No. Time Source Destination Protocol Length Info 1 2020-04-03 23:04:56,836842 1.1.1.1 2.2.2.2 SIP/SDP 1312 Request: INVITE sip:444444656646820@2.2.2.2;user=phone | Frame 1: 1312 bytes on wire (10496 bits), 1312 bytes captured (10496 bits) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Apr 3, 2020 23:04:56.836842000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1585947896.836842000 seconds [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 1312 bytes (10496 bits) Capture Length: 1312 bytes (10496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:udp:sip:sdp] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: Cisco_ec:c8:ca (84:b8:02:ec:c8:ca) Unused: 897c Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 1.1.1.1, Dst: 2.2.2.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1296 Identification: 0xc608 (50696) Flags: 0x0000 0... .... .... .... = Reserved bit: Not set .0.. .... .... .... = Don't fragment: Not set ..0. .... .... .... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x2f51 [validation disabled] [Header checksum status: Unverified] Source: 1.1.1.1 Destination: 2.2.2.2 User Datagram Protocol, Src Port: 5060, Dst Port: 5060 Source Port: 5060 Destination Port: 5060 Length: 1276 Checksum: 0x8e14 [unverified] [Checksum Status: Unverified] [Stream index: 0] Session Initiation Protocol (INVITE) Request-Line: INVITE sip:444444656646820@2.2.2.2;user=phone SIP/2.0 Method: INVITE Request-URI: sip:444444656646820@2.2.2.2;user=phone Request-URI User Part: 444444656646820 Request-URI Host Part: 2.2.2.2 [Resent Packet: False] Message Header Via: SIP/2.0/UDP 1.1.1.1:5060;branch=z9hG4bKete1rhqujwelu1nonl1toinrp;Role=3;Hpt=9038_16 Transport: UDP Sent-by Address: 1.1.1.1 Sent-by port: 5060 Branch: z9hG4bKete1rhqujwelu1nonl1toinrp Role=3 Hpt=9038_16 Record-Route: Record-Route URI: sip:1.1.1.1:5060;transport=udp;lr;Hpt=9038_16;CxtId=4;TRC=ffffffff-ffffffff;X-HwB2bUaCookie=10981 Record-Route Host Part: 1.1.1.1 Record-Route Host Port: 5060 Record-Route URI parameter: transport=udp Record-Route URI parameter: lr Record-Route URI parameter: Hpt=9038_16 Record-Route URI parameter: CxtId=4 Record-Route URI parameter: TRC=ffffffff-ffffffff Record-Route URI parameter: X-HwB2bUaCookie=10981 Call-ID: isbcmq49mmdt5qba6tozy4q9ocamc55zoz43@10.18.5.64 From: "+33825462354";tag=456mb993-CC-1020-OFC-1324 SIP Display info: "+33825462354" SIP from address: sip:+33825462354@1.1.1.1;transport=udp;user=phone SIP from address User Part: +33825462354 E.164 number (MSISDN): 33825462354 Country Code: Croatia (Republic of) (385) SIP from address Host Part: 1.1.1.1 SIP From URI parameter: transport=udp SIP From URI parameter: user=phone SIP from tag: 456mb993-CC-1020-OFC-1324 To: "444444656646820" SIP Display info: "444444656646820" SIP to address: sip:444444656646820@2.2.2.2;transport=udp;user=phone SIP to address User Part: 444444656646820 SIP to address Host Part: 2.2.2.2 SIP To URI parameter: transport=udp SIP To URI parameter: user=phone CSeq: 1 INVITE Sequence Number: 1 Method: INVITE Allow: INVITE,ACK,OPTIONS,BYE,CANCEL,INFO,PRACK,NOTIFY,MESSAGE,UPDATE Contact: Contact URI: sip:+33825462354@1.1.1.1:5060;transport=udp;user=phone;Hpt=9038_16;CxtId=4;TRC=ffffffff-ffffffff Contact URI User Part: +33825462354 E.164 number (MSISDN): 33825462354 Country Code: Croatia (Republic of) (385) Contact URI Host Part: 1.1.1.1 Contact URI Host Port: 5060 Contact URI parameter: transport=udp Contact URI parameter: user=phone Contact URI parameter: Hpt=9038_16 Contact URI parameter: CxtId=4 Contact URI parameter: TRC=ffffffff-ffffffff Max-Forwards: 65 Supported: 100rel,timer,histinfo Session-Expires: 1800;refresher=uac Min-SE: 90 P-Asserted-Identity: SIP PAI Address: sip:+33825462354@1.1.1.1;transport=udp;user=phone SIP PAI User Part: +33825462354 E.164 number (MSISDN): 33825462354 Country Code: Croatia (Republic of) (385) SIP PAI Host Part: 1.1.1.1 SIP PAI URI parameter: transport=udp SIP PAI URI parameter: user=phone P-Early-Media: supported Content-Length: 270 Content-Type: application/sdp Message Body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): - 1480641150 1480641151 IN IP4 1.1.1.2 Owner Username: - Session ID: 1480641150 Session Version: 1480641151 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 1.1.1.2 Session Name (s): SBC call Connection Information (c): IN IP4 1.1.1.2 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 1.1.1.2 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 15544 RTP/AVP 9 8 0 18 101 Media Type: audio Media Port: 15544 Media Protocol: RTP/AVP Media Format: ITU-T G.722 Media Format: ITU-T G.711 PCMA Media Format: ITU-T G.711 PCMU Media Format: ITU-T G.729 Media Format: DynamicRTP-Type-101 Media Attribute (a): rtpmap:9 G722/8000 Media Attribute Fieldname: rtpmap Media Format: 9 MIME Type: G722 Sample Rate: 8000 Media Attribute (a): rtpmap:8 PCMA/8000 Media Attribute Fieldname: rtpmap Media Format: 8 MIME Type: PCMA Sample Rate: 8000 Media Attribute (a): rtpmap:0 PCMU/8000 Media Attribute Fieldname: rtpmap Media Format: 0 MIME Type: PCMU Sample Rate: 8000 Media Attribute (a): rtpmap:18 G729/8000 Media Attribute Fieldname: rtpmap Media Format: 18 MIME Type: G729 Sample Rate: 8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Format: 101 MIME Type: telephone-event Sample Rate: 8000 Media Attribute (a): ptime:20 Media Attribute Fieldname: ptime Media Attribute Value: 20 No. Time Source Destination Protocol Length Info 2 2020-04-03 23:04:56,871696 2.2.2.2 1.1.1.1 SIP 523 Status: 100 trying -- your call is important to us | Frame 2: 523 bytes on wire (4184 bits), 523 bytes captured (4184 bits) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Apr 3, 2020 23:04:56.871696000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1585947896.871696000 seconds [Time delta from previous captured frame: 0.034854000 seconds] [Time delta from previous displayed frame: 0.034854000 seconds] [Time since reference or first frame: 0.034854000 seconds] Frame Number: 2 Frame Length: 523 bytes (4184 bits) Capture Length: 523 bytes (4184 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:udp:sip] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: c2:62:9d:c1:9d:b4 (c2:62:9d:c1:9d:b4) Unused: 0000 Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 2.2.2.2, Dst: 1.1.1.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x10 (DSCP: Unknown, ECN: Not-ECT) 0001 00.. = Differentiated Services Codepoint: Unknown (4) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 507 Identification: 0x2369 (9065) Flags: 0x0000 0... .... .... .... = Reserved bit: Not set .0.. .... .... .... = Don't fragment: Not set ..0. .... .... .... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 64 Protocol: UDP (17) Header checksum: 0x86f6 [validation disabled] [Header checksum status: Unverified] Source: 2.2.2.2 Destination: 1.1.1.1 User Datagram Protocol, Src Port: 5060, Dst Port: 5060 Source Port: 5060 Destination Port: 5060 Length: 487 Checksum: 0xd07b [unverified] [Checksum Status: Unverified] [Stream index: 0] Session Initiation Protocol (100) Status-Line: SIP/2.0 100 trying -- your call is important to us Status-Code: 100 [Resent Packet: False] [Request Frame: 1] [Response Time (ms): 34] Message Header Via: SIP/2.0/UDP 1.1.1.1:5060;branch=z9hG4bKete1rhqujwelu1nonl1toinrp;Role=3;Hpt=9038_16 Transport: UDP Sent-by Address: 1.1.1.1 Sent-by port: 5060 Branch: z9hG4bKete1rhqujwelu1nonl1toinrp Role=3 Hpt=9038_16 Call-ID: isbcmq49mmdt5qba6tozy4q9ocamc55zoz43@10.18.5.64 From: "+33825462354";tag=456mb993-CC-1020-OFC-1324 SIP Display info: "+33825462354" SIP from address: sip:+33825462354@1.1.1.1;transport=udp;user=phone SIP from address User Part: +33825462354 E.164 number (MSISDN): 33825462354 Country Code: Croatia (Republic of) (385) SIP from address Host Part: 1.1.1.1 SIP From URI parameter: transport=udp SIP From URI parameter: user=phone SIP from tag: 456mb993-CC-1020-OFC-1324 To: "444444656646820" SIP Display info: "444444656646820" SIP to address: sip:444444656646820@2.2.2.2;transport=udp;user=phone SIP to address User Part: 444444656646820 SIP to address Host Part: 2.2.2.2 SIP To URI parameter: transport=udp SIP To URI parameter: user=phone CSeq: 1 INVITE Sequence Number: 1 Method: INVITE Server: kamailio (5.2.3 (x86_64/linux)) Content-Length: 0 No. Time Source Destination Protocol Length Info 3 2020-04-03 23:04:56,873253 2.2.2.2 3.3.3.3 SIP/SDP 1183 Request: INVITE sip:44656646820@3.3.3.3:5060;user=phone | Frame 3: 1183 bytes on wire (9464 bits), 1183 bytes captured (9464 bits) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Apr 3, 2020 23:04:56.873253000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1585947896.873253000 seconds [Time delta from previous captured frame: 0.001557000 seconds] [Time delta from previous displayed frame: 0.001557000 seconds] [Time since reference or first frame: 0.036411000 seconds] Frame Number: 3 Frame Length: 1183 bytes (9464 bits) Capture Length: 1183 bytes (9464 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:udp:sip:sdp] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: c2:62:9d:c1:9d:b4 (c2:62:9d:c1:9d:b4) Unused: 6667 Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 2.2.2.2, Dst: 3.3.3.3 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x10 (DSCP: Unknown, ECN: Not-ECT) 0001 00.. = Differentiated Services Codepoint: Unknown (4) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1167 Identification: 0x4862 (18530) Flags: 0x0000 0... .... .... .... = Reserved bit: Not set .0.. .... .... .... = Don't fragment: Not set ..0. .... .... .... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 64 Protocol: UDP (17) Header checksum: 0xb256 [validation disabled] [Header checksum status: Unverified] Source: 2.2.2.2 Destination: 3.3.3.3 User Datagram Protocol, Src Port: 5060, Dst Port: 5060 Source Port: 5060 Destination Port: 5060 Length: 1147 Checksum: 0x8022 [unverified] [Checksum Status: Unverified] [Stream index: 1] Session Initiation Protocol (INVITE) Request-Line: INVITE sip:44656646820@3.3.3.3:5060;user=phone SIP/2.0 Method: INVITE Request-URI: sip:44656646820@3.3.3.3:5060;user=phone Request-URI User Part: 44656646820 Request-URI Host Part: 3.3.3.3 Request-URI Host Port: 5060 [Resent Packet: False] Message Header Via: SIP/2.0/UDP 2.2.2.2;branch=z9hG4bK0fb9.8cb4c7f17c1fcfc06e7098af82a59c0b.0 Transport: UDP Sent-by Address: 2.2.2.2 Branch: z9hG4bK0fb9.8cb4c7f17c1fcfc06e7098af82a59c0b.0 Call-ID: isbcmq49mmdt5qba6tozy4q9ocamc55zoz43@10.18.5.64 From: "+33825462354";tag=456mb993-CC-1020-OFC-1324 SIP Display info: "+33825462354" SIP from address: sip:33825462354@2.2.2.2;transport=udp;user=phone SIP from address User Part: 33825462354 SIP from address Host Part: 2.2.2.2 SIP From URI parameter: transport=udp SIP From URI parameter: user=phone SIP from tag: 456mb993-CC-1020-OFC-1324 To: "444444656646820" SIP Display info: "444444656646820" SIP to address: sip:44656646820@3.3.3.3:5060 SIP to address User Part: 44656646820 SIP to address Host Part: 3.3.3.3 SIP to address Host Port: 5060 CSeq: 1 INVITE Sequence Number: 1 Method: INVITE Allow: INVITE,ACK,OPTIONS,BYE,CANCEL,INFO,PRACK,NOTIFY,MESSAGE,UPDATE Max-Forwards: 64 Supported: 100rel,timer,histinfo Session-Expires: 1800;refresher=uac Min-SE: 90 P-Asserted-Identity: SIP PAI Address: sip:+33825462354@1.1.1.1;transport=udp;user=phone SIP PAI User Part: +33825462354 E.164 number (MSISDN): 33825462354 Country Code: Croatia (Republic of) (385) SIP PAI Host Part: 1.1.1.1 SIP PAI URI parameter: transport=udp SIP PAI URI parameter: user=phone P-Early-Media: supported Content-Length: 270 Content-Type: application/sdp X-ACQ-FromAccId: 14884 [Expert Info (Note/Undecoded): Unrecognised SIP header (x-acq-fromaccid)] [Unrecognised SIP header (x-acq-fromaccid)] [Severity level: Note] [Group: Undecoded] X-ACQ-FromGw: 2.2.2.2 [Expert Info (Note/Undecoded): Unrecognised SIP header (x-acq-fromgw)] [Unrecognised SIP header (x-acq-fromgw)] [Severity level: Note] [Group: Undecoded] X-ACQ-FromSIP: 1.1.1.1:5060 [Expert Info (Note/Undecoded): Unrecognised SIP header (x-acq-fromsip)] [Unrecognised SIP header (x-acq-fromsip)] [Severity level: Note] [Group: Undecoded] Contact: Contact URI: sip:btpsh-5e87a4a2-5dd0-2@2.2.2.2 Contact URI User Part: