[Blink] Blink registered with gizmo; no incoming calls, packet trace
Adrian Georgescu
ag at ag-projects.com
Thu Apr 29 19:11:55 CEST 2010
This means that either your NAT router or the Gizmo border proxy tries
to be 'smart' and rewrites the public IP address of your router. The
ALG problem again.
Adrian
On Apr 29, 2010, at 7:02 PM, Dean Willis wrote:
>
> Well, I think I've figured out what's going on.
>
>
> I set up Blink to register with only my gizmo account, from a mac
> behind a NAT.
>
> It registered, with a Contact: using a random string and my NATted
> IP address.
>
> I called it.
>
> An INVITE shows up at Blink, with the Request URI having the random
> string from my REGISTER, but with the host part being my public
> address.
>
> Blink sent a 404.
>
>
>
> No. Time Source Destination
> Protocol Info
> 48 8.664846 192.168.2.115 198.65.166.131
> SIP Request: REGISTER sip:proxy01.sipphone.com
>
> Frame 48 (551 bytes on wire, 551 bytes captured)
> Arrival Time: Apr 29, 2010 11:48:38.053333000
> [Time delta from previous captured frame: 0.005819000 seconds]
> [Time delta from previous displayed frame: 5.476108000 seconds]
> [Time since reference or first frame: 8.664846000 seconds]
> Frame Number: 48
> Frame Length: 551 bytes
> Capture Length: 551 bytes
> [Frame is marked: False]
> [Protocols in frame: eth:ip:udp:sip]
> [Coloring Rule Name: UDP]
> [Coloring Rule String: udp]
> Ethernet II, Src: AppleCom_40:09:d4 (00:17:f2:40:09:d4), Dst: Cisco-
> Li_31:45:26 (00:12:17:31:45:26)
> Destination: Cisco-Li_31:45:26 (00:12:17:31:45:26)
> Address: Cisco-Li_31:45:26 (00:12:17:31:45:26)
> .... ...0 .... .... .... .... = IG bit: Individual address
> (unicast)
> .... ..0. .... .... .... .... = LG bit: Globally unique
> address (factory default)
> Source: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
> Address: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
> .... ...0 .... .... .... .... = IG bit: Individual address
> (unicast)
> .... ..0. .... .... .... .... = LG bit: Globally unique
> address (factory default)
> Type: IP (0x0800)
> Internet Protocol, Src: 192.168.2.115 (192.168.2.115), Dst:
> 198.65.166.131 (198.65.166.131)
> Version: 4
> Header length: 20 bytes
> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
> 0000 00.. = Differentiated Services Codepoint: Default (0x00)
> .... ..0. = ECN-Capable Transport (ECT): 0
> .... ...0 = ECN-CE: 0
> Total Length: 537
> Identification: 0x58de (22750)
> Flags: 0x00
> 0.. = Reserved bit: Not Set
> .0. = Don't fragment: Not Set
> ..0 = More fragments: Not Set
> Fragment offset: 0
> Time to live: 64
> Protocol: UDP (0x11)
> Header checksum: 0xf015 [correct]
> [Good: True]
> [Bad : False]
> Source: 192.168.2.115 (192.168.2.115)
> Destination: 198.65.166.131 (198.65.166.131)
> User Datagram Protocol, Src Port: 51026 (51026), Dst Port: sip (5060)
> Source port: 51026 (51026)
> Destination port: sip (5060)
> Length: 517
> Checksum: 0x1f3f [correct]
> [Good Checksum: True]
> [Bad Checksum: False]
> Session Initiation Protocol
> Request-Line: REGISTER sip:proxy01.sipphone.com SIP/2.0
> Method: REGISTER
> Request-URI: sip:proxy01.sipphone.com
> Request-URI Host Part: proxy01.sipphone.com
> [Resent Packet: False]
> Message Header
> Via: SIP/2.0/UDP
> 192.168.2.115
> :51026;rport;branch=z9hG4bKPj3oY4Llk6ZK1KFDQ13FSsnRWjY991pB4C
> Transport: UDP
> Sent-by Address: 192.168.2.115
> Sent-by port: 51026
> RPort: rport
> Branch: z9hG4bKPj3oY4Llk6ZK1KFDQ13FSsnRWjY991pB4C
> Max-Forwards: 70
> From: "Dean Willis" <sip:
> 17476756358 at proxy01.sipphone.com>;tag=0V2eKvCxvGCuwpGd3oKsBoD-d-H3hZSO
> SIP Display info: "Dean Willis"
> SIP from address: sip:17476756358 at proxy01.sipphone.com
> SIP from address User Part: 17476756358
> SIP from address Host Part: proxy01.sipphone.com
> SIP tag: 0V2eKvCxvGCuwpGd3oKsBoD-d-H3hZSO
> To: "Dean Willis" <sip:17476756358 at proxy01.sipphone.com>
> SIP Display info: "Dean Willis"
> SIP to address: sip:17476756358 at proxy01.sipphone.com
> SIP to address User Part: 17476756358
> SIP to address Host Part: proxy01.sipphone.com
> Contact: <sip:rgcxbewv at 192.168.2.115:51026>
> Contact Binding: <sip:rgcxbewv at 192.168.2.115:51026>
> URI: <sip:rgcxbewv at 192.168.2.115:51026>
> SIP contact address: sip:rgcxbewv at 192.168.2.115:51026
> Call-ID: dRASeyW7ovM9OZRPqSVWk0boil013rir
> CSeq: 1 REGISTER
> Sequence Number: 1
> Method: REGISTER
> Route: <sip:198.65.166.131;lr>
> Expires: 600
> User-Agent: blink-0.18.1
> Content-Length: 0
>
> No. Time Source Destination
> Protocol Info
