On Fri, 26 Oct 2007 18:08:14 +0200, Phil D'Amore ptdamore@gmail.com wrote:
Richard:
Hi,
In the cases where it doesn't work, can you confirm that the Contact URI in the 200 actually contains a public address as it leaves your network? What you're describing makes me think it's not, and it looks like the following to me:
GW sends 200 with private address in Contact. This private address leaks out of your network. This private address happens to fall within the range of your customer's private network.
It doesn't seem to be that. Both the gateway and the proxy have public IPs and no private ones.
The ALG sees this, and notices the RURI contains a private address from it's own local network. It PATs this address (hence the port 2021, it just picks the next port, since 2020 was already used by your PAP2T). The ACK now contains the offending address in the RURI. When your openser instance gets it, it just relays it like it was told to do based on loose routing, and the call drops.> The thing about those ALGs is that they will rewrite *anything* that matches the access list associated with the nat pool address, even if it has nothing to do with any real IP traffic flowing through the thing.
Ok. Interesting to know how it does that. In this case it doesn't seem to be that that is triggering the re-write though. I pasted the whole call trace at the end of this email, in case anyone sees anything suspicious.
Thanks for thinking this through with me, and for any tips on how I could detect and re-write these errors.
Richard.
Trace:
1.2.3.201 = Openser proxy 1.2.3.204 = Cisco gateway 81.1.2.218 = User agent IP.
U 81.1.2.218:2020 -> 1.2.3.201:5060 INVITE sip:00243999049102@sip.example.com SIP/2.0. Via: SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-21460b8b. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com. Call-ID: da59b048-d5ba4742@192.168.1.6. CSeq: 101 INVITE. Max-Forwards: 70. Contact: %5 sip:101000000@81.1.2.218:2020. Expires: 240. User-Agent: Linksys/PAP2T-3.1.15(LS). Content-Length: 252. Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER. Supported: x-sipura. Content-Type: application/sdp. . v=0. o=- 18539 18539 IN IP4 192.168.1.6. s=-. c=IN IP4 81.1.2.218. t=0 0. m=audio 16468 RTP/AVP 4 100 101. a=rtpmap:4 G723/8000. a=rtpmap:100 NSE/8000. a=fmtp:100 192-193. a=rtpmap:101 telephone-event/8000. a=fmtp:101 0-15. a=ptime:30. a=sendrecv.
U 1.2.3.201:5060 -> 81.1.2.218:2020 SIP/2.0 407 Proxy Authentication Required. Via: SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-21460b8b. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=9df88149756df0cbffcc8c4447862715.8d93. Call-ID: da59b048-d5ba4742@192.168.1.6. CSeq: 101 INVITE. Proxy-Authenticate: Digest realm="sip.example.com", nonce="4721d74d797d2fcdae92fc29db4798914ddb90a4". Server: OpenSer (1.1.0-notls (i386/linux)). Content-Length: 0. Warning: 392 1.2.3.201:5060 "Noisy feedback tells: pid=15647 req_src_ip=81.1.2.218 req_src_port=2020 in_uri=sip:00243999049102@sip.example.com out_uri=sip:00243999049102@sip.example.com via_cnt==1". .
U 81.1.2.218:2020 -> 1.2.3.201:5060 ACK sip:00243999049102@sip.example.com SIP/2.0. Via: SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-21460b8b. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=9df88149756df0cbffcc8c4447862715.8d93. Call-ID: da59b048-d5ba4742@192.168.1.6. CSeq: 101 ACK. Max-Forwards: 70. Contact: %5 sip:101000000@81.1.2.218:2020. User-Agent: Linksys/PAP2T-3.1.15(LS). Content-Length: 0. .
U 81.1.2.218:2020 -> 1.2.3.201:5060 INVITE sip:00243999049102@sip.example.com SIP/2.0. Via: SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-13d1535f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com. Call-ID: da59b048-d5ba4742@192.168.1.6. CSeq: 102 INVITE. Max-Forwards: 70. Proxy-Authorization: Digest username="101000000",realm="sip.example.com",nonce="4721d74d797d2fcdae92fc29db4798914ddb90a4",uri="sip:00243999049102@sip.example.com",algorithm=MD5,response="e038a957ab555bc5a6734800164115b6". Contact: %5 sip:101000000@81.1.2.218:2020. Expires: 240. User-Agent: Linksys/PAP2T-3.1.15(LS). Content-Length: 252. Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER. Supported: x-sipura. Content-Type: application/sdp. . v=0. o=- 18539 18539 IN IP4 192.168.1.6. s=-. c=IN IP4 81.1.2.218. t=0 0. m=audio 16468 RTP/AVP 4 100 101. a=rtpmap:4 G723/8000. a=rtpmap:100 NSE/8000. a=fmtp:100 192-193. a=rtpmap:101 telephone-event/8000. a=fmtp:101 0-15. a=ptime:30. a=sendrecv.