btpsh-5e87a4a2-5dd0-2 Contact URI Host Part: 2.2.2.2 Message Body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): - 1480641150 1480641151 IN IP4 1.1.1.2 Owner Username: - Session ID: 1480641150 Session Version: 1480641151 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 1.1.1.2 Session Name (s): SBC call Connection Information (c): IN IP4 1.1.1.2 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 1.1.1.2 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 15544 RTP/AVP 9 8 0 18 101 Media Type: audio Media Port: 15544 Media Protocol: RTP/AVP Media Format: ITU-T G.722 Media Format: ITU-T G.711 PCMA Media Format: ITU-T G.711 PCMU Media Format: ITU-T G.729 Media Format: DynamicRTP-Type-101 Media Attribute (a): rtpmap:9 G722/8000 Media Attribute Fieldname: rtpmap Media Format: 9 MIME Type: G722 Sample Rate: 8000 Media Attribute (a): rtpmap:8 PCMA/8000 Media Attribute Fieldname: rtpmap Media Format: 8 MIME Type: PCMA Sample Rate: 8000 Media Attribute (a): rtpmap:0 PCMU/8000 Media Attribute Fieldname: rtpmap Media Format: 0 MIME Type: PCMU Sample Rate: 8000 Media Attribute (a): rtpmap:18 G729/8000 Media Attribute Fieldname: rtpmap Media Format: 18 MIME Type: G729 Sample Rate: 8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Format: 101 MIME Type: telephone-event Sample Rate: 8000 Media Attribute (a): ptime:20 Media Attribute Fieldname: ptime Media Attribute Value: 20 No. Time Source Destination Protocol Length Info 4 2020-04-03 23:04:56,887512 3.3.3.3 2.2.2.2 SIP 488 Status: 100 trying -- your call is important to us | Frame 4: 488 bytes on wire (3904 bits), 488 bytes captured (3904 bits) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Apr 3, 2020 23:04:56.887512000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1585947896.887512000 seconds [Time delta from previous captured frame: 0.014259000 seconds] [Time delta from previous displayed frame: 0.014259000 seconds] [Time since reference or first frame: 0.050670000 seconds] Frame Number: 4 Frame Length: 488 bytes (3904 bits) Capture Length: 488 bytes (3904 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:udp:sip] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: 8a:64:40:74:0b:76 (8a:64:40:74:0b:76) Unused: 0008 Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 3.3.3.3, Dst: 2.2.2.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x10 (DSCP: Unknown, ECN: Not-ECT) 0001 00.. = Differentiated Services Codepoint: Unknown (4) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 472 Identification: 0xf29b (62107) Flags: 0x0000 0... .... .... .... = Reserved bit: Not set .0.. .... .... .... = Don't fragment: Not set ..0. .... .... .... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 64 Protocol: UDP (17) Header checksum: 0x0ad4 [validation disabled] [Header checksum status: Unverified] Source: 3.3.3.3 Destination: 2.2.2.2 User Datagram Protocol, Src Port: 5060, Dst Port: 5060 Source Port: 5060 Destination Port: 5060 Length: 452 Checksum: 0x50b4 [unverified] [Checksum Status: Unverified] [Stream index: 1] Session Initiation Protocol (100) Status-Line: SIP/2.0 100 trying -- your call is important to us Status-Code: 100 [Resent Packet: False] [Request Frame: 3] [Response Time (ms): 14] Message Header Via: SIP/2.0/UDP 2.2.2.2;branch=z9hG4bK0fb9.8cb4c7f17c1fcfc06e7098af82a59c0b.0 Transport: UDP Sent-by Address: 2.2.2.2 Branch: z9hG4bK0fb9.8cb4c7f17c1fcfc06e7098af82a59c0b.0 Call-ID: isbcmq49mmdt5qba6tozy4q9ocamc55zoz43@10.18.5.64 From: "+33825462354";tag=456mb993-CC-1020-OFC-1324 SIP Display info: "+33825462354" SIP from address: sip:33825462354@2.2.2.2;transport=udp;user=phone SIP from address User Part: 33825462354 SIP from address Host Part: 2.2.2.2 SIP From URI parameter: transport=udp SIP From URI parameter: user=phone SIP from tag: 456mb993-CC-1020-OFC-1324 To: "444444656646820" SIP Display info: "444444656646820" SIP to address: sip:44656646820@3.3.3.3:5060 SIP to address User Part: 44656646820 SIP to address Host Part: 3.3.3.3 SIP to address Host Port: 5060 CSeq: 1 INVITE Sequence Number: 1 Method: INVITE Server: kamailio (5.0.8 (x86_64/linux)) Content-Length: 0 No. Time Source Destination Protocol Length Info 5 2020-04-03 23:04:58,354479 3.3.3.3 2.2.2.2 SIP/SDP 1297 Status: 183 Session Progress | Frame 5: 1297 bytes on wire (10376 bits), 1297 bytes captured (10376 bits) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Apr 3, 2020 23:04:58.354479000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1585947898.354479000 seconds [Time delta from previous captured frame: 1.466967000 seconds] [Time delta from previous displayed frame: 1.466967000 seconds] [Time since reference or first frame: 1.517637000 seconds] Frame Number: 5 Frame Length: 1297 bytes (10376 bits) Capture Length: 1297 bytes (10376 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:udp:sip:sdp] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: 8a:64:40:74:0b:76 (8a:64:40:74:0b:76) Unused: 0a24 Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 3.3.3.3, Dst: 2.2.2.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x10 (DSCP: Unknown, ECN: Not-ECT) 0001 00.. = Differentiated Services Codepoint: Unknown (4) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1281 Identification: 0xf2b2 (62130) Flags: 0x0000 0... .... .... .... = Reserved bit: Not set .0.. .... .... .... = Don't fragment: Not set ..0. .... .... .... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 64 Protocol: UDP (17) Header checksum: 0x0794 [validation disabled] [Header checksum status: Unverified] Source: 3.3.3.3 Destination: 2.2.2.2 User Datagram Protocol, Src Port: 5060, Dst Port: 5060 Source Port: 5060 Destination Port: 5060 Length: 1261 Checksum: 0xa255 [unverified] [Checksum Status: Unverified] [Stream index: 1] Session Initiation Protocol (183) Status-Line: SIP/2.0 183 Session Progress Status-Code: 183 [Resent Packet: False] [Request Frame: 3] [Response Time (ms): 1482] Message Header Via: SIP/2.0/UDP 2.2.2.2;branch=z9hG4bK0fb9.8cb4c7f17c1fcfc06e7098af82a59c0b.0 Transport: UDP Sent-by Address: 2.2.2.2 Branch: z9hG4bK0fb9.8cb4c7f17c1fcfc06e7098af82a59c0b.0 To: ;tag=U53bzzlYd_-57621-3575-7-50 SIP to address: sip:+386980051856093@7.7.7.7:5261 SIP to address User Part: +386980051856093 E.164 number (MSISDN): 386980051856093 Country Code: Slovenia (Republic of) (386) SIP to address Host Part: 7.7.7.7 SIP to address Host Port: 5261 SIP to tag: U53bzzlYd_-57621-3575-7-50 From: "+33825462354";tag=456mb993-CC-1020-OFC-1324 SIP Display info: "+33825462354" SIP from address: sip:33825462354@6.6.6.6;transport=udp;user=phone SIP from address User Part: 33825462354 SIP from address Host Part: 6.6.6.6 SIP From URI parameter: transport=udp SIP From URI parameter: user=phone SIP from tag: 456mb993-CC-1020-OFC-1324 Call-ID: isbcmq49mmdt5qba6tozy4q9ocamc55zoz43@10.18.5.64 CSeq: 1 INVITE Sequence Number: 1 Method: INVITE Contact: Contact URI: sip:7.7.7.7:5261 Contact URI Host Part: 7.7.7.7 Contact URI Host Port: 5261 RSeq: 1 Record-Route: Record-Route URI: sip:DIAG_22_0_161cd3fa@7.7.7.7:5261;lr Record-Route Userinfo: DIAG_22_0_161cd3fa Record-Route Host Part: 7.7.7.7 Record-Route Host Port: 5261 Record-Route URI parameter: lr Record-Route: Record-Route URI: sip:6.6.6.6;lr;r2=on;ftag=456mb993-CC-1020-OFC-1324 Record-Route Host Part: 6.6.6.6 Record-Route URI parameter: lr Record-Route URI parameter: r2=on Record-Route URI parameter: ftag=456mb993-CC-1020-OFC-1324 Record-Route: Record-Route URI: sip:5.5.5.5;lr;r2=on;ftag=456mb993-CC-1020-OFC-1324 Record-Route Host Part: 5.5.5.5 Record-Route URI parameter: lr Record-Route URI parameter: r2=on Record-Route URI parameter: ftag=456mb993-CC-1020-OFC-1324 Record-Route: Record-Route URI: sip:4.4.4.4;lr;ftag=456mb993-CC-1020-OFC-1324 Record-Route Host Part: 4.4.4.4 Record-Route URI parameter: lr Record-Route URI parameter: ftag=456mb993-CC-1020-OFC-1324 Record-Route: Record-Route URI: sip:3.3.3.3;lr Record-Route Host Part: 3.3.3.3 Record-Route URI parameter: lr Require: 100rel P-Charging-Vector: icid-value=HNVIapaO9I-01cf01bf-16-00004f81-001;transit-ioi="void" icid-value: HNVIapaO9I-01cf01bf-16-00004f81-001 transit-ioi="void" Allow: INVITE,PRACK,ACK,UPDATE,CANCEL,BYE,OPTIONS,INFO,SUBSCRIBE,REFER,NOTIFY Content-Type: application/sdp Content-Disposition: session Content-Length: 242 Message Body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): - 639270298 639270298 IN IP4 3.3.3.4 Owner Username: - Session ID: 639270298 Session Version: 639270298 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 3.3.3.4 Session Name (s): - Connection Information (c): IN IP4 3.3.3.4 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 3.3.3.4 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 52948 RTP/AVP 8 101 Media Type: audio Media Port: 52948 Media Protocol: RTP/AVP Media Format: ITU-T G.711 PCMA Media Format: DynamicRTP-Type-101 Connection Information (c): IN IP4 3.3.3.4 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 3.3.3.4 Media Attribute (a): rtpmap:8 PCMA/8000/1 Media Attribute Fieldname: rtpmap Media Format: 8 MIME Type: PCMA Sample Rate: 8000 Media Attribute (a): rtpmap:101 telephone-event/8000/1 Media Attribute Fieldname: rtpmap Media Format: 101 MIME Type: telephone-event Sample Rate: 8000 Media Attribute (a): fmtp:101 0-15 Media Attribute Fieldname: fmtp Media Format: 101 [telephone-event] Media format specific parameters: 0-15 Media Attribute (a): ptime:20 Media Attribute Fieldname: ptime Media Attribute Value: 20 Media Attribute (a): sendrecv No. Time Source Destination Protocol Length Info 6 2020-04-03 23:04:58,366832 2.2.2.2 1.1.1.1 SIP/SDP 1124 Status: 183 Session Progress | Frame 6: 1124 bytes on wire (8992 bits), 1124 bytes captured (8992 bits) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Apr 3, 2020 23:04:58.366832000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1585947898.366832000 seconds [Time delta from previous captured frame: 0.012353000 seconds] [Time delta from previous displayed frame: 0.012353000 seconds] [Time since reference or first frame: 1.529990000 seconds] Frame Number: 6 Frame Length: 1124 bytes (8992 bits) Capture Length: 1124 bytes (8992 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:udp:sip:sdp] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: c2:62:9d:c1:9d:b4 (c2:62:9d:c1:9d:b4) Unused: 1851 Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 2.2.2.2, Dst: 1.1.1.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x10 (DSCP: Unknown, ECN: Not-ECT) 0001 00.. = Differentiated Services Codepoint: Unknown (4) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1108 Identification: 0x2411 (9233) Flags: 0x0000 0... .... .... .... = Reserved bit: Not set .0.. .... .... .... = Don't fragment: Not set ..0. .... .... .... