root@comcerto:~# tcpdump -i any port 5060 -v
tcpdump: listening on any, link-type LINUX_SLL (Linux cooked v1), capture size 262144 bytes
08:05:22.589393 IP (tos 0x68, ttl 64, id 1532, offset 0, flags [DF], proto TCP (6), length 1016)
    192.168.30.10.12552 > 192.168.20.56.5060: Flags [P.], cksum 0x48c6 (correct), seq 1334640457:1334641433, ack 4199157803, win 7587, length 976
08:05:22.604968 IP (tos 0x0, ttl 64, id 27585, offset 0, flags [DF], proto TCP (6), length 475)
    192.168.20.56.5060 > 192.168.30.10.12552: Flags [P.], cksum 0xf865 (correct), seq 1:436, ack 976, win 16019, length 435
08:05:22.606392 IP (tos 0x68, ttl 64, id 1533, offset 0, flags [DF], proto TCP (6), length 40)
    192.168.30.10.12552 > 192.168.20.56.5060: Flags [.], cksum 0x3b03 (correct), ack 436, win 7587, length 0
08:05:22.609431 IP (tos 0x68, ttl 64, id 1534, offset 0, flags [DF], proto TCP (6), length 311)
    192.168.30.10.12552 > 192.168.20.56.5060: Flags [P.], cksum 0xe54f (correct), seq 976:1247, ack 436, win 7587, length 271
08:05:22.616405 IP (tos 0x68, ttl 64, id 1535, offset 0, flags [DF], proto TCP (6), length 1271)
    192.168.30.10.12552 > 192.168.20.56.5060: Flags [P.], cksum 0xece2 (correct), seq 1247:2478, ack 436, win 7587, length 1231
08:05:22.616720 IP (tos 0x0, ttl 64, id 27586, offset 0, flags [DF], proto TCP (6), length 40)
    192.168.20.56.5060 > 192.168.30.10.12552: Flags [.], cksum 0x1435 (correct), ack 2478, win 16019, length 0
08:05:22.645235 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 1211)
    localhost..5060 > localhost..6060: SIP, length: 1183
        INVITE sip:33@127.0.0.1:6060;transport=udp SIP/2.0
        Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK-524287-1---be94c8319657ce5b;rport
        Via: SIP/2.0/TCP 192.168.30.10:5060;branch=z9hG4bK3270969830
        Max-Forwards: 69
        Record-Route: <sip:192.168.20.56:5060;transport=udp;lr;drr>
        Record-Route: <sip:192.168.20.56:5060;transport=tcp;lr;drr>
        Contact: <sip:11@192.168.30.10:5060;transport=TCP>
        To: <sip:33@192.168.20.56:5060>
        From: "11"<sip:11@192.168.20.56:5060>;tag=3544724365
        Call-ID: 0_479967031@192.168.30.10
        CSeq: 2 INVITE
        Session-Expires: 300;refresher=uac
        Min-SE: 90
        Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER, SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE
        Content-Type: application/sdp
        Supported: timer, replaces
        User-Agent: Yealink SIP-T21P_E2 52.82.14.1
        Allow-Events: talk, hold, conference, refer, check-sync
        Content-Length: 308

        v=0
        o=- 20024 20024 IN IP4 192.168.30.10
        s=SDP data
        c=IN IP4 192.168.30.10
        t=0 0
        m=audio 12068 RTP/AVP 9 0 8 18 101
        a=rtpmap:9 G722/8000
        a=rtpmap:0 PCMU/8000
        a=rtpmap:8 PCMA/8000
        a=rtpmap:18 G729/8000
        a=fmtp:18 annexb=no
        a=ptime:20
        a=sendrecv
        a=rtpmap:101 telephone-event/8000
        a=fmtp:101 0-15
08:05:22.656610 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 384)
    localhost..6060 > localhost..5060: SIP, length: 356
        SIP/2.0 100 Trying
        Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK-524287-1---be94c8319657ce5b;rport=5060
        Via: SIP/2.0/TCP 192.168.30.10:5060;branch=z9hG4bK3270969830
        From: "11" <sip:11@192.168.20.56:5060>;tag=3544724365
        To: <sip:33@192.168.20.56:5060>
        Call-ID: 0_479967031@192.168.30.10
        CSeq: 2 INVITE
        User-Agent: eXosip/5.3.0
        Content-Length: 0