U 1.2.3.201:5060 -> 81.1.2.218:2020 SIP/2.0 100 trying -- your call is important to us. Via: SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-13d1535f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com. Call-ID: da59b048-d5ba4742@192.168.1.6. CSeq: 102 INVITE. Server: OpenSer (1.1.0-notls (i386/linux)). Content-Length: 0. Warning: 392 1.2.3.201:5060 "Noisy feedback tells: pid=15676 req_src_ip=81.1.2.218 req_src_port=2020 in_uri=sip:00243999049102@sip.example.com out_uri=sip:202000243999049102@1.2.3.204 via_cnt==1". .
U 1.2.3.201:5060 -> 1.2.3.204:5060 INVITE sip:202000243999049102@1.2.3.204 SIP/2.0. Record-Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Via: SIP/2.0/UDP 1.2.3.201;branch=z9hG4bKf233.b0309086.0. Via: SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-13d1535f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com. Call-ID: da59b048-d5ba4742@192.168.1.6. CSeq: 102 INVITE. Max-Forwards: 69. Contact: %5 sip:101000000@81.1.2.218:2020. Expires: 240. User-Agent: Linksys/PAP2T-3.1.15(LS). Content-Length: 252. Allow: ACK, BYE, CANCEL, INFO, INVITE, NOTIFY, OPTIONS, REFER. Supported: x-sipura. Content-Type: application/sdp. . v=0. o=- 18539 18539 IN IP4 192.168.1.6. s=-. c=IN IP4 1.2.3.201. t=0 0. m=audio 61504 RTP/AVP 4 100 101. a=rtpmap:4 G723/8000. a=rtpmap:100 NSE/8000. a=fmtp:100 192-193. a=rtpmap:101 telephone-event/8000. a=fmtp:101 0-15. a=ptime:30. a=sendrecv.
U 1.2.3.204:51431 -> 1.2.3.201:5060 SIP/2.0 100 Trying. Via: SIP/2.0/UDP 1.2.3.201;branch=z9hG4bKf233.b0309086.0,SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-13d1535f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Date: Fri, 26 Oct 2007 11:57:22 GMT. Call-ID: da59b048-d5ba4742@192.168.1.6. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 102 INVITE. Allow-Events: telephone-event. Content-Length: 0. .
U 1.2.3.204:51431 -> 1.2.3.201:5060 SIP/2.0 183 Session Progress. Via: SIP/2.0/UDP 1.2.3.201;branch=z9hG4bKf233.b0309086.0,SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-13d1535f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Date: Fri, 26 Oct 2007 11:57:22 GMT. Call-ID: da59b048-d5ba4742@192.168.1.6. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 102 INVITE. Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER. Allow-Events: telephone-event. Contact: sip:202000243999049102@1.2.3.204:5060. Record-Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Content-Disposition: session;handling=required. Content-Type: application/sdp. Content-Length: 294. . v=0. o=CiscoSystemsSIP-GW-UserAgent 1869 2060 IN IP4 1.2.3.204. s=SIP Call. c=IN IP4 1.2.3.204. t=0 0. m=audio 17204 RTP/AVP 4 101. c=IN IP4 1.2.3.204. a=rtpmap:4 G723/8000. a=fmtp:4 annexa=no. a=rtpmap:101 telephone-event/8000. a=fmtp:101 0-15. a=ptime:30. a=direction:passive.
U 1.2.3.201:5060 -> 81.1.2.218:2020 SIP/2.0 183 Session Progress. Via: SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-13d1535f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Date: Fri, 26 Oct 2007 11:57:22 GMT. Call-ID: da59b048-d5ba4742@192.168.1.6. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 102 INVITE. Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER. Allow-Events: telephone-event. Contact: sip:202000243999049102@1.2.3.204:5060. Record-Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Content-Disposition: session;handling=required. Content-Type: application/sdp. Content-Length: 294. . v=0. o=CiscoSystemsSIP-GW-UserAgent 1869 2060 IN IP4 1.2.3.204. s=SIP Call. c=IN IP4 1.2.3.201. t=0 0. m=audio 61504 RTP/AVP 4 101. c=IN IP4 1.2.3.201. a=rtpmap:4 G723/8000. a=fmtp:4 annexa=no. a=rtpmap:101 telephone-event/8000. a=fmtp:101 0-15. a=ptime:30. a=direction:passive.