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 64 Protocol: UDP (17) Header checksum: 0x83f5 [validation disabled] [Header checksum status: Unverified] Source: 2.2.2.2 Destination: 1.1.1.1 User Datagram Protocol, Src Port: 5060, Dst Port: 5060 Source Port: 5060 Destination Port: 5060 Length: 1088 Checksum: 0xd2d4 [unverified] [Checksum Status: Unverified] [Stream index: 0] Session Initiation Protocol (183) Status-Line: SIP/2.0 183 Session Progress Status-Code: 183 [Resent Packet: False] [Request Frame: 1] [Response Time (ms): 1530] Message Header To: ;tag=U53bzzlYd_-57621-3575-7-50 SIP to address: sip:+386980051856093@7.7.7.7:5261 SIP to address User Part: +386980051856093 E.164 number (MSISDN): 386980051856093 Country Code: Slovenia (Republic of) (386) SIP to address Host Part: 7.7.7.7 SIP to address Host Port: 5261 SIP to tag: U53bzzlYd_-57621-3575-7-50 From: "+33825462354";tag=456mb993-CC-1020-OFC-1324 SIP Display info: "+33825462354" SIP from address: sip:33825462354@6.6.6.6;transport=udp;user=phone SIP from address User Part: 33825462354 SIP from address Host Part: 6.6.6.6 SIP From URI parameter: transport=udp SIP From URI parameter: user=phone SIP from tag: 456mb993-CC-1020-OFC-1324 Call-ID: isbcmq49mmdt5qba6tozy4q9ocamc55zoz43@10.18.5.64 CSeq: 1 INVITE Sequence Number: 1 Method: INVITE RSeq: 1 Require: 100rel P-Charging-Vector: icid-value=HNVIapaO9I-01cf01bf-16-00004f81-001;transit-ioi="void" icid-value: HNVIapaO9I-01cf01bf-16-00004f81-001 transit-ioi="void" Allow: INVITE,PRACK,ACK,UPDATE,CANCEL,BYE,OPTIONS,INFO,SUBSCRIBE,REFER,NOTIFY Content-Type: application/sdp Content-Disposition: session Content-Length: 242 Via: SIP/2.0/UDP 1.1.1.1:5060;branch=z9hG4bKete1rhqujwelu1nonl1toinrp;Role=3;Hpt=9038_16 Transport: UDP Sent-by Address: 1.1.1.1 Sent-by port: 5060 Branch: z9hG4bKete1rhqujwelu1nonl1toinrp Role=3 Hpt=9038_16 Contact: Contact URI: sip:atpsh-5e87a4a2-5dd0-2@2.2.2.2 Contact URI User Part: atpsh-5e87a4a2-5dd0-2 Contact URI Host Part: 2.2.2.2 Record-Route: Record-Route URI: sip:1.1.1.1:5060;transport=udp;lr;Hpt=9038_16;CxtId=4;TRC=ffffffff-ffffffff;X-HwB2bUaCookie=10981 Record-Route Host Part: 1.1.1.1 Record-Route Host Port: 5060 Record-Route URI parameter: transport=udp Record-Route URI parameter: lr Record-Route URI parameter: Hpt=9038_16 Record-Route URI parameter: CxtId=4 Record-Route URI parameter: TRC=ffffffff-ffffffff Record-Route URI parameter: X-HwB2bUaCookie=10981 Message Body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): - 639270298 639270298 IN IP4 3.3.3.4 Owner Username: - Session ID: 639270298 Session Version: 639270298 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 3.3.3.4 Session Name (s): - Connection Information (c): IN IP4 3.3.3.4 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 3.3.3.4 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 52948 RTP/AVP 8 101 Media Type: audio Media Port: 52948 Media Protocol: RTP/AVP Media Format: ITU-T G.711 PCMA Media Format: DynamicRTP-Type-101 Connection Information (c): IN IP4 3.3.3.4 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 3.3.3.4 Media Attribute (a): rtpmap:8 PCMA/8000/1 Media Attribute Fieldname: rtpmap Media Format: 8 MIME Type: PCMA Sample Rate: 8000 Media Attribute (a): rtpmap:101 telephone-event/8000/1 Media Attribute Fieldname: rtpmap Media Format: 101 MIME Type: telephone-event Sample Rate: 8000 Media Attribute (a): fmtp:101 0-15 Media Attribute Fieldname: fmtp Media Format: 101 [telephone-event] Media format specific parameters: 0-15 Media Attribute (a): ptime:20 Media Attribute Fieldname: ptime Media Attribute Value: 20 Media Attribute (a): sendrecv No. Time Source Destination Protocol Length Info 7 2020-04-03 23:04:58,548398 1.1.1.1 2.2.2.2 SIP 552 Request: PRACK sip:atpsh-5e87a4a2-5dd0-2@2.2.2.2 | Frame 7: 552 bytes on wire (4416 bits), 552 bytes captured (4416 bits) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Apr 3, 2020 23:04:58.548398000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1585947898.548398000 seconds [Time delta from previous captured frame: 0.181566000 seconds] [Time delta from previous displayed frame: 0.181566000 seconds] [Time since reference or first frame: 1.711556000 seconds] Frame Number: 7 Frame Length: 552 bytes (4416 bits) Capture Length: 552 bytes (4416 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:udp:sip] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: Cisco_ec:c8:ca (84:b8:02:ec:c8:ca) Unused: 0000 Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 1.1.1.1, Dst: 2.2.2.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 536 Identification: 0xc6bf (50879) Flags: 0x0000 0... .... .... .... = Reserved bit: Not set .0.. .... .... .... = Don't fragment: Not set ..0. .... .... .... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x3192 [validation disabled] [Header checksum status: Unverified] Source: 1.1.1.1 Destination: 2.2.2.2 User Datagram Protocol, Src Port: 5060, Dst Port: 5060 Source Port: 5060 Destination Port: 5060 Length: 516 Checksum: 0x4522 [unverified] [Checksum Status: Unverified] [Stream index: 0] Session Initiation Protocol (PRACK) Request-Line: PRACK sip:atpsh-5e87a4a2-5dd0-2@2.2.2.2 SIP/2.0 Method: PRACK Request-URI: sip:atpsh-5e87a4a2-5dd0-2@2.2.2.2 Request-URI User Part: atpsh-5e87a4a2-5dd0-2 Request-URI Host Part: 2.2.2.2 [Resent Packet: False] Message Header Via: SIP/2.0/UDP 1.1.1.1:5060;branch=z9hG4bKutqiephe9suiniut1rth1qji1;Role=3;Hpt=9038_16 Transport: UDP Sent-by Address: 1.1.1.1 Sent-by port: 5060 Branch: z9hG4bKutqiephe9suiniut1rth1qji1 Role=3 Hpt=9038_16 Call-ID: isbcmq49mmdt5qba6tozy4q9ocamc55zoz43@10.18.5.64 From: "+33825462354";tag=456mb993-CC-1020-OFC-1324 SIP Display info: "+33825462354" SIP from address: sip:+33825462354@1.1.1.1;transport=udp;user=phone SIP from address User Part: +33825462354 E.164 number (MSISDN): 33825462354 Country Code: Croatia (Republic of) (385) SIP from address Host Part: 1.1.1.1 SIP From URI parameter: transport=udp SIP From URI parameter: user=phone SIP from tag: 456mb993-CC-1020-OFC-1324 To: "444444656646820";tag=U53bzzlYd_-57621-3575-7-50 SIP Display info: "444444656646820" SIP to address: sip:444444656646820@2.2.2.2;transport=udp;user=phone SIP to address User Part: 444444656646820 SIP to address Host Part: 2.2.2.2 SIP To URI parameter: transport=udp SIP To URI parameter: user=phone SIP to tag: U53bzzlYd_-57621-3575-7-50 CSeq: 2 PRACK Sequence Number: 2 Method: PRACK Max-Forwards: 69 RAck: 1 1 INVITE RSeq Sequence Number: 1 CSeq Sequence Number: 1 CSeq Method: INVITE Content-Length: 0 No. Time Source Destination Protocol Length Info 8 2020-04-03 23:04:58,555128 2.2.2.2 1.1.1.1 SIP 523 Status: 404 Not here | Frame 8: 523 bytes on wire (4184 bits), 523 bytes captured (4184 bits) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Apr 3, 2020 23:04:58.555128000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1585947898.555128000 seconds [Time delta from previous captured frame: 0.006730000 seconds] [Time delta from previous displayed frame: 0.006730000 seconds] [Time since reference or first frame: 1.718286000 seconds] Frame Number: 8 Frame Length: 523 bytes (4184 bits) Capture Length: 523 bytes (4184 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:udp:sip] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: c2:62:9d:c1:9d:b4 (c2:62:9d:c1:9d:b4) Unused: e1f6 Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 2.2.2.2, Dst: 1.1.1.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x10 (DSCP: Unknown, ECN: Not-ECT) 0001 00.. = Differentiated Services Codepoint: Unknown (4) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 507 Identification: 0x2422 (9250) Flags: 0x0000 0... .... .... .... = Reserved bit: Not set .0.. .... .... .... = Don't fragment: Not set ..0. .... .... .... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 64 Protocol: UDP (17) Header checksum: 0x863d [validation disabled] [Header checksum status: Unverified] Source: 2.2.2.2 Destination: 1.1.1.1 User Datagram Protocol, Src Port: 5060, Dst Port: 5060 Source Port: 5060 Destination Port: 5060 Length: 487 Checksum: 0xd07b [unverified] [Checksum Status: Unverified] [Stream index: 0] Session Initiation Protocol (404) Status-Line: SIP/2.0 404 Not here Status-Code: 404 [Resent Packet: False] [Request Frame: 7] [Response Time (ms): 6] Message Header Via: SIP/2.0/UDP 1.1.1.1:5060;branch=z9hG4bKutqiephe9suiniut1rth1qji1;Role=3;Hpt=9038_16 Transport: UDP Sent-by Address: 1.1.1.1 Sent-by port: 5060 Branch: z9hG4bKutqiephe9suiniut1rth1qji1 Role=3 Hpt=9038_16 Call-ID: isbcmq49mmdt5qba6tozy4q9ocamc55zoz43@10.18.5.64 From: "+33825462354";tag=456mb993-CC-1020-OFC-1324 SIP Display info: "+33825462354" SIP from address: sip:+33825462354@1.1.1.1;transport=udp;user=phone SIP from address User Part: +33825462354 E.164 number (MSISDN): 33825462354 Country Code: Croatia (Republic of) (385) SIP from address Host Part: 1.1.1.1 SIP From URI parameter: transport=udp SIP From URI parameter: user=phone SIP from tag: 456mb993-CC-1020-OFC-1324 To: "444444656646820";tag=U53bzzlYd_-57621-3575-7-50 SIP Display info: "444444656646820" SIP to address: sip:444444656646820@2.2.2.2;transport=udp;user=phone SIP to address User Part: 444444656646820 SIP to address Host Part: 2.2.2.2 SIP To URI parameter: transport=udp SIP To URI parameter: user=phone SIP to tag: U53bzzlYd_-57621-3575-7-50 CSeq: 2 PRACK Sequence Number: 2 Method: PRACK Server: kamailio (5.2.3 (x86_64/linux)) Content-Length: 0 No. Time Source Destination Protocol Length Info 9 2020-04-03 23:04:58,812886 3.3.3.3 2.2.2.2 SIP/SDP 1297 Status: 183 Session Progress | Frame 9: 1297 bytes on wire (10376 bits), 1297 bytes captured (10376 bits) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Apr 3, 2020 23:04:58.812886000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1585947898.812886000 seconds [Time delta from previous captured frame: 0.257758000 seconds] [Time delta from previous displayed frame: 0.257758000 seconds] [Time since reference or first frame: 1.976044000 seconds] Frame Number: 9 Frame Length: 1297 bytes (10376 bits) Capture Length: 1297 bytes (10376 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:udp:sip:sdp] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: 8a:64:40:74:0b:76 (8a:64:40:74:0b:76) Unused: 666d Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 3.3.3.3, Dst: 2.2.2.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x10 (DSCP: Unknown, ECN: Not-ECT) 0001 00.. = Differentiated Services Codepoint: Unknown (4) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1281 Identification: 0xf2ea (62186) Flags: 0x0000 0... .... .... .... = Reserved bit: Not set .0.. .... .... .... = Don't fragment: Not set ..0. .... .... .... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 64 Protocol: UDP (17) Header checksum: 0x075c [validation disabled] [Header checksum status: Unverified] Source: 3.3.3.3 Destination: 2.2.2.2 User Datagram Protocol, Src Port: 5060, Dst Port: 5060 Source Port: 5060 Destination Port: 5060 Length: 1261 Checksum: 0xa255 [unverified] [Checksum Status: Unverified] [Stream index: 1] Session Initiation Protocol (183) Status-Line: SIP/2.0 183 Session Progress Status-Code: 183 [Resent Packet: False] [Request Frame: 3] [Response Time (ms): 1940] Message Header Via: SIP/2.0/UDP 2.2.2.2;branch=z9hG4bK0fb9.8cb4c7f17c1fcfc06e7098af82a59c0b.0 Transport: UDP Sent-by Address: 2.2.2.2 Branch: z9hG4bK0fb9.8cb4c7f17c1fcfc06e7098af82a59c0b.0 To: ;tag=U53bzzlYd_-57621-3575-7-50 SIP to address: sip:+386980051856093@7.7.7.7:5261 SIP to address User Part: +386980051856093 E.164 number (MSISDN): 386980051856093 Country Code: Slovenia (Republic of) (386) SIP to address Host Part: 7.7.7.7 SIP to address Host Port: 5261 SIP to tag: U53bzzlYd_-57621-3575-7-50 From: "+33825462354";tag=456mb993-CC-1020-OFC-1324 SIP Display info: "+33825462354" SIP from address: sip:33825462354@6.6.6.6;transport=udp;user=phone SIP from address User Part: 33825462354 SIP from address Host Part: 6.6.6.6 SIP From URI parameter: transport=udp SIP From URI parameter: user=phone SIP from tag: 456mb993-CC-1020-OFC-1324 Call-ID: isbcmq49mmdt5qba6tozy4q9ocamc55zoz43@10.18.5.64 CSeq: 1 INVITE Sequence Number: 1 Method: INVITE Contact: Contact URI: sip:7.7.7.7:5261 Contact URI Host Part: 7.7.7.7 Contact URI Host Port: 5261 RSeq: 1 Record-Route: Record-Route URI: sip:DIAG_22_0_161cd3fa@7.7.7.7:5261;lr Record-Route Userinfo: DIAG_22_0_161cd3fa Record-Route Host Part: 7.7.7.7 Record-Route Host Port: 5261 Record-Route URI parameter: lr Record-Route: Record-Route URI: sip:6.6.6.6;lr;r2=on;ftag=456mb993-CC-1020-OFC-1324 Record-Route Host Part: 6.6.6.6 Record-Route URI parameter: lr Record-Route URI parameter: r2=on Record-Route URI parameter: ftag=456mb993-CC-1020-OFC-1324 Record-Route: Record-Route URI: sip:5.5.5.5;lr;r2=on;ftag=456mb993-CC-1020-OFC-1324 Record-Route Host Part: 5.5.5.5 Record-Route URI parameter: lr Record-Route URI parameter: r2=on Record-Route URI parameter: ftag=456mb993-CC-1020-OFC-1324 Record-Route: Record-Route URI: sip:4.4.4.4;lr;ftag=456mb993-CC-1020-OFC-1324 Record-Route Host Part: 4.4.4.4 Record-Route URI parameter: lr Record-Route URI parameter: ftag=456mb993-CC-1020-OFC-1324 Record-Route: Record-Route URI: sip:3.3.3.3;lr Record-Route Host Part: 3.3.3.3 Record-Route URI parameter: lr Require: 100rel P-Charging-Vector: icid-value=HNVIapaO9I-01cf01bf-16-00004f81-001;transit-ioi="void" icid-value: HNVIapaO9I-01cf01bf-16-00004f81-001 transit-ioi="void" Allow: INVITE,PRACK,ACK,UPDATE,CANCEL,BYE,OPTIONS,INFO,SUBSCRIBE,REFER,NOTIFY Content-Type: application/sdp Content-Disposition: session Content-Length: 242 Message Body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): - 639270298 639270298 IN IP4 3.3.3.4 Owner Username: - Session ID: 639270298 Session Version: 639270298 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 3.3.3.4 Session Name (s): - Connection Information (c): IN IP4 3.3.3.4 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 3.3.3.4 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 52948 RTP/AVP 8 101 Media Type: audio Media Port: 52948 Media Protocol: RTP/AVP Media Format: ITU-T G.711 PCMA Media Format: DynamicRTP-Type-101 Connection Information (c): IN IP4 3.3.3.4 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 3.3.3.4 Media Attribute (a): rtpmap:8 PCMA/8000/1 Media Attribute Fieldname: rtpmap Media Format: 8 MIME Type: PCMA Sample Rate: 8000 Media Attribute (a): rtpmap:101 telephone-event/8000/1 Media Attribute Fieldname: rtpmap Media Format: 101 MIME Type: telephone-event Sample Rate: 8000 Media Attribute (a): fmtp:101 0-15 Media Attribute Fieldname: fmtp Media Format: 101 [telephone-event] Media format specific parameters: 0-15 Media Attribute (a): ptime:20 Media Attribute Fieldname: ptime Media Attribute Value: 20 Media Attribute (a): sendrecv No. Time Source Destination Protocol Length Info 10 2020-04-03 23:04:58,827584 2.2.2.2 1.1.1.1 SIP/SDP 1124 Status: 183 Session Progress | Frame 10: 1124 bytes on wire (8992 bits), 1124 bytes captured (8992 bits) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Apr 3, 2020 23:04:58.827584000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1585947898.827584000 seconds [Time delta from previous captured frame: 0.014698000 seconds] [Time delta from previous displayed frame: 0.014698000 seconds] [Time since reference or first frame: 1.990742000 seconds] Frame Number: 10 Frame Length: 1124 bytes (8992 bits) Capture Length: 1124 bytes (8992 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:udp:sip:sdp] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: c2:62:9d:c1:9d:b4 (c2:62:9d:c1:9d:b4) Unused: 0000 Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 2.2.2.2, Dst: 1.1.1.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x10 (DSCP: Unknown, ECN: Not-ECT) 0001 00.. = Differentiated Services Codepoint: Unknown (4) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1108 Identification: 0x244b (9291) Flags: 0x0000 0... .... .... .... = Reserved bit: Not set .0.. .... .... .... = Don't fragment: Not set ..0. .... .... .... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 64 Protocol: UDP (17) Header checksum: 0x83bb [validation disabled] [Header checksum status: Unverified] Source: 2.2.2.2 Destination: 1.1.1.1 User Datagram Protocol, Src Port: 5060, Dst Port: 5060 Source Port: 5060 Destination Port: 5060 Length: 1088 Checksum: 0xd2d4 [unverified] [Checksum Status: Unverified] [Stream index: 0] Session Initiation Protocol (183) Status-Line: SIP/2.0 183 Session Progress Status-Code: 183 [Resent Packet: False] Message Header To: ;tag=U53bzzlYd_-57621-3575-7-50 SIP to address: sip:+386980051856093@7.7.7.7:5261 SIP to address User Part: +386980051856093 E.164 number (MSISDN): 386980051856093 Country Code: Slovenia (Republic of) (386) SIP to address Host Part: 7.7.7.7 SIP to address Host Port: 5261 SIP to tag: U53bzzlYd_-57621-3575-7-50 From: "+33825462354";tag=456mb993-CC-1020-OFC-1324 SIP Display info: "+33825462354" SIP from address: sip:33825462354@6.6.6.6;transport=udp;user=phone SIP from address User Part: 33825462354 SIP from address Host Part: 6.6.6.6 SIP From URI parameter: transport=udp SIP From URI parameter: user=phone SIP from tag: 456mb993-CC-1020-OFC-1324 Call-ID: isbcmq49mmdt5qba6tozy4q9ocamc55zoz43@10.18.5.64 CSeq: 1 INVITE Sequence Number: 1 Method: INVITE RSeq: 1 Require: 100rel P-Charging-Vector: icid-value=HNVIapaO9I-01cf01bf-16-00004f81-001;transit-ioi="void" icid-value: HNVIapaO9I-01cf01bf-16-00004f81-001 transit-ioi="void" Allow: INVITE,PRACK,ACK,UPDATE,CANCEL,BYE,OPTIONS,INFO,SUBSCRIBE,REFER,NOTIFY Content-Type: application/sdp Content-Disposition: session Content-Length: 242 Via: SIP/2.0/UDP 1.1.1.1:5060;branch=z9hG4bKete1rhqujwelu1nonl1toinrp;Role=3;Hpt=9038_16 Transport: UDP Sent-by Address: 1.1.1.1 Sent-by port: 5060 Branch: z9hG4bKete1rhqujwelu1nonl1toinrp Role=3 Hpt=9038_16 Contact: Contact URI: sip:atpsh-5e87a4a2-5dd0-2@2.2.2.2 Contact URI User Part: atpsh-5e87a4a2-5dd0-2 Contact URI Host Part: 2.2.2.2 Record-Route: Record-Route URI: sip:1.1.1.1:5060;transport=udp;lr;Hpt=9038_16;CxtId=4;TRC=ffffffff-ffffffff;X-HwB2bUaCookie=10981 Record-Route Host Part: 1.1.1.1 Record-Route Host Port: 5060 Record-Route URI parameter: transport=udp Record-Route URI parameter: lr Record-Route URI parameter: Hpt=9038_16 Record-Route URI parameter: CxtId=4 Record-Route URI parameter: TRC=ffffffff-ffffffff Record-Route URI parameter: X-HwB2bUaCookie=10981 Message Body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): - 639270298 639270298 IN IP4 3.3.3.4 Owner Username: - Session ID: 639270298 Session Version: 639270298 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 3.3.3.4 Session Name (s): - Connection Information (c): IN IP4 3.3.3.4 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 3.3.3.4 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 52948 RTP/AVP 8 101 Media Type: audio Media Port: 52948 Media Protocol: RTP/AVP Media Format: ITU-T G.711 PCMA Media Format: DynamicRTP-Type-101 Connection Information (c): IN IP4 3.3.3.4 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 3.3.3.4 Media Attribute (a): rtpmap:8 PCMA/8000/1 Media Attribute Fieldname: rtpmap Media Format: 8 MIME Type: PCMA Sample Rate: 8000 Media Attribute (a): rtpmap:101 telephone-event/8000/1 Media Attribute Fieldname: rtpmap Media Format: 101 MIME Type: telephone-event Sample Rate: 8000 Media Attribute (a): fmtp:101 0-15 Media Attribute Fieldname: fmtp Media Format: 101 [telephone-event] Media format specific parameters: 0-15 Media Attribute (a): ptime:20 Media Attribute Fieldname: ptime Media Attribute Value: 20 Media Attribute (a): sendrecv No. Time Source Destination Protocol Length Info 11 2020-04-03 23:04:59,813563 3.3.3.3 2.2.2.2 SIP/SDP 1297 Status: 183 Session Progress | Frame 11: 1297 bytes on wire (10376 bits), 1297 bytes captured (10376 bits) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Apr 3, 2020 23:04:59.813563000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1585947899.813563000 seconds [Time delta from previous captured frame: 0.985979000 seconds] [Time delta from previous displayed frame: 0.985979000 seconds] [Time since reference or first frame: 2.976721000 seconds] Frame Number: 11 Frame Length: 1297 bytes (10376 bits) Capture Length: 1297 bytes (10376 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:udp:sip:sdp] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: 8a:64:40:74:0b:76 (8a:64:40:74:0b:76) Unused: 4450 Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 3.3.3.3, Dst: 2.2.2.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x10 (DSCP: Unknown, ECN: Not-ECT) 0001 00.. = Differentiated Services Codepoint: Unknown (4) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1281 Identification: 0xf358 (62296) Flags: 0x0000 0... .... .... .... = Reserved bit: Not set .0.. .... .... .... = Don't fragment: Not set ..0. .... .... .... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 64 Protocol: UDP (17) Header checksum: 0x06ee [validation disabled] [Header checksum status: Unverified] Source: 3.3.3.3 Destination: 2.2.2.2 User Datagram Protocol, Src Port: 5060, Dst Port: 5060 Source Port: 5060 Destination Port: 5060 Length: 1261 Checksum: 0xa255 [unverified] [Checksum Status: Unverified] [Stream index: 1] Session Initiation Protocol (183) Status-Line: SIP/2.0 183 Session Progress Status-Code: 183 [Resent Packet: False] [Request Frame: 3] [Response Time (ms): 2941] Message Header Via: SIP/2.0/UDP 2.2.2.2;branch=z9hG4bK0fb9.8cb4c7f17c1fcfc06e7098af82a59c0b.0 Transport: UDP Sent-by Address: 2.2.2.2 Branch: z9hG4bK0fb9.8cb4c7f17c1fcfc06e7098af82a59c0b.0 To: ;tag=U53bzzlYd_-57621-3575-7-50 SIP to address: sip:+386980051856093@7.7.7.7:5261 SIP to address User Part: +386980051856093 E.164 number (MSISDN): 386980051856093 Country Code: Slovenia (Republic of) (386) SIP to address Host Part: 7.7.7.7 SIP to address Host Port: 5261 SIP to tag: U53bzzlYd_-57621-3575-7-50 From: "+33825462354";tag=456mb993-CC-1020-OFC-1324 SIP Display info: "+33825462354" SIP from address: sip:33825462354@6.6.6.6;transport=udp;user=phone SIP from address User Part: 33825462354 SIP from address Host Part: 6.6.6.6 SIP From URI parameter: transport=udp SIP From URI parameter: user=phone SIP from tag: 456mb993-CC-1020-OFC-1324 Call-ID: isbcmq49mmdt5qba6tozy4q9ocamc55zoz43@10.18.5.64 CSeq: 1 INVITE Sequence Number: 1 Method: INVITE Contact: Contact URI: sip:7.7.7.7:5261 Contact URI Host Part: 7.7.7.7 Contact URI Host Port: 5261 RSeq: 1 Record-Route: Record-Route URI: sip:DIAG_22_0_161cd3fa@7.7.7.7:5261;lr Record-Route Userinfo: DIAG_22_0_161cd3fa Record-Route Host Part: 7.7.7.7 Record-Route Host Port: 5261 Record-Route URI parameter: lr Record-Route: Record-Route URI: sip:6.6.6.6;lr;r2=on;ftag=456mb993-CC-1020-OFC-1324 Record-Route Host Part: 6.6.6.6 Record-Route URI parameter: lr Record-Route URI parameter: r2=on Record-Route URI parameter: ftag=456mb993-CC-1020-OFC-1324 Record-Route: Record-Route URI: sip:5.5.5.5;lr;r2=on;ftag=456mb993-CC-1020-OFC-1324 Record-Route Host Part: 5.5.5.5 Record-Route URI parameter: lr Record-Route URI parameter: r2=on Record-Route URI parameter: ftag=456mb993-CC-1020-OFC-1324 Record-Route: Record-Route URI: sip:4.4.4.4;lr;ftag=456mb993-CC-1020-OFC-1324 Record-Route Host Part: 4.4.4.4 Record-Route URI parameter: lr Record-Route URI parameter: ftag=456mb993-CC-1020-OFC-1324 Record-Route: Record-Route URI: sip:3.3.3.3;lr Record-Route Host Part: 3.3.3.3 Record-Route URI parameter: lr Require: 100rel P-Charging-Vector: icid-value=HNVIapaO9I-01cf01bf-16-00004f81-001;transit-ioi="void" icid-value: HNVIapaO9I-01cf01bf-16-00004f81-001 transit-ioi="void" Allow: INVITE,PRACK,ACK,UPDATE,CANCEL,BYE,OPTIONS,INFO,SUBSCRIBE,REFER,NOTIFY Content-Type: application/sdp Content-Disposition: session Content-Length: 242 Message Body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): - 639270298 639270298 IN IP4 3.3.3.4 Owner Username: - Session ID: 639270298 Session Version: 639270298 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 3.3.3.4 Session Name (s): - Connection Information (c): IN IP4 3.3.3.4 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 3.3.3.4 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 52948 RTP/AVP 8 101 Media Type: audio Media Port: 52948 Media Protocol: RTP/AVP Media Format: ITU-T G.711 PCMA Media Format: DynamicRTP-Type-101 Connection Information (c): IN IP4 3.3.3.4 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 3.3.3.4 Media Attribute (a): rtpmap:8 PCMA/8000/1 Media Attribute Fieldname: rtpmap Media Format: 8 MIME Type: PCMA Sample Rate: 8000 Media Attribute (a): rtpmap:101 telephone-event/8000/1 Media Attribute Fieldname: rtpmap Media Format: 101 MIME Type: telephone-event Sample Rate: 8000 Media Attribute (a): fmtp:101 0-15 Media Attribute Fieldname: fmtp Media Format: 101 [telephone-event] Media format specific parameters: 0-15 Media Attribute (a): ptime:20 Media Attribute Fieldname: ptime Media Attribute Value: 20 Media Attribute (a): sendrecv No. Time Source Destination Protocol Length Info 12 2020-04-03 23:04:59,825299 2.2.2.2 1.1.1.1 SIP/SDP 1124 Status: 183 Session Progress | Frame 12: 1124 bytes on wire (8992 bits), 1124 bytes captured (8992 bits) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Apr 3, 2020 23:04:59.825299000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1585947899.825299000 seconds [Time delta from previous captured frame: 0.011736000 seconds] [Time delta from previous displayed frame: 0.011736000 seconds] [Time since reference or first frame: 2.988457000 seconds] Frame Number: 12 Frame Length: 1124 bytes (8992 bits) Capture Length: 1124 bytes (8992 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:udp:sip:sdp] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: c2:62:9d:c1:9d:b4 (c2:62:9d:c1:9d:b4) Unused: 76cd Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 2.2.2.2, Dst: 1.1.1.