> 49 8.760264 198.65.166.131 192.168.2.115
> SIP Status: 401 Unauthorized (0 bindings)
>
> Frame 49 (592 bytes on wire, 592 bytes captured)
> Arrival Time: Apr 29, 2010 11:48:38.148751000
> [Time delta from previous captured frame: 0.095418000 seconds]
> [Time delta from previous displayed frame: 0.095418000 seconds]
> [Time since reference or first frame: 8.760264000 seconds]
> Frame Number: 49
> Frame Length: 592 bytes
> Capture Length: 592 bytes
> [Frame is marked: False]
> [Protocols in frame: eth:ip:udp:sip]
> [Coloring Rule Name: UDP]
> [Coloring Rule String: udp]
> Ethernet II, Src: Cisco-Li_31:45:26 (00:12:17:31:45:26), Dst:
> AppleCom_40:09:d4 (00:17:f2:40:09:d4)
> Destination: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
> Address: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
> .... ...0 .... .... .... .... = IG bit: Individual address
> (unicast)
> .... ..0. .... .... .... .... = LG bit: Globally unique
> address (factory default)
> Source: Cisco-Li_31:45:26 (00:12:17:31:45:26)
> Address: Cisco-Li_31:45:26 (00:12:17:31:45:26)
> .... ...0 .... .... .... .... = IG bit: Individual address
> (unicast)
> .... ..0. .... .... .... .... = LG bit: Globally unique
> address (factory default)
> Type: IP (0x0800)
> Internet Protocol, Src: 198.65.166.131 (198.65.166.131), Dst:
> 192.168.2.115 (192.168.2.115)
> Version: 4
> Header length: 20 bytes
> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
> 0000 00.. = Differentiated Services Codepoint: Default (0x00)
> .... ..0. = ECN-Capable Transport (ECT): 0
> .... ...0 = ECN-CE: 0
> Total Length: 578
> Identification: 0x3509 (13577)
> Flags: 0x02 (Don't Fragment)
> 0.. = Reserved bit: Not Set
> .1. = Don't fragment: Set
> ..0 = More fragments: Not Set
> Fragment offset: 0
> Time to live: 46
> Protocol: UDP (0x11)
> Header checksum: 0xe5c1 [correct]
> [Good: True]
> [Bad : False]
> Source: 198.65.166.131 (198.65.166.131)
> Destination: 192.168.2.115 (192.168.2.115)
> User Datagram Protocol, Src Port: sip (5060), Dst Port: 51026 (51026)
> Source port: sip (5060)
> Destination port: 51026 (51026)
> Length: 558
> Checksum: 0x9ee0 [correct]
> [Good Checksum: True]
> [Bad Checksum: False]
> Session Initiation Protocol
> Status-Line: SIP/2.0 401 Unauthorized
> Status-Code: 401
> [Resent Packet: False]
> [Request Frame: 48]
> [Response Time (ms): 95]
> Message Header
> Via: SIP/2.0/UDP
> 192.168.2.115
> :
> 51026
> ;rport
> =
> 51026
> ;branch
> =z9hG4bKPj3oY4Llk6ZK1KFDQ13FSsnRWjY991pB4C;received=66.25.30.183
> Transport: UDP
> Sent-by Address: 192.168.2.115
> Sent-by port: 51026
> RPort: 51026
> Branch: z9hG4bKPj3oY4Llk6ZK1KFDQ13FSsnRWjY991pB4C
> Received: 66.25.30.183
> From: "Dean Willis" <sip:
> 17476756358 at proxy01.sipphone.com>;tag=0V2eKvCxvGCuwpGd3oKsBoD-d-H3hZSO
> SIP Display info: "Dean Willis"
> SIP from address: sip:17476756358 at proxy01.sipphone.com
> SIP from address User Part: 17476756358
> SIP from address Host Part: proxy01.sipphone.com
> SIP tag: 0V2eKvCxvGCuwpGd3oKsBoD-d-H3hZSO
> To: "Dean Willis" <sip:
> 17476756358
> @proxy01.sipphone.com>;tag=92390300a369f0d75803e369c733575e.baa5
> SIP Display info: "Dean Willis"
> SIP to address: sip:17476756358 at proxy01.sipphone.com
> SIP to address User Part: 17476756358
> SIP to address Host Part: proxy01.sipphone.com
> SIP tag: 92390300a369f0d75803e369c733575e.baa5
> Call-ID: dRASeyW7ovM9OZRPqSVWk0boil013rir
> CSeq: 1 REGISTER
> Sequence Number: 1
> Method: REGISTER
> P-Behind-NAT: Yes
> [Expert Info (Note/Undecoded): Unrecognised SIP header (P-
> Behind-NAT)]
> [Message: Unrecognised SIP header (P-Behind-NAT)]
> [Severity level: Note]
> [Group: Undecoded]
> WWW-Authenticate: Digest realm="proxy01.sipphone.com",
> nonce="4bd9b991a9786dd6ef27ed0a181afb8c97a5cac2"
> Authentication Scheme: Digest
> Realm: "proxy01.sipphone.com"
> Nonce Value: "4bd9b991a9786dd6ef27ed0a181afb8c97a5cac2"
> Content-Length: 0
>
> No. Time Source Destination
> Protocol Info
> 50 8.760810 192.168.2.115 198.65.166.131
> SIP Request: REGISTER sip:proxy01.sipphone.com
>
> Frame 50 (754 bytes on wire, 754 bytes captured)
> Arrival Time: Apr 29, 2010 11:48:38.149297000
> [Time delta from previous captured frame: 0.000546000 seconds]
> [Time delta from previous displayed frame: 0.000546000 seconds]
> [Time since reference or first frame: 8.760810000 seconds]
> Frame Number: 50
> Frame Length: 754 bytes
> Capture Length: 754 bytes
> [Frame is marked: False]
> [Protocols in frame: eth:ip:udp:sip]
> [Coloring Rule Name: UDP]
> [Coloring Rule String: udp]