U 1.2.3.204:51431 -> 1.2.3.201:5060 SIP/2.0 200 OK. Via: SIP/2.0/UDP 1.2.3.201;branch=z9hG4bKf233.b0309086.0,SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-13d1535f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Date: Fri, 26 Oct 2007 11:57:22 GMT. Call-ID: da59b048-d5ba4742@192.168.1.6. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 102 INVITE. Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER. Allow-Events: telephone-event. Contact: sip:202000243999049102@1.2.3.204:5060. Record-Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Content-Type: application/sdp. Content-Length: 294. . v=0. o=CiscoSystemsSIP-GW-UserAgent 1869 2060 IN IP4 1.2.3.204. s=SIP Call. c=IN IP4 1.2.3.204. t=0 0. m=audio 17204 RTP/AVP 4 101. c=IN IP4 1.2.3.204. a=rtpmap:4 G723/8000. a=fmtp:4 annexa=no. a=rtpmap:101 telephone-event/8000. a=fmtp:101 0-15. a=ptime:30. a=direction:passive.
U 1.2.3.201:5060 -> 81.1.2.218:2020 SIP/2.0 200 OK. Via: SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-13d1535f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Date: Fri, 26 Oct 2007 11:57:22 GMT. Call-ID: da59b048-d5ba4742@192.168.1.6. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 102 INVITE. Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER. Allow-Events: telephone-event. Contact: sip:202000243999049102@1.2.3.204:5060. Record-Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Content-Type: application/sdp. Content-Length: 294. . v=0. o=CiscoSystemsSIP-GW-UserAgent 1869 2060 IN IP4 1.2.3.204. s=SIP Call. c=IN IP4 1.2.3.201. t=0 0. m=audio 61504 RTP/AVP 4 101. c=IN IP4 1.2.3.201. a=rtpmap:4 G723/8000. a=fmtp:4 annexa=no. a=rtpmap:101 telephone-event/8000. a=fmtp:101 0-15. a=ptime:30. a=direction:passive.
U 81.1.2.218:2020 -> 1.2.3.201:5060 ACK sip:202000243999049102@81.1.2.218:2021 SIP/2.0. Via: SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-a8d9ae6f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Call-ID: da59b048-d5ba4742@192.168.1.6. CSeq: 102 ACK. Max-Forwards: 70. Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Proxy-Authorization: Digest username="101000000",realm="sip.example.com",nonce="4721d74d797d2fcdae92fc29db4798914ddb90a4",uri="sip:202000243999049102@81.1.2.218:2021",algorithm=MD5,response="d0a6ac0edaabb7fca6ef3ff448c7c4e1". Contact: %5 sip:101000000@81.1.2.218:2020. User-Agent: Linksys/PAP2T-3.1.15(LS). Content-Length: 0. .
U 1.2.3.201:5060 -> 81.1.2.218:2021 ACK sip:202000243999049102@81.1.2.218:2021 SIP/2.0. Record-Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Via: SIP/2.0/UDP 1.2.3.201;branch=z9hG4bKf233.b0309086.2. Via: SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-a8d9ae6f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Call-ID: da59b048-d5ba4742@192.168.1.6. CSeq: 102 ACK. Max-Forwards: 69. Proxy-Authorization: Digest username="101000000",realm="sip.example.com",nonce="4721d74d797d2fcdae92fc29db4798914ddb90a4",uri="sip:202000243999049102@81.1.2.218:2021",algorithm=MD5,response="d0a6ac0edaabb7fca6ef3ff448c7c4e1". Contact: %5 sip:101000000@81.1.2.218:2020. User-Agent: Linksys/PAP2T-3.1.15(LS). Content-Length: 0. .
U 1.2.3.204:51431 -> 1.2.3.201:5060 SIP/2.0 200 OK. Via: SIP/2.0/UDP 1.2.3.201;branch=z9hG4bKf233.b0309086.0,SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-13d1535f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Date: Fri, 26 Oct 2007 11:57:22 GMT. Call-ID: da59b048-d5ba4742@192.168.1.6. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 102 INVITE. Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER. Allow-Events: telephone-event. Contact: sip:202000243999049102@1.2.3.204:5060. Record-Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Content-Type: application/sdp. Content-Length: 294. . v=0. o=CiscoSystemsSIP-GW-UserAgent 1869 2060 IN IP4 1.2.3.204. s=SIP Call. c=IN IP4 1.2.3.204. t=0 0. m=audio 17204 RTP/AVP 4 101. c=IN IP4 1.2.3.204. a=rtpmap:4 G723/8000. a=fmtp:4 annexa=no. a=rtpmap:101 telephone-event/8000. a=fmtp:101 0-15. a=ptime:30. a=direction:passive.
