[Blink] Blink registered with gizmo; no incoming calls, packet trace
Dean Willis
dean.willis at softarmor.com
Thu Apr 29 19:02:06 CEST 2010
Well, I think I've figured out what's going on.
I set up Blink to register with only my gizmo account, from a mac
behind a NAT.
It registered, with a Contact: using a random string and my NATted IP
address.
I called it.
An INVITE shows up at Blink, with the Request URI having the random
string from my REGISTER, but with the host part being my public address.
Blink sent a 404.
No. Time Source Destination
Protocol Info
48 8.664846 192.168.2.115 198.65.166.131
SIP Request: REGISTER sip:proxy01.sipphone.com
Frame 48 (551 bytes on wire, 551 bytes captured)
Arrival Time: Apr 29, 2010 11:48:38.053333000
[Time delta from previous captured frame: 0.005819000 seconds]
[Time delta from previous displayed frame: 5.476108000 seconds]
[Time since reference or first frame: 8.664846000 seconds]
Frame Number: 48
Frame Length: 551 bytes
Capture Length: 551 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:sip]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: AppleCom_40:09:d4 (00:17:f2:40:09:d4), Dst: Cisco-
Li_31:45:26 (00:12:17:31:45:26)
Destination: Cisco-Li_31:45:26 (00:12:17:31:45:26)
Address: Cisco-Li_31:45:26 (00:12:17:31:45:26)
.... ...0 .... .... .... .... = IG bit: Individual address
(unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique
address (factory default)
Source: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
Address: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
.... ...0 .... .... .... .... = IG bit: Individual address
(unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique
address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.2.115 (192.168.2.115), Dst:
198.65.166.131 (198.65.166.131)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 537
Identification: 0x58de (22750)
Flags: 0x00
0.. = Reserved bit: Not Set
.0. = Don't fragment: Not Set
..0 = More fragments: Not Set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0xf015 [correct]
[Good: True]
[Bad : False]
Source: 192.168.2.115 (192.168.2.115)
Destination: 198.65.166.131 (198.65.166.131)
User Datagram Protocol, Src Port: 51026 (51026), Dst Port: sip (5060)
Source port: 51026 (51026)
Destination port: sip (5060)
Length: 517
Checksum: 0x1f3f [correct]
[Good Checksum: True]
[Bad Checksum: False]
Session Initiation Protocol
Request-Line: REGISTER sip:proxy01.sipphone.com SIP/2.0
Method: REGISTER
Request-URI: sip:proxy01.sipphone.com
Request-URI Host Part: proxy01.sipphone.com
[Resent Packet: False]
Message Header
Via: SIP/2.0/UDP
192.168.2.115
:51026;rport;branch=z9hG4bKPj3oY4Llk6ZK1KFDQ13FSsnRWjY991pB4C
Transport: UDP
Sent-by Address: 192.168.2.115
Sent-by port: 51026
RPort: rport
Branch: z9hG4bKPj3oY4Llk6ZK1KFDQ13FSsnRWjY991pB4C
Max-Forwards: 70
From: "Dean Willis" <sip:
17476756358 at proxy01.sipphone.com>;tag=0V2eKvCxvGCuwpGd3oKsBoD-d-H3hZSO
SIP Display info: "Dean Willis"
SIP from address: sip:17476756358 at proxy01.sipphone.com
SIP from address User Part: 17476756358
SIP from address Host Part: proxy01.sipphone.com
SIP tag: 0V2eKvCxvGCuwpGd3oKsBoD-d-H3hZSO
To: "Dean Willis" <sip:17476756358 at proxy01.sipphone.com>
SIP Display info: "Dean Willis"
SIP to address: sip:17476756358 at proxy01.sipphone.com
SIP to address User Part: 17476756358
SIP to address Host Part: proxy01.sipphone.com
Contact: <sip:rgcxbewv at 192.168.2.115:51026>
Contact Binding: <sip:rgcxbewv at 192.168.2.115:51026>
URI: <sip:rgcxbewv at 192.168.2.115:51026>
SIP contact address: sip:rgcxbewv at 192.168.2.115:51026
Call-ID: dRASeyW7ovM9OZRPqSVWk0boil013rir
CSeq: 1 REGISTER
Sequence Number: 1
Method: REGISTER
Route: <sip:198.65.166.131;lr>
Expires: 600
User-Agent: blink-0.18.1
Content-Length: 0
No. Time Source Destination
Protocol Info
49 8.760264 198.65.166.131 192.168.2.115
SIP Status: 401 Unauthorized (0 bindings)
Frame 49 (592 bytes on wire, 592 bytes captured)
Arrival Time: Apr 29, 2010 11:48:38.148751000
