Ticket #463: tcpdump.txt

File tcpdump.txt, 16.2 KB (added by roman_zhur, 2 months ago)
Line 
1root@comcerto:~# tcpdump -i any port 5060 -vvv
2tcpdump: listening on any, link-type LINUX_SLL (Linux cooked v1), capture size 262144 bytes
3
40 packets captured
50 packets received by filter
60 packets dropped by kernel
7root@comcerto:~# tcpdump -i any port 5060 or port 6060 -vvv
8tcpdump: listening on any, link-type LINUX_SLL (Linux cooked v1), capture size 262144 bytes
907:02:26.697956 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 1000)
10 192.168.20.145.5060 > 192.168.20.144.5060: [udp sum ok] SIP, length: 972
11 INVITE sip:22@192.168.20.144:5060 SIP/2.0
12 Via: SIP/2.0/UDP 192.168.20.145:5060;branch=z9hG4bK2731092598
13 From: "11" <sip:11@192.168.20.144:5060>;tag=4044204411
14 To: <sip:22@192.168.20.144:5060>
15 Call-ID: 0_2164660753@192.168.20.145
16 CSeq: 1 INVITE
17 Contact: <sip:11@192.168.20.145:5060>
18 Content-Type: application/sdp
19 Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER, SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE
20 Max-Forwards: 70
21 User-Agent: Yealink SIP-T21P_E2 52.82.14.1
22 Supported: timer
23 Session-Expires: 300;refresher=uac
24 Min-SE: 90
25 Allow-Events: talk,hold,conference,refer,check-sync
26 Supported: replaces
27 Content-Length: 310
28
29 v=0
30 o=- 20010 20010 IN IP4 192.168.20.145
31 s=SDP data
32 c=IN IP4 192.168.20.145
33 t=0 0
34 m=audio 11858 RTP/AVP 9 0 8 18 101
35 a=rtpmap:9 G722/8000
36 a=rtpmap:0 PCMU/8000
37 a=rtpmap:8 PCMA/8000
38 a=rtpmap:18 G729/8000
39 a=fmtp:18 annexb=no
40 a=ptime:20
41 a=sendrecv
42 a=rtpmap:101 telephone-event/8000
43 a=fmtp:101 0-15
4407:02:26.709735 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 470)
45 192.168.20.144.5060 > 192.168.20.145.5060: [udp sum ok] SIP, length: 442
46 SIP/2.0 407 Proxy Authentication Required
47 Via: SIP/2.0/UDP 192.168.20.145:5060;branch=z9hG4bK2731092598
48 Proxy-Authenticate: Digest nonce="1757574146:ff779fcf0b64c423be90f18088293368",algorithm=MD5,realm="192.168.20.144",qop="auth,auth-int"
49 To: <sip:22@192.168.20.144:5060>;tag=9e3d852b
50 From: "11"<sip:11@192.168.20.144:5060>;tag=4044204411
51 Call-ID: 0_2164660753@192.168.20.145
52 CSeq: 1 INVITE
53 Server: repro 1.12.0
54 Content-Length: 0
55
5607:02:26.713959 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 306)
57 192.168.20.145.5060 > 192.168.20.144.5060: [udp sum ok] SIP, length: 278
58 ACK sip:22@192.168.20.144:5060 SIP/2.0
59 Via: SIP/2.0/UDP 192.168.20.145:5060;branch=z9hG4bK2731092598
60 From: "11" <sip:11@192.168.20.144:5060>;tag=4044204411
61 To: <sip:22@192.168.20.144:5060>;tag=9e3d852b
62 Call-ID: 0_2164660753@192.168.20.145
63 CSeq: 1 ACK
64 Content-Length: 0
65
6607:02:26.721978 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 1256)
67 192.168.20.145.5060 > 192.168.20.144.5060: [udp sum ok] SIP, length: 1228
68 INVITE sip:22@192.168.20.144:5060 SIP/2.0
69 Via: SIP/2.0/UDP 192.168.20.145:5060;branch=z9hG4bK3538034718
