192.168.65.100 (192.168.65.100) User Datagram Protocol, Src Port: 50534 (50534), Dst Port: 5060 (5060) Source port: 50534 (50534) Destination port: 5060 (5060) Length: 376 Checksum: 0x0000 (none) Session Initiation Protocol Status line: SIP/2.0 100 Trying Status-Code: 100 Message Header Via: SIP/2.0/UDP 192.168.65.100:5060;branch=z9hG4bK7634aadb From: "095292423" ;tag=as2a1eebe8 SIP from address: "095292423" SIP tag: as2a1eebe8 To: Call-ID: 26ad4a7a549d76365dfec3bc5fe32794@192.168.65.100 Date: Fri, 28 May 2004 20:04:36 GMT CSeq: 102 INVITE Server: CSCO/6 Contact: Content-Length: 0 Frame 176 (449 bytes on wire, 449 bytes captured) Arrival Time: May 28, 2004 16:04:37.481142000 Time delta from previous packet: 0.109682000 seconds Time since reference or first frame: 6.978084000 seconds Frame Number: 176 Packet Length: 449 bytes Capture Length: 449 bytes Ethernet II, Src: 00:0b:5f:92:5c:e0, Dst: 00:09:6b:49:b6:7c Destination: 00:09:6b:49:b6:7c (Ibm_49:b6:7c) Source: 00:0b:5f:92:5c:e0 (Cisco_92:5c:e0) Type: IP (0x0800) Internet Protocol, Src Addr: 192.168.65.113 (192.168.65.113), Dst Addr: 192.168.65.100 (192.168.65.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x60 (DSCP 0x18: Class Selector 3; ECN: 0x00) 0110 00.. = Differentiated Services Codepoint: Class Selector 3 (0x18) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 435 Identification: 0x7a55 (31317) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfa5e (correct) Source: 192.168.65.113 (192.168.65.113) Destination: 192.168.65.100 (192.168.65.100) User Datagram Protocol, Src Port: 50534 (50534), Dst Port: 5060 (5060) Source port: 50534 (50534) Destination port: 5060 (5060) Length: 415 Checksum: 0x0000 (none) Session Initiation Protocol Status line: SIP/2.0 180 Ringing Status-Code: 180 Message Header Via: SIP/2.0/UDP 192.168.65.100:5060;branch=z9hG4bK7634aadb From: "095292423" ;tag=as2a1eebe8 SIP from address: "095292423" SIP tag: as2a1eebe8 To: ;tag=000b5f925ce0185e44890def-2491fa3c SIP to address: SIP tag: 000b5f925ce0185e44890def-2491fa3c Call-ID: 26ad4a7a549d76365dfec3bc5fe32794@192.168.65.100 Date: Fri, 28 May 2004 20:04:36 GMT CSeq: 102 INVITE Server: CSCO/6 Contact: Content-Length: 0 Frame 178 (411 bytes on wire, 411 bytes captured) Arrival Time: May 28, 2004 16:04:37.481466000 Time delta from previous packet: 0.000324000 seconds Time since reference or first frame: 6.978408000 seconds Frame Number: 178 Packet Length: 411 bytes Capture Length: 411 bytes Ethernet II, Src: 00:09:6b:49:b6:7c, Dst: 00:d0:ba:80:34:cd Destination: 00:d0:ba:80:34:cd (Cisco_80:34:cd) Source: 00:09:6b:49:b6:7c (Ibm_49:b6:7c) Type: IP (0x0800) Internet Protocol, Src Addr: 192.168.65.100 (192.168.65.100), Dst Addr: 192.168.65.10 (192.168.65.10) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 397 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3591 (correct) Source: 192.168.65.100 (192.168.65.100) Destination: 192.168.65.10 (192.168.65.10) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 377 Checksum: 0xefe8 (correct) Session Initiation Protocol Status line: SIP/2.0 180 Ringing Status-Code: 180 Message Header Via: SIP/2.0/UDP 192.168.65.10:5060 From: ;tag=50FAEE0-1A7A SIP from address: SIP tag: 50FAEE0-1A7A To: ;tag=as2479ceb2 SIP to address: SIP tag: as2479ceb2 Call-ID: 146B3EB7-B01911D8-8AC38125-CAE2BCF0@192.168.65.10 CSeq: 101 INVITE User-Agent: Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER Contact: Content-Length: 0 Frame 508 (678 bytes on wire, 678 bytes captured) Arrival Time: May 28, 2004 16:04:51.407199000 Time delta from previous packet: 13.925733000 seconds Time since reference or first frame: 20.904141000 seconds Frame Number: 508 Packet Length: 678 bytes Capture Length: 678 bytes Ethernet II, Src: 00:0b:5f:92:5c:e0, Dst: 00:09:6b:49:b6:7c Destination: 00:09:6b:49:b6:7c (Ibm_49:b6:7c) Source: 00:0b:5f:92:5c:e0 (Cisco_92:5c:e0) Type: IP (0x0800) Internet Protocol, Src Addr: 192.168.65.113 (192.168.65.113), Dst Addr: 192.168.65.100 (192.168.65.