[Time delta from previous captured frame: 0.095418000 seconds]
[Time delta from previous displayed frame: 0.095418000 seconds]
[Time since reference or first frame: 8.760264000 seconds]
Frame Number: 49
Frame Length: 592 bytes
Capture Length: 592 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:sip]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: Cisco-Li_31:45:26 (00:12:17:31:45:26), Dst:
AppleCom_40:09:d4 (00:17:f2:40:09:d4)
Destination: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
Address: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
.... ...0 .... .... .... .... = IG bit: Individual address
(unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique
address (factory default)
Source: Cisco-Li_31:45:26 (00:12:17:31:45:26)
Address: Cisco-Li_31:45:26 (00:12:17:31:45:26)
.... ...0 .... .... .... .... = IG bit: Individual address
(unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique
address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 198.65.166.131 (198.65.166.131), Dst:
192.168.2.115 (192.168.2.115)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 578
Identification: 0x3509 (13577)
Flags: 0x02 (Don't Fragment)
0.. = Reserved bit: Not Set
.1. = Don't fragment: Set
..0 = More fragments: Not Set
Fragment offset: 0
Time to live: 46
Protocol: UDP (0x11)
Header checksum: 0xe5c1 [correct]
[Good: True]
[Bad : False]
Source: 198.65.166.131 (198.65.166.131)
Destination: 192.168.2.115 (192.168.2.115)
User Datagram Protocol, Src Port: sip (5060), Dst Port: 51026 (51026)
Source port: sip (5060)
Destination port: 51026 (51026)
Length: 558
Checksum: 0x9ee0 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Session Initiation Protocol
Status-Line: SIP/2.0 401 Unauthorized
Status-Code: 401
[Resent Packet: False]
[Request Frame: 48]
[Response Time (ms): 95]
Message Header
Via: SIP/2.0/UDP
192.168.2.115
:
51026
;rport
=
51026
;branch=z9hG4bKPj3oY4Llk6ZK1KFDQ13FSsnRWjY991pB4C;received=66.25.30.183
Transport: UDP
Sent-by Address: 192.168.2.115
Sent-by port: 51026
RPort: 51026
Branch: z9hG4bKPj3oY4Llk6ZK1KFDQ13FSsnRWjY991pB4C
Received: 66.25.30.183
From: "Dean Willis" <sip:
17476756358 at proxy01.sipphone.com>;tag=0V2eKvCxvGCuwpGd3oKsBoD-d-H3hZSO
SIP Display info: "Dean Willis"
SIP from address: sip:17476756358 at proxy01.sipphone.com
SIP from address User Part: 17476756358
SIP from address Host Part: proxy01.sipphone.com
SIP tag: 0V2eKvCxvGCuwpGd3oKsBoD-d-H3hZSO
To: "Dean Willis" <sip:
17476756358
@proxy01.sipphone.com>;tag=92390300a369f0d75803e369c733575e.baa5
SIP Display info: "Dean Willis"
SIP to address: sip:17476756358 at proxy01.sipphone.com
SIP to address User Part: 17476756358
SIP to address Host Part: proxy01.sipphone.com
SIP tag: 92390300a369f0d75803e369c733575e.baa5
Call-ID: dRASeyW7ovM9OZRPqSVWk0boil013rir
CSeq: 1 REGISTER
Sequence Number: 1
Method: REGISTER
P-Behind-NAT: Yes
[Expert Info (Note/Undecoded): Unrecognised SIP header (P-
Behind-NAT)]
[Message: Unrecognised SIP header (P-Behind-NAT)]
[Severity level: Note]
[Group: Undecoded]
WWW-Authenticate: Digest realm="proxy01.sipphone.com",
nonce="4bd9b991a9786dd6ef27ed0a181afb8c97a5cac2"
Authentication Scheme: Digest
Realm: "proxy01.sipphone.com"
Nonce Value: "4bd9b991a9786dd6ef27ed0a181afb8c97a5cac2"
Content-Length: 0
No. Time Source Destination
Protocol Info
50 8.760810 192.168.2.115 198.65.166.131
SIP Request: REGISTER sip:proxy01.sipphone.com
Frame 50 (754 bytes on wire, 754 bytes captured)
Arrival Time: Apr 29, 2010 11:48:38.149297000
[Time delta from previous captured frame: 0.000546000 seconds]
[Time delta from previous displayed frame: 0.000546000 seconds]
[Time since reference or first frame: 8.760810000 seconds]
Frame Number: 50
Frame Length: 754 bytes
Capture Length: 754 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:sip]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: AppleCom_40:09:d4 (00:17:f2:40:09:d4), Dst: Cisco-
Li_31:45:26 (00:12:17:31:45:26)
Destination: Cisco-Li_31:45:26 (00:12:17:31:45:26)
