[root@devast asterisk]# tcpdump -i any udp -vvvvv tcpdump: listening on any, link-type LINUX_SLL (Linux cooked), capture size 65535 bytes 16:35:47.369178 IP (tos 0x0, ttl 53, id 46691, offset 0, flags [none], proto UDP (17), length 553) 12.49.160.131.58781 > devast.c.cnp1-143601.internal.sip: [udp sum ok] SIP, length: 525 REGISTER sip:104.197.69.7 SIP/2.0 Via: SIP/2.0/UDP 10.200.101.116:58781;branch=z9hG4bK-524287-1---510c701eed52f364;rport Max-Forwards: 70 Contact: To: From: ;tag=bc201339 Call-ID: 82162MjA5NTE0YjkyZTE4MjA3ZGUzNzZhYjQxNDc2MTllMzI CSeq: 1 REGISTER Expires: 3600 Allow: SUBSCRIBE, NOTIFY, INVITE, ACK, CANCEL, BYE, REFER, INFO, OPTIONS, MESSAGE User-Agent: Bria 4 release 4.6.0 stamp 82162 Content-Length: 0 0x0000: 5245 4749 5354 4552 2073 6970 3a31 3034 0x0010: 2e31 3937 2e36 392e 3720 5349 502f 322e 0x0020: 300d 0a56 6961 3a20 5349 502f 322e 302f 0x0030: 5544 5020 3130 2e32 3030 2e31 3031 2e31 0x0040: 3136 3a35 3837 3831 3b62 7261 6e63 683d 0x0050: 7a39 6847 3462 4b2d 3532 3432 3837 2d31 0x0060: 2d2d 2d35 3130 6337 3031 6565 6435 3266 0x0070: 3336 343b 7270 6f72 740d 0a4d 6178 2d46 0x0080: 6f72 7761 7264 733a 2037 300d 0a43 6f6e 0x0090: 7461 6374 3a20 3c73 6970 3a31 3530 3640 0x00a0: 3130 2e32 3030 2e31 3031 2e31 3136 3a35 0x00b0: 3837 3831 3b72 696e 7374 616e 6365 3d31 0x00c0: 6337 6362 3531 6439 6634 3634 6564 333e 0x00d0: 0d0a 546f 3a20 3c73 6970 3a31 3530 3640 0x00e0: 3130 342e 3139 372e 3639 2e37 3e0d 0a46 0x00f0: 726f 6d3a 203c 7369 703a 3135 3036 4031 0x0100: 3034 2e31 3937 2e36 392e 373e 3b74 6167 0x0110: 3d62 6332 3031 3333 390d 0a43 616c 6c2d 0x0120: 4944 3a20 3832 3136 324d 6a41 354e 5445 0x0130: 3059 6a6b 795a 5445 344d 6a41 335a 4755 0x0140: 7a4e 7a5a 6859 6a51 784e 4463 324d 546c 0x0150: 6c4d 7a49 0d0a 4353 6571 3a20 3120 5245 0x0160: 4749 5354 4552 0d0a 4578 7069 7265 733a 0x0170: 2033 3630 300d 0a41 6c6c 6f77 3a20 5355 0x0180: 4253 4352 4942 452c 204e 4f54 4946 592c 0x0190: 2049 4e56 4954 452c 2041 434b 2c20 4341 0x01a0: 4e43 454c 2c20 4259 452c 2052 4546 4552 0x01b0: 2c20 494e 464f 2c20 4f50 5449 4f4e 532c 0x01c0: 204d 4553 5341 4745 0d0a 5573 6572 2d41 0x01d0: 6765 6e74 3a20 4272 6961 2034 2072 656c 0x01e0: 6561 7365 2034 2e36 2e30 2073 7461 6d70 0x01f0: 2038 3231 3632 0d0a 436f 6e74 656e 742d 0x0200: 4c65 6e67 7468 3a20 300d 0a0d 0a 16:35:47.374595 IP (tos 0x0, ttl 64, id 42673, offset 0, flags [DF], proto UDP (17), length 72) localhost.41841 > localhost.domain: [bad udp cksum 0xfe47 -> 0xcda6!] 