08:05:22.695478 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 740)
    localhost..6060 > localhost..5060: SIP, length: 712
        SIP/2.0 180 Ringing
        Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK-524287-1---be94c8319657ce5b;rport=5060
        Via: SIP/2.0/TCP 192.168.30.10:5060;branch=z9hG4bK3270969830
        Record-Route: <sip:192.168.20.56:5060;transport=udp;lr;drr>
        Record-Route: <sip:192.168.20.56:5060;transport=tcp;lr;drr>
        From: "11" <sip:11@192.168.20.56:5060>;tag=3544724365
        To: <sip:33@192.168.20.56:5060>;tag=2078498744
        Call-ID: 0_479967031@192.168.30.10
        CSeq: 2 INVITE
        Contact: <sip:33@127.0.0.1:6060>
        Allow: INVITE,ACK,BYE,CANCEL,OPTIONS,REFER,NOTIFY,INFO,UPDATE,PRACK,SUBSCRIBE
        User-Agent: eXosip/5.3.0
        Allow-Events: conference
        Supported: replaces,timer,100rel
        P-Asserted-Identity: <sip:33@192.168.20.56>
        Content-Length: 0

08:05:22.703784 IP (tos 0x0, ttl 64, id 27587, offset 0, flags [DF], proto TCP (6), length 283)
    192.168.20.56.5060 > 192.168.30.10.12552: Flags [P.], cksum 0xc3d5 (correct), seq 436:679, ack 2478, win 16019, length 243
08:05:22.736391 IP (tos 0x68, ttl 64, id 1536, offset 0, flags [DF], proto TCP (6), length 40)
    192.168.30.10.12552 > 192.168.20.56.5060: Flags [.], cksum 0x3432 (correct), ack 679, win 7587, length 0
08:05:22.736743 IP (tos 0x0, ttl 64, id 27588, offset 0, flags [DF], proto TCP (6), length 699)
    192.168.20.56.5060 > 192.168.30.10.12552: Flags [P.], cksum 0xdae3 (correct), seq 679:1338, ack 2478, win 16019, length 659
08:05:22.738399 IP (tos 0x68, ttl 64, id 1537, offset 0, flags [DF], proto TCP (6), length 40)
    192.168.30.10.12552 > 192.168.20.56.5060: Flags [.], cksum 0x319f (correct), ack 1338, win 7587, length 0
08:05:25.805576 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 1036)
    localhost..6060 > localhost..5060: SIP, length: 1008
        SIP/2.0 200 OK
        Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK-524287-1---be94c8319657ce5b;rport=5060
        Via: SIP/2.0/TCP 192.168.30.10:5060;branch=z9hG4bK3270969830
        Record-Route: <sip:192.168.20.56:5060;transport=udp;lr;drr>
        Record-Route: <sip:192.168.20.56:5060;transport=tcp;lr;drr>
        From: "11" <sip:11@192.168.20.56:5060>;tag=3544724365
        To: <sip:33@192.168.20.56:5060>;tag=2078498744
        Call-ID: 0_479967031@192.168.30.10
        CSeq: 2 INVITE
        Contact: <sip:33@127.0.0.1:6060>
        Content-Type: application/sdp
        Allow: INVITE,ACK,BYE,CANCEL,OPTIONS,REFER,NOTIFY,INFO,UPDATE,PRACK,SUBSCRIBE
        Session-expires: 300;refresher=uac
        User-Agent: eXosip/5.3.0
        Allow-Events: conference
        Supported: replaces,timer,100rel
        X-Endpoint-Type: FS01
        P-Asserted-Identity: <sip:33@192.168.20.56>
        Require: timer
        Content-Length:   191