> Ethernet II, Src: AppleCom_40:09:d4 (00:17:f2:40:09:d4), Dst: Cisco-
> Li_31:45:26 (00:12:17:31:45:26)
> Destination: Cisco-Li_31:45:26 (00:12:17:31:45:26)
> Address: Cisco-Li_31:45:26 (00:12:17:31:45:26)
> .... ...0 .... .... .... .... = IG bit: Individual address
> (unicast)
> .... ..0. .... .... .... .... = LG bit: Globally unique
> address (factory default)
> Source: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
> Address: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
> .... ...0 .... .... .... .... = IG bit: Individual address
> (unicast)
> .... ..0. .... .... .... .... = LG bit: Globally unique
> address (factory default)
> Type: IP (0x0800)
> Internet Protocol, Src: 192.168.2.115 (192.168.2.115), Dst:
> 198.65.166.131 (198.65.166.131)
> Version: 4
> Header length: 20 bytes
> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
> 0000 00.. = Differentiated Services Codepoint: Default (0x00)
> .... ..0. = ECN-Capable Transport (ECT): 0
> .... ...0 = ECN-CE: 0
> Total Length: 740
> Identification: 0xdc93 (56467)
> Flags: 0x00
> 0.. = Reserved bit: Not Set
> .0. = Don't fragment: Not Set
> ..0 = More fragments: Not Set
> Fragment offset: 0
> Time to live: 64
> Protocol: UDP (0x11)
> Header checksum: 0x6b95 [correct]
> [Good: True]
> [Bad : False]
> Source: 192.168.2.115 (192.168.2.115)
> Destination: 198.65.166.131 (198.65.166.131)
> User Datagram Protocol, Src Port: 51026 (51026), Dst Port: sip (5060)
> Source port: 51026 (51026)
> Destination port: sip (5060)
> Length: 720
> Checksum: 0x9934 [correct]
> [Good Checksum: True]
> [Bad Checksum: False]
> Session Initiation Protocol
> Request-Line: REGISTER sip:proxy01.sipphone.com SIP/2.0
> Method: REGISTER
> Request-URI: sip:proxy01.sipphone.com
> Request-URI Host Part: proxy01.sipphone.com
> [Resent Packet: False]
> Message Header
> Via: SIP/2.0/UDP
> 192.168.2.115
> :51026;rport;branch=z9hG4bKPjG6sjjEIhrkOHhrRHyPsQNVgzXfT8Rbrj
> Transport: UDP
> Sent-by Address: 192.168.2.115
> Sent-by port: 51026
> RPort: rport
> Branch: z9hG4bKPjG6sjjEIhrkOHhrRHyPsQNVgzXfT8Rbrj
> Max-Forwards: 70
> From: "Dean Willis" <sip:
> 17476756358 at proxy01.sipphone.com>;tag=0V2eKvCxvGCuwpGd3oKsBoD-d-H3hZSO
> SIP Display info: "Dean Willis"
> SIP from address: sip:17476756358 at proxy01.sipphone.com
> SIP from address User Part: 17476756358
> SIP from address Host Part: proxy01.sipphone.com
> SIP tag: 0V2eKvCxvGCuwpGd3oKsBoD-d-H3hZSO
> To: "Dean Willis" <sip:17476756358 at proxy01.sipphone.com>
> SIP Display info: "Dean Willis"
> SIP to address: sip:17476756358 at proxy01.sipphone.com
> SIP to address User Part: 17476756358
> SIP to address Host Part: proxy01.sipphone.com
> Contact: <sip:rgcxbewv at 192.168.2.115:51026>
> Contact Binding: <sip:rgcxbewv at 192.168.2.115:51026>
> URI: <sip:rgcxbewv at 192.168.2.115:51026>
> SIP contact address: sip:rgcxbewv at 192.168.2.115:51026
> Call-ID: dRASeyW7ovM9OZRPqSVWk0boil013rir
> CSeq: 2 REGISTER
> Sequence Number: 2
> Method: REGISTER
> Route: <sip:198.65.166.131;lr>
> Expires: 600
> User-Agent: blink-0.18.1
> Authorization: Digest username="17476756358",
> realm="proxy01.sipphone.com",
> nonce="4bd9b991a9786dd6ef27ed0a181afb8c97a5cac2", uri="sip:proxy01.sipphone.com
> ", response="e955caba06956306805e51a655a1fcf3"
> Authentication Scheme: Digest
> Username: "17476756358"
> Realm: "proxy01.sipphone.com"
> Nonce Value: "4bd9b991a9786dd6ef27ed0a181afb8c97a5cac2"
> Authentication URI: "sip:proxy01.sipphone.com"
> Digest Authentication Response:
> "e955caba06956306805e51a655a1fcf3"
> Content-Length: 0
>
> No. Time Source Destination
> Protocol Info
> 51 8.862039 198.65.166.131 192.168.2.115
> SIP Status: 200 OK (2 bindings)
>
> Frame 51 (582 bytes on wire, 582 bytes captured)
> Arrival Time: Apr 29, 2010 11:48:38.250526000
> [Time delta from previous captured frame: 0.101229000 seconds]
> [Time delta from previous displayed frame: 0.101229000 seconds]
> [Time since reference or first frame: 8.862039000 seconds]
> Frame Number: 51
> Frame Length: 582 bytes
> Capture Length: 582 bytes
> [Frame is marked: False]
> [Protocols in frame: eth:ip:udp:sip]
> [Coloring Rule Name: UDP]
> [Coloring Rule String: udp]
> Ethernet II, Src: Cisco-Li_31:45:26 (00:12:17:31:45:26), Dst:
> AppleCom_40:09:d4 (00:17:f2:40:09:d4)
> Destination: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
> Address: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
> .... ...0 .... .... .... .... = IG bit: Individual address
> (unicast)
> .... ..0. .... .... .... .... = LG bit: Globally unique
> address (factory default)
