[Users] NAT problem for PRACK replies

8 Feb 2007

Hi,

I seem to have a problem replies to PRACKs from NATed UAs. The UA is
behind the NAT on a private IP listening on port 5060. This port gets
mapped to 1350 on the external IP by the NAT device.

The INVITE goes out fine and gets the contact updated for NAT by:

    if (client_nat_test("3")) {
        setflag(7);
        force_rport();
        fix_contact();
    };

This then receives a 183 reply to which it sends a PRACK. However, the
200 response to the PRACK gets sent to port 5060 on the external IP =>
which of course doesn't get to the UA.

Is there something I'm missing in my config? I have attached a trace of
the call setup.

Jeff

No.     Time        Source                Destination           Protocol Info
  19424 6.838985    203.24.54.17          202.74.164.44         SIP/SDP  Request: INVITE
sip:0893680949@proxy.sipone.com;user=phone, with session description

Frame 19424 (941 bytes on wire, 941 bytes captured)
Ethernet II, Src: 00:0a:f3:b8:0c:08, Dst: 00:07:e9:11:47:25
Internet Protocol, Src Addr: 203.24.54.17 (203.24.54.17), Dst Addr: 202.74.164.44
(202.74.164.44)
User Datagram Protocol, Src Port: 1350 (1350), Dst Port: sip (5060)
Session Initiation Protocol
    Request-Line: INVITE sip:0893680949@proxy.sipone.com;user=phone SIP/2.0
    Message Header
        Via: SIP/2.0/UDP 192.168.10.30:5060;branch=z9hG4bK26f185af4ccc0d42
        From: Jeff <sip:610089001@proxy.sipone.com;user=phone>;tag=1166274291
        To: <sip:0893680949@proxy.sipone.com;user=phone>
        Call-ID: 3478456911(a)192.168.10.30
        CSeq: 1 INVITE
        Max-Forwards: 70
        Contact: Jeff <sip:610089001@192.168.10.30:5060;user=phone;transport=udp>
        User-Agent: Cisco-CP7912/8.0.1-060412A
        Allow: ACK, BYE, CANCEL, INVITE, NOTIFY, OPTIONS, REFER, REGISTER, PRACK, UPDATE
        Supported: replaces, 100rel
        Expires: 300
        Content-Length: 288
        Content-Type: application/sdp
    Message body
        Session Description Protocol
            Session Description Protocol Version (v): 0
            Owner/Creator, Session Id (o): 610089001 147590 147590 IN IP4 192.168.10.30
            Session Name (s): Cisco 7912 SIP Call
            Connection Information (c): IN IP4 192.168.10.30
            Time Description, active time (t): 0 0
            Media Description, name and address (m): audio 16384 RTP/AVP 0 18 8 101
            Media Attribute (a): rtpmap:0 PCMU/8000/1
            Media Attribute (a): rtpmap:18 G729/8000/1
            Media Attribute (a): fmtp:18 annexb=yes
            Media Attribute (a): rtpmap:8 PCMA/8000/1
            Media Attribute (a): rtpmap:101 telephone-event/8000
            Media Attribute (a): fmtp:101 0-15

No.     Time        Source                Destination           Protocol Info
  19428 6.842541    202.74.164.44         203.24.54.17          SIP      Status: 100
trying -- your call is important to us

Frame 19428 (655 bytes on wire, 655 bytes captured)
Ethernet II, Src: 00:07:e9:11:47:25, Dst: 00:12:44:c0:cc:1b
Internet Protocol, Src Addr: 202.74.164.44 (202.74.164.44), Dst Addr: 203.24.54.17
(203.24.54.17)
User Datagram Protocol, Src Port: sip (5060), Dst Port: 1350 (1350)
Session Initiation Protocol
    Status-Line: SIP/2.0 100 trying -- your call is important to us
    Message Header
        Via: SIP/2.0/UDP
192.168.10.30:5060;branch=z9hG4bK26f185af4ccc0d42;rport=1350;received=203.24.54.17
        From: Jeff <sip:610089001@proxy.sipone.com;user=phone>;tag=1166274291
        To: <sip:0893680949@proxy.sipone.com;user=phone>
        Call-ID: 3478456911(a)192.168.10.30
        CSeq: 1 INVITE
        Server: OpenSer (1.1.1-tls (i386/linux))
        Content-Length: 0
        Warning: 392 202.74.164.44:5060 "Noisy feedback tells:  pid=11082
req_src_ip=203.24.54.17 req_src_port=1350
in_uri=sip:0893680949@proxy.sipone.com;user=phone
out_uri=sip:61893680949@202.74.164.72:5060;user=phone via_cnt==1"

No.     Time        Source                Destination           Protocol Info
  19429 6.842579    202.74.164.44         202.74.164.72         SIP/SDP  Request: INVITE
sip:61893680949@202.74.164.72:5060;user=phone, with session description