U 1.2.3.201:5060 -> 81.1.2.218:2020 SIP/2.0 200 OK. Via: SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-13d1535f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Date: Fri, 26 Oct 2007 11:57:22 GMT. Call-ID: da59b048-d5ba4742@192.168.1.6. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 102 INVITE. Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER. Allow-Events: telephone-event. Contact: sip:202000243999049102@1.2.3.204:5060. Record-Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Content-Type: application/sdp. Content-Length: 294. . v=0. o=CiscoSystemsSIP-GW-UserAgent 1869 2060 IN IP4 1.2.3.204. s=SIP Call. c=IN IP4 1.2.3.201. t=0 0. m=audio 61504 RTP/AVP 4 101. c=IN IP4 1.2.3.201. a=rtpmap:4 G723/8000. a=fmtp:4 annexa=no. a=rtpmap:101 telephone-event/8000. a=fmtp:101 0-15. a=ptime:30. a=direction:passive.
U 81.1.2.218:2020 -> 1.2.3.201:5060 ACK sip:202000243999049102@81.1.2.218:2021 SIP/2.0. Via: SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-a8d9ae6f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Call-ID: da59b048-d5ba4742@192.168.1.6. CSeq: 102 ACK. Max-Forwards: 70. Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Proxy-Authorization: Digest username="101000000",realm="sip.example.com",nonce="4721d74d797d2fcdae92fc29db4798914ddb90a4",uri="sip:202000243999049102@81.1.2.218:2021",algorithm=MD5,response="d0a6ac0edaabb7fca6ef3ff448c7c4e1". Contact: %5 sip:101000000@81.1.2.218:2020. User-Agent: Linksys/PAP2T-3.1.15(LS). Content-Length: 0. .
U 1.2.3.201:5060 -> 81.1.2.218:2021 ACK sip:202000243999049102@81.1.2.218:2021 SIP/2.0. Record-Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Via: SIP/2.0/UDP 1.2.3.201;branch=z9hG4bKf233.b0309086.2. Via: SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-a8d9ae6f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Call-ID: da59b048-d5ba4742@192.168.1.6. CSeq: 102 ACK. Max-Forwards: 69. Proxy-Authorization: Digest username="101000000",realm="sip.example.com",nonce="4721d74d797d2fcdae92fc29db4798914ddb90a4",uri="sip:202000243999049102@81.1.2.218:2021",algorithm=MD5,response="d0a6ac0edaabb7fca6ef3ff448c7c4e1". Contact: %5 sip:101000000@81.1.2.218:2020. User-Agent: Linksys/PAP2T-3.1.15(LS). Content-Length: 0. .
U 1.2.3.204:51431 -> 1.2.3.201:5060 SIP/2.0 200 OK. Via: SIP/2.0/UDP 1.2.3.201;branch=z9hG4bKf233.b0309086.0,SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-13d1535f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Date: Fri, 26 Oct 2007 11:57:22 GMT. Call-ID: da59b048-d5ba4742@192.168.1.6. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 102 INVITE. Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER. Allow-Events: telephone-event. Contact: sip:202000243999049102@1.2.3.204:5060. Record-Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Content-Type: application/sdp. Content-Length: 294. . v=0. o=CiscoSystemsSIP-GW-UserAgent 1869 2060 IN IP4 1.2.3.204. s=SIP Call. c=IN IP4 1.2.3.204. t=0 0. m=audio 17204 RTP/AVP 4 101. c=IN IP4 1.2.3.204. a=rtpmap:4 G723/8000. a=fmtp:4 annexa=no. a=rtpmap:101 telephone-event/8000. a=fmtp:101 0-15. a=ptime:30. a=direction:passive.
U 1.2.3.201:5060 -> 81.1.2.218:2020 SIP/2.0 200 OK. Via: SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-13d1535f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Date: Fri, 26 Oct 2007 11:57:22 GMT. Call-ID: da59b048-d5ba4742@192.168.1.6. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 102 INVITE. Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER. Allow-Events: telephone-event. Contact: sip:202000243999049102@1.2.3.204:5060. Record-Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Content-Type: application/sdp. Content-Length: 294. . v=0. o=CiscoSystemsSIP-GW-UserAgent 1869 2060 IN IP4 1.2.3.204. s=SIP Call. c=IN IP4 1.2.3.201. t=0 0. m=audio 61504 RTP/AVP 4 101. c=IN IP4 1.2.3.201. a=rtpmap:4 G723/8000. a=fmtp:4 annexa=no. a=rtpmap:101 telephone-event/8000. a=fmtp:101 0-15. a=ptime:30. a=direction:passive.
U 81.1.2.218:2020 -> 1.2.3.201:5060 ACK sip:202000243999049102@81.1.2.218:2021 SIP/2.0. Via: SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-a8d9ae6f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Call-ID: da59b048-d5ba4742@192.168.1.6. CSeq: 102 ACK. Max-Forwards: 70. Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Proxy-Authorization: Digest username="101000000",realm="sip.example.com",nonce="4721d74d797d2fcdae92fc29db4798914ddb90a4",uri="sip:202000243999049102@81.1.2.218:2021",algorithm=MD5,response="d0a6ac0edaabb7fca6ef3ff448c7c4e1". Contact: %5 sip:101000000@81.1.2.218:2020. User-Agent: Linksys/PAP2T-3.1.15(LS). Content-Length: 0. .