> Source: Cisco-Li_31:45:26 (00:12:17:31:45:26)
> Address: Cisco-Li_31:45:26 (00:12:17:31:45:26)
> .... ...0 .... .... .... .... = IG bit: Individual address
> (unicast)
> .... ..0. .... .... .... .... = LG bit: Globally unique
> address (factory default)
> Type: IP (0x0800)
> Internet Protocol, Src: 198.65.166.131 (198.65.166.131), Dst:
> 192.168.2.115 (192.168.2.115)
> Version: 4
> Header length: 20 bytes
> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
> 0000 00.. = Differentiated Services Codepoint: Default (0x00)
> .... ..0. = ECN-Capable Transport (ECT): 0
> .... ...0 = ECN-CE: 0
> Total Length: 568
> Identification: 0x353b (13627)
> Flags: 0x02 (Don't Fragment)
> 0.. = Reserved bit: Not Set
> .1. = Don't fragment: Set
> ..0 = More fragments: Not Set
> Fragment offset: 0
> Time to live: 46
> Protocol: UDP (0x11)
> Header checksum: 0xe599 [correct]
> [Good: True]
> [Bad : False]
> Source: 198.65.166.131 (198.65.166.131)
> Destination: 192.168.2.115 (192.168.2.115)
> User Datagram Protocol, Src Port: sip (5060), Dst Port: 51026 (51026)
> Source port: sip (5060)
> Destination port: 51026 (51026)
> Length: 548
> Checksum: 0x28d3 [correct]
> [Good Checksum: True]
> [Bad Checksum: False]
> Session Initiation Protocol
> Status-Line: SIP/2.0 200 OK
> Status-Code: 200
> [Resent Packet: False]
> [Request Frame: 50]
> [Response Time (ms): 101]
> Message Header
> Via: SIP/2.0/UDP
> 192.168.2.115
> :
> 51026
> ;rport
> =
> 51026
> ;branch
> =z9hG4bKPjG6sjjEIhrkOHhrRHyPsQNVgzXfT8Rbrj;received=66.25.30.183
> Transport: UDP
> Sent-by Address: 192.168.2.115
> Sent-by port: 51026
> RPort: 51026
> Branch: z9hG4bKPjG6sjjEIhrkOHhrRHyPsQNVgzXfT8Rbrj
> Received: 66.25.30.183
> From: "Dean Willis" <sip:
> 17476756358 at proxy01.sipphone.com>;tag=0V2eKvCxvGCuwpGd3oKsBoD-d-H3hZSO
> SIP Display info: "Dean Willis"
> SIP from address: sip:17476756358 at proxy01.sipphone.com
> SIP from address User Part: 17476756358
> SIP from address Host Part: proxy01.sipphone.com
> SIP tag: 0V2eKvCxvGCuwpGd3oKsBoD-d-H3hZSO
> To: "Dean Willis" <sip:
> 17476756358
> @proxy01.sipphone.com>;tag=92390300a369f0d75803e369c733575e.1dce
> SIP Display info: "Dean Willis"
> SIP to address: sip:17476756358 at proxy01.sipphone.com
> SIP to address User Part: 17476756358
> SIP to address Host Part: proxy01.sipphone.com
> SIP tag: 92390300a369f0d75803e369c733575e.1dce
> Call-ID: dRASeyW7ovM9OZRPqSVWk0boil013rir
> CSeq: 2 REGISTER
> Sequence Number: 2
> Method: REGISTER
> P-Behind-NAT: Yes
> [Expert Info (Note/Undecoded): Unrecognised SIP header (P-
> Behind-NAT)]
> [Message: Unrecognised SIP header (P-Behind-NAT)]
> [Severity level: Note]
> [Group: Undecoded]
> Contact: <sip:deanwillis at 66.25.30.183:5060>;expires=1644, <sip:rgcxbewv at 66.25.30.183:51026
> >;expires=600
> Contact Binding:
> <sip:deanwillis at 66.25.30.183:5060>;expires=1644
> URI: <sip:deanwillis at 66.25.30.183:5060>
> SIP contact address: sip:deanwillis at 66.25.30.183:5060
> Contact Binding:
> <sip:rgcxbewv at 66.25.30.183:51026>;expires=600
> URI: <sip:rgcxbewv at 66.25.30.183:51026>
> SIP contact address:
> sip:rgcxbewv at 66.25.30.183:51026
> Content-Length: 0
>
> No. Time Source Destination
> Protocol Info
> 56 12.591752 85.17.186.7 192.168.2.115
> SIP Request: NOTIFY sip:66.25.30.183:50954
>
> Frame 56 (301 bytes on wire, 301 bytes captured)
> Arrival Time: Apr 29, 2010 11:48:41.980239000
> [Time delta from previous captured frame: 0.883011000 seconds]
> [Time delta from previous displayed frame: 3.729713000 seconds]
> [Time since reference or first frame: 12.591752000 seconds]
> Frame Number: 56
> Frame Length: 301 bytes
> Capture Length: 301 bytes
> [Frame is marked: False]
> [Protocols in frame: eth:ip:udp:sip]
> [Coloring Rule Name: UDP]
> [Coloring Rule String: udp]
> Ethernet II, Src: Cisco-Li_31:45:26 (00:12:17:31:45:26), Dst:
> AppleCom_40:09:d4 (00:17:f2:40:09:d4)
> Destination: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
> Address: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
> .... ...0 .... .... .... .... = IG bit: Individual address
> (unicast)
> .... ..0. .... .... .... .... = LG bit: Globally unique
> address (factory default)
> Source: Cisco-Li_31:45:26 (00:12:17:31:45:26)
> Address: Cisco-Li_31:45:26 (00:12:17:31:45:26)
> .... ...0 .... .... .... .... = IG bit: Individual address
> (unicast)
> .... ..0. .... .... .... .... = LG bit: Globally unique
> address (factory default)
> Type: IP (0x0800)
> Internet Protocol, Src: 85.17.186.7 (85.17.186.7), Dst:
> 192.168.2.115 (192.168.2.115)
> Version: 4