70 From: "11" <sip:11@192.168.20.144:5060>;tag=4044204411
71 To: <sip:22@192.168.20.144:5060>
72 Call-ID: 0_2164660753@192.168.20.145
73 CSeq: 2 INVITE
74 Contact: <sip:11@192.168.20.145:5060>
75 Proxy-Authorization: Digest username="11", realm="192.168.20.144", nonce="1757574146:ff779fcf0b64c423be90f18088293368", uri="sip:22@192.168.20.144:5060", response="893dcadb9670385eca766d86cb545283", algorithm=MD5, cnonce="0a4f113b", qop=auth, nc=00000001
76 Content-Type: application/sdp
77 Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER, SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE
78 Max-Forwards: 70
79 User-Agent: Yealink SIP-T21P_E2 52.82.14.1
80 Supported: timer
81 Session-Expires: 300;refresher=uac
82 Min-SE: 90
83 Allow-Events: talk,hold,conference,refer,check-sync
84 Supported: replaces
85 Content-Length: 310
86
87 v=0
88 o=- 20010 20010 IN IP4 192.168.20.145
89 s=SDP data
90 c=IN IP4 192.168.20.145
91 t=0 0
92 m=audio 11858 RTP/AVP 9 0 8 18 101
93 a=rtpmap:9 G722/8000
94 a=rtpmap:0 PCMU/8000
95 a=rtpmap:8 PCMA/8000
96 a=rtpmap:18 G729/8000
97 a=fmtp:18 annexb=no
98 a=ptime:20
99 a=sendrecv
100 a=rtpmap:101 telephone-event/8000
101 a=fmtp:101 0-15
10207:02:26.749420 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 1141)
103 localhost..5060 > localhost..6060: [bad udp cksum 0x0275 -> 0x6c61!] SIP, length: 1113
104 INVITE sip:22@127.0.0.1:6060;transport=udp SIP/2.0
105 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK-524287-1---9b2d62604ef0e34c;rport
106 Via: SIP/2.0/UDP 192.168.20.145:5060;branch=z9hG4bK3538034718
107 Max-Forwards: 69
108 Record-Route: <sip:192.168.20.144:5060;transport=udp;lr>
109 Contact: <sip:11@192.168.20.145:5060>
110 To: <sip:22@192.168.20.144:5060>
111 From: "11"<sip:11@192.168.20.144:5060>;tag=4044204411
112 Call-ID: 0_2164660753@192.168.20.145
113 CSeq: 2 INVITE
114 Session-Expires: 300;refresher=uac
115 Min-SE: 90
116 Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER, SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE
117 Content-Type: application/sdp
118 Supported: timer, replaces
119 User-Agent: Yealink SIP-T21P_E2 52.82.14.1
120 Allow-Events: talk, hold, conference, refer, check-sync
121 Content-Length: 310
122
123 v=0
124 o=- 20010 20010 IN IP4 192.168.20.145
125 s=SDP data
126 c=IN IP4 192.168.20.145
127 t=0 0
128 m=audio 11858 RTP/AVP 9 0 8 18 101
129 a=rtpmap:9 G722/8000
130 a=rtpmap:0 PCMU/8000
131 a=rtpmap:8 PCMA/8000
132 a=rtpmap:18 G729/8000
133 a=fmtp:18 annexb=no
134 a=ptime:20
135 a=sendrecv
136 a=rtpmap:101 telephone-event/8000
137 a=fmtp:101 0-15
13807:02:26.761244 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 389)
139 localhost..6060 > localhost..5060: [bad udp cksum 0xff84 -> 0x5326!] SIP, length: 361
140 SIP/2.0 100 Trying
141 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK-524287-1---9b2d62604ef0e34c;rport=5060
142 Via: SIP/2.0/UDP 192.168.20.145:5060;branch=z9hG4bK3538034718
143 From: "11" <sip:11@192.168.20.144:5060>;tag=4044204411