Frame 19429 (1148 bytes on wire, 1148 bytes captured)
Ethernet II, Src: 00:07:e9:11:47:25, Dst: 00:12:44:c0:cc:1b
Internet Protocol, Src Addr: 202.74.164.44 (202.74.164.44), Dst Addr: 202.74.164.72
(202.74.164.72)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
Session Initiation Protocol
    Request-Line: INVITE sip:61893680949@202.74.164.72:5060;user=phone SIP/2.0
    Message Header
        Record-Route:
<sip:202.74.164.44;lr=on;ftag=1166274291;nat=yes;vsf=AAAAAAYJCQIKCQkACXAwAQYIFkAWRxMAA2UuY29tO3VzZXI9cGhvbmU->
        Via: SIP/2.0/UDP 202.74.164.44;branch=z9hG4bK7a7e.3cf74a67.0
        Via: SIP/2.0/UDP
192.168.10.30:5060;rport=1350;received=203.24.54.17;branch=z9hG4bK26f185af4ccc0d42
        From: Jeff <sip:0892209080@sipone.com>;tag=1166274291
        To: <sip:0893680949@proxy.sipone.com;user=phone>
        Call-ID: 3478456911(a)192.168.10.30
        CSeq: 1 INVITE
        Max-Forwards: 69
        Contact: Jeff <sip:610089001@203.24.54.17:1350;user=phone;transport=udp>
        User-Agent: Cisco-CP7912/8.0.1-060412A
        Allow: ACK, BYE, CANCEL, INVITE, NOTIFY, OPTIONS, REFER, REGISTER, PRACK, UPDATE
        Supported: replaces, 100rel
        Expires: 300
        Content-Length: 288
        Content-Type: application/sdp
    Message body
        Session Description Protocol
            Session Description Protocol Version (v): 0
            Owner/Creator, Session Id (o): 610089001 147590 147590 IN IP4 192.168.10.30
            Session Name (s): Cisco 7912 SIP Call
            Connection Information (c): IN IP4 202.74.164.44
            Time Description, active time (t): 0 0
            Media Description, name and address (m): audio 63054 RTP/AVP 0 18 8 101
            Media Attribute (a): rtpmap:0 PCMU/8000/1
            Media Attribute (a): rtpmap:18 G729/8000/1
            Media Attribute (a): fmtp:18 annexb=yes
            Media Attribute (a): rtpmap:8 PCMA/8000/1
            Media Attribute (a): rtpmap:101 telephone-event/8000
            Media Attribute (a): fmtp:101 0-15

No.     Time        Source                Destination           Protocol Info
  19450 6.860058    202.74.164.72         202.74.164.44         SIP      Status: 100
Trying

Frame 19450 (445 bytes on wire, 445 bytes captured)
Ethernet II, Src: 00:12:44:c0:cc:1b, Dst: 00:07:e9:11:47:25
Internet Protocol, Src Addr: 202.74.164.72 (202.74.164.72), Dst Addr: 202.74.164.44
(202.74.164.44)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
Session Initiation Protocol
    Status-Line: SIP/2.0 100 Trying
    Message Header
        From: "Jeff" <sip:0892209080@sipone.com:5060>;tag=1166274291
        To:
<sip:0893680949@202.74.164.72:5060;user=phone>;tag=669b638bbf9e0903fd8a2a66
        CSeq: 1 INVITE
        Call-ID: 3478456911(a)192.168.10.30
        Via: SIP/2.0/UDP 202.74.164.44:5060;branch=z9hG4bK7a7e.3cf74a67.0
        Via: SIP/2.0/UDP
192.168.10.30:5060;rport=1350;received=203.24.54.17;branch=z9hG4bK26f185af4ccc0d42
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
  21001 8.339800    202.74.164.72         202.74.164.44         SIP/SDP  Status: 183
Session Progress, with session description

Frame 21001 (1064 bytes on wire, 1064 bytes captured)
Ethernet II, Src: 00:12:44:c0:cc:1b, Dst: 00:07:e9:11:47:25
Internet Protocol, Src Addr: 202.74.164.72 (202.74.164.72), Dst Addr: 202.74.164.44
(202.74.164.44)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
Session Initiation Protocol
    Status-Line: SIP/2.0 183 Session Progress
    Message Header
        Via: SIP/2.0/UDP 202.74.164.44;branch=z9hG4bK7a7e.3cf74a67.0
        Via: SIP/2.0/UDP
192.168.10.30:5060;rport=1350;received=203.24.54.17;branch=z9hG4bK26f185af4ccc0d42
        From: "Jeff" <sip:0892209080@sipone.com>;tag=1166274291
        To:
<sip:0893680949@proxy.sipone.com;user=phone>;tag=669b638bbf9e0903fd8a2a66
        Date: Fri, 09 Feb 2007 00:15:07 GMT
        Call-ID: 3478456911(a)192.168.10.30
        Server: Cisco-SIPGateway/IOS-12.x
        CSeq: 1 INVITE
        Require: 100rel
        RSeq: 3067
        Contact: <sip:610089001@202.74.164.72:5060;user=phone>
        Record-Route: <sip:202.74.164.72:5060;lr>
        Record-Route:
<sip:202.74.164.44;lr=on;ftag=1166274291;nat=yes;vsf=AAAAAAYJCQIKCQkACXAwAQYIFkAWRxMAA2UuY29tO3VzZXI9cGhvbmU->
        Content-Type: application/sdp
        Content-Disposition: session;handling=required
        Content-Length: 214
    Message body
        Session Description Protocol
            Session Description Protocol Version (v): 0
            Owner/Creator, Session Id (o): CiscoSystemsSIP-GW-UserAgent 4912 6655 IN IP4
202.74.164.72
            Session Name (s): SIP Call
            Connection Information (c): IN IP4 202.74.164.72
            Time Description, active time (t): 0 0
            Media Description, name and address (m): audio 27182 RTP/AVP 0 101
            Media Attribute (a): rtpmap:0 PCMU/8000
            Media Attribute (a): rtpmap:101 telephone-event/8000
            Media Attribute (a): fmtp:101 0-15