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x10 (DSCP: Unknown, ECN: Not-ECT) 0001 00.. = Differentiated Services Codepoint: Unknown (4) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1108 Identification: 0x2484 (9348) Flags: 0x0000 0... .... .... .... = Reserved bit: Not set .0.. .... .... .... = Don't fragment: Not set ..0. .... .... .... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 64 Protocol: UDP (17) Header checksum: 0x8382 [validation disabled] [Header checksum status: Unverified] Source: 2.2.2.2 Destination: 1.1.1.1 User Datagram Protocol, Src Port: 5060, Dst Port: 5060 Source Port: 5060 Destination Port: 5060 Length: 1088 Checksum: 0xd2d4 [unverified] [Checksum Status: Unverified] [Stream index: 0] Session Initiation Protocol (183) Status-Line: SIP/2.0 183 Session Progress Status-Code: 183 [Resent Packet: False] Message Header To: ;tag=U53bzzlYd_-57621-3575-7-50 SIP to address: sip:+386980051856093@7.7.7.7:5261 SIP to address User Part: +386980051856093 E.164 number (MSISDN): 386980051856093 Country Code: Slovenia (Republic of) (386) SIP to address Host Part: 7.7.7.7 SIP to address Host Port: 5261 SIP to tag: U53bzzlYd_-57621-3575-7-50 From: "+33825462354";tag=456mb993-CC-1020-OFC-1324 SIP Display info: "+33825462354" SIP from address: sip:33825462354@6.6.6.6;transport=udp;user=phone SIP from address User Part: 33825462354 SIP from address Host Part: 6.6.6.6 SIP From URI parameter: transport=udp SIP From URI parameter: user=phone SIP from tag: 456mb993-CC-1020-OFC-1324 Call-ID: isbcmq49mmdt5qba6tozy4q9ocamc55zoz43@10.18.5.64 CSeq: 1 INVITE Sequence Number: 1 Method: INVITE RSeq: 1 Require: 100rel P-Charging-Vector: icid-value=HNVIapaO9I-01cf01bf-16-00004f81-001;transit-ioi="void" icid-value: HNVIapaO9I-01cf01bf-16-00004f81-001 transit-ioi="void" Allow: INVITE,PRACK,ACK,UPDATE,CANCEL,BYE,OPTIONS,INFO,SUBSCRIBE,REFER,NOTIFY Content-Type: application/sdp Content-Disposition: session Content-Length: 242 Via: SIP/2.0/UDP 1.1.1.1:5060;branch=z9hG4bKete1rhqujwelu1nonl1toinrp;Role=3;Hpt=9038_16 Transport: UDP Sent-by Address: 1.1.1.1 Sent-by port: 5060 Branch: z9hG4bKete1rhqujwelu1nonl1toinrp Role=3 Hpt=9038_16 Contact: Contact URI: sip:atpsh-5e87a4a2-5dd0-2@2.2.2.2 Contact URI User Part: atpsh-5e87a4a2-5dd0-2 Contact URI Host Part: 2.2.2.2 Record-Route: Record-Route URI: sip:1.1.1.1:5060;transport=udp;lr;Hpt=9038_16;CxtId=4;TRC=ffffffff-ffffffff;X-HwB2bUaCookie=10981 Record-Route Host Part: 1.1.1.1 Record-Route Host Port: 5060 Record-Route URI parameter: transport=udp Record-Route URI parameter: lr Record-Route URI parameter: Hpt=9038_16 Record-Route URI parameter: CxtId=4 Record-Route URI parameter: TRC=ffffffff-ffffffff Record-Route URI parameter: X-HwB2bUaCookie=10981 Message Body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): - 639270298 639270298 IN IP4 3.3.3.4 Owner Username: - Session ID: 639270298 Session Version: 639270298 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 3.3.3.4 Session Name (s): - Connection Information (c): IN IP4 3.3.3.4 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 3.3.3.4 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 52948 RTP/AVP 8 101 Media Type: audio Media Port: 52948 Media Protocol: RTP/AVP Media Format: ITU-T G.711 PCMA Media Format: DynamicRTP-Type-101 Connection Information (c): IN IP4 3.3.3.4 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 3.3.3.4 Media Attribute (a): rtpmap:8 PCMA/8000/1 Media Attribute Fieldname: rtpmap Media Format: 8 MIME Type: PCMA Sample Rate: 8000 Media Attribute (a): rtpmap:101 telephone-event/8000/1 Media Attribute Fieldname: rtpmap Media Format: 101 MIME Type: telephone-event Sample Rate: 8000 Media Attribute (a): fmtp:101 0-15 Media Attribute Fieldname: fmtp Media Format: 101 [telephone-event] Media format specific parameters: 0-15 Media Attribute (a): ptime:20 Media Attribute Fieldname: ptime Media Attribute Value: 20 Media Attribute (a): sendrecv No. Time Source Destination Protocol Length Info 13 2020-04-03 23:05:01,816245 3.3.3.3 2.2.2.2 SIP/SDP 1297 Status: 183 Session Progress | Frame 13: 1297 bytes on wire (10376 bits), 1297 bytes captured (10376 bits) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Apr 3, 2020 23:05:01.816245000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1585947901.816245000 seconds [Time delta from previous captured frame: 1.990946000 seconds] [Time delta from previous displayed frame: 1.990946000 seconds] [Time since reference or first frame: 4.979403000 seconds] Frame Number: 13 Frame Length: 1297 bytes (10376 bits) Capture Length: 1297 bytes (10376 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:udp:sip:sdp] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: 8a:64:40:74:0b:76 (8a:64:40:74:0b:76) Unused: 3320 Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 3.3.3.3, Dst: 2.2.2.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x10 (DSCP: Unknown, ECN: Not-ECT) 0001 00.. = Differentiated Services Codepoint: Unknown (4) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1281 Identification: 0xf3f2 (62450) Flags: 0x0000 0... .... .... .... = Reserved bit: Not set .0.. .... .... .... = Don't fragment: Not set ..0. .... .... .... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 64 Protocol: UDP (17) Header checksum: 0x0654 [validation disabled] [Header checksum status: Unverified] Source: 3.3.3.3 Destination: 2.2.2.2 User Datagram Protocol, Src Port: 5060, Dst Port: 5060 Source Port: 5060 Destination Port: 5060 Length: 1261 Checksum: 0xa255 [unverified] [Checksum Status: Unverified] [Stream index: 1] Session Initiation Protocol (183) Status-Line: SIP/2.0 183 Session Progress Status-Code: 183 [Resent Packet: False] [Request Frame: 3] [Response Time (ms): 4943] Message Header Via: SIP/2.0/UDP 2.2.2.2;branch=z9hG4bK0fb9.8cb4c7f17c1fcfc06e7098af82a59c0b.0 Transport: UDP Sent-by Address: 2.2.2.2 Branch: z9hG4bK0fb9.8cb4c7f17c1fcfc06e7098af82a59c0b.0 To: ;tag=U53bzzlYd_-57621-3575-7-50 SIP to address: sip:+386980051856093@7.7.7.7:5261 SIP to address User Part: +386980051856093 E.164 number (MSISDN): 386980051856093 Country Code: Slovenia (Republic of) (386) SIP to address Host Part: 7.7.7.7 SIP to address Host Port: 5261 SIP to tag: U53bzzlYd_-57621-3575-7-50 From: "+33825462354";tag=456mb993-CC-1020-OFC-1324 SIP Display info: "+33825462354" SIP from address: sip:33825462354@6.6.6.6;transport=udp;user=phone SIP from address User Part: 33825462354 SIP from address Host Part: 6.6.6.6 SIP From URI parameter: transport=udp SIP From URI parameter: user=phone SIP from tag: 456mb993-CC-1020-OFC-1324 Call-ID: isbcmq49mmdt5qba6tozy4q9ocamc55zoz43@10.18.5.64 CSeq: 1 INVITE Sequence Number: 1 Method: INVITE Contact: Contact URI: sip:7.7.7.7:5261 Contact URI Host Part: 7.7.7.7 Contact URI Host Port: 5261 RSeq: 1 Record-Route: Record-Route URI: sip:DIAG_22_0_161cd3fa@7.7.7.7:5261;lr Record-Route Userinfo: DIAG_22_0_161cd3fa Record-Route Host Part: 7.7.7.7 Record-Route Host Port: 5261 Record-Route URI parameter: lr Record-Route: Record-Route URI: sip:6.6.6.6;lr;r2=on;ftag=456mb993-CC-1020-OFC-1324 Record-Route Host Part: 6.6.6.6 Record-Route URI parameter: lr Record-Route URI parameter: r2=on Record-Route URI parameter: ftag=456mb993-CC-1020-OFC-1324 Record-Route: Record-Route URI: sip:5.5.5.5;lr;r2=on;ftag=456mb993-CC-1020-OFC-1324 Record-Route Host Part: 5.5.5.5 Record-Route URI parameter: lr Record-Route URI parameter: r2=on Record-Route URI parameter: ftag=456mb993-CC-1020-OFC-1324 Record-Route: Record-Route URI: sip:4.4.4.4;lr;ftag=456mb993-CC-1020-OFC-1324 Record-Route Host Part: 4.4.4.4 Record-Route URI parameter: lr Record-Route URI parameter: ftag=456mb993-CC-1020-OFC-1324 Record-Route: Record-Route URI: sip:3.3.3.3;lr Record-Route Host Part: 3.3.3.3 Record-Route URI parameter: lr Require: 100rel P-Charging-Vector: icid-value=HNVIapaO9I-01cf01bf-16-00004f81-001;transit-ioi="void" icid-value: HNVIapaO9I-01cf01bf-16-00004f81-001 transit-ioi="void" Allow: INVITE,PRACK,ACK,UPDATE,CANCEL,BYE,OPTIONS,INFO,SUBSCRIBE,REFER,NOTIFY Content-Type: application/sdp Content-Disposition: session Content-Length: 242 Message Body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): - 639270298 639270298 IN IP4 3.3.3.4 Owner Username: - Session ID: 639270298 Session Version: 639270298 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 3.3.3.4 Session Name (s): - Connection Information (c): IN IP4 3.3.3.4 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 3.3.3.4 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 52948 RTP/AVP 8 101 Media Type: audio Media Port: 52948 Media Protocol: RTP/AVP Media Format: ITU-T G.711 PCMA Media Format: DynamicRTP-Type-101 Connection Information (c): IN IP4 3.3.3.4 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 3.3.3.4 Media Attribute (a): rtpmap:8 PCMA/8000/1 Media Attribute Fieldname: rtpmap Media Format: 8 MIME Type: PCMA Sample Rate: 8000 Media Attribute (a): rtpmap:101 telephone-event/8000/1 Media Attribute Fieldname: rtpmap Media Format: 101 MIME Type: telephone-event Sample Rate: 8000 Media Attribute (a): fmtp:101 0-15 Media Attribute Fieldname: fmtp Media Format: 101 [telephone-event] Media format specific parameters: 0-15 Media Attribute (a): ptime:20 Media Attribute Fieldname: ptime Media Attribute Value: 20 Media Attribute (a): sendrecv No. Time Source Destination Protocol Length Info 14 2020-04-03 23:05:01,856990 2.2.2.2 1.1.1.1 SIP/SDP 1124 Status: 183 Session Progress | Frame 14: 1124 bytes on wire (8992 bits), 1124 bytes captured (8992 bits) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Apr 3, 2020 23:05:01.856990000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1585947901.856990000 seconds [Time delta from previous captured frame: 0.040745000 seconds] [Time delta from previous displayed frame: 0.040745000 seconds] [Time since reference or first frame: 5.020148000 seconds] Frame Number: 14 Frame Length: 1124 bytes (8992 bits) Capture Length: 1124 bytes (8992 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:udp:sip:sdp] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: c2:62:9d:c1:9d:b4 (c2:62:9d:c1:9d:b4) Unused: 3434 Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 2.2.2.2, Dst: 1.1.1.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x10 (DSCP: Unknown, ECN: Not-ECT) 0001 00.. = Differentiated Services Codepoint: Unknown (4) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1108 Identification: 0x257b (9595) Flags: 0x0000 0... .... .... .... = Reserved bit: Not set .0.. .... .... .... = Don't fragment: Not set ..0. .... .... .... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 64 Protocol: UDP (17) Header checksum: 0x828b [validation disabled] [Header checksum status: Unverified] Source: 2.2.2.2 Destination: 1.1.1.1 User Datagram Protocol, Src Port: 5060, Dst Port: 5060 Source Port: 5060 Destination Port: 5060 Length: 1088 Checksum: 0xd2d4 [unverified] [Checksum Status: Unverified] [Stream index: 0] Session Initiation Protocol (183) Status-Line: SIP/2.0 183 Session Progress Status-Code: 183 [Resent Packet: False] Message Header To: ;tag=U53bzzlYd_-57621-3575-7-50 SIP to address: sip:+386980051856093@7.7.7.7:5261 SIP to address User Part: +386980051856093 E.164 number (MSISDN): 386980051856093 Country Code: Slovenia (Republic of) (386) SIP to address Host Part: 7.7.7.7 SIP to address Host Port: 5261 SIP to tag: U53bzzlYd_-57621-3575-7-50 From: "+33825462354";tag=456mb993-CC-1020-OFC-1324 SIP Display info: "+33825462354" SIP from address: sip:33825462354@6.6.6.6;transport=udp;user=phone SIP from address User Part: 33825462354 SIP from address Host Part: 6.6.6.6 SIP From URI parameter: transport=udp SIP From URI parameter: user=phone SIP from tag: 456mb993-CC-1020-OFC-1324 Call-ID: isbcmq49mmdt5qba6tozy4q9ocamc55zoz43@10.18.5.64 CSeq: 1 INVITE Sequence Number: 1 Method: INVITE RSeq: 1 Require: 100rel P-Charging-Vector: icid-value=HNVIapaO9I-01cf01bf-16-00004f81-001;transit-ioi="void" icid-value: HNVIapaO9I-01cf01bf-16-00004f81-001 transit-ioi="void" Allow: INVITE,PRACK,ACK,UPDATE,CANCEL,BYE,OPTIONS,INFO,SUBSCRIBE,REFER,NOTIFY Content-Type: application/sdp Content-Disposition: session Content-Length: 242 Via: SIP/2.0/UDP 1.1.1.1:5060;branch=z9hG4bKete1rhqujwelu1nonl1toinrp;Role=3;Hpt=9038_16 Transport: UDP Sent-by Address: 1.1.1.1 Sent-by port: 5060 Branch: z9hG4bKete1rhqujwelu1nonl1toinrp Role=3 Hpt=9038_16 Contact: Contact URI: sip:atpsh-5e87a4a2-5dd0-2@2.2.2.2 Contact URI User Part: atpsh-5e87a4a2-5dd0-2 Contact URI Host Part: 2.2.2.2 Record-Route: Record-Route URI: sip:1.1.1.1:5060;transport=udp;lr;Hpt=9038_16;CxtId=4;TRC=ffffffff-ffffffff;X-HwB2bUaCookie=10981 Record-Route Host Part: 1.1.1.1 Record-Route Host Port: 5060 Record-Route URI parameter: transport=udp Record-Route URI parameter: lr Record-Route URI parameter: Hpt=9038_16 Record-Route URI parameter: CxtId=4 Record-Route URI parameter: TRC=ffffffff-ffffffff Record-Route URI parameter: X-HwB2bUaCookie=10981 Message Body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): - 639270298 639270298 IN IP4 3.3.3.4 Owner Username: - Session ID: 639270298 Session Version: 639270298 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 3.3.3.4 Session Name (s): - Connection Information (c): IN IP4 3.3.3.4 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 3.3.3.4 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 52948 RTP/AVP 8 101 Media Type: audio Media Port: 52948 Media Protocol: RTP/AVP Media Format: ITU-T G.711 PCMA Media Format: DynamicRTP-Type-101 Connection Information (c): IN IP4 3.3.3.4 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 3.3.3.4 Media Attribute (a): rtpmap:8 PCMA/8000/1 Media Attribute Fieldname: rtpmap Media Format: 8 MIME Type: PCMA Sample Rate: 8000 Media Attribute (a): rtpmap:101 telephone-event/8000/1 Media Attribute Fieldname: rtpmap Media Format: 101 MIME Type: telephone-event Sample Rate: 8000 Media Attribute (a): fmtp:101 0-15 Media Attribute Fieldname: fmtp Media Format: 101 [telephone-event] Media format specific parameters: 0-15 Media Attribute (a): ptime:20 Media Attribute Fieldname: ptime Media Attribute Value: 20 Media Attribute (a): sendrecv No. Time Source Destination Protocol Length Info 15 2020-04-03 23:05:05,819054 3.3.3.3 2.2.2.2 SIP/SDP 1297 Status: 183 Session Progress | Frame 15: 1297 bytes on wire (10376 bits), 1297 bytes captured (10376 bits) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Apr 3, 2020 23:05:05.819054000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1585947905.819054000 seconds [Time delta from previous captured frame: 3.962064000 seconds] [Time delta from previous displayed frame: 3.962064000 seconds] [Time since reference or first frame: 8.982212000 seconds] Frame Number: 15 Frame Length: 1297 bytes (10376 bits) Capture Length: 1297 bytes (10376 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:udp:sip:sdp] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: 8a:64:40:74:0b:76 (8a:64:40:74:0b:76) Unused: 0000 Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 3.3.3.3, Dst: 2.2.2.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x10 (DSCP: Unknown, ECN: Not-ECT) 0001 00.. = Differentiated Services Codepoint: Unknown (4) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1281 Identification: 0xf447 (62535) Flags: 0x0000 0... .... .... .... = Reserved bit: Not set .0.. .... .... .... = Don't fragment: Not set ..0. .... .... .... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 64 Protocol: UDP (17) Header checksum: 0x05ff [validation disabled] [Header checksum status: Unverified] Source: 3.3.3.3 Destination: 2.2.2.2 User Datagram Protocol, Src Port: 5060, Dst Port: 5060 Source Port: 5060 Destination Port: 5060 Length: 1261 Checksum: 0xa255 [unverified] [Checksum Status: Unverified] [Stream index: 1] Session Initiation Protocol (183) Status-Line: SIP/2.0 183 Session Progress Status-Code: 183 [Resent Packet: False] [Request Frame: 3] [Response Time (ms): 8946] Message Header Via: SIP/2.0/UDP 2.2.2.2;branch=z9hG4bK0fb9.8cb4c7f17c1fcfc06e7098af82a59c0b.0 Transport: UDP Sent-by Address: 2.2.2.2 Branch: z9hG4bK0fb9.8cb4c7f17c1fcfc06e7098af82a59c0b.0 To: ;tag=U53bzzlYd_-57621-3575-7-50 SIP to address: sip:+386980051856093@7.7.7.7:5261 SIP to address User Part: +386980051856093 E.164 number (MSISDN): 386980051856093 Country Code: Slovenia (Republic of) (386) SIP to address Host Part: 7.7.7.7 SIP to address Host Port: 5261 SIP to tag: U53bzzlYd_-57621-3575-7-50 From: "+33825462354";tag=456mb993-CC-1020-OFC-1324 SIP Display info: "+33825462354" SIP from address: sip:33825462354@6.6.6.6;transport=udp;user=phone SIP from address User Part: 33825462354 SIP from address Host Part: 6.6.6.6 SIP From URI parameter: transport=udp SIP From URI parameter: user=phone SIP from tag: 456mb993-CC-1020-OFC-1324 Call-ID: isbcmq49mmdt5qba6tozy4q9ocamc55zoz43@10.18.5.64 CSeq: 1 INVITE Sequence Number: 1 Method: INVITE Contact: Contact URI: sip:7.7.7.7:5261 Contact URI Host Part: 7.7.7.7 Contact URI Host Port: 5261 RSeq: 1 Record-Route: Record-Route URI: sip:DIAG_22_0_161cd3fa@7.7.7.7:5261;lr Record-Route Userinfo: DIAG_22_0_161cd3fa Record-Route Host Part: 7.7.7.7 Record-Route Host Port: 5261 Record-Route URI parameter: lr Record-Route: Record-Route URI: sip:6.6.6.6;lr;r2=on;ftag=456mb993-CC-1020-OFC-1324 Record-Route Host Part: 6.6.6.6 Record-Route URI parameter: lr Record-Route URI parameter: r2=on Record-Route URI parameter: ftag=456mb993-CC-1020-OFC-1324 Record-Route: Record-Route URI: sip:5.5.5.5;lr;r2=on;ftag=456mb993-CC-1020-OFC-1324 Record-Route Host Part: 5.5.5.5 Record-Route URI parameter: lr Record-Route URI parameter: r2=on Record-Route URI parameter: ftag=456mb993-CC-1020-OFC-1324 Record-Route: Record-Route URI: sip:4.4.4.4;lr;ftag=456mb993-CC-1020-OFC-1324 Record-Route Host Part: 4.4.4.4 Record-Route URI parameter: lr Record-Route URI parameter: ftag=456mb993-CC-1020-OFC-1324 Record-Route: Record-Route URI: sip:3.3.3.3;lr Record-Route Host Part: 3.3.3.3 Record-Route URI parameter: lr Require: 100rel P-Charging-Vector: icid-value=HNVIapaO9I-01cf01bf-16-00004f81-001;transit-ioi="void" icid-value: HNVIapaO9I-01cf01bf-16-00004f81-001 transit-ioi="void" Allow: INVITE,PRACK,ACK,UPDATE,CANCEL,BYE,OPTIONS,INFO,SUBSCRIBE,REFER,NOTIFY Content-Type: application/sdp Content-Disposition: session Content-Length: 242 Message Body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): - 639270298 639270298 IN IP4 3.3.3.4 Owner Username: - Session ID: 639270298 Session Version: 639270298 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 3.3.3.4 Session Name (s): - Connection Information (c): IN IP4 3.3.3.4 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 3.3.3.4 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 52948 RTP/AVP 8 101 Media Type: audio Media Port: 52948 Media Protocol: RTP/AVP Media Format: ITU-T G.711 PCMA Media Format: DynamicRTP-Type-101 Connection Information (c): IN IP4 3.3.3.4 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 3.3.3.4 Media Attribute (a): rtpmap:8 PCMA/8000/1 Media Attribute Fieldname: rtpmap Media Format: 8 MIME Type: PCMA Sample Rate: 8000 Media Attribute (a): rtpmap:101 telephone-event/8000/1 Media Attribute Fieldname: rtpmap Media Format: 101 MIME Type: telephone-event Sample Rate: 8000 Media Attribute (a): fmtp:101 0-15 Media Attribute Fieldname: fmtp Media Format: 101 [telephone-event] Media format specific parameters: 0-15 Media Attribute (a): ptime:20 Media Attribute Fieldname: ptime Media Attribute Value: 20 Media Attribute (a): sendrecv No. Time Source Destination Protocol Length Info 16 2020-04-03 23:05:05,844244 2.2.2.2 1.1.1.1 SIP/SDP 1124 Status: 183 Session Progress | Frame 16: 1124 bytes on wire (8992 bits), 1124 bytes captured (8992 bits) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Apr 3, 2020 23:05:05.844244000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1585947905.844244000 seconds [Time delta from previous captured frame: 0.025190000 seconds] [Time delta from previous displayed frame: 0.025190000 seconds] [Time since reference or first frame: 9.007402000 seconds] Frame Number: 16 Frame Length: 1124 bytes (8992 bits) Capture Length: 1124 bytes (8992 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:udp:sip:sdp] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: c2:62:9d:c1:9d:b4 (c2:62:9d:c1:9d:b4) Unused: 0800 Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 2.2.2.2, Dst: 1.1.1.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x10 (DSCP: Unknown, ECN: Not-ECT) 0001 00.. = Differentiated Services Codepoint: Unknown (4) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1108 Identification: 0x266f (9839) Flags: 0x0000 0... .... .... .... = Reserved bit: Not set .0.. .... .... .... = Don't fragment: Not set ..0. .... .... .... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 64 Protocol: UDP (17) Header checksum: 0x8197 [validation disabled] [Header checksum status: Unverified] Source: 2.2.2.2 Destination: 1.1.1.1 User Datagram Protocol, Src Port: 5060, Dst Port: 5060 Source Port: 5060 Destination Port: 5060 Length: 1088 Checksum: 0xd2d4 [unverified] [Checksum Status: Unverified] [Stream index: 0] Session Initiation Protocol (183) Status-Line: SIP/2.0 183 Session Progress Status-Code: 183 [Resent Packet: False] Message Header To: ;tag=U53bzzlYd_-57621-3575-7-50 SIP to address: sip:+386980051856093@7.7.7.7:5261 SIP to address User Part: +386980051856093 E.164 number (MSISDN): 386980051856093 Country Code: Slovenia (Republic of) (386) SIP to address Host Part: 7.7.7.7 SIP to address Host Port: 5261 SIP to tag: U53bzzlYd_-57621-3575-7-50 From: "+33825462354";tag=456mb993-CC-1020-OFC-1324 SIP Display info: "+33825462354" SIP from address: sip:33825462354@6.6.6.6;transport=udp;user=phone SIP from address User Part: 33825462354 SIP from address Host Part: 6.6.6.6 SIP From URI parameter: transport=udp SIP From URI parameter: user=phone SIP from tag: 456mb993-CC-1020-OFC-1324 Call-ID: isbcmq49mmdt5qba6tozy4q9ocamc55zoz43@10.18.5.64 CSeq: 1 INVITE Sequence Number: 1 Method: INVITE RSeq: 1 Require: 100rel P-Charging-Vector: icid-value=HNVIapaO9I-01cf01bf-16-00004f81-001;transit-ioi="void" icid-value: HNVIapaO9I-01cf01bf-16-00004f81-001 transit-ioi="void" Allow: INVITE,PRACK,ACK,UPDATE,CANCEL,BYE,OPTIONS,INFO,SUBSCRIBE,REFER,NOTIFY Content-Type: application/sdp Content-Disposition: session Content-Length: 242 Via: SIP/2.0/UDP 1.1.1.1:5060;branch=z9hG4bKete1rhqujwelu1nonl1toinrp;Role=3;Hpt=9038_16 Transport: UDP Sent-by Address: 1.1.1.1 Sent-by port: 5060 Branch: z9hG4bKete1rhqujwelu1nonl1toinrp Role=3 Hpt=9038_16 Contact: Contact URI: sip:atpsh-5e87a4a2-5dd0-2@2.2.2.2 Contact URI User Part: atpsh-5e87a4a2-5dd0-2 Contact URI Host Part: 2.2.2.2 Record-Route: Record-Route URI: sip:1.1.1.1:5060;transport=udp;lr;Hpt=9038_16;CxtId=4;TRC=ffffffff-ffffffff;X-HwB2bUaCookie=10981 Record-Route Host Part: 1.1.1.1 Record-Route Host Port: 5060 Record-Route URI parameter: transport=udp Record-Route URI parameter: lr Record-Route URI parameter: Hpt=9038_16 Record-Route URI parameter: CxtId=4 Record-Route URI parameter: TRC=ffffffff-ffffffff Record-Route URI parameter: X-HwB2bUaCookie=10981 Message Body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): - 639270298 639270298 IN IP4 3.3.3.4 Owner Username: - Session ID: 639270298 Session Version: 639270298 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 3.3.3.4 Session Name (s): - Connection Information (c): IN IP4 3.3.3.4 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 3.3.3.4 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 52948 RTP/AVP 8 101 Media Type: audio Media Port: 52948 Media Protocol: RTP/AVP Media Format: ITU-T G.711 PCMA Media Format: DynamicRTP-Type-101 Connection Information (c): IN IP4 3.3.3.4 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 3.3.3.4 Media Attribute (a): rtpmap:8 PCMA/8000/1 Media Attribute Fieldname: rtpmap Media Format: 8 MIME Type: PCMA Sample Rate: 8000 Media Attribute (a): rtpmap:101 telephone-event/8000/1 Media Attribute Fieldname: rtpmap Media Format: 101 MIME Type: telephone-event Sample Rate: 8000 Media Attribute (a): fmtp:101 0-15 Media Attribute Fieldname: fmtp Media Format: 101 [telephone-event] Media format specific parameters: 0-15 Media Attribute (a): ptime:20 Media Attribute Fieldname: ptime Media Attribute Value: 20 Media Attribute (a): sendrecv No. Time Source Destination Protocol Length Info 17 2020-04-03 23:05:09,934236 1.1.1.1 2.2.2.2 SIP 562 Request: CANCEL sip:444444656646820@2.2.2.2;user=phone | Frame 17: 562 bytes on wire (4496 bits), 562 bytes captured (4496 bits) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Apr 3, 2020 23:05:09.934236000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1585947909.934236000 seconds [Time delta from previous captured frame: 4.089992000 seconds] [Time delta from previous displayed frame: 4.089992000 seconds] [Time since reference or first frame: 13.097394000 seconds] Frame Number: 17 Frame Length: 562 bytes (4496 bits) Capture Length: 562 bytes (4496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:udp:sip] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: Cisco_ec:c8:ca (84:b8:02:ec:c8:ca) Unused: 0000 Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 1.1.1.1, Dst: 2.2.2.