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x60 (DSCP 0x18: Class Selector 3; ECN: 0x00) 0110 00.. = Differentiated Services Codepoint: Class Selector 3 (0x18) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 664 Identification: 0x7a56 (31318) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xf978 (correct) Source: 192.168.65.113 (192.168.65.113) Destination: 192.168.65.100 (192.168.65.100) User Datagram Protocol, Src Port: 50534 (50534), Dst Port: 5060 (5060) Source port: 50534 (50534) Destination port: 5060 (5060) Length: 644 Checksum: 0x0000 (none) Session Initiation Protocol Status line: SIP/2.0 200 OK Status-Code: 200 Message Header Via: SIP/2.0/UDP 192.168.65.100:5060;branch=z9hG4bK7634aadb From: "095292423" ;tag=as2a1eebe8 SIP from address: "095292423" SIP tag: as2a1eebe8 To: ;tag=000b5f925ce0185e44890def-2491fa3c SIP to address: SIP tag: 000b5f925ce0185e44890def-2491fa3c Call-ID: 26ad4a7a549d76365dfec3bc5fe32794@192.168.65.100 Date: Fri, 28 May 2004 20:04:50 GMT CSeq: 102 INVITE Server: CSCO/6 Contact: Content-Type: application/sdp Content-Length: 201 Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): Cisco-SIPUA 11055 19805 IN IP4 192.168.65.113 Owner Username: Cisco-SIPUA Session ID: 11055 Session Version: 19805 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 192.168.65.113 Session Name (s): SIP Call Connection Information (c): IN IP4 192.168.65.113 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 192.168.65.113 Time Description, active time (t): 0 0 Session Start Time: 0 Session Start Time: 0 Media Description, name and address (m): audio 16412 RTP/AVP 8 101 Media Type: audio Media Port: 16412 Media Proto: RTP/AVP Media Format: 8 Media Format: 101 Media Attribute (a): rtpmap:8 PCMA/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 8 PCMA/8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-15 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-15 Frame 509 (440 bytes on wire, 440 bytes captured) Arrival Time: May 28, 2004 16:04:51.407456000 Time delta from previous packet: 0.000257000 seconds Time since reference or first frame: 20.904398000 seconds Frame Number: 509 Packet Length: 440 bytes Capture Length: 440 bytes Ethernet II, Src: 00:09:6b:49:b6:7c, Dst: 00:0b:5f:92:5c:e0 Destination: 00:0b:5f:92:5c:e0 (Cisco_92:5c:e0) Source: 00:09:6b:49:b6:7c (Ibm_49:b6:7c) Type: IP (0x0800) Internet Protocol, Src Addr: 192.168.65.100 (192.168.65.100), Dst Addr: 192.168.65.113 (192.168.65.113) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 426 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x350d (correct) Source: 192.168.65.100 (192.168.65.100) Destination: 192.168.65.113 (192.168.65.113) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 406 Checksum: 0xc3ac (correct) Session Initiation Protocol Request line: ACK sip:1510@192.168.65.113:5060 SIP/2.0 Method: ACK Message Header Via: SIP/2.0/UDP 192.168.65.100:5060;branch=z9hG4bK4b65f87d From: "095292423" ;tag=as2a1eebe8 SIP from address: "095292423" SIP tag: as2a1eebe8 To: ;tag=000b5f925ce0185e44890def-2491fa3c SIP to address: SIP tag: 000b5f925ce0185e44890def-2491fa3c Contact: Call-ID: 26ad4a7a549d76365dfec3bc5fe32794@192.168.65.100 CSeq: 102 ACK User-Agent: Asterisk PBX Content-Length: 0 Frame 512 (680 bytes on wire, 680 bytes captured) Arrival Time: May 28, 2004 16:04:51.407964000 Time delta from previous packet: 0.000508000 seconds Time since reference or first frame: 20.904906000 seconds Frame Number: 512 Packet Length: 680 bytes Capture Length: 680 bytes Ethernet II, Src: 00:09:6b:49:b6:7c, Dst: 00:d0:ba:80:34:cd Destination: 00:d0:ba:80:34:cd (Cisco_80:34:cd) Source: 00:09:6b:49:b6:7c (Ibm_49:b6:7c) Type: IP (0x0800) Internet Protocol, Src Addr: 192.168.65.100 (192.168.65.100), Dst Addr: 192.168.65.10 (192.168.65.10) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 666 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3484 (correct) Source: 192.168.65.100 (192.168.65.100) Destination: 192.168.65.10 (192.168.65.10) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 646 Checksum: 0xdfaa (correct) Session Initiation Protocol Status line: SIP/2.0 200 OK Status-Code: 200 Message Header Via: SIP/2.0/UDP 192.168.65.10:5060 From: ;tag=50FAEE0-1A7A SIP from address: SIP tag: 50FAEE0-1A7A To: ;tag=as2479ceb2 SIP to address: SIP tag: as2479ceb2 Call-ID: 146B3EB7-B01911D8-8AC38125-CAE2BCF0@192.168.65.10 CSeq: 101 INVITE User-Agent: Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER Contact: Content-Type: application/sdp Content-Length: 241 Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): root 8793 8793 IN IP4 192.168.65.100 Owner Username: root Session ID: 8793 Session Version: 8793 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 192.168.65.100 Session Name (s): session Connection Information (c): IN IP4 192.168.65.100 