TERASIP (en)
 

grandstream ipbx


 
grandstream ipbx Post Reply
18.05.2009 14:34 felix@online.9business.fr

hello,

The scenario is:
Terasip (extension 323 sip registered on ipbx grandstream) call a grandstream
phone (324 registered on ipbx grandstream ).
The 324 phone rings one time then call is disconnected.
It seems there is a problem with a 488 answer from terasip...


I have pasted below a ethereal capture:
-for confidentiality i have changed the ipbx grandstream ip by ipbx_xx.xx.xx.xx
-the terasip oc have adresse 192.168.1.20
-the 324 phone adresse 192.168.1.22
Last indication : i have an another pabx asterisk adresse 192.168.1.100 and xlite on the PC.

--------ethereal capture-----------
No.     Time        Source                Destination           Protocol Info
      1 0.000000    ip_pbx_xx.xx.xx.xx        192.168.1.20          TCP      5060 > 5066 [ACK] Seq=0 Ack=0 Win=18607 Len=0

Frame 1 (60 bytes on wire, 60 bytes captured)
    Arrival Time: May 18, 2009 15:59:30.797724000
    Time delta from previous packet: 0.000000000 seconds
    Time since reference or first frame: 0.000000000 seconds
    Frame Number: 1
    Packet Length: 60 bytes
    Capture Length: 60 bytes
    Protocols in frame: eth:ip:tcp
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
    Destination: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
    Trailer: 000000000000
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.20 (192.168.1.20)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 40
    Identification: 0x88f2 (35058)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (0x06)
    Header checksum: 0x345b [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.20 (192.168.1.20)
Transmission Control Protocol, Src Port: 5060 (5060), Dst Port: 5066 (5066), Seq: 0, Ack: 0, Len: 0
    Source port: 5060 (5060)
    Destination port: 5066 (5066)
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 0    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 18607
    Checksum: 0x105a [correct]

No.     Time        Source                Destination           Protocol Info
      2 0.006869    192.168.1.20          ip_pbx_xx.xx.xx.xx        TCP      [TCP ACKed lost segment] 5066 > 5060 [ACK] Seq=0 Ack=1 Win=3584 Len=0

Frame 2 (60 bytes on wire, 60 bytes captured)
    Arrival Time: May 18, 2009 15:59:30.804593000
    Time delta from previous packet: 0.006869000 seconds
    Time since reference or first frame: 0.006869000 seconds
    Frame Number: 2
    Packet Length: 60 bytes
    Capture Length: 60 bytes
    Protocols in frame: eth:ip:tcp
Ethernet II, Src: Grandstr_1b:85:6e (00:0b:82:1b:85:6e), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
    Trailer: 000000000000
Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0xc0 (DSCP 0x30: Class Selector 6; ECN: 0x00)
        1100 00.. = Differentiated Services Codepoint: Class Selector 6 (0x30)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 40
    Identification: 0x04be (1214)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: TCP (0x06)
    Header checksum: 0x2ecf [correct]
        Good: True
        Bad : False
    Source: 192.168.1.20 (192.168.1.20)
    Destination: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
Transmission Control Protocol, Src Port: 5066 (5066), Dst Port: 5060 (5060), Seq: 0, Ack: 1, Len: 0
    Source port: 5066 (5066)
    Destination port: 5060 (5060)
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 3584
    Checksum: 0x4b08 [correct]
    SEQ/ACK analysis
        TCP Analysis Flags
            This frame ACKs a segment we have not seen (lost?)

No.     Time        Source                Destination           Protocol Info
      3 0.599871    ip_pbx_xx.xx.xx.xx        192.168.1.20          TCP      5060 > 5062 [ACK] Seq=0 Ack=0 Win=32767 Len=0

Frame 3 (60 bytes on wire, 60 bytes captured)
    Arrival Time: May 18, 2009 15:59:31.397595000
    Time delta from previous packet: 0.599871000 seconds
    Time since reference or first frame: 0.599871000 seconds
    Frame Number: 3
    Packet Length: 60 bytes
    Capture Length: 60 bytes
    Protocols in frame: eth:ip:tcp
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
    Destination: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
    Trailer: 000000000000
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.20 (192.168.1.20)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 40
    Identification: 0xcd91 (52625)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (0x06)
    Header checksum: 0xefbb [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.20 (192.168.1.20)
Transmission Control Protocol, Src Port: 5060 (5060), Dst Port: 5062 (5062), Seq: 0, Ack: 0, Len: 0
    Source port: 5060 (5060)
    Destination port: 5062 (5062)
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 0    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 32767
    Checksum: 0x81d2 [correct]

