<div dir="ltr">Greetings,<div><br></div><div>I have a doubt about the flag 16 used in nat_uac_test() belonging to the module NATDETECT.</div><div><br></div><div>In the documentation, the following is stated : </div><div><br></div><div>

<span class="emphasis" style="color:rgb(0,0,0);font-family:Helvetica,Arial,sans-serif;font-size:15px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:justify;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"><em>16</em></span><span style="color:rgb(0,0,0);font-family:Helvetica,Arial,sans-serif;font-size:15px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:justify;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline"><span> </span>- Test if the source port is different from the port in the<span> </span></span><span class="gmail-quote" style="color:rgb(0,0,0);font-family:Helvetica,Arial,sans-serif;font-size:15px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:justify;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial">“<span class="gmail-quote">Via</span>”</span><span style="color:rgb(0,0,0);font-family:Helvetica,Arial,sans-serif;font-size:15px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:justify;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline"><span> </span>header</span>

<br></div><div><br></div><div>I have some situations that I receive a request from port 5060 and the Via Header contains no port. I think it probably assumes that it is the default port.  </div><div><br></div><div>Will this situation trigger the "16" flag ? </div><div><br></div><div>Thanks in advance, </div><div><br></div><div>Cheers</div></div>