40893+ PTR? 131.160.49.12.in-addr.arpa. (44) 16:35:47.374628 IP (tos 0x0, ttl 64, id 42675, offset 0, flags [DF], proto UDP (17), length 72) localhost.60441 > localhost.domain: [bad udp cksum 0xfe47 -> 0x84fe!] 40893+ PTR? 131.160.49.12.in-addr.arpa. (44) 16:35:47.872889 IP (tos 0x0, ttl 53, id 19187, offset 0, flags [none], proto UDP (17), length 553) 12.49.160.131.58781 > devast.c.cnp1-143601.internal.sip: [udp sum ok] SIP, length: 525 REGISTER sip:104.197.69.7 SIP/2.0 Via: SIP/2.0/UDP 10.200.101.116:58781;branch=z9hG4bK-524287-1---510c701eed52f364;rport Max-Forwards: 70 Contact: To: From: ;tag=bc201339 Call-ID: 82162MjA5NTE0YjkyZTE4MjA3ZGUzNzZhYjQxNDc2MTllMzI CSeq: 1 REGISTER Expires: 3600 Allow: SUBSCRIBE, NOTIFY, INVITE, ACK, CANCEL, BYE, REFER, INFO, OPTIONS, MESSAGE User-Agent: Bria 4 release 4.6.0 stamp 82162 Content-Length: 0 0x0000: 5245 4749 5354 4552 2073 6970 3a31 3034 0x0010: 2e31 3937 2e36 392e 3720 5349 502f 322e 0x0020: 300d 0a56 6961 3a20 5349 502f 322e 302f 0x0030: 5544 5020 3130 2e32 3030 2e31 3031 2e31 0x0040: 3136 3a35 3837 3831 3b62 7261 6e63 683d 0x0050: 7a39 6847 3462 4b2d 3532 3432 3837 2d31 0x0060: 2d2d 2d35 3130 6337 3031 6565 6435 3266 0x0070: 3336 343b 7270 6f72 740d 0a4d 6178 2d46 0x0080: 6f72 7761 7264 733a 2037 300d 0a43 6f6e 0x0090: 7461 6374 3a20 3c73 6970 3a31 3530 3640 0x00a0: 3130 2e32 3030 2e31 3031 2e31 3136 3a35 0x00b0: 3837 3831 3b72 696e 7374 616e 6365 3d31 0x00c0: 6337 6362 3531 6439 6634 3634 6564 333e 0x00d0: 0d0a 546f 3a20 3c73 6970 3a31 3530 3640 0x00e0: 3130 342e 3139 372e 3639 2e37 3e0d 0a46 0x00f0: 726f 6d3a 203c 7369 703a 3135 3036 4031 0x0100: 3034 2e31 3937 2e36 392e 373e 3b74 6167 0x0110: 3d62 6332 3031 3333 390d 0a43 616c 6c2d 0x0120: 4944 3a20 3832 3136 324d 6a41 354e 5445 0x0130: 3059 6a6b 795a 5445 344d 6a41 335a 4755 0x0140: 7a4e 7a5a 6859 6a51 784e 4463 324d 546c 0x0150: 6c4d 7a49 0d0a 4353 6571 3a20 3120 5245 0x0160: 4749 5354 4552 0d0a 4578 7069 7265 733a 0x0170: 2033 3630 300d 0a41 6c6c 6f77 3a20 5355 0x0180: 4253 4352 4942 452c 204e 4f54 4946 592c 0x0190: 2049 4e56 4954 452c 2041 434b 2c20 4341 0x01a0: 4e43 454c 2c20 4259 452c 2052 4546 4552 0x01b0: 2c20 494e 464f 2c20 4f50 5449 