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 546 Identification: 0xdac1 (56001) Flags: 0x0000 0... .... .... .... = Reserved bit: Not set .0.. .... .... .... = Don't fragment: Not set ..0. .... .... .... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x1d86 [validation disabled] [Header checksum status: Unverified] Source: 1.1.1.1 Destination: 2.2.2.2 User Datagram Protocol, Src Port: 5060, Dst Port: 5060 Source Port: 5060 Destination Port: 5060 Length: 526 Checksum: 0x6be0 [unverified] [Checksum Status: Unverified] [Stream index: 0] Session Initiation Protocol (CANCEL) Request-Line: CANCEL sip:444444656646820@2.2.2.2;user=phone SIP/2.0 Method: CANCEL Request-URI: sip:444444656646820@2.2.2.2;user=phone Request-URI User Part: 444444656646820 Request-URI Host Part: 2.2.2.2 [Resent Packet: False] Message Header Via: SIP/2.0/UDP 1.1.1.1:5060;branch=z9hG4bKete1rhqujwelu1nonl1toinrp;Role=3;Hpt=9038_16 Transport: UDP Sent-by Address: 1.1.1.1 Sent-by port: 5060 Branch: z9hG4bKete1rhqujwelu1nonl1toinrp Role=3 Hpt=9038_16 Call-ID: isbcmq49mmdt5qba6tozy4q9ocamc55zoz43@10.18.5.64 From: "+33825462354";tag=456mb993-CC-1020-OFC-1324 SIP Display info: "+33825462354" SIP from address: sip:+33825462354@1.1.1.1;transport=udp;user=phone SIP from address User Part: +33825462354 E.164 number (MSISDN): 33825462354 Country Code: Croatia (Republic of) (385) SIP from address Host Part: 1.1.1.1 SIP From URI parameter: transport=udp SIP From URI parameter: user=phone SIP from tag: 456mb993-CC-1020-OFC-1324 To: "444444656646820" SIP Display info: "444444656646820" SIP to address: sip:444444656646820@2.2.2.2;transport=udp;user=phone SIP to address User Part: 444444656646820 SIP to address Host Part: 2.2.2.2 SIP To URI parameter: transport=udp SIP To URI parameter: user=phone CSeq: 1 CANCEL Sequence Number: 1 Method: CANCEL Max-Forwards: 65 Reason: Q.850;cause=16;text="Normal call clearing" Reason protocols: Q.850 Cause: Normal call clearing (16) Text: Normal call clearing Content-Length: 0 No. Time Source Destination Protocol Length Info 18 2020-04-03 23:05:09,940697 2.2.2.2 3.3.3.3 SIP 552 Request: CANCEL sip:44656646820@3.3.3.3:5060;user=phone | Frame 18: 552 bytes on wire (4416 bits), 552 bytes captured (4416 bits) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Apr 3, 2020 23:05:09.940697000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1585947909.940697000 seconds [Time delta from previous captured frame: 0.006461000 seconds] [Time delta from previous displayed frame: 0.006461000 seconds] [Time since reference or first frame: 13.103855000 seconds] Frame Number: 18 Frame Length: 552 bytes (4416 bits) Capture Length: 552 bytes (4416 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:udp:sip] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: c2:62:9d:c1:9d:b4 (c2:62:9d:c1:9d:b4) Unused: 7465 Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 2.2.2.2, Dst: 3.3.3.3 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x10 (DSCP: Unknown, ECN: Not-ECT) 0001 00.. = Differentiated Services Codepoint: Unknown (4) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 536 Identification: 0x4fe4 (20452) Flags: 0x0000 0... .... .... .... = Reserved bit: Not set .0.. .... .... .... = Don't fragment: Not set ..0. .... .... .... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 64 Protocol: UDP (17) Header checksum: 0xad4b [validation disabled] [Header checksum status: Unverified] Source: 2.2.2.2 Destination: 3.3.3.3 User Datagram Protocol, Src Port: 5060, Dst Port: 5060 Source Port: 5060 Destination Port: 5060 Length: 516 Checksum: 0x7dab [unverified] [Checksum Status: Unverified] [Stream index: 1] Session Initiation Protocol (CANCEL) Request-Line: CANCEL sip:44656646820@3.3.3.3:5060;user=phone SIP/2.0 Method: CANCEL Request-URI: sip:44656646820@3.3.3.3:5060;user=phone Request-URI User Part: 44656646820 Request-URI Host Part: 3.3.3.3 Request-URI Host Port: 5060 [Resent Packet: False] Message Header Via: SIP/2.0/UDP 2.2.2.2;branch=z9hG4bK0fb9.8cb4c7f17c1fcfc06e7098af82a59c0b.0 Transport: UDP Sent-by Address: 2.2.2.2 Branch: z9hG4bK0fb9.8cb4c7f17c1fcfc06e7098af82a59c0b.0 Call-ID: isbcmq49mmdt5qba6tozy4q9ocamc55zoz43@10.18.5.64 From: "+33825462354";tag=456mb993-CC-1020-OFC-1324 SIP Display info: "+33825462354" SIP from address: sip:33825462354@2.2.2.2;transport=udp;user=phone SIP from address User Part: 33825462354 SIP from address Host Part: 2.2.2.2 SIP From URI parameter: transport=udp SIP From URI parameter: user=phone SIP from tag: 456mb993-CC-1020-OFC-1324 To: "444444656646820" SIP Display info: "444444656646820" SIP to address: sip:444444656646820@2.2.2.2;transport=udp;user=phone SIP to address User Part: 444444656646820 SIP to address Host Part: 2.2.2.2 SIP To URI parameter: transport=udp SIP To URI parameter: user=phone CSeq: 1 CANCEL Sequence Number: 1 Method: CANCEL Max-Forwards: 64 Content-Length: 0 Reason: Q.850;cause=16;text="Normal call clearing" Reason protocols: Q.850 Cause: Normal call clearing (16) Text: Normal call clearing No. Time Source Destination Protocol Length Info 19 2020-04-03 23:05:09,940982 2.2.2.2 1.1.1.1 SIP 536 Status: 200 canceling | Frame 19: 536 bytes on wire (4288 bits), 536 bytes captured (4288 bits) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Apr 3, 2020 23:05:09.940982000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1585947909.940982000 seconds [Time delta from previous captured frame: 0.000285000 seconds] [Time delta from previous displayed frame: 0.000285000 seconds] [Time since reference or first frame: 13.104140000 seconds] Frame Number: 19 Frame Length: 536 bytes (4288 bits) Capture Length: 536 bytes (4288 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:udp:sip] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: c2:62:9d:c1:9d:b4 (c2:62:9d:c1:9d:b4) Unused: 6f6e Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 2.2.2.2, Dst: 1.1.1.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x10 (DSCP: Unknown, ECN: Not-ECT) 0001 00.. = Differentiated Services Codepoint: Unknown (4) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 520 Identification: 0x26eb (9963) Flags: 0x0000 0... .... .... .... = Reserved bit: Not set .0.. .... .... .... = Don't fragment: Not set ..0. .... .... .... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 64 Protocol: UDP (17) Header checksum: 0x8367 [validation disabled] [Header checksum status: Unverified] Source: 2.2.2.2 Destination: 1.1.1.1 User Datagram Protocol, Src Port: 5060, Dst Port: 5060 Source Port: 5060 Destination Port: 5060 Length: 500 Checksum: 0xd088 [unverified] [Checksum Status: Unverified] [Stream index: 0] Session Initiation Protocol (200) Status-Line: SIP/2.0 200 canceling Status-Code: 200 [Resent Packet: False] [Request Frame: 17] [Response Time (ms): 6] Message Header Via: SIP/2.0/UDP 1.1.1.1:5060;branch=z9hG4bKete1rhqujwelu1nonl1toinrp;Role=3;Hpt=9038_16 Transport: UDP Sent-by Address: 1.1.1.1 Sent-by port: 5060 Branch: z9hG4bKete1rhqujwelu1nonl1toinrp Role=3 Hpt=9038_16 Call-ID: isbcmq49mmdt5qba6tozy4q9ocamc55zoz43@10.18.5.64 From: "+33825462354";tag=456mb993-CC-1020-OFC-1324 SIP Display info: "+33825462354" SIP from address: sip:+33825462354@1.1.1.1;transport=udp;user=phone SIP from address User Part: +33825462354 E.164 number (MSISDN): 33825462354 Country Code: Croatia (Republic of) (385) SIP from address Host Part: 1.1.1.1 SIP From URI parameter: transport=udp SIP From URI parameter: user=phone SIP from tag: 456mb993-CC-1020-OFC-1324 To: "444444656646820";tag=a6a1c5f60faecf035a1ae5b6e96e979a-2af8 SIP Display info: "444444656646820" SIP to address: sip:444444656646820@2.2.2.2;transport=udp;user=phone SIP to address User Part: 444444656646820 SIP to address Host Part: 2.2.2.2 SIP To URI parameter: transport=udp SIP To URI parameter: user=phone SIP to tag: a6a1c5f60faecf035a1ae5b6e96e979a-2af8 CSeq: 1 CANCEL Sequence Number: 1 Method: CANCEL Server: kamailio (5.2.3 (x86_64/linux)) Content-Length: 0 No. Time Source Destination Protocol Length Info 20 2020-04-03 23:05:09,941213 3.3.3.3 2.2.2.2 SIP 525 Status: 200 canceling | Frame 20: 525 bytes on wire (4200 bits), 525 bytes captured (4200 bits) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Apr 3, 2020 23:05:09.941213000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1585947909.941213000 seconds [Time delta from previous captured frame: 0.000231000 seconds] [Time delta from previous displayed frame: 0.000231000 seconds] [Time since reference or first frame: 13.104371000 seconds] Frame Number: 20 Frame Length: 525 bytes (4200 bits) Capture Length: 525 bytes (4200 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:udp:sip] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: 8a:64:40:74:0b:76 (8a:64:40:74:0b:76) Unused: 3235 Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 3.3.3.3, Dst: 2.2.2.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x10 (DSCP: Unknown, ECN: Not-ECT) 0001 00.. = Differentiated Services Codepoint: Unknown (4) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 509 Identification: 0xf6d9 (63193) Flags: 0x0000 0... .... .... .... = Reserved bit: Not set .0.. .... .... .... = Don't fragment: Not set ..0. .... .... .... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 64 Protocol: UDP (17) Header checksum: 0x0671 [validation disabled] [Header checksum status: Unverified] Source: 3.3.3.3 Destination: 2.2.2.2 User Datagram Protocol, Src Port: 5060, Dst Port: 5060 Source Port: 5060 Destination Port: 5060 Length: 489 Checksum: 0xe5b3 [unverified] [Checksum Status: Unverified] [Stream index: 1] Session Initiation Protocol (200) Status-Line: SIP/2.0 200 canceling Status-Code: 200 [Resent Packet: False] Message Header Via: SIP/2.0/UDP 2.2.2.2;branch=z9hG4bK0fb9.8cb4c7f17c1fcfc06e7098af82a59c0b.0 Transport: UDP Sent-by Address: 2.2.2.2 Branch: z9hG4bK0fb9.8cb4c7f17c1fcfc06e7098af82a59c0b.0 Call-ID: isbcmq49mmdt5qba6tozy4q9ocamc55zoz43@10.18.5.64 From: "+33825462354";tag=456mb993-CC-1020-OFC-1324 SIP Display info: "+33825462354" SIP from address: sip:33825462354@2.2.2.2;transport=udp;user=phone SIP from address User Part: 33825462354 SIP from address Host Part: 2.2.2.2 SIP From URI parameter: transport=udp SIP From URI parameter: user=phone SIP from tag: 456mb993-CC-1020-OFC-1324 To: "444444656646820";tag=a6a1c5f60faecf035a1ae5b6e96e979a-5db7 SIP Display info: "444444656646820" SIP to address: sip:444444656646820@2.2.2.2;transport=udp;user=phone SIP to address User Part: 444444656646820 SIP to address Host Part: 2.2.2.2 SIP To URI parameter: transport=udp SIP To URI parameter: user=phone SIP to tag: a6a1c5f60faecf035a1ae5b6e96e979a-5db7 CSeq: 1 CANCEL Sequence Number: 1 Method: CANCEL Server: kamailio (5.0.8 (x86_64/linux)) Content-Length: 0 No. Time Source Destination Protocol Length Info 21 2020-04-03 23:05:09,954765 3.3.3.3 2.2.2.2 SIP 792 Status: 487 Request Terminated | Frame 21: 792 bytes on wire (6336 bits), 792 bytes captured (6336 bits) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Apr 3, 2020 23:05:09.954765000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1585947909.954765000 seconds [Time delta from previous captured frame: 0.013552000 seconds] [Time delta from previous displayed frame: 0.013552000 seconds] [Time since reference or first frame: 13.117923000 seconds] Frame Number: 21 Frame Length: 792 bytes (6336 bits) Capture Length: 792 bytes (6336 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:udp:sip] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: 8a:64:40:74:0b:76 (8a:64:40:74:0b:76) Unused: 0e6e Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 3.3.3.3, Dst: 2.2.2.