Ticket #460: tcpdump1.txt

File tcpdump1.txt, 12.6 KB (added by roman_zhur, 2 days ago)
Line 
1root@comcerto:~# tcpdump -i any port 5060 -v
2tcpdump: listening on any, link-type LINUX_SLL (Linux cooked v1), capture size 262144 bytes
308:05:22.589393 IP (tos 0x68, ttl 64, id 1532, offset 0, flags [DF], proto TCP (6), length 1016)
4 192.168.30.10.12552 > 192.168.20.56.5060: Flags [P.], cksum 0x48c6 (correct), seq 1334640457:1334641433, ack 4199157803, win 7587, length 976
508:05:22.604968 IP (tos 0x0, ttl 64, id 27585, offset 0, flags [DF], proto TCP (6), length 475)
6 192.168.20.56.5060 > 192.168.30.10.12552: Flags [P.], cksum 0xf865 (correct), seq 1:436, ack 976, win 16019, length 435
708:05:22.606392 IP (tos 0x68, ttl 64, id 1533, offset 0, flags [DF], proto TCP (6), length 40)
8 192.168.30.10.12552 > 192.168.20.56.5060: Flags [.], cksum 0x3b03 (correct), ack 436, win 7587, length 0
908:05:22.609431 IP (tos 0x68, ttl 64, id 1534, offset 0, flags [DF], proto TCP (6), length 311)
10 192.168.30.10.12552 > 192.168.20.56.5060: Flags [P.], cksum 0xe54f (correct), seq 976:1247, ack 436, win 7587, length 271
1108:05:22.616405 IP (tos 0x68, ttl 64, id 1535, offset 0, flags [DF], proto TCP (6), length 1271)
12 192.168.30.10.12552 > 192.168.20.56.5060: Flags [P.], cksum 0xece2 (correct), seq 1247:2478, ack 436, win 7587, length 1231
1308:05:22.616720 IP (tos 0x0, ttl 64, id 27586, offset 0, flags [DF], proto TCP (6), length 40)
14 192.168.20.56.5060 > 192.168.30.10.12552: Flags [.], cksum 0x1435 (correct), ack 2478, win 16019, length 0
1508:05:22.645235 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 1211)
16 localhost..5060 > localhost..6060: SIP, length: 1183
17 INVITE sip:33@127.0.0.1:6060;transport=udp SIP/2.0
18 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK-524287-1---be94c8319657ce5b;rport
19 Via: SIP/2.0/TCP 192.168.30.10:5060;branch=z9hG4bK3270969830
20 Max-Forwards: 69
21 Record-Route: <sip:192.168.20.56:5060;transport=udp;lr;drr>
22 Record-Route: <sip:192.168.20.56:5060;transport=tcp;lr;drr>
23 Contact: <sip:11@192.168.30.10:5060;transport=TCP>
24 To: <sip:33@192.168.20.56:5060>
25 From: "11"<sip:11@192.168.20.56:5060>;tag=3544724365
26 Call-ID: 0_479967031@192.168.30.10
27 CSeq: 2 INVITE
28 Session-Expires: 300;refresher=uac
29 Min-SE: 90
30 Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER, SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE
31 Content-Type: application/sdp
32 Supported: timer, replaces
33 User-Agent: Yealink SIP-T21P_E2 52.82.14.1
34 Allow-Events: talk, hold, conference, refer, check-sync
35 Content-Length: 308
36
37 v=0
38 o=- 20024 20024 IN IP4 192.168.30.10
39 s=SDP data
40 c=IN IP4 192.168.30.10
41 t=0 0
42 m=audio 12068 RTP/AVP 9 0 8 18 101
43 a=rtpmap:9 G722/8000
44 a=rtpmap:0 PCMU/8000
45 a=rtpmap:8 PCMA/8000
46 a=rtpmap:18 G729/8000
47 a=fmtp:18 annexb=no
48 a=ptime:20
49 a=sendrecv
50 a=rtpmap:101 telephone-event/8000
51 a=fmtp:101 0-15
5208:05:22.656610 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 384)