Address: Cisco-Li_31:45:26 (00:12:17:31:45:26)
.... ...0 .... .... .... .... = IG bit: Individual address
(unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique
address (factory default)
Source: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
Address: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
.... ...0 .... .... .... .... = IG bit: Individual address
(unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique
address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.2.115 (192.168.2.115), Dst:
198.65.166.131 (198.65.166.131)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 740
Identification: 0xdc93 (56467)
Flags: 0x00
0.. = Reserved bit: Not Set
.0. = Don't fragment: Not Set
..0 = More fragments: Not Set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0x6b95 [correct]
[Good: True]
[Bad : False]
Source: 192.168.2.115 (192.168.2.115)
Destination: 198.65.166.131 (198.65.166.131)
User Datagram Protocol, Src Port: 51026 (51026), Dst Port: sip (5060)
Source port: 51026 (51026)
Destination port: sip (5060)
Length: 720
Checksum: 0x9934 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Session Initiation Protocol
Request-Line: REGISTER sip:proxy01.sipphone.com SIP/2.0
Method: REGISTER
Request-URI: sip:proxy01.sipphone.com
Request-URI Host Part: proxy01.sipphone.com
[Resent Packet: False]
Message Header
Via: SIP/2.0/UDP
192.168.2.115
:51026;rport;branch=z9hG4bKPjG6sjjEIhrkOHhrRHyPsQNVgzXfT8Rbrj
Transport: UDP
Sent-by Address: 192.168.2.115
Sent-by port: 51026
RPort: rport
Branch: z9hG4bKPjG6sjjEIhrkOHhrRHyPsQNVgzXfT8Rbrj
Max-Forwards: 70
From: "Dean Willis" <sip:
17476756358 at proxy01.sipphone.com>;tag=0V2eKvCxvGCuwpGd3oKsBoD-d-H3hZSO
SIP Display info: "Dean Willis"
SIP from address: sip:17476756358 at proxy01.sipphone.com
SIP from address User Part: 17476756358
SIP from address Host Part: proxy01.sipphone.com
SIP tag: 0V2eKvCxvGCuwpGd3oKsBoD-d-H3hZSO
To: "Dean Willis" <sip:17476756358 at proxy01.sipphone.com>
SIP Display info: "Dean Willis"
SIP to address: sip:17476756358 at proxy01.sipphone.com
SIP to address User Part: 17476756358
SIP to address Host Part: proxy01.sipphone.com
Contact: <sip:rgcxbewv at 192.168.2.115:51026>
Contact Binding: <sip:rgcxbewv at 192.168.2.115:51026>
URI: <sip:rgcxbewv at 192.168.2.115:51026>
SIP contact address: sip:rgcxbewv at 192.168.2.115:51026
Call-ID: dRASeyW7ovM9OZRPqSVWk0boil013rir
CSeq: 2 REGISTER
Sequence Number: 2
Method: REGISTER
Route: <sip:198.65.166.131;lr>
Expires: 600
User-Agent: blink-0.18.1
Authorization: Digest username="17476756358",
realm="proxy01.sipphone.com",
nonce="4bd9b991a9786dd6ef27ed0a181afb8c97a5cac2", uri="sip:proxy01.sipphone.com
", response="e955caba06956306805e51a655a1fcf3"
Authentication Scheme: Digest
Username: "17476756358"
Realm: "proxy01.sipphone.com"
Nonce Value: "4bd9b991a9786dd6ef27ed0a181afb8c97a5cac2"
Authentication URI: "sip:proxy01.sipphone.com"
Digest Authentication Response:
"e955caba06956306805e51a655a1fcf3"
Content-Length: 0
No. Time Source Destination
Protocol Info
51 8.862039 198.65.166.131 192.168.2.115
SIP Status: 200 OK (2 bindings)
Frame 51 (582 bytes on wire, 582 bytes captured)
Arrival Time: Apr 29, 2010 11:48:38.250526000
[Time delta from previous captured frame: 0.101229000 seconds]
[Time delta from previous displayed frame: 0.101229000 seconds]
[Time since reference or first frame: 8.862039000 seconds]
Frame Number: 51
Frame Length: 582 bytes
Capture Length: 582 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:sip]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: Cisco-Li_31:45:26 (00:12:17:31:45:26), Dst:
AppleCom_40:09:d4 (00:17:f2:40:09:d4)
Destination: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
Address: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
.... ...0 .... .... .... .... = IG bit: Individual address
(unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique
address (factory default)
Source: Cisco-Li_31:45:26 (00:12:17:31:45:26)