> Header length: 20 bytes
> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
> 0000 00.. = Differentiated Services Codepoint: Default (0x00)
> .... ..0. = ECN-Capable Transport (ECT): 0
> .... ...0 = ECN-CE: 0
> Total Length: 287
> Identification: 0x0000 (0)
> Flags: 0x02 (Don't Fragment)
> 0.. = Reserved bit: Not Set
> .1. = Don't fragment: Set
> ..0 = More fragments: Not Set
> Fragment offset: 0
> Time to live: 42
> Protocol: UDP (0x11)
> Header checksum: 0x7d9a [correct]
> [Good: True]
> [Bad : False]
> Source: 85.17.186.7 (85.17.186.7)
> Destination: 192.168.2.115 (192.168.2.115)
> User Datagram Protocol, Src Port: sip (5060), Dst Port: 50954 (50954)
> Source port: sip (5060)
> Destination port: 50954 (50954)
> Length: 267
> Checksum: 0xfdfe [correct]
> [Good Checksum: True]
> [Bad Checksum: False]
> Session Initiation Protocol
> Request-Line: NOTIFY sip:66.25.30.183:50954 SIP/2.0
> Method: NOTIFY
> Request-URI: sip:66.25.30.183:50954
> Request-URI Host Part: 66.25.30.183
> Request-URI Host Port: 50954
> [Resent Packet: False]
> Message Header
> Via: SIP/2.0/UDP 85.17.186.7:5060;branch=0
> Transport: UDP
> Sent-by Address: 85.17.186.7
> Sent-by port: 5060
> Branch: 0
> From: sip:keepalive at 85.17.186.7;tag=7f7eef1a
> SIP from address: sip:keepalive at 85.17.186.7
> SIP from address User Part: keepalive
> SIP from address Host Part: 85.17.186.7
> SIP tag: 7f7eef1a
> To: sip:66.25.30.183:50954
> SIP to address: sip:66.25.30.183:50954
> SIP to address Host Part: 66.25.30.183
> SIP to address Host Port: 50954
> Call-ID: 560b03ab-2d3bdda4-1c035 at 85.17.186.7
> CSeq: 1 NOTIFY
> Sequence Number: 1
> Method: NOTIFY
> Event: keep-alive
> Content-Length: 0
>
> No. Time Source Destination
> Protocol Info
> 112 45.850801 198.65.166.131 192.168.2.115 SIP/
> SDP Request: INVITE sip:rgcxbewv at 66.25.30.183:51026, with session
> description
>
> Frame 112 (1056 bytes on wire, 1056 bytes captured)
> Arrival Time: Apr 29, 2010 11:49:15.239288000
> [Time delta from previous captured frame: 1.818593000 seconds]
> [Time delta from previous displayed frame: 33.259049000 seconds]
> [Time since reference or first frame: 45.850801000 seconds]
> Frame Number: 112
> Frame Length: 1056 bytes
> Capture Length: 1056 bytes
> [Frame is marked: False]
> [Protocols in frame: eth:ip:udp:sip:sdp]
> [Coloring Rule Name: UDP]
> [Coloring Rule String: udp]
> Ethernet II, Src: Cisco-Li_31:45:26 (00:12:17:31:45:26), Dst:
> AppleCom_40:09:d4 (00:17:f2:40:09:d4)
> Destination: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
> Address: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
> .... ...0 .... .... .... .... = IG bit: Individual address
> (unicast)
> .... ..0. .... .... .... .... = LG bit: Globally unique
> address (factory default)
> Source: Cisco-Li_31:45:26 (00:12:17:31:45:26)
> Address: Cisco-Li_31:45:26 (00:12:17:31:45:26)
> .... ...0 .... .... .... .... = IG bit: Individual address
> (unicast)
> .... ..0. .... .... .... .... = LG bit: Globally unique
> address (factory default)
> Type: IP (0x0800)
> Internet Protocol, Src: 198.65.166.131 (198.65.166.131), Dst:
> 192.168.2.115 (192.168.2.115)
> Version: 4
> Header length: 20 bytes
> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
> 0000 00.. = Differentiated Services Codepoint: Default (0x00)
> .... ..0. = ECN-Capable Transport (ECT): 0
> .... ...0 = ECN-CE: 0
> Total Length: 1042
> Identification: 0xabea (44010)
> Flags: 0x02 (Don't Fragment)
> 0.. = Reserved bit: Not Set
> .1. = Don't fragment: Set
> ..0 = More fragments: Not Set
> Fragment offset: 0
> Time to live: 46
> Protocol: UDP (0x11)
> Header checksum: 0x6d10 [correct]
> [Good: True]
> [Bad : False]
> Source: 198.65.166.131 (198.65.166.131)
> Destination: 192.168.2.115 (192.168.2.115)
> User Datagram Protocol, Src Port: sip (5060), Dst Port: 51026 (51026)
> Source port: sip (5060)
> Destination port: 51026 (51026)
> Length: 1022
> Checksum: 0x73e6 [correct]
> [Good Checksum: True]
> [Bad Checksum: False]
> Session Initiation Protocol
> Request-Line: INVITE sip:rgcxbewv at 66.25.30.183:51026 SIP/2.0
> Method: INVITE
> Request-URI: sip:rgcxbewv at 66.25.30.183:51026
> Request-URI User Part: rgcxbewv
> Request-URI Host Part: 66.25.30.183
> Request-URI Host Port: 51026
> [Resent Packet: False]
> Message Header
> Record-Route: <sip:198.65.166.131;lr;ftag=as733b07c5>
> Via: SIP/2.0/UDP 198.65.166.131;branch=z9hG4bKbbe5.98f7ef92.1
> Transport: UDP
> Sent-by Address: 198.65.166.131
> Branch: z9hG4bKbbe5.98f7ef92.1
> Via: SIP/2.0/UDP
> 198.65.166.172:5060;branch=z9hG4bK569fbe0a;rport=5060