144 To: <sip:22@192.168.20.144:5060>
145 Call-ID: 0_2164660753@192.168.20.145
146 CSeq: 2 INVITE
147 User-Agent: eXosip/5.3.0
148 Content-Length: 0
149
15007:02:26.800284 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 681)
151 localhost..6060 > localhost..5060: [bad udp cksum 0x00a9 -> 0x1edf!] SIP, length: 653
152 SIP/2.0 180 Ringing
153 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK-524287-1---9b2d62604ef0e34c;rport=5060
154 Via: SIP/2.0/UDP 192.168.20.145:5060;branch=z9hG4bK3538034718
155 Record-Route: <sip:192.168.20.144:5060;transport=udp;lr>
156 From: "11" <sip:11@192.168.20.144:5060>;tag=4044204411
157 To: <sip:22@192.168.20.144:5060>;tag=461241907
158 Call-ID: 0_2164660753@192.168.20.145
159 CSeq: 2 INVITE
160 Contact: <sip:22@127.0.0.1:6060>
161 Allow: INVITE,ACK,BYE,CANCEL,OPTIONS,REFER,NOTIFY,INFO,UPDATE,PRACK,SUBSCRIBE
162 User-Agent: eXosip/5.3.0
163 Allow-Events: conference
164 Supported: replaces,timer,100rel
165 P-Asserted-Identity: <sip:22@192.168.20.144>
166 Content-Length: 0
167
16807:02:26.815191 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 276)
169 192.168.20.144.5060 > 192.168.20.145.5060: [udp sum ok] SIP, length: 248
170 SIP/2.0 100 Trying
171 Via: SIP/2.0/UDP 192.168.20.145:5060;branch=z9hG4bK3538034718
172 To: <sip:22@192.168.20.144:5060>
173 From: "11" <sip:11@192.168.20.144:5060>;tag=4044204411
174 Call-ID: 0_2164660753@192.168.20.145
175 CSeq: 2 INVITE
176 Content-Length: 0
177
17807:02:26.815587 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 628)
179 192.168.20.144.5060 > 192.168.20.145.5060: [udp sum ok] SIP, length: 600
180 SIP/2.0 180 Ringing
181 Via: SIP/2.0/UDP 192.168.20.145:5060;branch=z9hG4bK3538034718
182 Record-Route: <sip:192.168.20.144:5060;transport=udp;lr>
183 Contact: <sip:22@127.0.0.1:6060>
184 To: <sip:22@192.168.20.144:5060>;tag=461241907
185 From: "11" <sip:11@192.168.20.144:5060>;tag=4044204411
186 Call-ID: 0_2164660753@192.168.20.145
187 CSeq: 2 INVITE
188 Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, REFER, NOTIFY, INFO, UPDATE, PRACK, SUBSCRIBE
189 Server: repro 1.12.0
190 Supported: replaces, timer, 100rel
191 User-Agent: eXosip/5.3.0
192 Allow-Events: conference
193 P-Asserted-Identity: <sip:22@192.168.20.144>
194 Content-Length: 0
195
19607:02:30.167088 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 991)
197 localhost..6060 > localhost..5060: [bad udp cksum 0x01df -> 0x51fa!] SIP, length: 963
198 SIP/2.0 200 OK
199 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK-524287-1---9b2d62604ef0e34c;rport=5060
200 Via: SIP/2.0/UDP 192.168.20.145:5060;branch=z9hG4bK3538034718
201 Record-Route: <sip:192.168.20.144:5060;transport=udp;lr>
202 From: "11" <sip:11@192.168.20.144:5060>;tag=4044204411
203 To: <sip:22@192.168.20.144:5060>;tag=461241907
204 Call-ID: 0_2164660753@192.168.20.145
205 CSeq: 2 INVITE
206 Contact: <sip:22@127.0.0.1:6060>
207 Content-Type: application/sdp
208 Allow: INVITE,ACK,BYE,CANCEL,OPTIONS,REFER,NOTIFY,INFO,UPDATE,PRACK,SUBSCRIBE