No.     Time        Source                Destination           Protocol Info
  21003 8.341340    202.74.164.44         203.24.54.17          SIP/SDP  Status: 183
Session Progress, with session description

Frame 21003 (1016 bytes on wire, 1016 bytes captured)
Ethernet II, Src: 00:07:e9:11:47:25, Dst: 00:12:44:c0:cc:1b
Internet Protocol, Src Addr: 202.74.164.44 (202.74.164.44), Dst Addr: 203.24.54.17
(203.24.54.17)
User Datagram Protocol, Src Port: sip (5060), Dst Port: 1350 (1350)
Session Initiation Protocol
    Status-Line: SIP/2.0 183 Session Progress
    Message Header
        Via: SIP/2.0/UDP
192.168.10.30:5060;rport=1350;received=203.24.54.17;branch=z9hG4bK26f185af4ccc0d42
        From: Jeff <sip:610089001@proxy.sipone.com;user=phone>;tag=1166274291
        To:
<sip:0893680949@proxy.sipone.com;user=phone>;tag=669b638bbf9e0903fd8a2a66
        Date: Fri, 09 Feb 2007 00:15:07 GMT
        Call-ID: 3478456911(a)192.168.10.30
        Server: Cisco-SIPGateway/IOS-12.x
        CSeq: 1 INVITE
        Require: 100rel
        RSeq: 3067
        Contact: <sip:610089001@202.74.164.72:5060;user=phone>
        Record-Route: <sip:202.74.164.72:5060;lr>
        Record-Route:
<sip:202.74.164.44;lr=on;ftag=1166274291;nat=yes;vsf=AAAAAAYJCQIKCQkACXAwAQYIFkAWRxMAA2UuY29tO3VzZXI9cGhvbmU->
        Content-Type: application/sdp
        Content-Disposition: session;handling=required
        Content-Length: 214
    Message body
        Session Description Protocol
            Session Description Protocol Version (v): 0
            Owner/Creator, Session Id (o): CiscoSystemsSIP-GW-UserAgent 4912 6655 IN IP4
202.74.164.72
            Session Name (s): SIP Call
            Connection Information (c): IN IP4 202.74.164.44
            Time Description, active time (t): 0 0
            Media Description, name and address (m): audio 63054 RTP/AVP 0 101
            Media Attribute (a): rtpmap:0 PCMU/8000
            Media Attribute (a): rtpmap:101 telephone-event/8000
            Media Attribute (a): fmtp:101 0-15

No.     Time        Source                Destination           Protocol Info
  21044 8.397481    203.24.54.17          202.74.164.44         SIP      Request: PRACK
sip:610089001@202.74.164.72

Frame 21044 (711 bytes on wire, 711 bytes captured)
Ethernet II, Src: 00:0a:f3:b8:0c:08, Dst: 00:07:e9:11:47:25
Internet Protocol, Src Addr: 203.24.54.17 (203.24.54.17), Dst Addr: 202.74.164.44
(202.74.164.44)
User Datagram Protocol, Src Port: 1350 (1350), Dst Port: sip (5060)
Session Initiation Protocol
    Request-Line: PRACK sip:610089001@202.74.164.72 SIP/2.0
    Message Header
        Route:
<sip:202.74.164.44;lr=on;ftag=1166274291;nat=yes;vsf=AAAAAAYJCQIKCQkACXAwAQYIFkAWRxMAA2UuY29tO3VzZXI9cGhvbmU->,<sip:202.74.164.72:5060;lr>
        Via: SIP/2.0/UDP 192.168.10.30:5060;branch=z9hG4bKeccd468d60f015ed
        From: Jeff <sip:610089001@proxy.sipone.com;user=phone>;tag=1166274291
        To:
<sip:0893680949@proxy.sipone.com;user=phone>;tag=669b638bbf9e0903fd8a2a66
        Call-ID: 3478456911(a)192.168.10.30
        CSeq: 2 PRACK
        RAck: 3067 1 INVITE
        Max-Forwards: 70
        User-Agent: Cisco-CP7912/8.0.1-060412A
        Allow: ACK, BYE, CANCEL, INVITE, NOTIFY, OPTIONS, REFER, REGISTER, PRACK, UPDATE
        Supported: replaces, 100rel
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
  21045 8.397734    202.74.164.44         202.74.164.72         SIP      Request: PRACK
sip:610089001@202.74.164.72