Address: Cisco-Li_31:45:26 (00:12:17:31:45:26)
.... ...0 .... .... .... .... = IG bit: Individual address
(unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique
address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 198.65.166.131 (198.65.166.131), Dst:
192.168.2.115 (192.168.2.115)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 568
Identification: 0x353b (13627)
Flags: 0x02 (Don't Fragment)
0.. = Reserved bit: Not Set
.1. = Don't fragment: Set
..0 = More fragments: Not Set
Fragment offset: 0
Time to live: 46
Protocol: UDP (0x11)
Header checksum: 0xe599 [correct]
[Good: True]
[Bad : False]
Source: 198.65.166.131 (198.65.166.131)
Destination: 192.168.2.115 (192.168.2.115)
User Datagram Protocol, Src Port: sip (5060), Dst Port: 51026 (51026)
Source port: sip (5060)
Destination port: 51026 (51026)
Length: 548
Checksum: 0x28d3 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Session Initiation Protocol
Status-Line: SIP/2.0 200 OK
Status-Code: 200
[Resent Packet: False]
[Request Frame: 50]
[Response Time (ms): 101]
Message Header
Via: SIP/2.0/UDP
192.168.2.115
:
51026
;rport
=
51026
;branch=z9hG4bKPjG6sjjEIhrkOHhrRHyPsQNVgzXfT8Rbrj;received=66.25.30.183
Transport: UDP
Sent-by Address: 192.168.2.115
Sent-by port: 51026
RPort: 51026
Branch: z9hG4bKPjG6sjjEIhrkOHhrRHyPsQNVgzXfT8Rbrj
Received: 66.25.30.183
From: "Dean Willis" <sip:
17476756358 at proxy01.sipphone.com>;tag=0V2eKvCxvGCuwpGd3oKsBoD-d-H3hZSO
SIP Display info: "Dean Willis"
SIP from address: sip:17476756358 at proxy01.sipphone.com
SIP from address User Part: 17476756358
SIP from address Host Part: proxy01.sipphone.com
SIP tag: 0V2eKvCxvGCuwpGd3oKsBoD-d-H3hZSO
To: "Dean Willis" <sip:
17476756358 at proxy01.sipphone.com>;tag=92390300a369f0d75803e369c733575e.
1dce
SIP Display info: "Dean Willis"
SIP to address: sip:17476756358 at proxy01.sipphone.com
SIP to address User Part: 17476756358
SIP to address Host Part: proxy01.sipphone.com
SIP tag: 92390300a369f0d75803e369c733575e.1dce
Call-ID: dRASeyW7ovM9OZRPqSVWk0boil013rir
CSeq: 2 REGISTER
Sequence Number: 2
Method: REGISTER
P-Behind-NAT: Yes
[Expert Info (Note/Undecoded): Unrecognised SIP header (P-
Behind-NAT)]
[Message: Unrecognised SIP header (P-Behind-NAT)]
[Severity level: Note]
[Group: Undecoded]
Contact: <sip:deanwillis at 66.25.30.183:5060>;expires=1644, <sip:rgcxbewv at 66.25.30.183:51026
>;expires=600
Contact Binding:
<sip:deanwillis at 66.25.30.183:5060>;expires=1644
URI: <sip:deanwillis at 66.25.30.183:5060>
SIP contact address: sip:deanwillis at 66.25.30.183:5060
Contact Binding:
<sip:rgcxbewv at 66.25.30.183:51026>;expires=600
URI: <sip:rgcxbewv at 66.25.30.183:51026>
SIP contact address:
sip:rgcxbewv at 66.25.30.183:51026
Content-Length: 0
No. Time Source Destination
Protocol Info
56 12.591752 85.17.186.7 192.168.2.115
SIP Request: NOTIFY sip:66.25.30.183:50954
Frame 56 (301 bytes on wire, 301 bytes captured)
Arrival Time: Apr 29, 2010 11:48:41.980239000
[Time delta from previous captured frame: 0.883011000 seconds]
[Time delta from previous displayed frame: 3.729713000 seconds]
[Time since reference or first frame: 12.591752000 seconds]
Frame Number: 56
Frame Length: 301 bytes
Capture Length: 301 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:sip]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: Cisco-Li_31:45:26 (00:12:17:31:45:26), Dst:
AppleCom_40:09:d4 (00:17:f2:40:09:d4)
Destination: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
Address: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
.... ...0 .... .... .... .... = IG bit: Individual address
(unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique
address (factory default)
Source: Cisco-Li_31:45:26 (00:12:17:31:45:26)
Address: Cisco-Li_31:45:26 (00:12:17:31:45:26)
.... ...0 .... .... .... .... = IG bit: Individual address
(unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique
address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 85.17.186.7 (85.17.186.7), Dst: 192.168.2.115