53 localhost..6060 > localhost..5060: SIP, length: 356
54 SIP/2.0 100 Trying
55 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK-524287-1---be94c8319657ce5b;rport=5060
56 Via: SIP/2.0/TCP 192.168.30.10:5060;branch=z9hG4bK3270969830
57 From: "11" <sip:11@192.168.20.56:5060>;tag=3544724365
58 To: <sip:33@192.168.20.56:5060>
59 Call-ID: 0_479967031@192.168.30.10
60 CSeq: 2 INVITE
61 User-Agent: eXosip/5.3.0
62 Content-Length: 0
63
6408:05:22.695478 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 740)
65 localhost..6060 > localhost..5060: SIP, length: 712
66 SIP/2.0 180 Ringing
67 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK-524287-1---be94c8319657ce5b;rport=5060
68 Via: SIP/2.0/TCP 192.168.30.10:5060;branch=z9hG4bK3270969830
69 Record-Route: <sip:192.168.20.56:5060;transport=udp;lr;drr>
70 Record-Route: <sip:192.168.20.56:5060;transport=tcp;lr;drr>
71 From: "11" <sip:11@192.168.20.56:5060>;tag=3544724365
72 To: <sip:33@192.168.20.56:5060>;tag=2078498744
73 Call-ID: 0_479967031@192.168.30.10
74 CSeq: 2 INVITE
75 Contact: <sip:33@127.0.0.1:6060>
76 Allow: INVITE,ACK,BYE,CANCEL,OPTIONS,REFER,NOTIFY,INFO,UPDATE,PRACK,SUBSCRIBE
77 User-Agent: eXosip/5.3.0
78 Allow-Events: conference
79 Supported: replaces,timer,100rel
80 P-Asserted-Identity: <sip:33@192.168.20.56>
81 Content-Length: 0
82
8308:05:22.703784 IP (tos 0x0, ttl 64, id 27587, offset 0, flags [DF], proto TCP (6), length 283)
84 192.168.20.56.5060 > 192.168.30.10.12552: Flags [P.], cksum 0xc3d5 (correct), seq 436:679, ack 2478, win 16019, length 243
8508:05:22.736391 IP (tos 0x68, ttl 64, id 1536, offset 0, flags [DF], proto TCP (6), length 40)
86 192.168.30.10.12552 > 192.168.20.56.5060: Flags [.], cksum 0x3432 (correct), ack 679, win 7587, length 0
8708:05:22.736743 IP (tos 0x0, ttl 64, id 27588, offset 0, flags [DF], proto TCP (6), length 699)
88 192.168.20.56.5060 > 192.168.30.10.12552: Flags [P.], cksum 0xdae3 (correct), seq 679:1338, ack 2478, win 16019, length 659
8908:05:22.738399 IP (tos 0x68, ttl 64, id 1537, offset 0, flags [DF], proto TCP (6), length 40)
90 192.168.30.10.12552 > 192.168.20.56.5060: Flags [.], cksum 0x319f (correct), ack 1338, win 7587, length 0
9108:05:25.805576 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 1036)
92 localhost..6060 > localhost..5060: SIP, length: 1008
93 SIP/2.0 200 OK
94 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK-524287-1---be94c8319657ce5b;rport=5060
95 Via: SIP/2.0/TCP 192.168.30.10:5060;branch=z9hG4bK3270969830
96 Record-Route: <sip:192.168.20.56:5060;transport=udp;lr;drr>
97 Record-Route: <sip:192.168.20.56:5060;transport=tcp;lr;drr>
98 From: "11" <sip:11@192.168.20.56:5060>;tag=3544724365
99 To: <sip:33@192.168.20.56:5060>;tag=2078498744
100 Call-ID: 0_479967031@192.168.30.10
101 CSeq: 2 INVITE
102 Contact: <sip:33@127.0.0.1:6060>
103 Content-Type: application/sdp
104 Allow: INVITE,ACK,BYE,CANCEL,OPTIONS,REFER,NOTIFY,INFO,UPDATE,PRACK,SUBSCRIBE
105 Session-expires: 300;refresher=uac
