Frame 1 (867 bytes on wire, 867 bytes captured) Arrival Time: Nov 8, 2006 19:06:36.760974000 [Time delta from previous packet: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Packet Length: 867 bytes Capture Length: 867 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:sip:sdp] Ethernet II, Src: Dell_fa:9f:c7 (00:13:72:fa:9f:c7), Dst: ZhsZeitm_0a:bc:00 (00:d0:05:0a:bc:00) Destination: ZhsZeitm_0a:bc:00 (00:d0:05:0a:bc:00) Address: ZhsZeitm_0a:bc:00 (00:d0:05:0a:bc:00) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Source: Dell_fa:9f:c7 (00:13:72:fa:9f:c7) Address: Dell_fa:9f:c7 (00:13:72:fa:9f:c7) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Type: IP (0x0800) Internet Protocol, Src: 80.92.a.b (80.92.a.b), Dst: 62.41.c.d (62.41.c.d) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 853 Identification: 0x74f2 (29938) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xdb1e [correct] [Good: True] [Bad : False] Source: 80.92.a.b (80.92.a.b) Destination: 62.41.c.d (62.41.c.d) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 833 Checksum: 0x2ada [incorrect, should be 0xb42d] Session Initiation Protocol Request-Line: INVITE sip:00352691600fgh@62.41.c.d SIP/2.0 Method: INVITE [Resent Packet: False] Message Header Via: SIP/2.0/UDP 80.92.a.b:5060;branch=z9hG4bK3ad2f364;rport From: "Marc" ;tag=as55acb182 SIP Display info: "Marc" SIP from address: sip:3522030uvwx@voip.domain.com SIP tag: as55acb182 To: SIP to address: sip:00352691600fgh@62.41.c.d Contact: Contact Binding: URI: SIP contact address: sip:3522030uvwx@80.92.a.b Call-ID: 528df6724cd310bb328e2e281afcb067@voip.domain.com CSeq: 102 INVITE User-Agent: Asterisk Max-Forwards: 70 Date: Wed, 08 Nov 2006 18:06:36 GMT Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY Supported: replaces Content-Type: application/sdp Content-Length: 262 Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): root 30698 30698 IN IP4 80.92.a.b Owner Username: root Session ID: 30698 Session Version: 30698 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 80.92.a.b Session Name (s): session Connection Information (c): IN IP4 80.92.a.b Connection Network Type: IN Connection Address Type: IP4 Connection Address: 80.92.a.b Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 17458 RTP/AVP 8 0 101 Media Type: audio Media Port: 17458 Media Proto: RTP/AVP Media Format: ITU-T G.711 PCMA Media Format: ITU-T G.711 PCMU Media Format: 101 Media Attribute (a): rtpmap:8 PCMA/8000 Media Attribute Fieldname: rtpmap Media Format: 8 MIME Type: PCMA MIME type: PCMA Media Attribute (a): rtpmap:0 PCMU/8000 Media Attribute Fieldname: rtpmap Media Format: 0 MIME Type: PCMU MIME type: PCMU Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Format: 101 MIME Type: telephone-event MIME type: telephone-event Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Format: 101 [telephone-event] Media format specific parameters: 0-16 Media Attribute (a): silenceSupp:off - - - - Media Attribute Fieldname: silenceSupp Media Attribute Value: off - - - - Media Attribute (a): ptime:20 Media Attribute Fieldname: ptime Media Attribute Value: 20 Media Attribute (a): sendrecv Frame 2 (364 bytes on wire, 364 bytes captured) Arrival Time: Nov 8, 2006 19:06:36.771183000 [Time delta from previous packet: 0.010209000 seconds] [Time since reference or first frame: 0.010209000 seconds] Frame Number: 2 Packet Length: 364 bytes Capture Length: 364 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:sip] Ethernet II, Src: ZhsZeitm_0a:bc:00 (00:d0:05:0a:bc:00), Dst: Dell_fa:9f:c7 (00:13:72:fa:9f:c7) Destination: Dell_fa:9f:c7 (00:13:72:fa:9f:c7) Address: Dell_fa:9f:c7 (00:13:72:fa:9f:c7) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Source: ZhsZeitm_0a:bc:00 (00:d0:05:0a:bc:00) Address: ZhsZeitm_0a:bc:00 (00:d0:05:0a:bc:00) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Type: IP (0x0800) Internet Protocol, Src: 62.41.c.d (62.41.c.d), Dst: 80.92.a.b (80.92.a.b) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 350 Identification: 0x733b (29499) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 244 Protocol: UDP (0x11) Header checksum: 0xeacb [correct] [Good: True] [Bad : False] Source: 62.41.c.d (62.41.c.d) Destination: 80.92.a.b (80.92.a.b) User Datagram Protocol, Src Port: 49070 (49070), Dst Port: 5060 (5060) Source port: 49070 (49070) Destination port: 5060 (5060) Length: 330 Checksum: 0x2ee5 [correct] Session Initiation Protocol Status-Line: SIP/2.0 100 Trying Status-Code: 100 [Resent Packet: False] Message Header Via: SIP/2.0/UDP 80.92.a.b:5060;received=80.92.a.b;rport=5060;branch=z9hG4bK3ad2f364 Call-ID: 528df6724cd310bb328e2e281afcb067@voip.domain.com From: "Marc" ;tag=as55acb182 SIP Display info: "Marc" SIP from address: sip:3522030uvwx@voip.domain.com SIP tag: as55acb182 To: SIP to address: sip:00352691600fgh@62.41.c.d CSeq: 102 INVITE Content-Length: 0 Frame 3 (940 bytes on wire, 940 bytes captured) Arrival Time: Nov 8, 2006 19:06:39.911183000 [Time delta from previous packet: 3.140000000 seconds] [Time since reference or first frame: 3.150209000 seconds] Frame Number: 3 Packet Length: 940 bytes Capture Length: 940 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:sip:sdp] Ethernet II, Src: ZhsZeitm_0a:bc:00 (00:d0:05:0a:bc:00), Dst: Dell_fa:9f:c7 (00:13:72:fa:9f:c7) Destination: Dell_fa:9f:c7 (00:13:72:fa:9f:c7) Address: Dell_fa:9f:c7 (00:13:72:fa:9f:c7) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Source: ZhsZeitm_0a:bc:00 (00:d0:05:0a:bc:00) Address: ZhsZeitm_0a:bc:00 (00:d0:05:0a:bc:00) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Type: IP (0x0800) Internet Protocol, Src: 62.41.c.d (62.41.c.d), Dst: 80.92.a.b (80.92.a.b) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 926 Identification: 0x733c (29500) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 244 Protocol: UDP (0x11) Header checksum: 0xe88a [correct] [Good: True] [Bad : False] Source: 62.41.c.d (62.41.c.d) Destination: 80.92.a.b (80.92.a.b) User Datagram Protocol, Src Port: 49076 (49076), Dst Port: 5060 (5060) Source port: 49076 (49076) Destination port: 5060 (5060) Length: 906 Checksum: 0x1a6c [correct] Session Initiation Protocol Status-Line: SIP/2.0 183 Session Progress Status-Code: 183 [Resent Packet: False] Message Header Via: SIP/2.0/UDP 80.92.a.b:5060;received=80.92.a.b;rport=5060;branch=z9hG4bK3ad2f364 From: "Marc" ;tag=as55acb182 SIP Display info: "Marc" SIP from address: sip:3522030uvwx@voip.domain.com SIP tag: as55acb182 To: ;tag=722C5A84-2488 SIP to address: sip:00352691600fgh@62.41.c.d SIP tag: 722C5A84-2488 Date: Wed, 08 Nov 2006 18:06:36 GMT Call-ID: 528df6724cd310bb328e2e281afcb067@voip.domain.com Server: Cisco-SIPGateway/IOS-12.x CSeq: 102 INVITE Allow-Events: telephone-event Contact: Contact Binding: URI: SIP contact address: sip:00352691600fgh@62.41.66.203:5060 Record-Route: Content-Disposition: session;handling=required Content-Type: application/sdp Content-Length: 240 Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): CiscoSystemsSIP-GW-UserAgent 3274 5894 IN IP4 62.41.66.203 Owner Username: CiscoSystemsSIP-GW-UserAgent Session ID: 3274 Session Version: 5894 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 62.41.66.203 Session Name (s): SIP Call Connection Information (c): IN IP4 62.41.66.203 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 62.41.66.203 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 17996 RTP/AVP 8 100 Media Type: audio Media Port: 17996 Media Proto: RTP/AVP Media Format: ITU-T G.711 PCMA Media Format: 100 Connection Information (c): IN IP4 62.41.66.203 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 62.41.66.203 