(192.168.2.115)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 287
Identification: 0x0000 (0)
Flags: 0x02 (Don't Fragment)
0.. = Reserved bit: Not Set
.1. = Don't fragment: Set
..0 = More fragments: Not Set
Fragment offset: 0
Time to live: 42
Protocol: UDP (0x11)
Header checksum: 0x7d9a [correct]
[Good: True]
[Bad : False]
Source: 85.17.186.7 (85.17.186.7)
Destination: 192.168.2.115 (192.168.2.115)
User Datagram Protocol, Src Port: sip (5060), Dst Port: 50954 (50954)
Source port: sip (5060)
Destination port: 50954 (50954)
Length: 267
Checksum: 0xfdfe [correct]
[Good Checksum: True]
[Bad Checksum: False]
Session Initiation Protocol
Request-Line: NOTIFY sip:66.25.30.183:50954 SIP/2.0
Method: NOTIFY
Request-URI: sip:66.25.30.183:50954
Request-URI Host Part: 66.25.30.183
Request-URI Host Port: 50954
[Resent Packet: False]
Message Header
Via: SIP/2.0/UDP 85.17.186.7:5060;branch=0
Transport: UDP
Sent-by Address: 85.17.186.7
Sent-by port: 5060
Branch: 0
From: sip:keepalive at 85.17.186.7;tag=7f7eef1a
SIP from address: sip:keepalive at 85.17.186.7
SIP from address User Part: keepalive
SIP from address Host Part: 85.17.186.7
SIP tag: 7f7eef1a
To: sip:66.25.30.183:50954
SIP to address: sip:66.25.30.183:50954
SIP to address Host Part: 66.25.30.183
SIP to address Host Port: 50954
Call-ID: 560b03ab-2d3bdda4-1c035 at 85.17.186.7
CSeq: 1 NOTIFY
Sequence Number: 1
Method: NOTIFY
Event: keep-alive
Content-Length: 0
No. Time Source Destination
Protocol Info
112 45.850801 198.65.166.131 192.168.2.115 SIP/
SDP Request: INVITE sip:rgcxbewv at 66.25.30.183:51026, with session
description
Frame 112 (1056 bytes on wire, 1056 bytes captured)
Arrival Time: Apr 29, 2010 11:49:15.239288000
[Time delta from previous captured frame: 1.818593000 seconds]
[Time delta from previous displayed frame: 33.259049000 seconds]
[Time since reference or first frame: 45.850801000 seconds]
Frame Number: 112
Frame Length: 1056 bytes
Capture Length: 1056 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:sip:sdp]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: Cisco-Li_31:45:26 (00:12:17:31:45:26), Dst:
AppleCom_40:09:d4 (00:17:f2:40:09:d4)
Destination: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
Address: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
.... ...0 .... .... .... .... = IG bit: Individual address
(unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique
address (factory default)
Source: Cisco-Li_31:45:26 (00:12:17:31:45:26)
Address: Cisco-Li_31:45:26 (00:12:17:31:45:26)
.... ...0 .... .... .... .... = IG bit: Individual address
(unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique
address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 198.65.166.131 (198.65.166.131), Dst:
192.168.2.115 (192.168.2.115)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1042
Identification: 0xabea (44010)
Flags: 0x02 (Don't Fragment)
0.. = Reserved bit: Not Set
.1. = Don't fragment: Set
..0 = More fragments: Not Set
Fragment offset: 0
Time to live: 46
Protocol: UDP (0x11)
Header checksum: 0x6d10 [correct]
[Good: True]
[Bad : False]
Source: 198.65.166.131 (198.65.166.131)
Destination: 192.168.2.115 (192.168.2.115)
User Datagram Protocol, Src Port: sip (5060), Dst Port: 51026 (51026)
Source port: sip (5060)
Destination port: 51026 (51026)
Length: 1022
Checksum: 0x73e6 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Session Initiation Protocol
Request-Line: INVITE sip:rgcxbewv at 66.25.30.183:51026 SIP/2.0
Method: INVITE
Request-URI: sip:rgcxbewv at 66.25.30.183:51026
Request-URI User Part: rgcxbewv
Request-URI Host Part: 66.25.30.183
Request-URI Host Port: 51026
[Resent Packet: False]
Message Header
Record-Route: <sip:198.65.166.131;lr;ftag=as733b07c5>
Via: SIP/2.0/UDP 198.65.166.131;branch=z9hG4bKbbe5.98f7ef92.1
Transport: UDP
Sent-by Address: 198.65.166.131
Branch: z9hG4bKbbe5.98f7ef92.1
Via: SIP/2.0/UDP
198.65.166.172:5060;branch=z9hG4bK569fbe0a;rport=5060
Transport: UDP
Sent-by Address: 198.65.166.172