        v=0
        o=gateway 0 0 IN IP4 192.168.20.56
        s=conversation
        c=IN IP4 192.168.20.56
        t=0 0
        m=audio 10510 RTP/AVP 9 101
        a=rtpmap:9 G722/8000
        a=rtpmap:101 telephone-event/8000
        a=fmtp:101 0-15
08:05:25.835643 IP (tos 0x0, ttl 64, id 27589, offset 0, flags [DF], proto TCP (6), length 993)
    192.168.20.56.5060 > 192.168.30.10.12552: Flags [P.], cksum 0xe0b0 (correct), seq 1338:2291, ack 2478, win 16019, length 953
08:05:25.837456 IP (tos 0x68, ttl 64, id 1538, offset 0, flags [DF], proto TCP (6), length 40)
    192.168.30.10.12552 > 192.168.20.56.5060: Flags [.], cksum 0x2de6 (correct), ack 2291, win 7587, length 0
08:05:25.888429 IP (tos 0x68, ttl 64, id 1539, offset 0, flags [DF], proto TCP (6), length 786)
    192.168.30.10.12552 > 192.168.20.56.5060: Flags [P.], cksum 0xfe35 (correct), seq 2478:3224, ack 2291, win 7587, length 746
08:05:25.899334 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 748)
    localhost..5060 > localhost..6060: SIP, length: 720
        ACK sip:33@127.0.0.1:6060 SIP/2.0
        Via: SIP/2.0/UDP 127.0.0.1:5060;branch=z9hG4bK-524287-1---75c0c1326a2b6277;rport
        Via: SIP/2.0/TCP 192.168.30.10:5060;branch=z9hG4bK2917455606
        Max-Forwards: 69
        Contact: <sip:11@192.168.30.10:5060;transport=TCP>
        To: <sip:33@192.168.20.56:5060>;tag=2078498744
        From: "11" <sip:11@192.168.20.56:5060>;tag=3544724365
        Call-ID: 0_479967031@192.168.30.10
        CSeq: 2 ACK
        Proxy-Authorization: Digest username="11", realm="192.168.20.56", nonce="1750233922:cedf5224fc70512c70b5b98186ec1f89", uri="sip:33@192.168.20.56:5060", response="0a426a0c8afd587f091c5c31bcd247c6", algorithm=MD5, cnonce="0a4f113b", qop=auth, nc=00000001
        User-Agent: Yealink SIP-T21P_E2 52.82.14.1
        Content-Length: 0

08:05:25.921890 IP (tos 0x0, ttl 64, id 27590, offset 0, flags [DF], proto TCP (6), length 40)
    192.168.20.56.5060 > 192.168.30.10.12552: Flags [.], cksum 0x0a0c (correct), ack 3224, win 16019, length 0
08:05:29.283659 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 470)
    localhost..6060 > localhost..5060: SIP, length: 442
        BYE sip:11@192.168.30.10:5060;transport=TCP SIP/2.0
        Via: SIP/2.0/UDP 127.0.0.1:6060;rport;branch=z9hG4bK1082959463
        Route: <sip:192.168.20.56:5060;transport=udp;lr;drr>
        Route: <sip:192.168.20.56:5060;transport=tcp;lr;drr>
        From: <sip:33@192.168.20.56:5060>;tag=2078498744
        To: "11" <sip:11@192.168.20.56:5060>;tag=3544724365
        Call-ID: 0_479967031@192.168.30.10
        CSeq: 2 BYE
        Max-Forwards: 70
        User-Agent: eXosip/5.3.0
        Content-Length: 0