Frame 21045 (725 bytes on wire, 725 bytes captured)
Ethernet II, Src: 00:07:e9:11:47:25, Dst: 00:12:44:c0:cc:1b
Internet Protocol, Src Addr: 202.74.164.44 (202.74.164.44), Dst Addr: 202.74.164.72
(202.74.164.72)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
Session Initiation Protocol
    Request-Line: PRACK sip:610089001@202.74.164.72 SIP/2.0
    Message Header
        Record-Route: <sip:202.74.164.44;lr=on;ftag=1166274291>
        Route: <sip:202.74.164.72:5060;lr>
        Via: SIP/2.0/UDP 202.74.164.44;branch=z9hG4bK4a7e.215a51c5.0
        Via: SIP/2.0/UDP
192.168.10.30:5060;received=203.24.54.17;branch=z9hG4bKeccd468d60f015ed
        From: Jeff <sip:0892209080@sipone.com>;tag=1166274291
        To:
<sip:0893680949@proxy.sipone.com;user=phone>;tag=669b638bbf9e0903fd8a2a66
        Call-ID: 3478456911(a)192.168.10.30
        CSeq: 2 PRACK
        RAck: 3067 1 INVITE
        Max-Forwards: 69
        User-Agent: Cisco-CP7912/8.0.1-060412A
        Allow: ACK, BYE, CANCEL, INVITE, NOTIFY, OPTIONS, REFER, REGISTER, PRACK, UPDATE
        Supported: replaces, 100rel
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
  21060 8.419413    202.74.164.72         202.74.164.44         SIP      Status: 200 OK

Frame 21060 (489 bytes on wire, 489 bytes captured)
Ethernet II, Src: 00:12:44:c0:cc:1b, Dst: 00:07:e9:11:47:25
Internet Protocol, Src Addr: 202.74.164.72 (202.74.164.72), Dst Addr: 202.74.164.44
(202.74.164.44)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
Session Initiation Protocol
    Status-Line: SIP/2.0 200 OK
    Message Header
        Via: SIP/2.0/UDP 202.74.164.44;branch=z9hG4bK4a7e.215a51c5.0
        Via: SIP/2.0/UDP
192.168.10.30:5060;received=203.24.54.17;branch=z9hG4bKeccd468d60f015ed
        From: "Jeff" <sip:0892209080@sipone.com>;tag=1166274291
        To:
<sip:0893680949@proxy.sipone.com;user=phone>;tag=669b638bbf9e0903fd8a2a66
        Date: Fri, 09 Feb 2007 00:15:08 GMT
        Call-ID: 3478456911(a)192.168.10.30
        Server: Cisco-SIPGateway/IOS-12.x
        CSeq: 2 PRACK
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
  21061 8.419532    202.74.164.44         203.24.54.17          SIP      Status: 200 OK

Frame 21061 (441 bytes on wire, 441 bytes captured)
Ethernet II, Src: 00:07:e9:11:47:25, Dst: 00:12:44:c0:cc:1b
Internet Protocol, Src Addr: 202.74.164.44 (202.74.164.44), Dst Addr: 203.24.54.17
(203.24.54.17)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
Session Initiation Protocol
    Status-Line: SIP/2.0 200 OK
    Message Header
        Via: SIP/2.0/UDP
192.168.10.30:5060;received=203.24.54.17;branch=z9hG4bKeccd468d60f015ed
        From: Jeff <sip:610089001@proxy.sipone.com;user=phone>;tag=1166274291
        To:
<sip:0893680949@proxy.sipone.com;user=phone>;tag=669b638bbf9e0903fd8a2a66
        Date: Fri, 09 Feb 2007 00:15:08 GMT
        Call-ID: 3478456911(a)192.168.10.30
        Server: Cisco-SIPGateway/IOS-12.x
        CSeq: 2 PRACK
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
  21070 8.429213    203.24.54.17          202.74.164.44         ICMP     Destination
unreachable (Port unreachable)

Frame 21070 (469 bytes on wire, 469 bytes captured)
Ethernet II, Src: 00:0a:f3:b8:0c:08, Dst: 00:07:e9:11:47:25
Internet Protocol, Src Addr: 203.24.54.17 (203.24.54.17), Dst Addr: 202.74.164.44
(202.74.164.44)
Internet Control Message Protocol

No.     Time        Source                Destination           Protocol Info
  21611 8.897497    203.24.54.17          202.74.164.44         SIP      Request: PRACK
sip:610089001@202.74.164.72