209 Session-expires: 300;refresher=uac
210 User-Agent: eXosip/5.3.0
211 Allow-Events: conference
212 Supported: replaces,timer,100rel
213 X-Endpoint-Type: FS01
214 P-Asserted-Identity: <sip:22@192.168.20.144>
215 Require: timer
216 Content-Length: 205
217
218 v=0
219 o=gateway 0 0 IN IP4 192.168.20.144
220 s=conversation
221 c=IN IP4 192.168.20.144
222 t=0 0
223 m=audio 10508 RTP/AVP 9 101
224 a=rtpmap:9 G722/8000
225 a=rtpmap:101 telephone-event/8000
226 a=fmtp:101 0-15
227 a=sendrecv
22807:02:30.178693 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 936)
229 192.168.20.144.5060 > 192.168.20.145.5060: [udp sum ok] SIP, length: 908
230 SIP/2.0 200 OK
231 Via: SIP/2.0/UDP 192.168.20.145:5060;branch=z9hG4bK3538034718
232 Record-Route: <sip:192.168.20.144:5060;transport=udp;lr>
233 Require: timer
234 Contact: <sip:22@127.0.0.1:6060>
235 To: <sip:22@192.168.20.144:5060>;tag=461241907
236 From: "11" <sip:11@192.168.20.144:5060>;tag=4044204411
237 Call-ID: 0_2164660753@192.168.20.145
238 CSeq: 2 INVITE
239 Session-Expires: 300;refresher=uac
240 Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, REFER, NOTIFY, INFO, UPDATE, PRACK, SUBSCRIBE
241 Content-Type: application/sdp
242 Server: repro 1.12.0
243 Supported: replaces, timer, 100rel
244 User-Agent: eXosip/5.3.0
245 Allow-Events: conference
246 P-Asserted-Identity: <sip:22@192.168.20.144>
247 X-Endpoint-Type: FS01
248 Content-Length: 205
249
250 v=0
251 o=gateway 0 0 IN IP4 192.168.20.144
252 s=conversation
253 c=IN IP4 192.168.20.144
254 t=0 0
255 m=audio 10508 RTP/AVP 9 101
256 a=rtpmap:9 G722/8000
257 a=rtpmap:101 telephone-event/8000
258 a=fmtp:101 0-15
259 a=sendrecv
26007:02:30.192697 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 710)
261 192.168.20.145.5060 > 192.168.20.144.5060: [udp sum ok] SIP, length: 682
262 ACK sip:22@127.0.0.1:6060 SIP/2.0
263 Via: SIP/2.0/UDP 192.168.20.145:5060;branch=z9hG4bK2189259537
264 Route: <sip:192.168.20.144:5060;transport=udp;lr>
265 From: "11" <sip:11@192.168.20.144:5060>;tag=4044204411
266 To: <sip:22@192.168.20.144:5060>;tag=461241907
267 Call-ID: 0_2164660753@192.168.20.145
268 CSeq: 2 ACK
269 Contact: <sip:11@192.168.20.145:5060>
270 Proxy-Authorization: Digest username="11", realm="192.168.20.144", nonce="1757574146:ff779fcf0b64c423be90f18088293368", uri="sip:22@192.168.20.144:5060", response="893dcadb9670385eca766d86cb545283", algorithm=MD5, cnonce="0a4f113b", qop=auth, nc=00000001
271 Max-Forwards: 70
272 User-Agent: Yealink SIP-T21P_E2 52.82.14.1
273 Content-Length: 0
274
27507:02:30.203258 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 741)
276 localhost..5060 > localhost..6060: [bad udp cksum 0x00e5 -> 0x9e14!] SIP, length: 713
277 ACK sip:22@127.0.0.1:6060 SIP/2.0
278 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK-524287-1---f3e4b60bb123a848;rport
279 Via: SIP/2.0/UDP 192.168.20.145:5060;branch=z9hG4bK2189259537
280 Max-Forwards: 69
281 Contact: <sip:11@192.168.20.145:5060>
282 To: <sip:22@192.168.20.144:5060>;tag=461241907