No.     Time        Source                Destination           Protocol Info
      4 0.606692    192.168.1.20          ip_pbx_xx.xx.xx.xx        TCP      [TCP ACKed lost segment] 5062 > 5060 [ACK] Seq=0 Ack=1 Win=3584 Len=0

Frame 4 (60 bytes on wire, 60 bytes captured)
    Arrival Time: May 18, 2009 15:59:31.404416000
    Time delta from previous packet: 0.606692000 seconds
    Time since reference or first frame: 0.606692000 seconds
    Frame Number: 4
    Packet Length: 60 bytes
    Capture Length: 60 bytes
    Protocols in frame: eth:ip:tcp
Ethernet II, Src: Grandstr_1b:85:6e (00:0b:82:1b:85:6e), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
    Trailer: 000000000000
Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0xc0 (DSCP 0x30: Class Selector 6; ECN: 0x00)
        1100 00.. = Differentiated Services Codepoint: Class Selector 6 (0x30)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 40
    Identification: 0x04bf (1215)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: TCP (0x06)
    Header checksum: 0x2ece [correct]
        Good: True
        Bad : False
    Source: 192.168.1.20 (192.168.1.20)
    Destination: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
Transmission Control Protocol, Src Port: 5062 (5062), Dst Port: 5060 (5060), Seq: 0, Ack: 1, Len: 0
    Source port: 5062 (5062)
    Destination port: 5060 (5060)
    Sequence number: 0    (relative sequence number)
    Acknowledgement number: 1    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 3584
    Checksum: 0xf3d0 [correct]
    SEQ/ACK analysis
        TCP Analysis Flags
            This frame ACKs a segment we have not seen (lost?)

No.     Time        Source                Destination           Protocol Info
      5 2.688935    ip_pbx_xx.xx.xx.xx        192.168.1.20          SIP      Request: OPTIONS sip:323@86.68.99.61:5062

Frame 5 (598 bytes on wire, 598 bytes captured)
    Arrival Time: May 18, 2009 15:59:33.486659000
    Time delta from previous packet: 2.688935000 seconds
    Time since reference or first frame: 2.688935000 seconds
    Frame Number: 5
    Packet Length: 598 bytes
    Capture Length: 598 bytes
    Protocols in frame: eth:ip:tcp:sip
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
    Destination: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.20 (192.168.1.20)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 584
    Identification: 0xcd93 (52627)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (0x06)
    Header checksum: 0xed99 [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.20 (192.168.1.20)
Transmission Control Protocol, Src Port: 5060 (5060), Dst Port: 5062 (5062), Seq: 1, Ack: 0, Len: 544
    Source port: 5060 (5060)
    Destination port: 5062 (5062)
    Sequence number: 1    (relative sequence number)
    Next sequence number: 545    (relative sequence number)
    Acknowledgement number: 0    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 32767
    Checksum: 0x3641 [correct]
Session Initiation Protocol
    Request-Line: OPTIONS sip:323@86.68.99.61:5062 SIP/2.0
        Method: OPTIONS
        Resent Packet: False
    Message Header
        Via: SIP/2.0/TCP ip_pbx_xx.xx.xx.xx:5060;branch=z9hG4bK192861491;alias
        From: ;tag=1838373642
            SIP from address: sip:323@ip_pbx_xx.xx.xx.xx:5060
            SIP tag: 1838373642
        To:
            SIP to address: sip:323@86.68.99.61:5062
        Call-ID: 1726727980-5060-178126@ip_pbx_xx.xx.xx.xx
        CSeq: 1905720 OPTIONS
        Contact:
            Contact Binding:
                URI:
                    SIP contact address: sip:323@ip_pbx_xx.xx.xx.xx:5060
        Max-Forwards: 70
        Supported: replaces, timer
        User-Agent: Grandstream GXE5024 1.0.1.40
        Allow: INVITE, ACK, OPTIONS, CANCEL, BYE, SUBSCRIBE, NOTIFY, PUBLISH, INFO, REFER, UPDATE
        Accept: application/sdp
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
      6 2.712192    192.168.1.20          ip_pbx_xx.xx.xx.xx        SIP      Status: 200 OK