Media Attribute (a): rtpmap:8 PCMA/8000 Media Attribute Fieldname: rtpmap Media Format: 8 MIME Type: PCMA MIME type: PCMA Media Attribute (a): rtpmap:100 X-NSE/8000 Media Attribute Fieldname: rtpmap Media Format: 100 MIME Type: X-NSE MIME type: X-NSE Media Attribute (a): fmtp:100 192-194 Media Attribute Fieldname: fmtp Media Format: 100 [X-NSE] Media format specific parameters: 192-194 Media Attribute (a): ptime:20 Media Attribute Fieldname: ptime Media Attribute Value: 20 Frame 4 (545 bytes on wire, 545 bytes captured) Arrival Time: Nov 8, 2006 19:06:42.755645000 [Time delta from previous packet: 2.844462000 seconds] [Time since reference or first frame: 5.994671000 seconds] Frame Number: 4 Packet Length: 545 bytes Capture Length: 545 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:sip] Ethernet II, Src: Dell_fa:9f:c7 (00:13:72:fa:9f:c7), Dst: ZhsZeitm_0a:bc:00 (00:d0:05:0a:bc:00) Destination: ZhsZeitm_0a:bc:00 (00:d0:05:0a:bc:00) Address: ZhsZeitm_0a:bc:00 (00:d0:05:0a:bc:00) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Source: Dell_fa:9f:c7 (00:13:72:fa:9f:c7) Address: Dell_fa:9f:c7 (00:13:72:fa:9f:c7) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Type: IP (0x0800) Internet Protocol, Src: 80.92.a.b (80.92.a.b), Dst: 62.41.c.d (62.41.c.d) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 531 Identification: 0x74f3 (29939) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xdc5f [correct] [Good: True] [Bad : False] Source: 80.92.a.b (80.92.a.b) Destination: 62.41.c.d (62.41.c.d) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 511 Checksum: 0x2998 [incorrect, should be 0x93c4] Session Initiation Protocol Request-Line: OPTIONS sip:62.41.c.d SIP/2.0 Method: OPTIONS [Resent Packet: False] Message Header Via: SIP/2.0/UDP 80.92.a.b:5060;branch=z9hG4bK09871963;rport From: "Anonymous" ;tag=as0811bed8 SIP Display info: "Anonymous" SIP from address: sip:Anonymous@voip.domain.com SIP tag: as0811bed8 To: SIP to address: sip:62.41.c.d Contact: Contact Binding: URI: SIP contact address: sip:Anonymous@80.92.a.b Call-ID: 405784db1ff1229231e48e1d7f85f3ba@voip.domain.com CSeq: 102 OPTIONS User-Agent: Asterisk Max-Forwards: 70 Date: Wed, 08 Nov 2006 18:06:42 GMT Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY Supported: replaces Content-Length: 0 Frame 5 (353 bytes on wire, 353 bytes captured) Arrival Time: Nov 8, 2006 19:06:42.765222000 [Time delta from previous packet: 0.009577000 seconds] [Time since reference or first frame: 6.004248000 seconds] Frame Number: 5 Packet Length: 353 bytes Capture Length: 353 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:sip] Ethernet II, Src: ZhsZeitm_0a:bc:00 (00:d0:05:0a:bc:00), Dst: Dell_fa:9f:c7 (00:13:72:fa:9f:c7) Destination: Dell_fa:9f:c7 (00:13:72:fa:9f:c7) Address: Dell_fa:9f:c7 (00:13:72:fa:9f:c7) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Source: ZhsZeitm_0a:bc:00 (00:d0:05:0a:bc:00) Address: ZhsZeitm_0a:bc:00 (00:d0:05:0a:bc:00) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Type: IP (0x0800) Internet Protocol, Src: 62.41.c.d (62.41.c.d), Dst: 80.92.a.b (80.92.a.b) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 339 Identification: 0x733d (29501) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 244 Protocol: UDP (0x11) Header checksum: 0xead4 [correct] [Good: True] [Bad : False] Source: 62.41.c.d (62.41.c.d) Destination: 80.92.a.b (80.92.a.b) User Datagram Protocol, Src Port: 49077 (49077), Dst Port: 5060 (5060) Source port: 49077 (49077) Destination port: 5060 (5060) Length: 319 Checksum: 0xc2c6 [correct] Session Initiation Protocol Status-Line: SIP/2.0 100 Trying Status-Code: 100 [Resent Packet: False] Message Header Via: SIP/2.0/UDP 80.92.a.b:5060;received=80.92.a.b;rport=5060;branch=z9hG4bK09871963 Call-ID: 405784db1ff1229231e48e1d7f85f3ba@voip.domain.com