4f4e 532c 0x01c0: 204d 4553 5341 4745 0d0a 5573 6572 2d41 0x01d0: 6765 6e74 3a20 4272 6961 2034 2072 656c 0x01e0: 6561 7365 2034 2e36 2e30 2073 7461 6d70 0x01f0: 2038 3231 3632 0d0a 436f 6e74 656e 742d 0x0200: 4c65 6e67 7468 3a20 300d 0a0d 0a 16:35:48.876407 IP (tos 0x0, ttl 53, id 41254, offset 0, flags [none], proto UDP (17), length 553) 12.49.160.131.58781 > devast.c.cnp1-143601.internal.sip: [udp sum ok] SIP, length: 525 REGISTER sip:104.197.69.7 SIP/2.0 Via: SIP/2.0/UDP 10.200.101.116:58781;branch=z9hG4bK-524287-1---510c701eed52f364;rport Max-Forwards: 70 Contact: To: From: ;tag=bc201339 Call-ID: 82162MjA5NTE0YjkyZTE4MjA3ZGUzNzZhYjQxNDc2MTllMzI CSeq: 1 REGISTER Expires: 3600 Allow: SUBSCRIBE, NOTIFY, INVITE, ACK, CANCEL, BYE, REFER, INFO, OPTIONS, MESSAGE User-Agent: Bria 4 release 4.6.0 stamp 82162 Content-Length: 0 0x0000: 5245 4749 5354 4552 2073 6970 3a31 3034 0x0010: 2e31 3937 2e36 392e 3720 5349 502f 322e 0x0020: 300d 0a56 6961 3a20 5349 502f 322e 302f 0x0030: 5544 5020 3130 2e32 3030 2e31 3031 2e31 0x0040: 3136 3a35 3837 3831 3b62 7261 6e63 683d 0x0050: 7a39 6847 3462 4b2d 3532 3432 3837 2d31 0x0060: 2d2d 2d35 3130 6337 3031 6565 6435 3266 0x0070: 3336 343b 7270 6f72 740d 0a4d 6178 2d46 0x0080: 6f72 7761 7264 733a 2037 300d 0a43 6f6e 0x0090: 7461 6374 3a20 3c73 6970 3a31 3530 3640 0x00a0: 3130 2e32 3030 2e31 3031 2e31 3136 3a35 0x00b0: 3837 3831 3b72 696e 7374 616e 6365 3d31 0x00c0: 6337 6362 3531 6439 6634 3634 6564 333e 0x00d0: 0d0a 546f 3a20 3c73 6970 3a31 3530 3640 0x00e0: 3130 342e 3139 372e 3639 2e37 3e0d 0a46 0x00f0: 726f 6d3a 203c 7369 703a 3135 3036 4031 0x0100: 3034 2e31 3937 2e36 392e 373e 3b74 6167 0x0110: 3d62 6332 3031 3333 390d 0a43 616c 6c2d 0x0120: 4944 3a20 3832 3136 324d 6a41 354e 5445 0x0130: 3059 6a6b 795a 5445 344d 6a41 335a 4755 0x0140: 7a4e 7a5a 6859 6a51 784e 4463 324d 546c 0x0150: 6c4d 7a49 0d0a 4353 6571 3a20 3120 5245 0x0160: 4749 5354 4552 0d0a 4578 7069 7265 733a 0x0170: 2033 3630 300d 0a41 6c6c 6f77 3a20 5355 0x0180: 4253 4352 4942 452c 204e 4f54 4946 592c 0x0190: 2049 4e56 4954 452c 2041 434b 2c20 4341 0x01a0: 4e43 454c 2c20 4259 452c 2052 4546 4552 0x01b0: 2c20 494e 464f 2c20 4f50 5449 4f4e 532c 0x01c0: 204d 4553 5341 4745 0d0a 5573 6572 2d41 0x01d0: 6765 6e74 3a20 4272 6961 2034 2072 656c 0x01e0: 6561 7365 2034 2e36 2e30 2073 7461 6d70 0x01f0: 