Frame 6 (544 bytes on wire, 544 bytes captured)
    Arrival Time: May 18, 2009 15:59:33.509916000
    Time delta from previous packet: 0.023257000 seconds
    Time since reference or first frame: 2.712192000 seconds
    Frame Number: 6
    Packet Length: 544 bytes
    Capture Length: 544 bytes
    Protocols in frame: eth:ip:tcp:sip
Ethernet II, Src: Grandstr_1b:85:6e (00:0b:82:1b:85:6e), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0xc0 (DSCP 0x30: Class Selector 6; ECN: 0x00)
        1100 00.. = Differentiated Services Codepoint: Class Selector 6 (0x30)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 530
    Identification: 0x04c0 (1216)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: TCP (0x06)
    Header checksum: 0x2ce3 [correct]
        Good: True
        Bad : False
    Source: 192.168.1.20 (192.168.1.20)
    Destination: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
Transmission Control Protocol, Src Port: 5062 (5062), Dst Port: 5060 (5060), Seq: 0, Ack: 545, Len: 490
    Source port: 5062 (5062)
    Destination port: 5060 (5060)
    Sequence number: 0    (relative sequence number)
    Next sequence number: 490    (relative sequence number)
    Acknowledgement number: 545    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 3584
    Checksum: 0x79c2 [correct]
Session Initiation Protocol
    Status-Line: SIP/2.0 200 OK
        Status-Code: 200
        Resent Packet: False
    Message Header
        Via: SIP/2.0/TCP ip_pbx_xx.xx.xx.xx:5060;branch=z9hG4bK192861491;alias
        From: ;tag=1838373642
            SIP from address: sip:323@ip_pbx_xx.xx.xx.xx:5060
            SIP tag: 1838373642
        To: ;tag=7d028b1950ad9094
            SIP to address: sip:323@86.68.99.61:5062
            SIP tag: 7d028b1950ad9094
        Call-ID: 1726727980-5060-178126@ip_pbx_xx.xx.xx.xx
        CSeq: 1905720 OPTIONS
        User-Agent: Grandstream GXP2010 1.1.6.37
        Contact:
            Contact Binding:
                URI:
                    SIP contact address: sip:323@192.168.1.20:5062
        Allow: INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE,UPDATE,PRACK,MESSAGE
        Supported: replaces, timer
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
      7 2.809053    ip_pbx_xx.xx.xx.xx        192.168.1.20          TCP      5060 > 5062 [ACK] Seq=545 Ack=490 Win=32767 Len=0

Frame 7 (60 bytes on wire, 60 bytes captured)
    Arrival Time: May 18, 2009 15:59:33.606777000
    Time delta from previous packet: 0.096861000 seconds
    Time since reference or first frame: 2.809053000 seconds
    Frame Number: 7
    Packet Length: 60 bytes
    Capture Length: 60 bytes
    Protocols in frame: eth:ip:tcp
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
    Destination: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
    Trailer: 000000000000
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.20 (192.168.1.20)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 40
    Identification: 0xcd95 (52629)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (0x06)
    Header checksum: 0xefb7 [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.20 (192.168.1.20)
Transmission Control Protocol, Src Port: 5060 (5060), Dst Port: 5062 (5062), Seq: 545, Ack: 490, Len: 0
    Source port: 5060 (5060)
    Destination port: 5062 (5062)
    Sequence number: 545    (relative sequence number)
    Acknowledgement number: 490    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 32767
    Checksum: 0x7dc7 [correct]

No.     Time        Source                Destination           Protocol Info
      8 4.887233    ip_pbx_xx.xx.xx.xx        192.168.1.20          SIP      Request: OPTIONS sip:324@86.68.99.61:1030