> Transport: UDP
> Sent-by Address: 198.65.166.172
> Sent-by port: 5060
> Branch: z9hG4bK569fbe0a
> RPort: 5060
> From: "+12142821376" <sip:
> +12142821376 at 198.65.166.172>;tag=as733b07c5
> SIP Display info: "+12142821376"
> SIP from address: sip:+12142821376 at 198.65.166.172
> SIP from address User Part: +12142821376
> SIP from address Host Part: 198.65.166.172
> SIP tag: as733b07c5
> To: <sip:12145041987 at 198.65.166.131>
> SIP to address: sip:12145041987 at 198.65.166.131
> SIP to address User Part: 12145041987
> SIP to address Host Part: 198.65.166.131
> Contact: <sip:+12142821376 at 198.65.166.172>
> Contact Binding: <sip:+12142821376 at 198.65.166.172>
> URI: <sip:+12142821376 at 198.65.166.172>
> SIP contact address: sip:
> +12142821376 at 198.65.166.172
> Call-ID: 3d8c99342dd613734522c6056c9a2e08 at 198.65.166.172
> CSeq: 102 INVITE
> Sequence Number: 102
> Method: INVITE
> User-Agent: SIPCallProxy1
> Max-Forwards: 69
> Date: Thu, 29 Apr 2010 16:49:14 GMT
> Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE,
> NOTIFY
> Content-Type: application/sdp
> Content-Length: 317
> RemoteIP: 198.65.166.172
> [Expert Info (Note/Undecoded): Unrecognised SIP header
> (RemoteIP)]
> [Message: Unrecognised SIP header (RemoteIP)]
> [Severity level: Note]
> [Group: Undecoded]
> Message Body
> Session Description Protocol
> Session Description Protocol Version (v): 0
> Owner/Creator, Session Id (o): root 12308 12308 IN IP4
> 198.65.166.172
> Owner Username: root
> Session ID: 12308
> Session Version: 12308
> Owner Network Type: IN
> Owner Address Type: IP4
> Owner Address: 198.65.166.172
> Session Name (s): session
> Connection Information (c): IN IP4 198.65.166.172
> Connection Network Type: IN
> Connection Address Type: IP4
> Connection Address: 198.65.166.172
> Time Description, active time (t): 0 0
> Session Start Time: 0
> Session Stop Time: 0
> Media Description, name and address (m): audio 13864 RTP/
> AVP 18 97 0 8 101
> Media Type: audio
> Media Port: 13864
> Media Protocol: RTP/AVP
> Media Format: ITU-T G.729
> Media Format: DynamicRTP-Type-97
> Media Format: ITU-T G.711 PCMU
> Media Format: ITU-T G.711 PCMA
> Media Format: DynamicRTP-Type-101
> Media Attribute (a): rtpmap:18 G729/8000
> Media Attribute Fieldname: rtpmap
> Media Format: 18
> MIME Type: G729
> Sample Rate: 8000
> Media Attribute (a): fmtp:18 annexb=no
> Media Attribute Fieldname: fmtp
> Media Format: 18 [G729]
> Media format specific parameters: annexb=no
> Media Attribute (a): rtpmap:97 iLBC/8000
> Media Attribute Fieldname: rtpmap
> Media Format: 97
> MIME Type: iLBC
> Sample Rate: 8000
> Media Attribute (a): rtpmap:0 PCMU/8000
> Media Attribute Fieldname: rtpmap
> Media Format: 0
> MIME Type: PCMU
> Sample Rate: 8000
> Media Attribute (a): rtpmap:8 PCMA/8000
> Media Attribute Fieldname: rtpmap
> Media Format: 8
> MIME Type: PCMA
> Sample Rate: 8000
> Media Attribute (a): rtpmap:101 telephone-event/8000
> Media Attribute Fieldname: rtpmap
> Media Format: 101
> MIME Type: telephone-event
> Sample Rate: 8000
> Media Attribute (a): fmtp:101 0-16
> Media Attribute Fieldname: fmtp
> Media Format: 101 [telephone-event]
> Media format specific parameters: 0-16
> Media Attribute (a): silenceSupp:off - - - -
> Media Attribute Fieldname: silenceSupp
> Media Attribute Value: off - - - -
>
> No. Time Source Destination
> Protocol Info
> 113 45.859271 192.168.2.115 198.65.166.131
> SIP Status: 404 Not Found
>
> Frame 113 (545 bytes on wire, 545 bytes captured)
> Arrival Time: Apr 29, 2010 11:49:15.247758000
> [Time delta from previous captured frame: 0.008470000 seconds]
> [Time delta from previous displayed frame: 0.008470000 seconds]
> [Time since reference or first frame: 45.859271000 seconds]
> Frame Number: 113
> Frame Length: 545 bytes
> Capture Length: 545 bytes
> [Frame is marked: False]
> [Protocols in frame: eth:ip:udp:sip]
> [Coloring Rule Name: UDP]
> [Coloring Rule String: udp]
> Ethernet II, Src: AppleCom_40:09:d4 (00:17:f2:40:09:d4), Dst: Cisco-
> Li_31:45:26 (00:12:17:31:45:26)
> Destination: Cisco-Li_31:45:26 (00:12:17:31:45:26)
> Address: Cisco-Li_31:45:26 (00:12:17:31:45:26)
> .... ...0 .... .... .... .... = IG bit: Individual address
> (unicast)
> .... ..0. .... .... .... .... = LG bit: Globally unique
> address (factory default)
> Source: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
> Address: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
> .... ...0 .... .... .... .... = IG bit: Individual address
> (unicast)