2038 3231 3632 0d0a 436f 6e74 656e 742d 0x0200: 4c65 6e67 7468 3a20 300d 0a0d 0a 16:35:50.876637 IP (tos 0x0, ttl 53, id 61840, offset 0, flags [none], proto UDP (17), length 553) 12.49.160.131.58781 > devast.c.cnp1-143601.internal.sip: [udp sum ok] SIP, length: 525 REGISTER sip:104.197.69.7 SIP/2.0 Via: SIP/2.0/UDP 10.200.101.116:58781;branch=z9hG4bK-524287-1---510c701eed52f364;rport Max-Forwards: 70 Contact: To: From: ;tag=bc201339 Call-ID: 82162MjA5NTE0YjkyZTE4MjA3ZGUzNzZhYjQxNDc2MTllMzI CSeq: 1 REGISTER Expires: 3600 Allow: SUBSCRIBE, NOTIFY, INVITE, ACK, CANCEL, BYE, REFER, INFO, OPTIONS, MESSAGE User-Agent: Bria 4 release 4.6.0 stamp 82162 Content-Length: 0 0x0000: 5245 4749 5354 4552 2073 6970 3a31 3034 0x0010: 2e31 3937 2e36 392e 3720 5349 502f 322e 0x0020: 300d 0a56 6961 3a20 5349 502f 322e 302f 0x0030: 5544 5020 3130 2e32 3030 2e31 3031 2e31 0x0040: 3136 3a35 3837 3831 3b62 7261 6e63 683d 0x0050: 7a39 6847 3462 4b2d 3532 3432 3837 2d31 0x0060: 2d2d 2d35 3130 6337 3031 6565 6435 3266 0x0070: 3336 343b 7270 6f72 740d 0a4d 6178 2d46 0x0080: 6f72 7761 7264 733a 2037 300d 0a43 6f6e 0x0090: 7461 6374 3a20 3c73 6970 3a31 3530 3640 0x00a0: 3130 2e32 3030 2e31 3031 2e31 3136 3a35 0x00b0: 3837 3831 3b72 696e 7374 616e 6365 3d31 0x00c0: 6337 6362 3531 6439 6634 3634 6564 333e 0x00d0: 0d0a 546f 3a20 3c73 6970 3a31 3530 3640 0x00e0: 3130 342e 3139 372e 3639 2e37 3e0d 0a46 0x00f0: 726f 6d3a 203c 7369 703a 3135 3036 4031 0x0100: 3034 2e31 3937 2e36 392e 373e 3b74 6167 0x0110: 3d62 6332 3031 3333 390d 0a43 616c 6c2d 0x0120: 4944 3a20 3832 3136 324d 6a41 354e 5445 0x0130: 3059 6a6b 795a 5445 344d 6a41 335a 4755 0x0140: 7a4e 7a5a 6859 6a51 784e 4463 324d 546c 0x0150: 6c4d 7a49 0d0a 4353 6571 3a20 3120 5245 0x0160: 4749 5354 4552 0d0a 4578 7069 7265 733a 0x0170: 2033 3630 300d 0a41 6c6c 6f77 3a20 5355 0x0180: 4253 4352 4942 452c 204e 4f54 4946 592c 0x0190: 2049 4e56 4954 452c 2041 434b 2c20 4341 0x01a0: 4e43 454c 2c20 4259 452c 2052 4546 4552 0x01b0: 2c20 494e 464f 2c20 4f50 5449 4f4e 532c 0x01c0: 204d 4553 5341 4745 0d0a 5573 6572 2d41 0x01d0: 6765 6e74 3a20 4272 6961 2034 2072 656c 0x01e0: 6561 7365 2034 2e36 2e30 2073 7461 6d70 0x01f0: 2038 3231 3632 0d0a 436f 6e74 656e 742d 0x0200: 4c65 6e67 7468 3a20 300d 0a0d 0a ^C 6 packets captured 8 packets received by filter 0 packets dropped by kernel