Frame 21611 (711 bytes on wire, 711 bytes captured)
Ethernet II, Src: 00:0a:f3:b8:0c:08, Dst: 00:07:e9:11:47:25
Internet Protocol, Src Addr: 203.24.54.17 (203.24.54.17), Dst Addr: 202.74.164.44
(202.74.164.44)
User Datagram Protocol, Src Port: 1350 (1350), Dst Port: sip (5060)
Session Initiation Protocol
    Request-Line: PRACK sip:610089001@202.74.164.72 SIP/2.0
    Message Header
        Route:
<sip:202.74.164.44;lr=on;ftag=1166274291;nat=yes;vsf=AAAAAAYJCQIKCQkACXAwAQYIFkAWRxMAA2UuY29tO3VzZXI9cGhvbmU->,<sip:202.74.164.72:5060;lr>
        Via: SIP/2.0/UDP 192.168.10.30:5060;branch=z9hG4bKeccd468d60f015ed
        From: Jeff <sip:610089001@proxy.sipone.com;user=phone>;tag=1166274291
        To:
<sip:0893680949@proxy.sipone.com;user=phone>;tag=669b638bbf9e0903fd8a2a66
        Call-ID: 3478456911(a)192.168.10.30
        CSeq: 2 PRACK
        RAck: 3067 1 INVITE
        Max-Forwards: 70
        User-Agent: Cisco-CP7912/8.0.1-060412A
        Allow: ACK, BYE, CANCEL, INVITE, NOTIFY, OPTIONS, REFER, REGISTER, PRACK, UPDATE
        Supported: replaces, 100rel
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
  21612 8.897734    202.74.164.44         203.24.54.17          SIP      Status: 500
I'm terribly sorry, server error occurred (1/SL)

Frame 21612 (649 bytes on wire, 649 bytes captured)
Ethernet II, Src: 00:07:e9:11:47:25, Dst: 00:12:44:c0:cc:1b
Internet Protocol, Src Addr: 202.74.164.44 (202.74.164.44), Dst Addr: 203.24.54.17
(203.24.54.17)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
Session Initiation Protocol
    Status-Line: SIP/2.0 500 I'm terribly sorry, server error occurred (1/SL)
    Message Header
        Via: SIP/2.0/UDP
192.168.10.30:5060;branch=z9hG4bKeccd468d60f015ed;received=203.24.54.17
        From: Jeff <sip:610089001@proxy.sipone.com;user=phone>;tag=1166274291
        To:
<sip:0893680949@proxy.sipone.com;user=phone>;tag=669b638bbf9e0903fd8a2a66
        Call-ID: 3478456911(a)192.168.10.30
        CSeq: 2 PRACK
        Server: OpenSer (1.1.1-tls (i386/linux))
        Content-Length: 0
        Warning: 392 202.74.164.44:5060 "Noisy feedback tells:  pid=11082
req_src_ip=203.24.54.17 req_src_port=1350 in_uri=sip:610089001@202.74.164.72
out_uri=sip:610089001@202.74.164.72 via_cnt==1"

No.     Time        Source                Destination           Protocol Info
  21625 8.909606    203.24.54.17          202.74.164.44         ICMP     Destination
unreachable (Port unreachable)

Frame 21625 (590 bytes on wire, 590 bytes captured)
Ethernet II, Src: 00:0a:f3:b8:0c:08, Dst: 00:07:e9:11:47:25
Internet Protocol, Src Addr: 203.24.54.17 (203.24.54.17), Dst Addr: 202.74.164.44
(202.74.164.44)
Internet Control Message Protocol

No.     Time        Source                Destination           Protocol Info
  22692 9.898092    203.24.54.17          202.74.164.44         SIP      Request: PRACK
sip:610089001@202.74.164.72

Frame 22692 (711 bytes on wire, 711 bytes captured)
Ethernet II, Src: 00:0a:f3:b8:0c:08, Dst: 00:07:e9:11:47:25
Internet Protocol, Src Addr: 203.24.54.17 (203.24.54.17), Dst Addr: 202.74.164.44
(202.74.164.44)
User Datagram Protocol, Src Port: 1350 (1350), Dst Port: sip (5060)
Session Initiation Protocol
    Request-Line: PRACK sip:610089001@202.74.164.72 SIP/2.0
    Message Header
        Route:
<sip:202.74.164.44;lr=on;ftag=1166274291;nat=yes;vsf=AAAAAAYJCQIKCQkACXAwAQYIFkAWRxMAA2UuY29tO3VzZXI9cGhvbmU->,<sip:202.74.164.72:5060;lr>
        Via: SIP/2.0/UDP 192.168.10.30:5060;branch=z9hG4bKeccd468d60f015ed
        From: Jeff <sip:610089001@proxy.sipone.com;user=phone>;tag=1166274291
        To:
<sip:0893680949@proxy.sipone.com;user=phone>;tag=669b638bbf9e0903fd8a2a66
        Call-ID: 3478456911(a)192.168.10.30
        CSeq: 2 PRACK
        RAck: 3067 1 INVITE
        Max-Forwards: 70
        User-Agent: Cisco-CP7912/8.0.1-060412A
        Allow: ACK, BYE, CANCEL, INVITE, NOTIFY, OPTIONS, REFER, REGISTER, PRACK, UPDATE
        Supported: replaces, 100rel
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
  22693 9.898343    202.74.164.44         203.24.54.17          SIP      Status: 500
I'm terribly sorry, server error occurred (1/SL)