U 1.2.3.201:5060 -> 81.1.2.218:2021 ACK sip:202000243999049102@81.1.2.218:2021 SIP/2.0. Record-Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Via: SIP/2.0/UDP 1.2.3.201;branch=z9hG4bKf233.b0309086.2. Via: SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-a8d9ae6f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Call-ID: da59b048-d5ba4742@192.168.1.6. CSeq: 102 ACK. Max-Forwards: 69. Proxy-Authorization: Digest username="101000000",realm="sip.example.com",nonce="4721d74d797d2fcdae92fc29db4798914ddb90a4",uri="sip:202000243999049102@81.1.2.218:2021",algorithm=MD5,response="d0a6ac0edaabb7fca6ef3ff448c7c4e1". Contact: %5 sip:101000000@81.1.2.218:2020. User-Agent: Linksys/PAP2T-3.1.15(LS). Content-Length: 0. .
U 1.2.3.204:51431 -> 1.2.3.201:5060 SIP/2.0 200 OK. Via: SIP/2.0/UDP 1.2.3.201;branch=z9hG4bKf233.b0309086.0,SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-13d1535f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Date: Fri, 26 Oct 2007 11:57:22 GMT. Call-ID: da59b048-d5ba4742@192.168.1.6. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 102 INVITE. Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER. Allow-Events: telephone-event. Contact: sip:202000243999049102@1.2.3.204:5060. Record-Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Content-Type: application/sdp. Content-Length: 294. . v=0. o=CiscoSystemsSIP-GW-UserAgent 1869 2060 IN IP4 1.2.3.204. s=SIP Call. c=IN IP4 1.2.3.204. t=0 0. m=audio 17204 RTP/AVP 4 101. c=IN IP4 1.2.3.204. a=rtpmap:4 G723/8000. a=fmtp:4 annexa=no. a=rtpmap:101 telephone-event/8000. a=fmtp:101 0-15. a=ptime:30. a=direction:passive.
U 1.2.3.201:5060 -> 81.1.2.218:2020 SIP/2.0 200 OK. Via: SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-13d1535f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Date: Fri, 26 Oct 2007 11:57:22 GMT. Call-ID: da59b048-d5ba4742@192.168.1.6. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 102 INVITE. Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER. Allow-Events: telephone-event. Contact: sip:202000243999049102@1.2.3.204:5060. Record-Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Content-Type: application/sdp. Content-Length: 294. . v=0. o=CiscoSystemsSIP-GW-UserAgent 1869 2060 IN IP4 1.2.3.204. s=SIP Call. c=IN IP4 1.2.3.201. t=0 0. m=audio 61504 RTP/AVP 4 101. c=IN IP4 1.2.3.201. a=rtpmap:4 G723/8000. a=fmtp:4 annexa=no. a=rtpmap:101 telephone-event/8000. a=fmtp:101 0-15. a=ptime:30. a=direction:passive.
U 81.1.2.218:2020 -> 1.2.3.201:5060 ACK sip:202000243999049102@81.1.2.218:2021 SIP/2.0. Via: SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-a8d9ae6f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Call-ID: da59b048-d5ba4742@192.168.1.6. CSeq: 102 ACK. Max-Forwards: 70. Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Proxy-Authorization: Digest username="101000000",realm="sip.example.com",nonce="4721d74d797d2fcdae92fc29db4798914ddb90a4",uri="sip:202000243999049102@81.1.2.218:2021",algorithm=MD5,response="d0a6ac0edaabb7fca6ef3ff448c7c4e1". Contact: %5 sip:101000000@81.1.2.218:2020. User-Agent: Linksys/PAP2T-3.1.15(LS). Content-Length: 0. .
U 1.2.3.201:5060 -> 81.1.2.218:2021 ACK sip:202000243999049102@81.1.2.218:2021 SIP/2.0. Record-Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Via: SIP/2.0/UDP 1.2.3.201;branch=z9hG4bKf233.b0309086.2. Via: SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-a8d9ae6f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Call-ID: da59b048-d5ba4742@192.168.1.6. CSeq: 102 ACK. Max-Forwards: 69. Proxy-Authorization: Digest username="101000000",realm="sip.example.com",nonce="4721d74d797d2fcdae92fc29db4798914ddb90a4",uri="sip:202000243999049102@81.1.2.218:2021",algorithm=MD5,response="d0a6ac0edaabb7fca6ef3ff448c7c4e1". Contact: %5 sip:101000000@81.1.2.218:2020. User-Agent: Linksys/PAP2T-3.1.15(LS). Content-Length: 0. .