> .... ..0. .... .... .... .... = LG bit: Globally unique
> address (factory default)
> Type: IP (0x0800)
> Internet Protocol, Src: 192.168.2.115 (192.168.2.115), Dst:
> 198.65.166.131 (198.65.166.131)
> Version: 4
> Header length: 20 bytes
> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
> 0000 00.. = Differentiated Services Codepoint: Default (0x00)
> .... ..0. = ECN-Capable Transport (ECT): 0
> .... ...0 = ECN-CE: 0
> Total Length: 531
> Identification: 0xb9c2 (47554)
> Flags: 0x00
> 0.. = Reserved bit: Not Set
> .0. = Don't fragment: Not Set
> ..0 = More fragments: Not Set
> Fragment offset: 0
> Time to live: 64
> Protocol: UDP (0x11)
> Header checksum: 0x8f37 [correct]
> [Good: True]
> [Bad : False]
> Source: 192.168.2.115 (192.168.2.115)
> Destination: 198.65.166.131 (198.65.166.131)
> User Datagram Protocol, Src Port: 51026 (51026), Dst Port: sip (5060)
> Source port: 51026 (51026)
> Destination port: sip (5060)
> Length: 511
> Checksum: 0x8f14 [correct]
> [Good Checksum: True]
> [Bad Checksum: False]
> Session Initiation Protocol
> Status-Line: SIP/2.0 404 Not Found
> Status-Code: 404
> [Resent Packet: False]
> [Request Frame: 112]
> [Response Time (ms): 8]
> Message Header
> Via: SIP/2.0/UDP
> 198.65.166.131;received=198.65.166.131;branch=z9hG4bKbbe5.98f7ef92.1
> Transport: UDP
> Sent-by Address: 198.65.166.131
> Received: 198.65.166.131
> Branch: z9hG4bKbbe5.98f7ef92.1
> Via: SIP/2.0/UDP
> 198.65.166.172:5060;rport=5060;branch=z9hG4bK569fbe0a
> Transport: UDP
> Sent-by Address: 198.65.166.172
> Sent-by port: 5060
> RPort: 5060
> Branch: z9hG4bK569fbe0a
> Record-Route: <sip:198.65.166.131;lr;ftag=as733b07c5>
> Call-ID: 3d8c99342dd613734522c6056c9a2e08 at 198.65.166.172
> From: "+12142821376" <sip:
> +12142821376 at 198.65.166.172>;tag=as733b07c5
> SIP Display info: "+12142821376"
> SIP from address: sip:+12142821376 at 198.65.166.172
> SIP from address User Part: +12142821376
> SIP from address Host Part: 198.65.166.172
> SIP tag: as733b07c5
> To: <sip:
> 12145041987 at 198.65.166.131>;tag=VR685tbeJV2M8Witcy0bgekXGyDXzclU
> SIP to address: sip:12145041987 at 198.65.166.131
> SIP to address User Part: 12145041987
> SIP to address Host Part: 198.65.166.131
> SIP tag: VR685tbeJV2M8Witcy0bgekXGyDXzclU
> CSeq: 102 INVITE
> Sequence Number: 102
> Method: INVITE
> Server: blink-0.18.1
> Content-Length: 0
>
> No. Time Source Destination
> Protocol Info
> 114 45.955540 198.65.166.131 192.168.2.115
> SIP Request: ACK sip:rgcxbewv at 66.25.30.183:51026
>
> Frame 114 (390 bytes on wire, 390 bytes captured)
> Arrival Time: Apr 29, 2010 11:49:15.344027000
> [Time delta from previous captured frame: 0.096269000 seconds]
> [Time delta from previous displayed frame: 0.096269000 seconds]
> [Time since reference or first frame: 45.955540000 seconds]
> Frame Number: 114
> Frame Length: 390 bytes
> Capture Length: 390 bytes
> [Frame is marked: False]
> [Protocols in frame: eth:ip:udp:sip]
> [Coloring Rule Name: UDP]
> [Coloring Rule String: udp]
> Ethernet II, Src: Cisco-Li_31:45:26 (00:12:17:31:45:26), Dst:
> AppleCom_40:09:d4 (00:17:f2:40:09:d4)
> Destination: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
> Address: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
> .... ...0 .... .... .... .... = IG bit: Individual address
> (unicast)
> .... ..0. .... .... .... .... = LG bit: Globally unique
> address (factory default)
> Source: Cisco-Li_31:45:26 (00:12:17:31:45:26)
> Address: Cisco-Li_31:45:26 (00:12:17:31:45:26)
> .... ...0 .... .... .... .... = IG bit: Individual address
> (unicast)
> .... ..0. .... .... .... .... = LG bit: Globally unique
> address (factory default)
> Type: IP (0x0800)
> Internet Protocol, Src: 198.65.166.131 (198.65.166.131), Dst:
> 192.168.2.115 (192.168.2.115)
> Version: 4
> Header length: 20 bytes
> Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
> 0000 00.. = Differentiated Services Codepoint: Default (0x00)
> .... ..0. = ECN-Capable Transport (ECT): 0
> .... ...0 = ECN-CE: 0
> Total Length: 376
> Identification: 0xac44 (44100)
> Flags: 0x02 (Don't Fragment)
> 0.. = Reserved bit: Not Set
> .1. = Don't fragment: Set
> ..0 = More fragments: Not Set
> Fragment offset: 0
> Time to live: 46
> Protocol: UDP (0x11)
> Header checksum: 0x6f50 [correct]
> [Good: True]
> [Bad : False]
> Source: 198.65.166.131 (198.65.166.131)
> Destination: 192.168.2.115 (192.168.2.115)
> User Datagram Protocol, Src Port: sip (5060), Dst Port: 51026 (51026)
> Source port: sip (5060)
> Destination port: 51026 (51026)
> Length: 356
> Checksum: 0xcca6 [correct]