106 User-Agent: eXosip/5.3.0
107 Allow-Events: conference
108 Supported: replaces,timer,100rel
109 X-Endpoint-Type: FS01
110 P-Asserted-Identity: <sip:33@192.168.20.56>
111 Require: timer
112 Content-Length: 191
113
114 v=0
115 o=gateway 0 0 IN IP4 192.168.20.56
116 s=conversation
117 c=IN IP4 192.168.20.56
118 t=0 0
119 m=audio 10510 RTP/AVP 9 101
120 a=rtpmap:9 G722/8000
121 a=rtpmap:101 telephone-event/8000
122 a=fmtp:101 0-15
12308:05:25.835643 IP (tos 0x0, ttl 64, id 27589, offset 0, flags [DF], proto TCP (6), length 993)
124 192.168.20.56.5060 > 192.168.30.10.12552: Flags [P.], cksum 0xe0b0 (correct), seq 1338:2291, ack 2478, win 16019, length 953
12508:05:25.837456 IP (tos 0x68, ttl 64, id 1538, offset 0, flags [DF], proto TCP (6), length 40)
126 192.168.30.10.12552 > 192.168.20.56.5060: Flags [.], cksum 0x2de6 (correct), ack 2291, win 7587, length 0
12708:05:25.888429 IP (tos 0x68, ttl 64, id 1539, offset 0, flags [DF], proto TCP (6), length 786)
128 192.168.30.10.12552 > 192.168.20.56.5060: Flags [P.], cksum 0xfe35 (correct), seq 2478:3224, ack 2291, win 7587, length 746
12908:05:25.899334 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 748)
130 localhost..5060 > localhost..6060: SIP, length: 720
131 ACK sip:33@127.0.0.1:6060 SIP/2.0
132 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK-524287-1---75c0c1326a2b6277;rport
133 Via: SIP/2.0/TCP 192.168.30.10:5060;branch=z9hG4bK2917455606
134 Max-Forwards: 69
135 Contact: <sip:11@192.168.30.10:5060;transport=TCP>
136 To: <sip:33@192.168.20.56:5060>;tag=2078498744
137 From: "11" <sip:11@192.168.20.56:5060>;tag=3544724365
138 Call-ID: 0_479967031@192.168.30.10
139 CSeq: 2 ACK
140 Proxy-Authorization: Digest username="11", realm="192.168.20.56", nonce="1750233922:cedf5224fc70512c70b5b98186ec1f89", uri="sip:33@192.168.20.56:5060", response="0a426a0c8afd587f091c5c31bcd247c6", algorithm=MD5, cnonce="0a4f113b", qop=auth, nc=00000001
141 User-Agent: Yealink SIP-T21P_E2 52.82.14.1
142 Content-Length: 0
143
14408:05:25.921890 IP (tos 0x0, ttl 64, id 27590, offset 0, flags [DF], proto TCP (6), length 40)
145 192.168.20.56.5060 > 192.168.30.10.12552: Flags [.], cksum 0x0a0c (correct), ack 3224, win 16019, length 0
14608:05:29.283659 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 470)
147 localhost..6060 > localhost..5060: SIP, length: 442
148 BYE sip:11@192.168.30.10:5060;transport=TCP SIP/2.0
149 Via: SIP/2.0/UDP 127.0.0.1:6060;rport;branch=z9hG4bK1082959463
150 Route: <sip:192.168.20.56:5060;transport=udp;lr;drr>
151 Route: <sip:192.168.20.56:5060;transport=tcp;lr;drr>
152 From: <sip:33@192.168.20.56:5060>;tag=2078498744
153 To: "11" <sip:11@192.168.20.56:5060>;tag=3544724365
154 Call-ID: 0_479967031@192.168.30.10
155 CSeq: 2 BYE
156 Max-Forwards: 70
157 User-Agent: eXosip/5.3.0
158 Content-Length: 0
159
16008:05:29.302250 IP (tos 0x0, ttl 64, id 24915, offset 0, flags [DF], proto TCP (6), length 464)
161 192.168.30.1.58728 > 192.168.30.10.5060: Flags [P.], cksum 0x55e2 (correct), seq 1224479748:1224480172, ack 549697383, win 1460, length 424