Frame 22693 (649 bytes on wire, 649 bytes captured)
Ethernet II, Src: 00:07:e9:11:47:25, Dst: 00:12:44:c0:cc:1b
Internet Protocol, Src Addr: 202.74.164.44 (202.74.164.44), Dst Addr: 203.24.54.17
(203.24.54.17)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
Session Initiation Protocol
    Status-Line: SIP/2.0 500 I'm terribly sorry, server error occurred (1/SL)
    Message Header
        Via: SIP/2.0/UDP
192.168.10.30:5060;branch=z9hG4bKeccd468d60f015ed;received=203.24.54.17
        From: Jeff <sip:610089001@proxy.sipone.com;user=phone>;tag=1166274291
        To:
<sip:0893680949@proxy.sipone.com;user=phone>;tag=669b638bbf9e0903fd8a2a66
        Call-ID: 3478456911(a)192.168.10.30
        CSeq: 2 PRACK
        Server: OpenSer (1.1.1-tls (i386/linux))
        Content-Length: 0
        Warning: 392 202.74.164.44:5060 "Noisy feedback tells:  pid=11078
req_src_ip=203.24.54.17 req_src_port=1350 in_uri=sip:610089001@202.74.164.72
out_uri=sip:610089001@202.74.164.72 via_cnt==1"

No.     Time        Source                Destination           Protocol Info
  22702 9.912093    203.24.54.17          202.74.164.44         ICMP     Destination
unreachable (Port unreachable)

Frame 22702 (590 bytes on wire, 590 bytes captured)
Ethernet II, Src: 00:0a:f3:b8:0c:08, Dst: 00:07:e9:11:47:25
Internet Protocol, Src Addr: 203.24.54.17 (203.24.54.17), Dst Addr: 202.74.164.44
(202.74.164.44)
Internet Control Message Protocol

No.     Time        Source                Destination           Protocol Info
  24851 11.899557   203.24.54.17          202.74.164.44         SIP      Request: PRACK
sip:610089001@202.74.164.72

Frame 24851 (711 bytes on wire, 711 bytes captured)
Ethernet II, Src: 00:0a:f3:b8:0c:08, Dst: 00:07:e9:11:47:25
Internet Protocol, Src Addr: 203.24.54.17 (203.24.54.17), Dst Addr: 202.74.164.44
(202.74.164.44)
User Datagram Protocol, Src Port: 1350 (1350), Dst Port: sip (5060)
Session Initiation Protocol
    Request-Line: PRACK sip:610089001@202.74.164.72 SIP/2.0
    Message Header
        Route:
<sip:202.74.164.44;lr=on;ftag=1166274291;nat=yes;vsf=AAAAAAYJCQIKCQkACXAwAQYIFkAWRxMAA2UuY29tO3VzZXI9cGhvbmU->,<sip:202.74.164.72:5060;lr>
        Via: SIP/2.0/UDP 192.168.10.30:5060;branch=z9hG4bKeccd468d60f015ed
        From: Jeff <sip:610089001@proxy.sipone.com;user=phone>;tag=1166274291
        To:
<sip:0893680949@proxy.sipone.com;user=phone>;tag=669b638bbf9e0903fd8a2a66
        Call-ID: 3478456911(a)192.168.10.30
        CSeq: 2 PRACK
        RAck: 3067 1 INVITE
        Max-Forwards: 70
        User-Agent: Cisco-CP7912/8.0.1-060412A
        Allow: ACK, BYE, CANCEL, INVITE, NOTIFY, OPTIONS, REFER, REGISTER, PRACK, UPDATE
        Supported: replaces, 100rel
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
  24853 11.899808   202.74.164.44         203.24.54.17          SIP      Status: 500
I'm terribly sorry, server error occurred (1/SL)

Frame 24853 (649 bytes on wire, 649 bytes captured)
Ethernet II, Src: 00:07:e9:11:47:25, Dst: 00:12:44:c0:cc:1b
Internet Protocol, Src Addr: 202.74.164.44 (202.74.164.44), Dst Addr: 203.24.54.17
(203.24.54.17)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
Session Initiation Protocol
    Status-Line: SIP/2.0 500 I'm terribly sorry, server error occurred (1/SL)
    Message Header
        Via: SIP/2.0/UDP
192.168.10.30:5060;branch=z9hG4bKeccd468d60f015ed;received=203.24.54.17
        From: Jeff <sip:610089001@proxy.sipone.com;user=phone>;tag=1166274291
        To:
<sip:0893680949@proxy.sipone.com;user=phone>;tag=669b638bbf9e0903fd8a2a66
        Call-ID: 3478456911(a)192.168.10.30
        CSeq: 2 PRACK
        Server: OpenSer (1.1.1-tls (i386/linux))
        Content-Length: 0
        Warning: 392 202.74.164.44:5060 "Noisy feedback tells:  pid=11081
req_src_ip=203.24.54.17 req_src_port=1350 in_uri=sip:610089001@202.74.164.72
out_uri=sip:610089001@202.74.164.72 via_cnt==1"

No.     Time        Source                Destination           Protocol Info
  24866 11.911720   203.24.54.17          202.74.164.44         ICMP     Destination
unreachable (Port unreachable)