U 1.2.3.204:51431 -> 1.2.3.201:5060 SIP/2.0 200 OK. Via: SIP/2.0/UDP 1.2.3.201;branch=z9hG4bKf233.b0309086.0,SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-13d1535f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Date: Fri, 26 Oct 2007 11:57:22 GMT. Call-ID: da59b048-d5ba4742@192.168.1.6. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 102 INVITE. Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER. Allow-Events: telephone-event. Contact: sip:202000243999049102@1.2.3.204:5060. Record-Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Content-Type: application/sdp. Content-Length: 294. . v=0. o=CiscoSystemsSIP-GW-UserAgent 1869 2060 IN IP4 1.2.3.204. s=SIP Call. c=IN IP4 1.2.3.204. t=0 0. m=audio 17204 RTP/AVP 4 101. c=IN IP4 1.2.3.204. a=rtpmap:4 G723/8000. a=fmtp:4 annexa=no. a=rtpmap:101 telephone-event/8000. a=fmtp:101 0-15. a=ptime:30. a=direction:passive.
U 1.2.3.201:5060 -> 81.1.2.218:2020 SIP/2.0 200 OK. Via: SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-13d1535f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Date: Fri, 26 Oct 2007 11:57:22 GMT. Call-ID: da59b048-d5ba4742@192.168.1.6. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 102 INVITE. Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER. Allow-Events: telephone-event. Contact: sip:202000243999049102@1.2.3.204:5060. Record-Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Content-Type: application/sdp. Content-Length: 294. . v=0. o=CiscoSystemsSIP-GW-UserAgent 1869 2060 IN IP4 1.2.3.204. s=SIP Call. c=IN IP4 1.2.3.201. t=0 0. m=audio 61504 RTP/AVP 4 101. c=IN IP4 1.2.3.201. a=rtpmap:4 G723/8000. a=fmtp:4 annexa=no. a=rtpmap:101 telephone-event/8000. a=fmtp:101 0-15. a=ptime:30. a=direction:passive.
U 81.1.2.218:2020 -> 1.2.3.201:5060 ACK sip:202000243999049102@81.1.2.218:2021 SIP/2.0. Via: SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-a8d9ae6f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Call-ID: da59b048-d5ba4742@192.168.1.6. CSeq: 102 ACK. Max-Forwards: 70. Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Proxy-Authorization: Digest username="101000000",realm="sip.example.com",nonce="4721d74d797d2fcdae92fc29db4798914ddb90a4",uri="sip:202000243999049102@81.1.2.218:2021",algorithm=MD5,response="d0a6ac0edaabb7fca6ef3ff448c7c4e1". Contact: %5 sip:101000000@81.1.2.218:2020. User-Agent: Linksys/PAP2T-3.1.15(LS). Content-Length: 0. .
U 1.2.3.201:5060 -> 81.1.2.218:2021 ACK sip:202000243999049102@81.1.2.218:2021 SIP/2.0. Record-Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Via: SIP/2.0/UDP 1.2.3.201;branch=z9hG4bKf233.b0309086.2. Via: SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-a8d9ae6f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Call-ID: da59b048-d5ba4742@192.168.1.6. CSeq: 102 ACK. Max-Forwards: 69. Proxy-Authorization: Digest username="101000000",realm="sip.example.com",nonce="4721d74d797d2fcdae92fc29db4798914ddb90a4",uri="sip:202000243999049102@81.1.2.218:2021",algorithm=MD5,response="d0a6ac0edaabb7fca6ef3ff448c7c4e1". Contact: %5 sip:101000000@81.1.2.218:2020. User-Agent: Linksys/PAP2T-3.1.15(LS). Content-Length: 0. .
U 1.2.3.204:51431 -> 1.2.3.201:5060 SIP/2.0 200 OK. Via: SIP/2.0/UDP 1.2.3.201;branch=z9hG4bKf233.b0309086.0,SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-13d1535f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Date: Fri, 26 Oct 2007 11:57:22 GMT. Call-ID: da59b048-d5ba4742@192.168.1.6. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 102 INVITE. Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER. Allow-Events: telephone-event. Contact: sip:202000243999049102@1.2.3.204:5060. Record-Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Content-Type: application/sdp. Content-Length: 294. . v=0. o=CiscoSystemsSIP-GW-UserAgent 1869 2060 IN IP4 1.2.3.204. s=SIP Call. c=IN IP4 1.2.3.204. t=0 0. m=audio 17204 RTP/AVP 4 101. c=IN IP4 1.2.3.204. a=rtpmap:4 G723/8000. a=fmtp:4 annexa=no. a=rtpmap:101 telephone-event/8000. a=fmtp:101 0-15. a=ptime:30. a=direction:passive.
