root@comcerto:~# tcpdump -i any port 5060 -v tcpdump: listening on any, link-type LINUX_SLL (Linux cooked v1), capture size 262144 bytes 08:05:22.589393 IP (tos 0x68, ttl 64, id 1532, offset 0, flags [DF], proto TCP (6), length 1016) 192.168.30.10.12552 > 192.168.20.56.5060: Flags [P.], cksum 0x48c6 (correct), seq 1334640457:1334641433, ack 4199157803, win 7587, length 976 08:05:22.604968 IP (tos 0x0, ttl 64, id 27585, offset 0, flags [DF], proto TCP (6), length 475) 192.168.20.56.5060 > 192.168.30.10.12552: Flags [P.], cksum 0xf865 (correct), seq 1:436, ack 976, win 16019, length 435 08:05:22.606392 IP (tos 0x68, ttl 64, id 1533, offset 0, flags [DF], proto TCP (6), length 40) 192.168.30.10.12552 > 192.168.20.56.5060: Flags [.], cksum 0x3b03 (correct), ack 436, win 7587, length 0 08:05:22.609431 IP (tos 0x68, ttl 64, id 1534, offset 0, flags [DF], proto TCP (6), length 311) 192.168.30.10.12552 > 192.168.20.56.5060: Flags [P.], cksum 0xe54f (correct), seq 976:1247, ack 436, win 7587, length 271 08:05:22.616405 IP (tos 0x68, ttl 64, id 1535, offset 0, flags [DF], proto TCP (6), length 1271) 192.168.30.10.12552 > 192.168.20.56.5060: Flags [P.], cksum 0xece2 (correct), seq 1247:2478, ack 436, win 7587, length 1231 08:05:22.616720 IP (tos 0x0, ttl 64, id 27586, offset 0, flags [DF], proto TCP (6), length 40) 192.168.20.56.5060 > 192.168.30.10.12552: Flags [.], cksum 0x1435 (correct), ack 2478, win 16019, length 0 08:05:22.645235 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 1211) localhost..5060 > localhost..6060: SIP, length: 1183 INVITE sip:33@127.0.0.1:6060;transport=udp SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK-524287-1---be94c8319657ce5b;rport Via: SIP/2.0/TCP 192.168.30.10:5060;branch=z9hG4bK3270969830 Max-Forwards: 69 Record-Route: Record-Route: Contact: To: From: "11";tag=3544724365 Call-ID: 0_479967031@192.168.30.10 CSeq: 2 INVITE Session-Expires: 300;refresher=uac Min-SE: 90 Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER, SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE Content-Type: application/sdp Supported: timer, replaces User-Agent: Yealink SIP-T21P_E2 52.82.14.1 Allow-Events: talk, hold, conference, refer, check-sync Content-Length: 308 v=0 o=- 20024 20024 IN IP4 192.168.30.10 s=SDP data c=IN IP4 192.168.30.10 t=0 0 m=audio 12068 RTP/AVP 9 0 8 18 101 a=rtpmap:9 G722/8000 a=rtpmap:0 PCMU/8000 a=rtpmap:8 PCMA/8000 a=rtpmap:18 G729/8000 a=fmtp:18 annexb=no a=ptime:20 a=sendrecv a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-15 08:05:22.656610 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 384) localhost..6060 > localhost..5060: SIP, length: 356 SIP/2.0 100 Trying Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK-524287-1---be94c8319657ce5b;rport=5060 Via: SIP/2.0/TCP 192.168.30.10:5060;branch=z9hG4bK3270969830 From: "11" ;tag=3544724365 To: Call-ID: 0_479967031@192.168.30.10 CSeq: 2 INVITE User-Agent: eXosip/5.3.0 Content-Length: 0 08:05:22.695478 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 740) localhost..6060 > localhost..5060: SIP, length: 712 SIP/2.0 180 Ringing Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK-524287-1---be94c8319657ce5b;rport=5060 Via: SIP/2.0/TCP 192.168.30.10:5060;branch=z9hG4bK3270969830 Record-Route: Record-Route: From: "11" ;tag=3544724365 To: ;tag=2078498744 Call-ID: 0_479967031@192.168.30.10 CSeq: 2 INVITE Contact: Allow: INVITE,ACK,BYE,CANCEL,OPTIONS,REFER,NOTIFY,INFO,UPDATE,PRACK,SUBSCRIBE User-Agent: eXosip/5.3.0 Allow-Events: conference Supported: replaces,timer,100rel P-Asserted-Identity: Content-Length: 0 08:05:22.703784 IP (tos 0x0, ttl 64, id 27587, offset 0, flags [DF], proto TCP (6), length 283) 192.168.20.56.5060 > 192.168.30.10.12552: Flags [P.], cksum 0xc3d5 (correct), seq 436:679, ack 2478, win 16019, length 243 08:05:22.736391 IP (tos 0x68, ttl 64, id 1536, offset 0, flags [DF], proto TCP (6), length 40) 192.168.30.10.12552 > 192.168.20.56.5060: Flags [.], cksum 0x3432 (correct), ack 679, win 7587, length 0 08:05:22.736743 IP (tos 0x0, ttl 64, id 27588, offset 0, flags [DF], proto TCP (6), length 699) 192.168.20.56.5060 > 192.168.30.10.12552: Flags [P.], cksum 0xdae3 (correct), seq 679:1338, ack 2478, win 16019, length 659 08:05:22.738399 IP (tos 0x68, ttl 64, id 1537, offset 0, flags [DF], proto TCP (6), length 40) 192.168.30.10.12552 > 192.168.20.56.5060: Flags [.], cksum 0x319f (correct), ack 1338, win 7587, length 0 08:05:25.805576 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 1036) localhost..6060 > localhost..5060: SIP, length: 1008 SIP/2.0 200 OK Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK-524287-1---be94c8319657ce5b;rport=5060 Via: SIP/2.0/TCP 192.168.30.10:5060;branch=z9hG4bK3270969830 Record-Route: Record-Route: From: "11" ;tag=3544724365 To: ;tag=2078498744 Call-ID: 0_479967031@192.168.30.10 CSeq: 2 INVITE Contact: Content-Type: application/sdp Allow: INVITE,ACK,BYE,CANCEL,OPTIONS,REFER,NOTIFY,INFO,UPDATE,PRACK,SUBSCRIBE Session-expires: 300;refresher=uac User-Agent: eXosip/5.3.0 Allow-Events: conference Supported: replaces,timer,100rel X-Endpoint-Type: FS01 P-Asserted-Identity: Require: timer Content-Length: 191 v=0 o=gateway 0 0 IN IP4 192.168.20.56 s=conversation c=IN IP4 192.168.20.56 t=0 0 m=audio 10510 RTP/AVP 9 101 a=rtpmap:9 G722/8000 a=rtpmap:101 telephone-event/8000 a=fmtp:101 0-15 08:05:25.835643 IP (tos 0x0, ttl 64, id 27589, offset 0, flags [DF], proto TCP (6), length 993) 192.168.20.56.5060 > 192.168.30.10.12552: Flags [P.], cksum 0xe0b0 (correct), seq 1338:2291, ack 2478, win 16019, length 953 08:05:25.837456 IP (tos 0x68, ttl 64, id 1538, offset 0, flags [DF], proto TCP (6), length 40) 192.168.30.10.12552 > 192.168.20.56.5060: Flags [.], cksum 0x2de6 (correct), ack 2291, win 7587, length 0 08:05:25.888429 IP (tos 0x68, ttl 64, id 1539, offset 0, flags [DF], proto TCP (6), length 786) 192.168.30.10.12552 > 192.168.20.56.5060: Flags [P.], cksum 0xfe35 (correct), seq 2478:3224, ack 2291, win 7587, length 746 08:05:25.899334 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 748) localhost..5060 > localhost..6060: SIP, length: 720 ACK sip:33@127.0.0.1:6060 SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK-524287-1---75c0c1326a2b6277;rport Via: SIP/2.0/TCP 192.168.30.10:5060;branch=z9hG4bK2917455606 Max-Forwards: 69 Contact: To: ;tag=2078498744 From: "11" ;tag=3544724365 Call-ID: 0_479967031@192.168.30.10 CSeq: 2 ACK Proxy-Authorization: Digest