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x10 (DSCP: Unknown, ECN: Not-ECT) 0001 00.. = Differentiated Services Codepoint: Unknown (4) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 776 Identification: 0xf6dc (63196) Flags: 0x0000 0... .... .... .... = Reserved bit: Not set .0.. .... .... .... = Don't fragment: Not set ..0. .... .... .... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 64 Protocol: UDP (17) Header checksum: 0x0563 [validation disabled] [Header checksum status: Unverified] Source: 3.3.3.3 Destination: 2.2.2.2 User Datagram Protocol, Src Port: 5060, Dst Port: 5060 Source Port: 5060 Destination Port: 5060 Length: 756 Checksum: 0xec95 [unverified] [Checksum Status: Unverified] [Stream index: 1] Session Initiation Protocol (487) Status-Line: SIP/2.0 487 Request Terminated Status-Code: 487 [Resent Packet: False] [Request Frame: 18] [Response Time (ms): 14] Message Header Via: SIP/2.0/UDP 2.2.2.2;branch=z9hG4bK0fb9.8cb4c7f17c1fcfc06e7098af82a59c0b.0 Transport: UDP Sent-by Address: 2.2.2.2 Branch: z9hG4bK0fb9.8cb4c7f17c1fcfc06e7098af82a59c0b.0 To: ;tag=U53bzzlYd_-57621-3575-7-50 SIP to address: sip:+386980051856093@7.7.7.7:5261 SIP to address User Part: +386980051856093 E.164 number (MSISDN): 386980051856093 Country Code: Slovenia (Republic of) (386) SIP to address Host Part: 7.7.7.7 SIP to address Host Port: 5261 SIP to tag: U53bzzlYd_-57621-3575-7-50 From: "+33825462354";tag=456mb993-CC-1020-OFC-1324 SIP Display info: "+33825462354" SIP from address: sip:33825462354@6.6.6.6;transport=udp;user=phone SIP from address User Part: 33825462354 SIP from address Host Part: 6.6.6.6 SIP From URI parameter: transport=udp SIP From URI parameter: user=phone SIP from tag: 456mb993-CC-1020-OFC-1324 Call-ID: isbcmq49mmdt5qba6tozy4q9ocamc55zoz43@10.18.5.64 CSeq: 1 INVITE Sequence Number: 1 Method: INVITE Record-Route: Record-Route URI: sip:6.6.6.6;lr;r2=on;ftag=456mb993-CC-1020-OFC-1324 Record-Route Host Part: 6.6.6.6 Record-Route URI parameter: lr Record-Route URI parameter: r2=on Record-Route URI parameter: ftag=456mb993-CC-1020-OFC-1324 Record-Route: Record-Route URI: sip:5.5.5.5;lr;r2=on;ftag=456mb993-CC-1020-OFC-1324 Record-Route Host Part: 5.5.5.5 Record-Route URI parameter: lr Record-Route URI parameter: r2=on Record-Route URI parameter: ftag=456mb993-CC-1020-OFC-1324 Record-Route: Record-Route URI: sip:4.4.4.4;lr;ftag=456mb993-CC-1020-OFC-1324 Record-Route Host Part: 4.4.4.4 Record-Route URI parameter: lr Record-Route URI parameter: ftag=456mb993-CC-1020-OFC-1324 Record-Route: Record-Route URI: sip:3.3.3.3;lr Record-Route Host Part: 3.3.3.3 Record-Route URI parameter: lr P-Charging-Vector: icid-value=HNVIapaO9I-01cf01bf-16-00004f81-001;transit-ioi="void" icid-value: HNVIapaO9I-01cf01bf-16-00004f81-001 transit-ioi="void" Content-Length: 0 No. Time Source Destination Protocol Length Info 22 2020-04-03 23:05:09,960607 2.2.2.2 3.3.3.3 SIP 488 Request: ACK sip:44656646820@3.3.3.3:5060;user=phone | Frame 22: 488 bytes on wire (3904 bits), 488 bytes captured (3904 bits) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Apr 3, 2020 23:05:09.960607000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1585947909.960607000 seconds [Time delta from previous captured frame: 0.005842000 seconds] [Time delta from previous displayed frame: 0.005842000 seconds] [Time since reference or first frame: 13.123765000 seconds] Frame Number: 22 Frame Length: 488 bytes (3904 bits) Capture Length: 488 bytes (3904 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:udp:sip] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: c2:62:9d:c1:9d:b4 (c2:62:9d:c1:9d:b4) Unused: 9f3c Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 2.2.2.2, Dst: 3.3.3.3 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x10 (DSCP: Unknown, ECN: Not-ECT) 0001 00.. = Differentiated Services Codepoint: Unknown (4) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 472 Identification: 0x4fe7 (20455) Flags: 0x0000 0... .... .... .... = Reserved bit: Not set .0.. .... .... .... = Don't fragment: Not set ..0. .... .... .... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 64 Protocol: UDP (17) Header checksum: 0xad88 [validation disabled] [Header checksum status: Unverified] Source: 2.2.2.2 Destination: 3.3.3.3 User Datagram Protocol, Src Port: 5060, Dst Port: 5060 Source Port: 5060 Destination Port: 5060 Length: 452 Checksum: 0x7d6b [unverified] [Checksum Status: Unverified] [Stream index: 1] Session Initiation Protocol (ACK) Request-Line: ACK sip:44656646820@3.3.3.3:5060;user=phone SIP/2.0 Method: ACK Request-URI: sip:44656646820@3.3.3.3:5060;user=phone Request-URI User Part: 44656646820 Request-URI Host Part: 3.3.3.3 Request-URI Host Port: 5060 [Resent Packet: False] [Request Frame: 18] [Response Time (ms): 19] Message Header Via: SIP/2.0/UDP 2.2.2.2;branch=z9hG4bK0fb9.8cb4c7f17c1fcfc06e7098af82a59c0b.0 Transport: UDP Sent-by Address: 2.2.2.2 Branch: z9hG4bK0fb9.8cb4c7f17c1fcfc06e7098af82a59c0b.0 Call-ID: isbcmq49mmdt5qba6tozy4q9ocamc55zoz43@10.18.5.64 From: "+33825462354";tag=456mb993-CC-1020-OFC-1324 SIP Display info: "+33825462354" SIP from address: sip:33825462354@2.2.2.2;transport=udp;user=phone SIP from address User Part: 33825462354 SIP from address Host Part: 2.2.2.2 SIP From URI parameter: transport=udp SIP From URI parameter: user=phone SIP from tag: 456mb993-CC-1020-OFC-1324 To: ;tag=U53bzzlYd_-57621-3575-7-50 SIP to address: sip:+386980051856093@7.7.7.7:5261 SIP to address User Part: +386980051856093 E.164 number (MSISDN): 386980051856093 Country Code: Slovenia (Republic of) (386) SIP to address Host Part: 7.7.7.7 SIP to address Host Port: 5261 SIP to tag: U53bzzlYd_-57621-3575-7-50 CSeq: 1 ACK Sequence Number: 1 Method: ACK Max-Forwards: 64 Content-Length: 0 No. Time Source Destination Protocol Length Info 23 2020-04-03 23:05:09,966636 2.2.2.2 1.1.1.1 SIP 716 Status: 487 Request Terminated | Frame 23: 716 bytes on wire (5728 bits), 716 bytes captured (5728 bits) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Apr 3, 2020 23:05:09.966636000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1585947909.966636000 seconds [Time delta from previous captured frame: 0.006029000 seconds] [Time delta from previous displayed frame: 0.006029000 seconds] [Time since reference or first frame: 13.129794000 seconds] Frame Number: 23 Frame Length: 716 bytes (5728 bits) Capture Length: 716 bytes (5728 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:udp:sip] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: c2:62:9d:c1:9d:b4 (c2:62:9d:c1:9d:b4) Unused: 3497 Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 2.2.2.2, Dst: 1.1.1.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x10 (DSCP: Unknown, ECN: Not-ECT) 0001 00.. = Differentiated Services Codepoint: Unknown (4) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 700 Identification: 0x26ef (9967) Flags: 0x0000 0... .... .... .... = Reserved bit: Not set .0.. .... .... .... = Don't fragment: Not set ..0. .... .... .... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 64 Protocol: UDP (17) Header checksum: 0x82af [validation disabled] [Header checksum status: Unverified] Source: 2.2.2.2 Destination: 1.1.1.1 User Datagram Protocol, Src Port: 5060, Dst Port: 5060 Source Port: 5060 Destination Port: 5060 Length: 680 Checksum: 0xd13c [unverified] [Checksum Status: Unverified] [Stream index: 0] Session Initiation Protocol (487) Status-Line: SIP/2.0 487 Request Terminated Status-Code: 487 [Resent Packet: False] Message Header To: ;tag=U53bzzlYd_-57621-3575-7-50 SIP to address: sip:+386980051856093@7.7.7.7:5261 SIP to address User Part: +386980051856093 E.164 number (MSISDN): 386980051856093 Country Code: Slovenia (Republic of) (386) SIP to address Host Part: 7.7.7.7 SIP to address Host Port: 5261 SIP to tag: U53bzzlYd_-57621-3575-7-50 From: "+33825462354";tag=456mb993-CC-1020-OFC-1324 SIP Display info: "+33825462354" SIP from address: sip:33825462354@6.6.6.6;transport=udp;user=phone SIP from address User Part: 33825462354 SIP from address Host Part: 6.6.6.6 SIP From URI parameter: transport=udp SIP From URI parameter: user=phone SIP from tag: 456mb993-CC-1020-OFC-1324 Call-ID: isbcmq49mmdt5qba6tozy4q9ocamc55zoz43@10.18.5.64 CSeq: 1 INVITE Sequence Number: 1 Method: INVITE P-Charging-Vector: icid-value=HNVIapaO9I-01cf01bf-16-00004f81-001;transit-ioi="void" icid-value: HNVIapaO9I-01cf01bf-16-00004f81-001 transit-ioi="void" Content-Length: 0 Via: SIP/2.0/UDP 1.1.1.1:5060;branch=z9hG4bKete1rhqujwelu1nonl1toinrp;Role=3;Hpt=9038_16 Transport: UDP Sent-by Address: 1.1.1.1 Sent-by port: 5060 Branch: z9hG4bKete1rhqujwelu1nonl1toinrp Role=3 Hpt=9038_16 Contact: Contact URI: sip:atpsh-5e87a4a2-5dd0-2@2.2.2.2 Contact URI User Part: atpsh-5e87a4a2-5dd0-2 Contact URI Host Part: 2.2.2.2 Record-Route: Record-Route URI: sip:1.1.1.1:5060;transport=udp;lr;Hpt=9038_16;CxtId=4;TRC=ffffffff-ffffffff;X-HwB2bUaCookie=10981 Record-Route Host Part: 1.1.1.1 Record-Route Host Port: 5060 Record-Route URI parameter: transport=udp Record-Route URI parameter: lr Record-Route URI parameter: Hpt=9038_16 Record-Route URI parameter: CxtId=4 Record-Route URI parameter: TRC=ffffffff-ffffffff Record-Route URI parameter: X-HwB2bUaCookie=10981 No. Time Source Destination Protocol Length Info 24 2020-04-03 23:05:10,008194 1.1.1.1 2.2.2.2 SIP 498 Request: ACK sip:444444656646820@2.2.2.2;user=phone | Frame 24: 498 bytes on wire (3984 bits), 498 bytes captured (3984 bits) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Apr 3, 2020 23:05:10.008194000 CEST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1585947910.008194000 seconds [Time delta from previous captured frame: 0.041558000 seconds] [Time delta from previous displayed frame: 0.041558000 seconds] [Time since reference or first frame: 13.171352000 seconds] Frame Number: 24 Frame Length: 498 bytes (3984 bits) Capture Length: 498 bytes (3984 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:udp:sip] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: Cisco_ec:c8:ca (84:b8:02:ec:c8:ca) Unused: 84b8 Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 1.1.1.1, Dst: 2.2.2.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 482 Identification: 0xdac2 (56002) Flags: 0x0000 0... .... .... .... = Reserved bit: Not set .0.. .... .... .... = Don't fragment: Not set ..0. .... .... .... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 242 Protocol: UDP (17) Header checksum: 0x1dc5 [validation disabled] [Header checksum status: Unverified] Source: 1.1.1.1 Destination: 2.2.2.2 User Datagram Protocol, Src Port: 5060, Dst Port: 5060 Source Port: 5060 Destination Port: 5060 Length: 462 Checksum: 0x79e5 [unverified] [Checksum Status: Unverified] [Stream index: 0] Session Initiation Protocol (ACK) Request-Line: ACK sip:444444656646820@2.2.2.2;user=phone SIP/2.0 Method: ACK Request-URI: sip:444444656646820@2.2.2.2;user=phone Request-URI User Part: 444444656646820 Request-URI Host Part: 2.2.2.2 [Resent Packet: False] [Request Frame: 17] [Response Time (ms): 74] Message Header Via: SIP/2.0/UDP 1.1.1.1:5060;branch=z9hG4bKete1rhqujwelu1nonl1toinrp;Role=3;Hpt=9038_16 Transport: UDP Sent-by Address: 1.1.1.1 Sent-by port: 5060 Branch: z9hG4bKete1rhqujwelu1nonl1toinrp Role=3 Hpt=9038_16 Call-ID: isbcmq49mmdt5qba6tozy4q9ocamc55zoz43@10.18.5.64 From: "+33825462354";tag=456mb993-CC-1020-OFC-1324 SIP Display info: "+33825462354" SIP from address: sip:+33825462354@1.1.1.1;transport=udp;user=phone SIP from address User Part: +33825462354 E.164 number (MSISDN): 33825462354 Country Code: Croatia (Republic of) (385) SIP from address Host Part: 1.1.1.1 SIP From URI parameter: transport=udp SIP From URI parameter: user=phone SIP from tag: 456mb993-CC-1020-OFC-1324 To: ;tag=U53bzzlYd_-57621-3575-7-50 SIP to address: sip:+386980051856093@7.7.7.7:5261 SIP to address User Part: +386980051856093 E.164 number (MSISDN): 386980051856093 Country Code: Slovenia (Republic of) (386) SIP to address Host Part: 7.7.7.7 SIP to address Host Port: 5261 SIP to tag: U53bzzlYd_-57621-3575-7-50 CSeq: 1 ACK Sequence Number: 1 Method: ACK Max-Forwards: 70 Content-Length: 0