U 1.2.3.201:5060 -> 81.1.2.218:2020 SIP/2.0 200 OK. Via: SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-13d1535f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Date: Fri, 26 Oct 2007 11:57:22 GMT. Call-ID: da59b048-d5ba4742@192.168.1.6. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 102 INVITE. Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER. Allow-Events: telephone-event. Contact: sip:202000243999049102@1.2.3.204:5060. Record-Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Content-Type: application/sdp. Content-Length: 294. . v=0. o=CiscoSystemsSIP-GW-UserAgent 1869 2060 IN IP4 1.2.3.204. s=SIP Call. c=IN IP4 1.2.3.201. t=0 0. m=audio 61504 RTP/AVP 4 101. c=IN IP4 1.2.3.201. a=rtpmap:4 G723/8000. a=fmtp:4 annexa=no. a=rtpmap:101 telephone-event/8000. a=fmtp:101 0-15. a=ptime:30. a=direction:passive.
U 81.1.2.218:2020 -> 1.2.3.201:5060 ACK sip:202000243999049102@81.1.2.218:2021 SIP/2.0. Via: SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-a8d9ae6f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Call-ID: da59b048-d5ba4742@192.168.1.6. CSeq: 102 ACK. Max-Forwards: 70. Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Proxy-Authorization: Digest username="101000000",realm="sip.example.com",nonce="4721d74d797d2fcdae92fc29db4798914ddb90a4",uri="sip:202000243999049102@81.1.2.218:2021",algorithm=MD5,response="d0a6ac0edaabb7fca6ef3ff448c7c4e1". Contact: %5 sip:101000000@81.1.2.218:2020. User-Agent: Linksys/PAP2T-3.1.15(LS). Content-Length: 0. .
U 1.2.3.201:5060 -> 81.1.2.218:2021 ACK sip:202000243999049102@81.1.2.218:2021 SIP/2.0. Record-Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Via: SIP/2.0/UDP 1.2.3.201;branch=z9hG4bKf233.b0309086.2. Via: SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-a8d9ae6f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Call-ID: da59b048-d5ba4742@192.168.1.6. CSeq: 102 ACK. Max-Forwards: 69. Proxy-Authorization: Digest username="101000000",realm="sip.example.com",nonce="4721d74d797d2fcdae92fc29db4798914ddb90a4",uri="sip:202000243999049102@81.1.2.218:2021",algorithm=MD5,response="d0a6ac0edaabb7fca6ef3ff448c7c4e1". Contact: %5 sip:101000000@81.1.2.218:2020. User-Agent: Linksys/PAP2T-3.1.15(LS). Content-Length: 0. .
U 1.2.3.204:51431 -> 1.2.3.201:5060 SIP/2.0 200 OK. Via: SIP/2.0/UDP 1.2.3.201;branch=z9hG4bKf233.b0309086.0,SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-13d1535f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Date: Fri, 26 Oct 2007 11:57:22 GMT. Call-ID: da59b048-d5ba4742@192.168.1.6. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 102 INVITE. Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER. Allow-Events: telephone-event. Contact: sip:202000243999049102@1.2.3.204:5060. Record-Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Content-Type: application/sdp. Content-Length: 294. . v=0. o=CiscoSystemsSIP-GW-UserAgent 1869 2060 IN IP4 1.2.3.204. s=SIP Call. c=IN IP4 1.2.3.204. t=0 0. m=audio 17204 RTP/AVP 4 101. c=IN IP4 1.2.3.204. a=rtpmap:4 G723/8000. a=fmtp:4 annexa=no. a=rtpmap:101 telephone-event/8000. a=fmtp:101 0-15. a=ptime:30. a=direction:passive.
U 1.2.3.201:5060 -> 81.1.2.218:2020 SIP/2.0 200 OK. Via: SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-13d1535f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Date: Fri, 26 Oct 2007 11:57:22 GMT. Call-ID: da59b048-d5ba4742@192.168.1.6. Server: Cisco-SIPGateway/IOS-12.x. CSeq: 102 INVITE. Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, COMET, REFER, SUBSCRIBE, NOTIFY, INFO, UPDATE, REGISTER. Allow-Events: telephone-event. Contact: sip:202000243999049102@1.2.3.204:5060. Record-Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Content-Type: application/sdp. Content-Length: 294. . v=0. o=CiscoSystemsSIP-GW-UserAgent 1869 2060 IN IP4 1.2.3.204. s=SIP Call. c=IN IP4 1.2.3.201. t=0 0. m=audio 61504 RTP/AVP 4 101. c=IN IP4 1.2.3.201. a=rtpmap:4 G723/8000. a=fmtp:4 annexa=no. a=rtpmap:101 telephone-event/8000. a=fmtp:101 0-15. a=ptime:30. a=direction:passive.