Frame 24866 (590 bytes on wire, 590 bytes captured)
Ethernet II, Src: 00:0a:f3:b8:0c:08, Dst: 00:07:e9:11:47:25
Internet Protocol, Src Addr: 203.24.54.17 (203.24.54.17), Dst Addr: 202.74.164.44
(202.74.164.44)
Internet Control Message Protocol

No.     Time        Source                Destination           Protocol Info
  27365 13.900358   203.24.54.17          202.74.164.44         SIP      Request: PRACK
sip:610089001@202.74.164.72

Frame 27365 (711 bytes on wire, 711 bytes captured)
Ethernet II, Src: 00:0a:f3:b8:0c:08, Dst: 00:07:e9:11:47:25
Internet Protocol, Src Addr: 203.24.54.17 (203.24.54.17), Dst Addr: 202.74.164.44
(202.74.164.44)
User Datagram Protocol, Src Port: 1350 (1350), Dst Port: sip (5060)
Session Initiation Protocol
    Request-Line: PRACK sip:610089001@202.74.164.72 SIP/2.0
    Message Header
        Route:
<sip:202.74.164.44;lr=on;ftag=1166274291;nat=yes;vsf=AAAAAAYJCQIKCQkACXAwAQYIFkAWRxMAA2UuY29tO3VzZXI9cGhvbmU->,<sip:202.74.164.72:5060;lr>
        Via: SIP/2.0/UDP 192.168.10.30:5060;branch=z9hG4bKeccd468d60f015ed
        From: Jeff <sip:610089001@proxy.sipone.com;user=phone>;tag=1166274291
        To:
<sip:0893680949@proxy.sipone.com;user=phone>;tag=669b638bbf9e0903fd8a2a66
        Call-ID: 3478456911(a)192.168.10.30
        CSeq: 2 PRACK
        RAck: 3067 1 INVITE
        Max-Forwards: 70
        User-Agent: Cisco-CP7912/8.0.1-060412A
        Allow: ACK, BYE, CANCEL, INVITE, NOTIFY, OPTIONS, REFER, REGISTER, PRACK, UPDATE
        Supported: replaces, 100rel
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
  27366 13.900630   202.74.164.44         202.74.164.72         SIP      Request: PRACK
sip:610089001@202.74.164.72

Frame 27366 (725 bytes on wire, 725 bytes captured)
Ethernet II, Src: 00:07:e9:11:47:25, Dst: 00:12:44:c0:cc:1b
Internet Protocol, Src Addr: 202.74.164.44 (202.74.164.44), Dst Addr: 202.74.164.72
(202.74.164.72)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
Session Initiation Protocol
    Request-Line: PRACK sip:610089001@202.74.164.72 SIP/2.0
    Message Header
        Record-Route: <sip:202.74.164.44;lr=on;ftag=1166274291>
        Route: <sip:202.74.164.72:5060;lr>
        Via: SIP/2.0/UDP 202.74.164.44;branch=z9hG4bK4a7e.315a51c5.0
        Via: SIP/2.0/UDP
192.168.10.30:5060;received=203.24.54.17;branch=z9hG4bKeccd468d60f015ed
        From: Jeff <sip:0892209080@sipone.com>;tag=1166274291
        To:
<sip:0893680949@proxy.sipone.com;user=phone>;tag=669b638bbf9e0903fd8a2a66
        Call-ID: 3478456911(a)192.168.10.30
        CSeq: 2 PRACK
        RAck: 3067 1 INVITE
        Max-Forwards: 69
        User-Agent: Cisco-CP7912/8.0.1-060412A
        Allow: ACK, BYE, CANCEL, INVITE, NOTIFY, OPTIONS, REFER, REGISTER, PRACK, UPDATE
        Supported: replaces, 100rel
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
  27426 13.938284   202.74.164.72         202.74.164.44         SIP      Status: 200 OK

Frame 27426 (489 bytes on wire, 489 bytes captured)
Ethernet II, Src: 00:12:44:c0:cc:1b, Dst: 00:07:e9:11:47:25
Internet Protocol, Src Addr: 202.74.164.72 (202.74.164.72), Dst Addr: 202.74.164.44
(202.74.164.44)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
Session Initiation Protocol
    Status-Line: SIP/2.0 200 OK
    Message Header
        Via: SIP/2.0/UDP 202.74.164.44;branch=z9hG4bK4a7e.315a51c5.0
        Via: SIP/2.0/UDP
192.168.10.30:5060;received=203.24.54.17;branch=z9hG4bKeccd468d60f015ed
        From: "Jeff" <sip:0892209080@sipone.com>;tag=1166274291
        To:
<sip:0893680949@proxy.sipone.com;user=phone>;tag=669b638bbf9e0903fd8a2a66
        Date: Fri, 09 Feb 2007 00:15:14 GMT
        Call-ID: 3478456911(a)192.168.10.30
        Server: Cisco-SIPGateway/IOS-12.x
        CSeq: 2 PRACK
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
  27427 13.938422   202.74.164.44         203.24.54.17          SIP      Status: 200 OK