Sent-by port: 5060
Branch: z9hG4bK569fbe0a
RPort: 5060
From: "+12142821376" <sip:
+12142821376 at 198.65.166.172>;tag=as733b07c5
SIP Display info: "+12142821376"
SIP from address: sip:+12142821376 at 198.65.166.172
SIP from address User Part: +12142821376
SIP from address Host Part: 198.65.166.172
SIP tag: as733b07c5
To: <sip:12145041987 at 198.65.166.131>
SIP to address: sip:12145041987 at 198.65.166.131
SIP to address User Part: 12145041987
SIP to address Host Part: 198.65.166.131
Contact: <sip:+12142821376 at 198.65.166.172>
Contact Binding: <sip:+12142821376 at 198.65.166.172>
URI: <sip:+12142821376 at 198.65.166.172>
SIP contact address: sip:
+12142821376 at 198.65.166.172
Call-ID: 3d8c99342dd613734522c6056c9a2e08 at 198.65.166.172
CSeq: 102 INVITE
Sequence Number: 102
Method: INVITE
User-Agent: SIPCallProxy1
Max-Forwards: 69
Date: Thu, 29 Apr 2010 16:49:14 GMT
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE,
NOTIFY
Content-Type: application/sdp
Content-Length: 317
RemoteIP: 198.65.166.172
[Expert Info (Note/Undecoded): Unrecognised SIP header
(RemoteIP)]
[Message: Unrecognised SIP header (RemoteIP)]
[Severity level: Note]
[Group: Undecoded]
Message Body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): root 12308 12308 IN IP4
198.65.166.172
Owner Username: root
Session ID: 12308
Session Version: 12308
Owner Network Type: IN
Owner Address Type: IP4
Owner Address: 198.65.166.172
Session Name (s): session
Connection Information (c): IN IP4 198.65.166.172
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 198.65.166.172
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Media Description, name and address (m): audio 13864 RTP/
AVP 18 97 0 8 101
Media Type: audio
Media Port: 13864
Media Protocol: RTP/AVP
Media Format: ITU-T G.729
Media Format: DynamicRTP-Type-97
Media Format: ITU-T G.711 PCMU
Media Format: ITU-T G.711 PCMA
Media Format: DynamicRTP-Type-101
Media Attribute (a): rtpmap:18 G729/8000
Media Attribute Fieldname: rtpmap
Media Format: 18
MIME Type: G729
Sample Rate: 8000
Media Attribute (a): fmtp:18 annexb=no
Media Attribute Fieldname: fmtp
Media Format: 18 [G729]
Media format specific parameters: annexb=no
Media Attribute (a): rtpmap:97 iLBC/8000
Media Attribute Fieldname: rtpmap
Media Format: 97
MIME Type: iLBC
Sample Rate: 8000
Media Attribute (a): rtpmap:0 PCMU/8000
Media Attribute Fieldname: rtpmap
Media Format: 0
MIME Type: PCMU
Sample Rate: 8000
Media Attribute (a): rtpmap:8 PCMA/8000
Media Attribute Fieldname: rtpmap
Media Format: 8
MIME Type: PCMA
Sample Rate: 8000
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Format: 101
MIME Type: telephone-event
Sample Rate: 8000
Media Attribute (a): fmtp:101 0-16
Media Attribute Fieldname: fmtp
Media Format: 101 [telephone-event]
Media format specific parameters: 0-16
Media Attribute (a): silenceSupp:off - - - -
Media Attribute Fieldname: silenceSupp
Media Attribute Value: off - - - -
No. Time Source Destination
Protocol Info
113 45.859271 192.168.2.115 198.65.166.131
SIP Status: 404 Not Found
Frame 113 (545 bytes on wire, 545 bytes captured)
Arrival Time: Apr 29, 2010 11:49:15.247758000
[Time delta from previous captured frame: 0.008470000 seconds]
[Time delta from previous displayed frame: 0.008470000 seconds]
[Time since reference or first frame: 45.859271000 seconds]
Frame Number: 113
Frame Length: 545 bytes
Capture Length: 545 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:sip]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: AppleCom_40:09:d4 (00:17:f2:40:09:d4), Dst: Cisco-
Li_31:45:26 (00:12:17:31:45:26)
Destination: Cisco-Li_31:45:26 (00:12:17:31:45:26)
Address: Cisco-Li_31:45:26 (00:12:17:31:45:26)
.... ...0 .... .... .... .... = IG bit: Individual address
(unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique
address (factory default)
Source: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
Address: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
.... ...0 .... .... .... .... = IG bit: Individual address
(unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique
address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 192.168.2.115 (192.168.2.115), Dst:
198.65.166.131 (198.65.166.131)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 531
Identification: 0xb9c2 (47554)
Flags: 0x00
0.. = Reserved bit: Not Set
.0. = Don't fragment: Not Set
..0 = More fragments: Not Set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0x8f37 [correct]
[Good: True]
[Bad : False]
Source: 192.168.2.115 (192.168.2.115)
Destination: 198.65.166.131 (198.65.166.131)
User Datagram Protocol, Src Port: 51026 (51026), Dst Port: sip (5060)
Source port: 51026 (51026)
Destination port: sip (5060)
Length: 511
Checksum: 0x8f14 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Session Initiation Protocol
Status-Line: SIP/2.0 404 Not Found
Status-Code: 404
[Resent Packet: False]
[Request Frame: 112]
[Response Time (ms): 8]
Message Header
Via: SIP/2.0/UDP
198.65.166.131;received=198.65.166.131;branch=z9hG4bKbbe5.98f7ef92.1
Transport: UDP
Sent-by Address: 198.65.166.131
Received: 198.65.166.131
Branch: z9hG4bKbbe5.98f7ef92.1
Via: SIP/2.0/UDP
198.65.166.172:5060;rport=5060;branch=z9hG4bK569fbe0a
Transport: UDP
Sent-by Address: 198.65.166.172
Sent-by port: 5060
RPort: 5060
Branch: z9hG4bK569fbe0a
Record-Route: <sip:198.65.166.131;lr;ftag=as733b07c5>
Call-ID: 3d8c99342dd613734522c6056c9a2e08 at 198.65.166.172
From: "+12142821376" <sip:
+12142821376 at 198.65.166.172>;tag=as733b07c5
SIP Display info: "+12142821376"
SIP from address: sip:+12142821376 at 198.65.166.172
SIP from address User Part: +12142821376
SIP from address Host Part: 198.65.166.172
SIP tag: as733b07c5
To: <sip:
12145041987 at 198.65.166.131>;tag=VR685tbeJV2M8Witcy0bgekXGyDXzclU
SIP to address: sip:12145041987 at 198.65.166.131
SIP to address User Part: 12145041987
SIP to address Host Part: 198.65.166.131
SIP tag: VR685tbeJV2M8Witcy0bgekXGyDXzclU
CSeq: 102 INVITE
Sequence Number: 102
Method: INVITE
Server: blink-0.18.1
Content-Length: 0
No. Time Source Destination
Protocol Info
114 45.955540 198.65.166.131 192.168.2.115
SIP Request: ACK sip:rgcxbewv at 66.25.30.183:51026
Frame 114 (390 bytes on wire, 390 bytes captured)
Arrival Time: Apr 29, 2010 11:49:15.344027000
[Time delta from previous captured frame: 0.096269000 seconds]
[Time delta from previous displayed frame: 0.096269000 seconds]
[Time since reference or first frame: 45.955540000 seconds]
Frame Number: 114
Frame Length: 390 bytes
Capture Length: 390 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:sip]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: Cisco-Li_31:45:26 (00:12:17:31:45:26), Dst:
AppleCom_40:09:d4 (00:17:f2:40:09:d4)
Destination: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
Address: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
.... ...0 .... .... .... .... = IG bit: Individual address
(unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique
address (factory default)
Source: Cisco-Li_31:45:26 (00:12:17:31:45:26)
Address: Cisco-Li_31:45:26 (00:12:17:31:45:26)
.... ...0 .... .... .... .... = IG bit: Individual address
(unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique
address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 198.65.166.131 (198.65.166.131), Dst:
192.168.2.115 (192.168.2.115)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 376
Identification: 0xac44 (44100)
Flags: 0x02 (Don't Fragment)
0.. = Reserved bit: Not Set
.1. = Don't fragment: Set
..0 = More fragments: Not Set
Fragment offset: 0
Time to live: 46
Protocol: UDP (0x11)
Header checksum: 0x6f50 [correct]
[Good: True]
[Bad : False]
Source: 198.65.166.131 (198.65.166.131)
Destination: 192.168.2.115 (192.168.2.115)
User Datagram Protocol, Src Port: sip (5060), Dst Port: 51026 (51026)
Source port: sip (5060)
Destination port: 51026 (51026)
Length: 356
Checksum: 0xcca6 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Session Initiation Protocol