From: "Anonymous" ;tag=as0811bed8 SIP Display info: "Anonymous" SIP from address: sip:Anonymous@voip.domain.com SIP tag: as0811bed8 To: SIP to address: sip:62.41.c.d CSeq: 102 OPTIONS Content-Length: 0 Frame 6 (349 bytes on wire, 349 bytes captured) Arrival Time: Nov 8, 2006 19:06:42.769599000 [Time delta from previous packet: 0.004377000 seconds] [Time since reference or first frame: 6.008625000 seconds] Frame Number: 6 Packet Length: 349 bytes Capture Length: 349 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:sip] Ethernet II, Src: ZhsZeitm_0a:bc:00 (00:d0:05:0a:bc:00), Dst: Dell_fa:9f:c7 (00:13:72:fa:9f:c7) Destination: Dell_fa:9f:c7 (00:13:72:fa:9f:c7) Address: Dell_fa:9f:c7 (00:13:72:fa:9f:c7) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Source: ZhsZeitm_0a:bc:00 (00:d0:05:0a:bc:00) Address: ZhsZeitm_0a:bc:00 (00:d0:05:0a:bc:00) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Type: IP (0x0800) Internet Protocol, Src: 62.41.c.d (62.41.c.d), Dst: 80.92.a.b (80.92.a.b) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 335 Identification: 0x733e (29502) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 244 Protocol: UDP (0x11) Header checksum: 0xead7 [correct] [Good: True] [Bad : False] Source: 62.41.c.d (62.41.c.d) Destination: 80.92.a.b (80.92.a.b) User Datagram Protocol, Src Port: 49079 (49079), Dst Port: 5060 (5060) Source port: 49079 (49079) Destination port: 5060 (5060) Length: 315 Checksum: 0xaec4 [correct] Session Initiation Protocol Status-Line: SIP/2.0 200 OK Status-Code: 200 [Resent Packet: False] Message Header Via: SIP/2.0/UDP 80.92.a.b:5060;received=80.92.a.b;rport=5060;branch=z9hG4bK09871963 Call-ID: 405784db1ff1229231e48e1d7f85f3ba@voip.domain.com From: "Anonymous" ;tag=as0811bed8 SIP Display info: "Anonymous" SIP from address: sip:Anonymous@voip.domain.com SIP tag: as0811bed8 To: SIP to address: sip:62.41.c.d CSeq: 102 OPTIONS Content-Length: 0 Frame 7 (506 bytes on wire, 506 bytes captured) Arrival Time: Nov 8, 2006 19:07:39.988090000 [Time delta from previous packet: 57.218491000 seconds] [Time since reference or first frame: 63.227116000 seconds] Frame Number: 7 Packet Length: 506 bytes Capture Length: 506 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:sip] Ethernet II, Src: ZhsZeitm_0a:bc:00 (00:d0:05:0a:bc:00), Dst: Dell_fa:9f:c7 (00:13:72:fa:9f:c7) Destination: Dell_fa:9f:c7 (00:13:72:fa:9f:c7) Address: Dell_fa:9f:c7 (00:13:72:fa:9f:c7) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Source: ZhsZeitm_0a:bc:00 (00:d0:05:0a:bc:00) Address: ZhsZeitm_0a:bc:00 (00:d0:05:0a:bc:00) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Type: IP (0x0800) Internet Protocol, Src: 62.41.c.d (62.41.c.d), Dst: 80.92.a.b (80.92.a.b) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 492 Identification: 0x733f (29503) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 244 Protocol: UDP (0x11) Header checksum: 0xea39 [correct] [Good: True] [Bad : False] Source: 62.41.c.d (62.41.c.d) Destination: 80.92.a.b (80.92.a.b) User Datagram Protocol, Src Port: 49104 (49104), Dst Port: 5060 (5060) Source port: 49104 (49104) Destination port: 5060 (5060) Length: 472 Checksum: 0x913e [correct] Session Initiation Protocol Status-Line: SIP/2.0 480 Temporarily Not Available Status-Code: 480 [Resent Packet: False] Message Header Via: SIP/2.0/UDP 80.92.a.b:5060;received=80.92.a.b;rport=5060;branch=z9hG4bK3ad2f364 From: "Marc" ;tag=as55acb182 SIP Display info: "Marc" SIP from address: sip:3522030uvwx@voip.domain.com SIP tag: as55acb182 To: ;tag=722C5A84-2488 SIP to address: sip:00352691600fgh@62.41.c.d SIP tag: 722C5A84-2488 Date: Wed, 08 Nov 2006 18:06:36 GMT Call-ID: 528df6724cd310bb328e2e281afcb067@voip.domain.com Server: Cisco-SIPGateway/IOS-12.x CSeq: 102 INVITE Allow-Events: telephone-event Content-Length: 0