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 192.168.65.100 Time Description, active time (t): 0 0 Session Start Time: 0 Session Start Time: 0 Media Description, name and address (m): audio 30938 RTP/AVP 3 8 101 Media Type: audio Media Port: 30938 Media Proto: RTP/AVP Media Format: 3 Media Format: 8 Media Format: 101 Media Attribute (a): rtpmap:3 GSM/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 3 GSM/8000 Media Attribute (a): rtpmap:8 PCMA/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 8 PCMA/8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-16 Media Attribute (a): silenceSupp:off - - - - Media Attribute Fieldname: silenceSupp Media Attribute Value: off - - - - Frame 515 (794 bytes on wire, 794 bytes captured) Arrival Time: May 28, 2004 16:04:51.408335000 Time delta from previous packet: 0.000371000 seconds Time since reference or first frame: 20.905277000 seconds Frame Number: 515 Packet Length: 794 bytes Capture Length: 794 bytes Ethernet II, Src: 00:09:6b:49:b6:7c, Dst: 00:0b:5f:92:5c:e0 Destination: 00:0b:5f:92:5c:e0 (Cisco_92:5c:e0) Source: 00:09:6b:49:b6:7c (Ibm_49:b6:7c) Type: IP (0x0800) Internet Protocol, Src Addr: 192.168.65.100 (192.168.65.100), Dst Addr: 192.168.65.113 (192.168.65.113) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 780 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x33ab (correct) Source: 192.168.65.100 (192.168.65.100) Destination: 192.168.65.113 (192.168.65.113) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 760 Checksum: 0xf389 (correct) Session Initiation Protocol Request line: INVITE sip:1510@192.168.65.113:5060 SIP/2.0 Method: INVITE Message Header Via: SIP/2.0/UDP 192.168.65.100:5060;branch=z9hG4bK7e32004a From: "095292423" ;tag=as2a1eebe8 SIP from address: "095292423" SIP tag: as2a1eebe8 To: ;tag=000b5f925ce0185e44890def-2491fa3c SIP to address: SIP tag: 000b5f925ce0185e44890def-2491fa3c Contact: Call-ID: 26ad4a7a549d76365dfec3bc5fe32794@192.168.65.100 CSeq: 103 INVITE User-Agent: Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER Content-Type: application/sdp Content-Length: 266 Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): root 8793 8794 IN IP4 192.168.65.10 Owner Username: root Session ID: 8793 Session Version: 8794 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 192.168.65.10 Session Name (s): session Connection Information (c): IN IP4 192.168.65.10 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 192.168.65.10 Time Description, active time (t): 0 0 Session Start Time: 0 Session Start Time: 0 Media Description, name and address (m): audio 16526 RTP/AVP 3 2 8 101 Media Type: audio Media Port: 16526 Media Proto: RTP/AVP Media Format: 3 Media Format: 2 Media Format: 8 Media Format: 101 Media Attribute (a): rtpmap:3 GSM/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 3 GSM/8000 Media Attribute (a): rtpmap:2 G726-32/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 2 G726-32/8000 Media Attribute (a): rtpmap:8 PCMA/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 8 PCMA/8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-16 Media Attribute (a): silenceSupp:off - - - - Media Attribute Fieldname: silenceSupp Media Attribute Value: off - - - - Frame 516 (372 bytes on wire, 372 bytes captured) Arrival Time: May 28, 2004 16:04:51.416190000 Time delta from previous packet: 0.007855000 seconds Time since reference or first frame: 20.913132000 seconds Frame Number: 516 Packet Length: 372 bytes Capture Length: 372 bytes Ethernet II, Src: 00:d0:ba:80:34:cd, Dst: 00:09:6b:49:b6:7c Destination: 00:09:6b:49:b6:7c (Ibm_49:b6:7c) Source: 00:d0:ba:80:34:cd (Cisco_80:34:cd) Type: IP (0x0800) Internet Protocol, Src Addr: 192.168.65.10 (192.168.65.10), Dst Addr: 192.168.65.100 (192.168.65.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00) 0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 358 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0xb65f (correct) Source: 192.168.65.10 (192.168.65.10) Destination: 192.168.65.100 (192.168.65.100) User Datagram Protocol, Src Port: 53833 (53833), Dst Port: 5060 (5060) Source port: 53833 (53833) Destination port: 5060 (5060) Length: 338 Checksum: 0x5a0b (correct) Session Initiation Protocol Request line: ACK sip:1510@192.168.65.100:5060 SIP/2.0 Method: ACK Message Header Via: SIP/2.0/UDP 192.168.65.10:5060 From: ;tag=50FAEE0-1A7A SIP from address: SIP tag: 50FAEE0-1A7A To: ;tag=as2479ceb2 SIP to address: SIP tag: as2479ceb2 Date: Fri, 28 May 2004 20:04:37 GMT Call-ID: 146B3EB7-B01911D8-8AC38125-CAE2BCF0@192.168.65.10 Max-Forwards: 6 Content-Length: 0 CSeq: 101 ACK Frame 517 (763 bytes on wire, 763 bytes captured) Arrival Time: May 28, 2004 16:04:51.416332000 Time delta from previous packet: 0.000142000 seconds Time since reference or first frame: 20.913274000 seconds Frame Number: 517 Packet Length: 763 bytes Capture Length: 763 bytes Ethernet II, Src: 00:09:6b:49:b6:7c, Dst: 00:d0:ba:80:34:cd Destination: 00:d0:ba:80:34:cd (Cisco_80:34:cd) Source: 00:09:6b:49:b6:7c (Ibm_49:b6:7c) Type: IP (0x0800) Internet Protocol, Src Addr: 192.168.65.100 (192.168.65.100), Dst Addr: 192.168.65.10 (192.168.65.10) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 749 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3431 (correct) Source: 192.168.65.100 (192.168.65.100) Destination: 192.168.65.10 (192.168.65.10) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 729 Checksum: 0x1b6d (correct) Session Initiation Protocol Request line: INVITE sip:095292423@192.168.65.10:5060 SIP/2.0 Method: INVITE Message Header Via: SIP/2.0/UDP 192.168.65.100:5060;branch=z9hG4bK6fbf9ab9 From: ;tag=as2479ceb2 SIP from address: SIP tag: as2479ceb2 To: ;tag=50FAEE0-1A7A SIP to address: SIP tag: 50FAEE0-1A7A Contact: Call-ID: 146B3EB7-B01911D8-8AC38125-CAE2BCF0@192.168.65.10 CSeq: 102 INVITE User-Agent: Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER Content-Type: application/sdp Content-Length: 268 Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): root 8793 8794 IN IP4 192.168.65.113 Owner Username: root Session ID: 8793 Session Version: 8794 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 192.168.65.113 Session Name (s): session Connection Information (c): IN IP4 192.168.65.113 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 192.168.65.113 Time Description, active time (t): 0 0 Session Start Time: 0 Session Start Time: 0 Media Description, name and address (m): audio 16412 RTP/AVP 3 2 8 101 Media Type: audio Media Port: 16412 Media Proto: RTP/AVP Media Format: 3 Media Format: 2 Media Format: 8 Media Format: 101 Media Attribute (a): rtpmap:3 GSM/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 3 GSM/8000 Media Attribute (a): rtpmap:2 G726-32/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 2 G726-32/8000 Media Attribute (a): rtpmap:8 PCMA/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 8 PCMA/8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-16 Media Attribute (a): silenceSupp:off - - - - Media Attribute Fieldname: silenceSupp Media Attribute Value: off - - - - Frame 519 (823 bytes on wire, 823 bytes captured) Arrival Time: May 28, 2004 16:04:51.428422000 Time delta from previous packet: 0.012090000 seconds Time since reference or first frame: 20.925364000 seconds Frame Number: 519 Packet Length: 823 bytes Capture Length: 823 bytes Ethernet II, Src: 00:d0:ba:80:34:cd, Dst: 00:09:6b:49:b6:7c Destination: 00:09:6b:49:b6:7c (Ibm_49:b6:7c) Source: 00:d0:ba:80:34:cd (Cisco_80:34:cd) Type: IP (0x0800) Internet Protocol, Src Addr: 192.168.65.10 (192.168.65.10), Dst Addr: 192.168.65.100 (192.168.65.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00) 0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 809 Identification: 0x0abd (2749) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0xa9df (correct) Source: 192.168.65.10 (192.168.65.10) Destination: 192.168.65.100 (192.168.65.100) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 789 Checksum: 0xc30e (correct) Session Initiation Protocol Status line: SIP/2.0 200 OK Status-Code: 200 Message Header Via: SIP/2.0/UDP 192.168.65.100:5060;branch=z9hG4bK6fbf9ab9 From: ;tag=as2479ceb2 SIP from address: SIP tag: as2479ceb2 To: ;tag=50FAEE0-1A7A SIP to address: SIP tag: 50FAEE0-1A7A Date: Fri, 28 May 2004 20:04:51 GMT Call-ID: 146B3EB7-B01911D8-8AC38125-CAE2BCF0@192.168.65.10 Server: Cisco-SIPGateway/IOS-12.x CSeq: 102 INVITE Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO Allow-Events: telephone-event Contact: Content-Type: application/sdp Content-Length: 236 Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): CiscoSystemsSIP-GW-UserAgent 4728 849 IN IP4 192.168.65.10 Owner Username: CiscoSystemsSIP-GW-UserAgent Session ID: 4728 Session Version: 849 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 192.168.65.10 Session Name (s): SIP Call Connection Information (c): IN IP4 192.168.65.10 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 192.168.65.10 Time Description, active time (t): 0 0 Session Start Time: 0 Session Start Time: 0 Media Description, name and address (m): audio 16526 RTP/AVP 3 101 Media Type: audio Media Port: 16526 Media Proto: RTP/AVP Media Format: 3 Media Format: 101 Connection Information (c): IN IP4 192.168.65.10 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 192.168.65.10 Media Attribute (a): rtpmap:3 GSM/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 3 GSM/8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-16 Frame 520 (407 bytes on wire, 407 bytes captured) Arrival Time: May 28, 2004 16:04:51.428526000 Time delta from previous packet: 0.000104000 seconds Time since reference or first frame: 20.925468000 seconds Frame Number: 520 Packet Length: 407 bytes Capture Length: 407 bytes Ethernet II, Src: 00:09:6b:49:b6:7c, Dst: 00:d0:ba:80:34:cd Destination: 00:d0:ba:80:34:cd (Cisco_80:34:cd) Source: 00:09:6b:49:b6:7c (Ibm_49:b6:7c) Type: IP (0x0800) Internet Protocol, Src Addr: 192.168.65.100 (192.168.65.100), Dst Addr: 192.168.65.10 (192.168.65.10) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 393 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3595 (correct) Source: 192.168.65.100 (192.168.65.100) Destination: 192.168.65.10 (192.168.65.10) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 373 Checksum: 0x8203 (correct) Session Initiation Protocol Request line: ACK sip:095292423@192.168.65.10:5060 SIP/2.0 Method: ACK Message Header Via: SIP/2.0/UDP 192.168.65.100:5060;branch=z9hG4bK7fd46f46 From: ;tag=as2479ceb2 SIP from address: SIP tag: as2479ceb2 To: ;tag=50FAEE0-1A7A SIP to address: SIP tag: 50FAEE0-1A7A Contact: Call-ID: 146B3EB7-B01911D8-8AC38125-CAE2BCF0@192.168.65.10 CSeq: 102 ACK User-Agent: Asterisk PBX Content-Length: 0 Frame 523 (678 bytes on wire, 678 bytes captured) Arrival Time: May 28, 2004 16:04:51.654378000 Time delta from previous packet: 0.225852000 seconds Time since reference or first frame: 21.151320000 seconds Frame Number: 523 Packet Length: 678 bytes Capture Length: 678 bytes Ethernet II, Src: 00:0b:5f:92:5c:e0, Dst: 00:09:6b:49:b6:7c Destination: 00:09:6b:49:b6:7c (Ibm_49:b6:7c) Source: 00:0b:5f:92:5c:e0 (Cisco_92:5c:e0) Type: IP (0x0800) Internet Protocol, Src Addr: 192.168.65.113 (192.168.65.113), Dst Addr: 192.168.65.100 (192.168.65.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x60 (DSCP 0x18: Class Selector 3; ECN: 0x00) 0110 00.. = Differentiated Services Codepoint: Class Selector 3 (0x18) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 664 Identification: 0x7a57 (31319) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xf977 (correct) Source: 192.168.65.113 (192.168.65.113) Destination: 192.168.65.100 (192.168.65.100) User Datagram Protocol, Src Port: 50534 (50534), Dst Port: 5060 (5060) Source port: 50534 (50534) Destination port: 5060 (5060) Length: 644 Checksum: 0x0000 (none) Session Initiation Protocol Status line: SIP/2.0 200 OK Status-Code: 200 Message Header Via: SIP/2.0/UDP 192.168.65.100:5060;branch=z9hG4bK7e32004a From: "095292423" ;tag=as2a1eebe8 SIP from address: "095292423" SIP tag: as2a1eebe8 To: ;tag=000b5f925ce0185e44890def-2491fa3c SIP to address: SIP tag: 000b5f925ce0185e44890def-2491fa3c Call-ID: 26ad4a7a549d76365dfec3bc5fe32794@192.168.65.100 Date: Fri, 28 May 2004 20:04:50 GMT CSeq: 103 INVITE Server: CSCO/6 Contact: Content-Type: application/sdp Content-Length: 201 Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): Cisco-SIPUA 25306 20191 IN IP4 192.168.65.113 Owner Username: Cisco-SIPUA Session ID: 25306 Session Version: 20191 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 192.168.65.113 Session Name (s): SIP Call Connection Information (c): IN IP4 192.168.65.113 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 192.168.65.113 Time Description, active time (t): 0 0 Session Start Time: 0 Session Start Time: 0 Media Description, name and address (m): audio 16412 RTP/AVP 8 101 Media Type: audio Media Port: 16412 Media Proto: RTP/AVP Media Format: 8 Media Format: 101 Media Attribute (a): rtpmap:8 PCMA/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 8 PCMA/8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-15 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-15 Frame 524 (440 bytes on wire, 440 bytes captured) Arrival Time: May 28, 2004 16:04:51.654513000 