08:05:29.302250 IP (tos 0x0, ttl 64, id 24915, offset 0, flags [DF], proto TCP (6), length 464)
    192.168.30.1.58728 > 192.168.30.10.5060: Flags [P.], cksum 0x55e2 (correct), seq 1224479748:1224480172, ack 549697383, win 1460, length 424
08:05:29.303489 IP (tos 0x68, ttl 64, id 57441, offset 0, flags [DF], proto TCP (6), length 40)
    192.168.30.10.5060 > 192.168.30.1.58728: Flags [.], cksum 0xa3c1 (correct), ack 424, win 7863, length 0
08:05:29.813617 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 470)
    localhost..6060 > localhost..5060: SIP, length: 442
        BYE sip:11@192.168.30.10:5060;transport=TCP SIP/2.0
        Via: SIP/2.0/UDP 127.0.0.1:6060;rport;branch=z9hG4bK1082959463
        Route: <sip:192.168.20.56:5060;transport=udp;lr;drr>
        Route: <sip:192.168.20.56:5060;transport=tcp;lr;drr>
        From: <sip:33@192.168.20.56:5060>;tag=2078498744
        To: "11" <sip:11@192.168.20.56:5060>;tag=3544724365
        Call-ID: 0_479967031@192.168.30.10
        CSeq: 2 BYE
        Max-Forwards: 70
        User-Agent: eXosip/5.3.0
        Content-Length: 0

08:05:30.823672 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 470)
    localhost..6060 > localhost..5060: SIP, length: 442
        BYE sip:11@192.168.30.10:5060;transport=TCP SIP/2.0
        Via: SIP/2.0/UDP 127.0.0.1:6060;rport;branch=z9hG4bK1082959463
        Route: <sip:192.168.20.56:5060;transport=udp;lr;drr>
        Route: <sip:192.168.20.56:5060;transport=tcp;lr;drr>
        From: <sip:33@192.168.20.56:5060>;tag=2078498744
        To: "11" <sip:11@192.168.20.56:5060>;tag=3544724365
        Call-ID: 0_479967031@192.168.30.10
        CSeq: 2 BYE
        Max-Forwards: 70
        User-Agent: eXosip/5.3.0
        Content-Length: 0

08:05:32.802337 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 290)
    localhost..5060 > localhost..6060: SIP, length: 262
        SIP/2.0 100 Trying
        Via: SIP/2.0/UDP 127.0.0.1:6060;rport=6060;branch=z9hG4bK1082959463
        To: "11" <sip:11@192.168.20.56:5060>;tag=3544724365
        From: <sip:33@192.168.20.56:5060>;tag=2078498744
        Call-ID: 0_479967031@192.168.30.10
        CSeq: 2 BYE
        Content-Length: 0

08:05:36.813776 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 470)
    localhost..6060 > localhost..5060: SIP, length: 442
        BYE sip:11@192.168.30.10:5060;transport=TCP SIP/2.0
        Via: SIP/2.0/UDP 127.0.0.1:6060;rport;branch=z9hG4bK1082959463
        Route: <sip:192.168.20.56:5060;transport=udp;lr;drr>
        Route: <sip:192.168.20.56:5060;transport=tcp;lr;drr>
        From: <sip:33@192.168.20.56:5060>;tag=2078498744
        To: "11" <sip:11@192.168.20.56:5060>;tag=3544724365
        Call-ID: 0_479967031@192.168.30.10
        CSeq: 2 BYE
        Max-Forwards: 70
        User-Agent: eXosip/5.3.0
        Content-Length: 0

08:05:36.818390 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 290)
    localhost..5060 > localhost..6060: SIP, length: 262
        SIP/2.0 100 Trying
        Via: SIP/2.0/UDP 127.0.0.1:6060;rport=6060;branch=z9hG4bK1082959463
        To: "11" <sip:11@192.168.20.56:5060>;tag=3544724365
        From: <sip:33@192.168.20.56:5060>;tag=2078498744
        Call-ID: 0_479967031@192.168.30.10
        CSeq: 2 BYE
        Content-Length: 0


27 packets captured
41 packets received by filter
0 packets dropped by kernel