Frame 27427 (441 bytes on wire, 441 bytes captured)
Ethernet II, Src: 00:07:e9:11:47:25, Dst: 00:12:44:c0:cc:1b
Internet Protocol, Src Addr: 202.74.164.44 (202.74.164.44), Dst Addr: 203.24.54.17
(203.24.54.17)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
Session Initiation Protocol
    Status-Line: SIP/2.0 200 OK
    Message Header
        Via: SIP/2.0/UDP
192.168.10.30:5060;received=203.24.54.17;branch=z9hG4bKeccd468d60f015ed
        From: Jeff <sip:610089001@proxy.sipone.com;user=phone>;tag=1166274291
        To:
<sip:0893680949@proxy.sipone.com;user=phone>;tag=669b638bbf9e0903fd8a2a66
        Date: Fri, 09 Feb 2007 00:15:14 GMT
        Call-ID: 3478456911(a)192.168.10.30
        Server: Cisco-SIPGateway/IOS-12.x
        CSeq: 2 PRACK
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
  27438 13.947350   203.24.54.17          202.74.164.44         ICMP     Destination
unreachable (Port unreachable)

Frame 27438 (469 bytes on wire, 469 bytes captured)
Ethernet II, Src: 00:0a:f3:b8:0c:08, Dst: 00:07:e9:11:47:25
Internet Protocol, Src Addr: 203.24.54.17 (203.24.54.17), Dst Addr: 202.74.164.44
(202.74.164.44)
Internet Control Message Protocol

No.     Time        Source                Destination           Protocol Info
  30349 15.901399   203.24.54.17          202.74.164.44         SIP      Request: PRACK
sip:610089001@202.74.164.72

Frame 30349 (711 bytes on wire, 711 bytes captured)
Ethernet II, Src: 00:0a:f3:b8:0c:08, Dst: 00:07:e9:11:47:25
Internet Protocol, Src Addr: 203.24.54.17 (203.24.54.17), Dst Addr: 202.74.164.44
(202.74.164.44)
User Datagram Protocol, Src Port: 1350 (1350), Dst Port: sip (5060)
Session Initiation Protocol
    Request-Line: PRACK sip:610089001@202.74.164.72 SIP/2.0
    Message Header
        Route:
<sip:202.74.164.44;lr=on;ftag=1166274291;nat=yes;vsf=AAAAAAYJCQIKCQkACXAwAQYIFkAWRxMAA2UuY29tO3VzZXI9cGhvbmU->,<sip:202.74.164.72:5060;lr>
        Via: SIP/2.0/UDP 192.168.10.30:5060;branch=z9hG4bKeccd468d60f015ed
        From: Jeff <sip:610089001@proxy.sipone.com;user=phone>;tag=1166274291
        To:
<sip:0893680949@proxy.sipone.com;user=phone>;tag=669b638bbf9e0903fd8a2a66
        Call-ID: 3478456911(a)192.168.10.30
        CSeq: 2 PRACK
        RAck: 3067 1 INVITE
        Max-Forwards: 70
        User-Agent: Cisco-CP7912/8.0.1-060412A
        Allow: ACK, BYE, CANCEL, INVITE, NOTIFY, OPTIONS, REFER, REGISTER, PRACK, UPDATE
        Supported: replaces, 100rel
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
  30350 15.901638   202.74.164.44         203.24.54.17          SIP      Status: 500
I'm terribly sorry, server error occurred (1/SL)

Frame 30350 (649 bytes on wire, 649 bytes captured)
Ethernet II, Src: 00:07:e9:11:47:25, Dst: 00:12:44:c0:cc:1b
Internet Protocol, Src Addr: 202.74.164.44 (202.74.164.44), Dst Addr: 203.24.54.17
(203.24.54.17)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
Session Initiation Protocol
    Status-Line: SIP/2.0 500 I'm terribly sorry, server error occurred (1/SL)
    Message Header
        Via: SIP/2.0/UDP
192.168.10.30:5060;branch=z9hG4bKeccd468d60f015ed;received=203.24.54.17
        From: Jeff <sip:610089001@proxy.sipone.com;user=phone>;tag=1166274291
        To:
<sip:0893680949@proxy.sipone.com;user=phone>;tag=669b638bbf9e0903fd8a2a66
        Call-ID: 3478456911(a)192.168.10.30
        CSeq: 2 PRACK
        Server: OpenSer (1.1.1-tls (i386/linux))
        Content-Length: 0
        Warning: 392 202.74.164.44:5060 "Noisy feedback tells:  pid=11082
req_src_ip=203.24.54.17 req_src_port=1350 in_uri=sip:610089001@202.74.164.72
out_uri=sip:610089001@202.74.164.72 via_cnt==1"

No.     Time        Source                Destination           Protocol Info
  30359 15.913057   203.24.54.17          202.74.164.44         ICMP     Destination
unreachable (Port unreachable)

Frame 30359 (590 bytes on wire, 590 bytes captured)
Ethernet II, Src: 00:0a:f3:b8:0c:08, Dst: 00:07:e9:11:47:25
Internet Protocol, Src Addr: 203.24.54.17 (203.24.54.17), Dst Addr: 202.74.164.44
(202.74.164.44)
Internet Control Message Protocol

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

[Users] NAT problem for PRACK replies