Time delta from previous packet: 0.000135000 seconds Time since reference or first frame: 21.151455000 seconds Frame Number: 524 Packet Length: 440 bytes Capture Length: 440 bytes Ethernet II, Src: 00:09:6b:49:b6:7c, Dst: 00:0b:5f:92:5c:e0 Destination: 00:0b:5f:92:5c:e0 (Cisco_92:5c:e0) Source: 00:09:6b:49:b6:7c (Ibm_49:b6:7c) Type: IP (0x0800) Internet Protocol, Src Addr: 192.168.65.100 (192.168.65.100), Dst Addr: 192.168.65.113 (192.168.65.113) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 426 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x350d (correct) Source: 192.168.65.100 (192.168.65.100) Destination: 192.168.65.113 (192.168.65.113) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 406 Checksum: 0xf283 (correct) Session Initiation Protocol Request line: ACK sip:1510@192.168.65.113:5060 SIP/2.0 Method: ACK Message Header Via: SIP/2.0/UDP 192.168.65.100:5060;branch=z9hG4bK34e75dc4 From: "095292423" ;tag=as2a1eebe8 SIP from address: "095292423" SIP tag: as2a1eebe8 To: ;tag=000b5f925ce0185e44890def-2491fa3c SIP to address: SIP tag: 000b5f925ce0185e44890def-2491fa3c Contact: Call-ID: 26ad4a7a549d76365dfec3bc5fe32794@192.168.65.100 CSeq: 103 ACK User-Agent: Asterisk PBX Content-Length: 0 Frame 735 (434 bytes on wire, 434 bytes captured) Arrival Time: May 28, 2004 16:05:02.922250000 Time delta from previous packet: 11.267737000 seconds Time since reference or first frame: 32.419192000 seconds Frame Number: 735 Packet Length: 434 bytes Capture Length: 434 bytes Ethernet II, Src: 00:d0:ba:80:34:cd, Dst: 00:09:6b:49:b6:7c Destination: 00:09:6b:49:b6:7c (Ibm_49:b6:7c) Source: 00:d0:ba:80:34:cd (Cisco_80:34:cd) Type: IP (0x0800) Internet Protocol, Src Addr: 192.168.65.10 (192.168.65.10), Dst Addr: 192.168.65.100 (192.168.65.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x68 (DSCP 0x1a: Assured Forwarding 31; ECN: 0x00) 0110 10.. = Differentiated Services Codepoint: Assured Forwarding 31 (0x1a) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 420 Identification: 0x0000 (0) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0xb621 (correct) Source: 192.168.65.10 (192.168.65.10) Destination: 192.168.65.100 (192.168.65.100) User Datagram Protocol, Src Port: 52498 (52498), Dst Port: 5060 (5060) Source port: 52498 (52498) Destination port: 5060 (5060) Length: 400 Checksum: 0x1756 (correct) Session Initiation Protocol Request line: BYE sip:1510@192.168.65.100:5060 SIP/2.0 Method: BYE Message Header Via: SIP/2.0/UDP 192.168.65.10:5060 From: ;tag=50FAEE0-1A7A SIP from address: SIP tag: 50FAEE0-1A7A To: ;tag=as2479ceb2 SIP to address: SIP tag: as2479ceb2 Date: Fri, 28 May 2004 20:04:51 GMT Call-ID: 146B3EB7-B01911D8-8AC38125-CAE2BCF0@192.168.65.10 User-Agent: Cisco-SIPGateway/IOS-12.x Max-Forwards: 6 Timestamp: 1085774702 CSeq: 102 BYE Content-Length: 0 Frame 736 (403 bytes on wire, 403 bytes captured) Arrival Time: May 28, 2004 16:05:02.922345000 Time delta from previous packet: 0.000095000 seconds Time since reference or first frame: 32.419287000 seconds Frame Number: 736 Packet Length: 403 bytes Capture Length: 403 bytes Ethernet II, Src: 00:09:6b:49:b6:7c, Dst: 00:d0:ba:80:34:cd Destination: 00:d0:ba:80:34:cd (Cisco_80:34:cd) Source: 00:09:6b:49:b6:7c (Ibm_49:b6:7c) Type: IP (0x0800) Internet Protocol, Src Addr: 192.168.65.100 (192.168.65.100), Dst Addr: 192.168.65.10 (192.168.65.10) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 389 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x3599 (correct) Source: 192.168.65.100 (192.168.65.100) Destination: 192.168.65.10 (192.168.65.10) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 369 Checksum: 0x957f (correct) Session Initiation Protocol Status line: SIP/2.0 200 OK Status-Code: 200 Message Header Via: SIP/2.0/UDP 192.168.65.10:5060 From: ;tag=50FAEE0-1A7A SIP from address: SIP tag: 50FAEE0-1A7A To: ;tag=as2479ceb2 SIP to address: SIP tag: as2479ceb2 Call-ID: 146B3EB7-B01911D8-8AC38125-CAE2BCF0@192.168.65.10 CSeq: 102 BYE User-Agent: Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER Contact: Content-Length: 0 Frame 737 (746 bytes on wire, 746 bytes captured) Arrival Time: May 28, 2004 16:05:02.922471000 Time delta from previous packet: 0.000126000 seconds Time since reference or first frame: 32.419413000 seconds Frame Number: 737 Packet Length: 746 bytes Capture Length: 746 bytes Ethernet II, Src: 00:09:6b:49:b6:7c, Dst: 00:0b:5f:92:5c:e0 Destination: 