> [Good Checksum: True]
> [Bad Checksum: False]
> Session Initiation Protocol
> Request-Line: ACK sip:rgcxbewv at 66.25.30.183:51026 SIP/2.0
> Method: ACK
> Request-URI: sip:rgcxbewv at 66.25.30.183:51026
> Request-URI User Part: rgcxbewv
> Request-URI Host Part: 66.25.30.183
> Request-URI Host Port: 51026
> [Resent Packet: False]
> [Request Frame: 112]
> [Response Time (ms): 104]
> Message Header
> Via: SIP/2.0/UDP 198.65.166.131;branch=z9hG4bKbbe5.98f7ef92.1
> Transport: UDP
> Sent-by Address: 198.65.166.131
> Branch: z9hG4bKbbe5.98f7ef92.1
> From: "+12142821376" <sip:
> +12142821376 at 198.65.166.172>;tag=as733b07c5
> SIP Display info: "+12142821376"
> SIP from address: sip:+12142821376 at 198.65.166.172
> SIP from address User Part: +12142821376
> SIP from address Host Part: 198.65.166.172
> SIP tag: as733b07c5
> Call-ID: 3d8c99342dd613734522c6056c9a2e08 at 198.65.166.172
> To: <sip:
> 12145041987 at 198.65.166.131>;tag=VR685tbeJV2M8Witcy0bgekXGyDXzclU
> SIP to address: sip:12145041987 at 198.65.166.131
> SIP to address User Part: 12145041987
> SIP to address Host Part: 198.65.166.131
> SIP tag: VR685tbeJV2M8Witcy0bgekXGyDXzclU
> CSeq: 102 ACK
> Sequence Number: 102
> Method: ACK
> Content-Length: 0
>
> No. Time Source Destination
> Protocol Info
> 117 53.188762 81.23.228.129 192.168.2.115
> SIP Request: NOTIFY sip:66.25.30.183:50954
>
> Frame 117 (307 bytes on wire, 307 bytes captured)
> Arrival Time: Apr 29, 2010 11:49:22.577249000
> [Time delta from previous captured frame: 2.496564000 seconds]
> [Time delta from previous displayed frame: 7.233222000 seconds]
> [Time since reference or first frame: 53.188762000 seconds]
> Frame Number: 117
> Frame Length: 307 bytes
> Capture Length: 307 bytes
> [Frame is marked: False]
> [Protocols in frame: eth:ip:udp:sip]
> [Coloring Rule Name: UDP]
> [Coloring Rule String: udp]
> Ethernet II, Src: Cisco-Li_31:45:26 (00:12:17:31:45:26), Dst:
> AppleCom_40:09:d4 (00:17:f2:40:09:d4)
> Destination: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
> Address: AppleCom_40:09:d4 (00:17:f2:40:09:d4)
> .... ...0 .... .... .... .... = IG bit: Individual address
> (unicast)
> .... ..0. .... .... .... .... = LG bit: Globally unique
> address (factory default)
> Source: Cisco-Li_31:45:26 (00:12:17:31:45:26)
> Address: Cisco-Li_31:45:26 (00:12:17:31:45:26)
> .... ...0 .... .... .... .... = IG bit: Individual address
> (unicast)
> .... ..0. .... .... .... .... = LG bit: Globally unique
> address (factory default)
> Type: IP (0x0800)
> Internet Protocol, Src: 81.23.228.129 (81.23.228.129), Dst:
> 192.168.2.115 (192.168.2.115)
> Version: 4
> Header length: 20 bytes
> Differentiated Services Field: 0x08 (DSCP 0x02: Unknown DSCP;
> ECN: 0x00)
> 0000 10.. = Differentiated Services Codepoint: Unknown (0x02)
> .... ..0. = ECN-Capable Transport (ECT): 0
> .... ...0 = ECN-CE: 0
> Total Length: 293
> Identification: 0x0000 (0)
> Flags: 0x02 (Don't Fragment)
> 0.. = Reserved bit: Not Set
> .1. = Don't fragment: Set
> ..0 = More fragments: Not Set
> Fragment offset: 0
> Time to live: 44
> Protocol: UDP (0x11)
> Header checksum: 0x550c [correct]
> [Good: True]
> [Bad : False]
> Source: 81.23.228.129 (81.23.228.129)
> Destination: 192.168.2.115 (192.168.2.115)
> User Datagram Protocol, Src Port: sip (5060), Dst Port: 50954 (50954)
> Source port: sip (5060)
> Destination port: 50954 (50954)
> Length: 273
> Checksum: 0x54a5 [correct]
> [Good Checksum: True]
> [Bad Checksum: False]
> Session Initiation Protocol
> Request-Line: NOTIFY sip:66.25.30.183:50954 SIP/2.0
> Method: NOTIFY
> Request-URI: sip:66.25.30.183:50954
> Request-URI Host Part: 66.25.30.183
> Request-URI Host Port: 50954
> [Resent Packet: False]
> Message Header
> Via: SIP/2.0/UDP 81.23.228.129:5060;branch=0
> Transport: UDP
> Sent-by Address: 81.23.228.129
> Sent-by port: 5060
> Branch: 0
> From: sip:keepalive at 81.23.228.129;tag=3d432781
> SIP from address: sip:keepalive at 81.23.228.129
> SIP from address User Part: keepalive
> SIP from address Host Part: 81.23.228.129
> SIP tag: 3d432781
> To: sip:66.25.30.183:50954
> SIP to address: sip:66.25.30.183:50954
> SIP to address Host Part: 66.25.30.183
> SIP to address Host Port: 50954
> Call-ID: 6302e87c-39897273-403a3 at 81.23.228.129
> CSeq: 1 NOTIFY
> Sequence Number: 1
> Method: NOTIFY
> Event: keep-alive
> Content-Length: 0
>
> _______________________________________________
> Blink mailing list
> Blink at lists.ag-projects.com
> http://lists.ag-projects.com/mailman/listinfo/blink
>
More information about the Blink
mailing list