283 From: "11" <sip:11@192.168.20.144:5060>;tag=4044204411
284 Call-ID: 0_2164660753@192.168.20.145
285 CSeq: 2 ACK
286 Proxy-Authorization: Digest username="11", realm="192.168.20.144", nonce="1757574146:ff779fcf0b64c423be90f18088293368", uri="sip:22@192.168.20.144:5060", response="893dcadb9670385eca766d86cb545283", algorithm=MD5, cnonce="0a4f113b", qop=auth, nc=00000001
287 User-Agent: Yealink SIP-T21P_E2 52.82.14.1
288 Content-Length: 0
289
29007:02:31.056619 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 32)
291 192.168.20.145.5060 > 192.168.20.144.5060: [udp sum ok] SIP
29207:02:40.515591 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 403)
293 localhost..6060 > localhost..5060: [bad udp cksum 0xff92 -> 0xc4d3!] SIP, length: 375
294 BYE sip:11@192.168.20.145:5060 SIP/2.0
295 Via: SIP/2.0/UDP 127.0.0.1:6060;rport;branch=z9hG4bK1825194370
296 Route: <sip:192.168.20.144:5060;transport=udp;lr>
297 From: <sip:22@192.168.20.144:5060>;tag=461241907
298 To: "11" <sip:11@192.168.20.144:5060>;tag=4044204411
299 Call-ID: 0_2164660753@192.168.20.145
300 CSeq: 2 BYE
301 Max-Forwards: 70
302 User-Agent: eXosip/5.3.0
303 Content-Length: 0
304
30507:02:40.537870 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 444)
306 192.168.20.144.5060 > 192.168.20.145.5060: [udp sum ok] SIP, length: 416
307 BYE sip:11@192.168.20.145:5060 SIP/2.0
308 Via: SIP/2.0/UDP 192.168.20.144:5060;branch=z9hG4bK-524287-1---4104311d73a79631;rport
309 Via: SIP/2.0/UDP 127.0.0.1:6060;rport=6060;branch=z9hG4bK1825194370
310 Max-Forwards: 69
311 To: "11" <sip:11@192.168.20.144:5060>;tag=4044204411
312 From: <sip:22@192.168.20.144:5060>;tag=461241907
313 Call-ID: 0_2164660753@192.168.20.145
314 CSeq: 2 BYE
315 User-Agent: eXosip/5.3.0
316 Content-Length: 0
317
31807:02:40.543685 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 425)
319 192.168.20.145.5060 > 192.168.20.144.5060: [udp sum ok] SIP, length: 397
320 SIP/2.0 200 OK
321 Via: SIP/2.0/UDP 192.168.20.144:5060;branch=z9hG4bK-524287-1---4104311d73a79631;rport=5060
322 Via: SIP/2.0/UDP 127.0.0.1:6060;rport=6060;branch=z9hG4bK1825194370
323 From: <sip:22@192.168.20.144:5060>;tag=461241907
324 To: "11" <sip:11@192.168.20.144:5060>;tag=4044204411
325 Call-ID: 0_2164660753@192.168.20.145
326 CSeq: 2 BYE
327 User-Agent: Yealink SIP-T21P_E2 52.82.14.1
328 Content-Length: 0
329
33007:02:40.553795 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 355)
331 localhost..5060 > localhost..6060: [bad udp cksum 0xff62 -> 0x5a1c!] SIP, length: 327
332 SIP/2.0 200 OK
333 Via: SIP/2.0/UDP 127.0.0.1:6060;rport=6060;branch=z9hG4bK1825194370
334 To: "11" <sip:11@192.168.20.144:5060>;tag=4044204411
335 From: <sip:22@192.168.20.144:5060>;tag=461241907
336 Call-ID: 0_2164660753@192.168.20.145
337 CSeq: 2 BYE
338 Server: repro 1.12.0
339 User-Agent: Yealink SIP-T21P_E2 52.82.14.1
340 Content-Length: 0
341
342
34318 packets captured
34425 packets received by filter
3450 packets dropped by kernel
346root@comcerto:~#