username="11", realm="192.168.20.56", nonce="1750233922:cedf5224fc70512c70b5b98186ec1f89", uri="sip:33@192.168.20.56:5060", response="0a426a0c8afd587f091c5c31bcd247c6", algorithm=MD5, cnonce="0a4f113b", qop=auth, nc=00000001 User-Agent: Yealink SIP-T21P_E2 52.82.14.1 Content-Length: 0 08:05:25.921890 IP (tos 0x0, ttl 64, id 27590, offset 0, flags [DF], proto TCP (6), length 40) 192.168.20.56.5060 > 192.168.30.10.12552: Flags [.], cksum 0x0a0c (correct), ack 3224, win 16019, length 0 08:05:29.283659 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 470) localhost..6060 > localhost..5060: SIP, length: 442 BYE sip:11@192.168.30.10:5060;transport=TCP SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:6060;rport;branch=z9hG4bK1082959463 Route: Route: From: ;tag=2078498744 To: "11" ;tag=3544724365 Call-ID: 0_479967031@192.168.30.10 CSeq: 2 BYE Max-Forwards: 70 User-Agent: eXosip/5.3.0 Content-Length: 0 08:05:29.302250 IP (tos 0x0, ttl 64, id 24915, offset 0, flags [DF], proto TCP (6), length 464) 192.168.30.1.58728 > 192.168.30.10.5060: Flags [P.], cksum 0x55e2 (correct), seq 1224479748:1224480172, ack 549697383, win 1460, length 424 08:05:29.303489 IP (tos 0x68, ttl 64, id 57441, offset 0, flags [DF], proto TCP (6), length 40) 192.168.30.10.5060 > 192.168.30.1.58728: Flags [.], cksum 0xa3c1 (correct), ack 424, win 7863, length 0 08:05:29.813617 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 470) localhost..6060 > localhost..5060: SIP, length: 442 BYE sip:11@192.168.30.10:5060;transport=TCP SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:6060;rport;branch=z9hG4bK1082959463 Route: Route: From: ;tag=2078498744 To: "11" ;tag=3544724365 Call-ID: 0_479967031@192.168.30.10 CSeq: 2 BYE Max-Forwards: 70 User-Agent: eXosip/5.3.0 Content-Length: 0 08:05:30.823672 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 470) localhost..6060 > localhost..5060: SIP, length: 442 BYE sip:11@192.168.30.10:5060;transport=TCP SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:6060;rport;branch=z9hG4bK1082959463 Route: Route: From: ;tag=2078498744 To: "11" ;tag=3544724365 Call-ID: 0_479967031@192.168.30.10 CSeq: 2 BYE Max-Forwards: 70 User-Agent: eXosip/5.3.0 Content-Length: 0 08:05:32.802337 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 290) localhost..5060 > localhost..6060: SIP, length: 262 SIP/2.0 100 Trying Via: SIP/2.0/UDP 127.0.0.1:6060;rport=6060;branch=z9hG4bK1082959463 To: "11" ;tag=3544724365 From: ;tag=2078498744 Call-ID: 0_479967031@192.168.30.10 CSeq: 2 BYE Content-Length: 0 08:05:36.813776 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 470) localhost..6060 > localhost..5060: SIP, length: 442 BYE sip:11@192.168.30.10:5060;transport=TCP SIP/2.0 Via: SIP/2.0/UDP 127.0.0.1:6060;rport;branch=z9hG4bK1082959463 Route: Route: From: ;tag=2078498744 To: "11" ;tag=3544724365 Call-ID: 0_479967031@192.168.30.10 CSeq: 2 BYE Max-Forwards: 70 User-Agent: eXosip/5.3.0 Content-Length: 0 08:05:36.818390 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 290) localhost..5060 > localhost..6060: SIP, length: 262 SIP/2.0 100 Trying Via: SIP/2.0/UDP 127.0.0.1:6060;rport=6060;branch=z9hG4bK1082959463 To: "11" ;tag=3544724365 From: ;tag=2078498744 Call-ID: 0_479967031@192.168.30.10 CSeq: 2 BYE Content-Length: 0 27 packets captured 41 packets received by filter 0 packets dropped by kernel