Request-Line: ACK sip:rgcxbewv at 66.25.30.183:51026 SIP/2.0
Method: ACK
Request-URI: sip:rgcxbewv at 66.25.30.183:51026
Request-URI User Part: rgcxbewv
Request-URI Host Part: 66.25.30.183
Request-URI Host Port: 51026
[Resent Packet: False]
[Request Frame: 112]
[Response Time (ms): 104]
Message Header
Via: SIP/2.0/UDP 198.65.166.131;branch=z9hG4bKbbe5.98f7ef92.1
Transport: UDP
Sent-by Address: 198.65.166.131
Branch: z9hG4bKbbe5.98f7ef92.1
From: "+12142821376" <sip:
+12142821376 at 198.65.166.172>;tag=as733b07c5
SIP Display info: "+12142821376"
SIP from address: sip:+12142821376 at 198.65.166.172
SIP from address User Part: +12142821376
SIP from address Host Part: 198.65.166.172
SIP tag: as733b07c5
Call-ID: 3d8c99342dd613734522c6056c9a2e08 at 198.65.166.172
To: <sip:
12145041987 at 198.65.166.131>;tag=VR685tbeJV2M8Witcy0bgekXGyDXzclU
SIP to address: sip:12145041987 at 198.65.166.131
SIP to address User Part: 12145041987
SIP to address Host Part: 198.65.166.131
SIP tag: VR685tbeJV2M8Witcy0bgekXGyDXzclU
CSeq: 102 ACK
Sequence Number: 102
Method: ACK
Content-Length: 0
No. Time Source Destination
Protocol Info
117 53.188762 81.23.228.129 192.168.2.115
SIP Request: NOTIFY sip:66.25.30.183:50954
Frame 117 (307 bytes on wire, 307 bytes captured)
Arrival Time: Apr 29, 2010 11:49:22.577249000
[Time delta from previous captured frame: 2.496564000 seconds]
[Time delta from previous displayed frame: 7.233222000 seconds]
[Time since reference or first frame: 53.188762000 seconds]
Frame Number: 117
Frame Length: 307 bytes
Capture Length: 307 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:sip]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: Cisco-Li_31:45:26 (00:12:17:31:45:26), Dst:
AppleCom_40:09:d4 (00:17:f2:40:09:d4)
Destination: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
Address: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
.... ...0 .... .... .... .... = IG bit: Individual address
(unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique
address (factory default)
Source: Cisco-Li_31:45:26 (00:12:17:31:45:26)
Address: Cisco-Li_31:45:26 (00:12:17:31:45:26)
.... ...0 .... .... .... .... = IG bit: Individual address
(unicast)
.... ..0. .... .... .... .... = LG bit: Globally unique
address (factory default)
Type: IP (0x0800)
Internet Protocol, Src: 81.23.228.129 (81.23.228.129), Dst:
192.168.2.115 (192.168.2.115)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x08 (DSCP 0x02: Unknown DSCP;
ECN: 0x00)
0000 10.. = Differentiated Services Codepoint: Unknown (0x02)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 293
Identification: 0x0000 (0)
Flags: 0x02 (Don't Fragment)
0.. = Reserved bit: Not Set
.1. = Don't fragment: Set
..0 = More fragments: Not Set
Fragment offset: 0
Time to live: 44
Protocol: UDP (0x11)
Header checksum: 0x550c [correct]
[Good: True]
[Bad : False]
Source: 81.23.228.129 (81.23.228.129)
Destination: 192.168.2.115 (192.168.2.115)
User Datagram Protocol, Src Port: sip (5060), Dst Port: 50954 (50954)
Source port: sip (5060)
Destination port: 50954 (50954)
Length: 273
Checksum: 0x54a5 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Session Initiation Protocol
Request-Line: NOTIFY sip:66.25.30.183:50954 SIP/2.0
Method: NOTIFY
Request-URI: sip:66.25.30.183:50954
Request-URI Host Part: 66.25.30.183
Request-URI Host Port: 50954
[Resent Packet: False]
Message Header
Via: SIP/2.0/UDP 81.23.228.129:5060;branch=0
Transport: UDP
Sent-by Address: 81.23.228.129
Sent-by port: 5060
Branch: 0
From: sip:keepalive at 81.23.228.129;tag=3d432781
SIP from address: sip:keepalive at 81.23.228.129
SIP from address User Part: keepalive
SIP from address Host Part: 81.23.228.129
SIP tag: 3d432781
To: sip:66.25.30.183:50954
SIP to address: sip:66.25.30.183:50954
SIP to address Host Part: 66.25.30.183
SIP to address Host Port: 50954
Call-ID: 6302e87c-39897273-403a3 at 81.23.228.129
CSeq: 1 NOTIFY
Sequence Number: 1
Method: NOTIFY
Event: keep-alive
Content-Length: 0
More information about the Blink
mailing list