00:0b:5f:92:5c:e0 (Cisco_92:5c:e0) Source: 00:09:6b:49:b6:7c (Ibm_49:b6:7c) Type: IP (0x0800) Internet Protocol, Src Addr: 192.168.65.100 (192.168.65.100), Dst Addr: 192.168.65.113 (192.168.65.113) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 732 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x33db (correct) Source: 192.168.65.100 (192.168.65.100) Destination: 192.168.65.113 (192.168.65.113) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 712 Checksum: 0xa6cd (correct) Session Initiation Protocol Request line: INVITE sip:1510@192.168.65.113:5060 SIP/2.0 Method: INVITE Message Header Via: SIP/2.0/UDP 192.168.65.100:5060;branch=z9hG4bK47881387 From: "095292423" ;tag=as2a1eebe8 SIP from address: "095292423" SIP tag: as2a1eebe8 To: ;tag=000b5f925ce0185e44890def-2491fa3c SIP to address: SIP tag: 000b5f925ce0185e44890def-2491fa3c Contact: Call-ID: 26ad4a7a549d76365dfec3bc5fe32794@192.168.65.100 CSeq: 104 INVITE User-Agent: Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER Content-Type: application/sdp Content-Length: 218 Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): root 8793 8795 IN IP4 192.168.65.100 Owner Username: root Session ID: 8793 Session Version: 8795 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 192.168.65.100 Session Name (s): session Connection Information (c): IN IP4 192.168.65.100 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 192.168.65.100 Time Description, active time (t): 0 0 Session Start Time: 0 Session Start Time: 0 Media Description, name and address (m): audio 33046 RTP/AVP 8 101 Media Type: audio Media Port: 33046 Media Proto: RTP/AVP Media Format: 8 Media Format: 101 Media Attribute (a): rtpmap:8 PCMA/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 8 PCMA/8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-16 Media Attribute (a): silenceSupp:off - - - - Media Attribute Fieldname: silenceSupp Media Attribute Value: off - - - - Frame 770 (675 bytes on wire, 675 bytes captured) Arrival Time: May 28, 2004 16:05:03.074727000 Time delta from previous packet: 0.152256000 seconds Time since reference or first frame: 32.571669000 seconds Frame Number: 770 Packet Length: 675 bytes Capture Length: 675 bytes Ethernet II, Src: 00:0b:5f:92:5c:e0, Dst: 00:09:6b:49:b6:7c Destination: 00:09:6b:49:b6:7c (Ibm_49:b6:7c) Source: 00:0b:5f:92:5c:e0 (Cisco_92:5c:e0) Type: IP (0x0800) Internet Protocol, Src Addr: 192.168.65.113 (192.168.65.113), Dst Addr: 192.168.65.100 (192.168.65.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x60 (DSCP 0x18: Class Selector 3; ECN: 0x00) 0110 00.. = Differentiated Services Codepoint: Class Selector 3 (0x18) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 661 Identification: 0x7c85 (31877) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xf74c (correct) Source: 192.168.65.113 (192.168.65.113) Destination: 192.168.65.100 (192.168.65.100) User Datagram Protocol, Src Port: 50534 (50534), Dst Port: 5060 (5060) Source port: 50534 (50534) Destination port: 5060 (5060) Length: 641 Checksum: 0x0000 (none) Session Initiation Protocol Status line: SIP/2.0 200 OK Status-Code: 200 Message Header Via: SIP/2.0/UDP 192.168.65.100:5060;branch=z9hG4bK47881387 From: "095292423" ;tag=as2a1eebe8 SIP from address: "095292423" SIP tag: as2a1eebe8 To: ;tag=000b5f925ce0185e44890def-2491fa3c SIP to address: SIP tag: 000b5f925ce0185e44890def-2491fa3c Call-ID: 26ad4a7a549d76365dfec3bc5fe32794@192.168.65.100 Date: Fri, 28 May 2004 20:05:02 GMT CSeq: 104 INVITE Server: CSCO/6 Contact: Content-Type: application/sdp Content-Length: 198 Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): Cisco-SIPUA 809 1637 IN IP4 192.168.65.113 Owner Username: Cisco-SIPUA Session ID: 809 Session Version: 1637 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 192.168.65.113 Session Name (s): SIP Call Connection Information (c): IN IP4 192.168.65.113 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 192.168.65.113 Time Description, active time (t): 0 0 Session Start Time: 0 Session Start Time: 0 Media Description, name and address (m): audio 16412 RTP/AVP 8 101 Media Type: audio Media Port: 16412 Media Proto: RTP/AVP Media Format: 8 Media Format: 101 Media Attribute (a): rtpmap:8 PCMA/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 8 PCMA/8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-15 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-15 Frame 771 (440 bytes on wire, 