Klaus Darilion wrote: > Maybe the message gets looped to your openser before rewriting the SDP? > Watch the loopback device for looped messages: > > ngrep -d any port 5060 > > regards > klaus this is the ngrep command I've been using up to now.. ngrep -W byline port 5060 would I be missing any packets that way?