16208:05:29.303489 IP (tos 0x68, ttl 64, id 57441, offset 0, flags [DF], proto TCP (6), length 40)
163 192.168.30.10.5060 > 192.168.30.1.58728: Flags [.], cksum 0xa3c1 (correct), ack 424, win 7863, length 0
16408:05:29.813617 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 470)
165 localhost..6060 > localhost..5060: SIP, length: 442
166 BYE sip:11@192.168.30.10:5060;transport=TCP SIP/2.0
167 Via: SIP/2.0/UDP 127.0.0.1:6060;rport;branch=z9hG4bK1082959463
168 Route: <sip:192.168.20.56:5060;transport=udp;lr;drr>
169 Route: <sip:192.168.20.56:5060;transport=tcp;lr;drr>
170 From: <sip:33@192.168.20.56:5060>;tag=2078498744
171 To: "11" <sip:11@192.168.20.56:5060>;tag=3544724365
172 Call-ID: 0_479967031@192.168.30.10
173 CSeq: 2 BYE
174 Max-Forwards: 70
175 User-Agent: eXosip/5.3.0
176 Content-Length: 0
177
17808:05:30.823672 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 470)
179 localhost..6060 > localhost..5060: SIP, length: 442
180 BYE sip:11@192.168.30.10:5060;transport=TCP SIP/2.0
181 Via: SIP/2.0/UDP 127.0.0.1:6060;rport;branch=z9hG4bK1082959463
182 Route: <sip:192.168.20.56:5060;transport=udp;lr;drr>
183 Route: <sip:192.168.20.56:5060;transport=tcp;lr;drr>
184 From: <sip:33@192.168.20.56:5060>;tag=2078498744
185 To: "11" <sip:11@192.168.20.56:5060>;tag=3544724365
186 Call-ID: 0_479967031@192.168.30.10
187 CSeq: 2 BYE
188 Max-Forwards: 70
189 User-Agent: eXosip/5.3.0
190 Content-Length: 0
191
19208:05:32.802337 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 290)
193 localhost..5060 > localhost..6060: SIP, length: 262
194 SIP/2.0 100 Trying
195 Via: SIP/2.0/UDP 127.0.0.1:6060;rport=6060;branch=z9hG4bK1082959463
196 To: "11" <sip:11@192.168.20.56:5060>;tag=3544724365
197 From: <sip:33@192.168.20.56:5060>;tag=2078498744
198 Call-ID: 0_479967031@192.168.30.10
199 CSeq: 2 BYE
200 Content-Length: 0
201
20208:05:36.813776 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 470)
203 localhost..6060 > localhost..5060: SIP, length: 442
204 BYE sip:11@192.168.30.10:5060;transport=TCP SIP/2.0
205 Via: SIP/2.0/UDP 127.0.0.1:6060;rport;branch=z9hG4bK1082959463
206 Route: <sip:192.168.20.56:5060;transport=udp;lr;drr>
207 Route: <sip:192.168.20.56:5060;transport=tcp;lr;drr>
208 From: <sip:33@192.168.20.56:5060>;tag=2078498744
209 To: "11" <sip:11@192.168.20.56:5060>;tag=3544724365
210 Call-ID: 0_479967031@192.168.30.10
211 CSeq: 2 BYE
212 Max-Forwards: 70
213 User-Agent: eXosip/5.3.0
214 Content-Length: 0
215
21608:05:36.818390 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 290)
217 localhost..5060 > localhost..6060: SIP, length: 262
218 SIP/2.0 100 Trying
219 Via: SIP/2.0/UDP 127.0.0.1:6060;rport=6060;branch=z9hG4bK1082959463
220 To: "11" <sip:11@192.168.20.56:5060>;tag=3544724365
221 From: <sip:33@192.168.20.56:5060>;tag=2078498744
222 Call-ID: 0_479967031@192.168.30.10
223 CSeq: 2 BYE
224 Content-Length: 0
225
226
22727 packets captured
22841 packets received by filter
2290 packets dropped by kernel