U 81.1.2.218:2020 -> 1.2.3.201:5060 ACK sip:202000243999049102@81.1.2.218:2021 SIP/2.0. Via: SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-a8d9ae6f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Call-ID: da59b048-d5ba4742@192.168.1.6. CSeq: 102 ACK. Max-Forwards: 70. Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Proxy-Authorization: Digest username="101000000",realm="sip.example.com",nonce="4721d74d797d2fcdae92fc29db4798914ddb90a4",uri="sip:202000243999049102@81.1.2.218:2021",algorithm=MD5,response="d0a6ac0edaabb7fca6ef3ff448c7c4e1". Contact: %5 sip:101000000@81.1.2.218:2020. User-Agent: Linksys/PAP2T-3.1.15(LS). Content-Length: 0. .
U 1.2.3.201:5060 -> 81.1.2.218:2021 ACK sip:202000243999049102@81.1.2.218:2021 SIP/2.0. Record-Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Via: SIP/2.0/UDP 1.2.3.201;branch=z9hG4bKf233.b0309086.2. Via: SIP/2.0/UDP 81.1.2.218:2020;branch=z9hG4bK-a8d9ae6f. From: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. To: sip:00243999049102@sip.example.com;tag=F48836B0-608. Call-ID: da59b048-d5ba4742@192.168.1.6. CSeq: 102 ACK. Max-Forwards: 69. Proxy-Authorization: Digest username="101000000",realm="sip.example.com",nonce="4721d74d797d2fcdae92fc29db4798914ddb90a4",uri="sip:202000243999049102@81.1.2.218:2021",algorithm=MD5,response="d0a6ac0edaabb7fca6ef3ff448c7c4e1". Contact: %5 sip:101000000@81.1.2.218:2020. User-Agent: Linksys/PAP2T-3.1.15(LS). Content-Length: 0. .
U 1.2.3.204:51431 -> 1.2.3.201:5060 BYE sip:101000000@81.1.2.218:2020 SIP/2.0. Via: SIP/2.0/UDP 1.2.3.204:5060;branch=z9hG4bKD3B675E. From: sip:00243999049102@sip.example.com;tag=F48836B0-608. To: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. Date: Fri, 26 Oct 2007 11:57:22 GMT. Call-ID: da59b048-d5ba4742@192.168.1.6. User-Agent: Cisco-SIPGateway/IOS-12.x. Max-Forwards: 70. Route: sip:1.2.3.201;lr=on;ftag=32750c901739579ao0. Timestamp: 1193399881. CSeq: 101 BYE. Content-Length: 0. .
U 1.2.3.201:5060 -> 81.1.2.218:2020 BYE sip:101000000@81.1.2.218:2020 SIP/2.0. Record-Route: sip:1.2.3.201;lr=on;ftag=F48836B0-608. Via: SIP/2.0/UDP 1.2.3.201;branch=z9hG4bK2333.35ada747.0. Via: SIP/2.0/UDP 1.2.3.204:5060;branch=z9hG4bKD3B675E. From: sip:00243999049102@sip.example.com;tag=F48836B0-608. To: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. Date: Fri, 26 Oct 2007 11:57:22 GMT. Call-ID: da59b048-d5ba4742@192.168.1.6. User-Agent: Cisco-SIPGateway/IOS-12.x. Max-Forwards: 69. Timestamp: 1193399881. CSeq: 101 BYE. Content-Length: 0. .
U 81.1.2.218:2020 -> 1.2.3.201:5060 SIP/2.0 200 OK. To: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. From: sip:00243999049102@sip.example.com;tag=F48836B0-608. Call-ID: da59b048-d5ba4742@192.168.1.6. CSeq: 101 BYE. Via: SIP/2.0/UDP 1.2.3.201;branch=z9hG4bK2333.35ada747.0. Via: SIP/2.0/UDP 1.2.3.204:5060;branch=z9hG4bKD3B675E. Record-Route: sip:1.2.3.201;lr=on;ftag=F48836B0-608. Timestamp: 1193399881. Server: Linksys/PAP2T-3.1.15(LS). Content-Length: 0. .
U 1.2.3.201:5060 -> 1.2.3.204:5060 SIP/2.0 200 OK. To: %5 sip:101000000@sip.example.com;tag=32750c901739579ao0. From: sip:00243999049102@sip.example.com;tag=F48836B0-608. Call-ID: da59b048-d5ba4742@192.168.1.6. CSeq: 101 BYE. Via: SIP/2.0/UDP 1.2.3.204:5060;branch=z9hG4bKD3B675E. Record-Route: sip:1.2.3.201;lr=on;ftag=F48836B0-608. Timestamp: 1193399881. Server: Linksys/PAP2T-3.1.15(LS). Content-Length: 0.