440 bytes captured) Arrival Time: May 28, 2004 16:05:03.074881000 Time delta from previous packet: 0.000154000 seconds Time since reference or first frame: 32.571823000 seconds Frame Number: 771 Packet Length: 440 bytes Capture Length: 440 bytes Ethernet II, Src: 00:09:6b:49:b6:7c, Dst: 00:0b:5f:92:5c:e0 Destination: 00:0b:5f:92:5c:e0 (Cisco_92:5c:e0) Source: 00:09:6b:49:b6:7c (Ibm_49:b6:7c) Type: IP (0x0800) Internet Protocol, Src Addr: 192.168.65.100 (192.168.65.100), Dst Addr: 192.168.65.113 (192.168.65.113) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 426 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x350d (correct) Source: 192.168.65.100 (192.168.65.100) Destination: 192.168.65.113 (192.168.65.113) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 406 Checksum: 0x8fb1 (correct) Session Initiation Protocol Request line: ACK sip:1510@192.168.65.113:5060 SIP/2.0 Method: ACK Message Header Via: SIP/2.0/UDP 192.168.65.100:5060;branch=z9hG4bK3ee63e7e From: "095292423" ;tag=as2a1eebe8 SIP from address: "095292423" SIP tag: as2a1eebe8 To: ;tag=000b5f925ce0185e44890def-2491fa3c SIP to address: SIP tag: 000b5f925ce0185e44890def-2491fa3c Contact: Call-ID: 26ad4a7a549d76365dfec3bc5fe32794@192.168.65.100 CSeq: 104 ACK User-Agent: Asterisk PBX Content-Length: 0 Frame 772 (440 bytes on wire, 440 bytes captured) Arrival Time: May 28, 2004 16:05:03.074909000 Time delta from previous packet: 0.000028000 seconds Time since reference or first frame: 32.571851000 seconds Frame Number: 772 Packet Length: 440 bytes Capture Length: 440 bytes Ethernet II, Src: 00:09:6b:49:b6:7c, Dst: 00:0b:5f:92:5c:e0 Destination: 00:0b:5f:92:5c:e0 (Cisco_92:5c:e0) Source: 00:09:6b:49:b6:7c (Ibm_49:b6:7c) Type: IP (0x0800) Internet Protocol, Src Addr: 192.168.65.100 (192.168.65.100), Dst Addr: 192.168.65.113 (192.168.65.113) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00) 0001 00.. = Differentiated Services Codepoint: Unknown (0x04) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 426 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x350d (correct) Source: 192.168.65.100 (192.168.65.100) Destination: 192.168.65.113 (192.168.65.113) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 406 Checksum: 0xc454 (correct) Session Initiation Protocol Request line: BYE sip:1510@192.168.65.113:5060 SIP/2.0 Method: BYE Message Header Via: SIP/2.0/UDP 192.168.65.100:5060;branch=z9hG4bK279fbdf8 From: "095292423" ;tag=as2a1eebe8 SIP from address: "095292423" SIP tag: as2a1eebe8 To: ;tag=000b5f925ce0185e44890def-2491fa3c SIP to address: SIP tag: 000b5f925ce0185e44890def-2491fa3c Contact: Call-ID: 26ad4a7a549d76365dfec3bc5fe32794@192.168.65.100 CSeq: 105 BYE User-Agent: Asterisk PBX Content-Length: 0 Frame 780 (500 bytes on wire, 500 bytes captured) Arrival Time: May 28, 2004 16:05:03.215440000 Time delta from previous packet: 0.140531000 seconds Time since reference or first frame: 32.712382000 seconds Frame Number: 780 Packet Length: 500 bytes Capture Length: 500 bytes Ethernet II, Src: 00:0b:5f:92:5c:e0, Dst: 00:09:6b:49:b6:7c Destination: 00:09:6b:49:b6:7c (Ibm_49:b6:7c) Source: 00:0b:5f:92:5c:e0 (Cisco_92:5c:e0) Type: IP (0x0800) Internet Protocol, Src Addr: 192.168.65.113 (192.168.65.113), Dst Addr: 192.168.65.100 (192.168.65.100) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x60 (DSCP 0x18: Class Selector 3; ECN: 0x00) 0110 00.. = Differentiated Services Codepoint: Class Selector 3 (0x18) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 486 Identification: 0x7c8d (31885) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xf7f3 (correct) Source: 192.168.65.113 (192.168.65.113) Destination: 192.168.65.100 (192.168.65.100) User Datagram Protocol, Src Port: 50534 (50534), Dst Port: 5060 (5060) Source port: 50534 (50534) Destination port: 5060 (5060) Length: 466 Checksum: 0x0000 (none) Session Initiation Protocol Status line: SIP/2.0 200 OK Status-Code: 200 Message Header Via: SIP/2.0/UDP 192.168.65.100:5060;branch=z9hG4bK279fbdf8 From: "095292423" ;tag=as2a1eebe8 SIP from address: "095292423" SIP tag: as2a1eebe8 To: ;tag=000b5f925ce0185e44890def-2491fa3c SIP to address: SIP tag: 000b5f925ce0185e44890def-2491fa3c Call-ID: 26ad4a7a549d76365dfec3bc5fe32794@192.168.65.100 Date: Fri, 28 May 2004 20:05:02 GMT CSeq: 105 BYE Server: CSCO/6 Content-Length: 0 RTP-RxStat: Dur=??,Pkt=??,Oct=??,LatePkt=??,LostPkt=??,AvgJit=?? RTP-TxStat: Dur=??,Pkt=??,Oct=??