Frame 8 (598 bytes on wire, 598 bytes captured)
    Arrival Time: May 18, 2009 15:59:35.684957000
    Time delta from previous packet: 2.175041000 seconds
    Time since reference or first frame: 4.887233000 seconds
    Frame Number: 8
    Packet Length: 598 bytes
    Capture Length: 598 bytes
    Protocols in frame: eth:ip:tcp:sip
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
    Destination: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.20 (192.168.1.20)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 584
    Identification: 0x88f4 (35060)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (0x06)
    Header checksum: 0x3239 [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.20 (192.168.1.20)
Transmission Control Protocol, Src Port: 5060 (5060), Dst Port: 5066 (5066), Seq: 1, Ack: 0, Len: 544
    Source port: 5060 (5060)
    Destination port: 5066 (5066)
    Sequence number: 1    (relative sequence number)
    Next sequence number: 545    (relative sequence number)
    Acknowledgement number: 0    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 18607
    Checksum: 0x1f6d [correct]
Session Initiation Protocol
    Request-Line: OPTIONS sip:324@86.68.99.61:1030 SIP/2.0
        Method: OPTIONS
        Resent Packet: False
    Message Header
        Via: SIP/2.0/TCP ip_pbx_xx.xx.xx.xx:5060;branch=z9hG4bK1969257552;alias
        From: ;tag=1767526374
            SIP from address: sip:324@ip_pbx_xx.xx.xx.xx:5060
            SIP tag: 1767526374
        To:
            SIP to address: sip:324@86.68.99.61:1030
        Call-ID: 819841369-5060-178127@ip_pbx_xx.xx.xx.xx
        CSeq: 1905730 OPTIONS
        Contact:
            Contact Binding:
                URI:
                    SIP contact address: sip:324@ip_pbx_xx.xx.xx.xx:5060
        Max-Forwards: 70
        Supported: replaces, timer
        User-Agent: Grandstream GXE5024 1.0.1.40
        Allow: INVITE, ACK, OPTIONS, CANCEL, BYE, SUBSCRIBE, NOTIFY, PUBLISH, INFO, REFER, UPDATE
        Accept: application/sdp
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
      9 4.911721    192.168.1.20          ip_pbx_xx.xx.xx.xx        SIP      Status: 200 OK

Frame 9 (544 bytes on wire, 544 bytes captured)
    Arrival Time: May 18, 2009 15:59:35.709445000
    Time delta from previous packet: 0.024488000 seconds
    Time since reference or first frame: 4.911721000 seconds
    Frame Number: 9
    Packet Length: 544 bytes
    Capture Length: 544 bytes
    Protocols in frame: eth:ip:tcp:sip
Ethernet II, Src: Grandstr_1b:85:6e (00:0b:82:1b:85:6e), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0xc0 (DSCP 0x30: Class Selector 6; ECN: 0x00)
        1100 00.. = Differentiated Services Codepoint: Class Selector 6 (0x30)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 530
    Identification: 0x04c1 (1217)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: TCP (0x06)
    Header checksum: 0x2ce2 [correct]
        Good: True
        Bad : False
    Source: 192.168.1.20 (192.168.1.20)
    Destination: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
Transmission Control Protocol, Src Port: 5066 (5066), Dst Port: 5060 (5060), Seq: 0, Ack: 545, Len: 490
    Source port: 5066 (5066)
    Destination port: 5060 (5060)
    Sequence number: 0    (relative sequence number)
    Next sequence number: 490    (relative sequence number)
    Acknowledgement number: 545    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 3584
    Checksum: 0x91c1 [correct]
Session Initiation Protocol
    Status-Line: SIP/2.0 200 OK
        Status-Code: 200
        Resent Packet: False
    Message Header
        Via: SIP/2.0/TCP ip_pbx_xx.xx.xx.xx:5060;branch=z9hG4bK1969257552;alias
        From: ;tag=1767526374
            SIP from address: sip:324@ip_pbx_xx.xx.xx.xx:5060
            SIP tag: 1767526374
        To: ;tag=9ff2d07e936e5d31
            SIP to address: sip:324@86.68.99.61:1030
            SIP tag: 9ff2d07e936e5d31
        Call-ID: 819841369-5060-178127@ip_pbx_xx.xx.xx.xx
        CSeq: 1905730 OPTIONS
        User-Agent: Grandstream GXP2010 1.1.6.37
        Contact:
            Contact Binding:
                URI:
                    SIP contact address: sip:324@192.168.1.20:5066
        Allow: INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE,UPDATE,PRACK,MESSAGE
        Supported: replaces, timer
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
     10 5.009132    ip_pbx_xx.xx.xx.xx        192.168.1.20          TCP      5060 > 5066 [ACK] Seq=545 Ack=490 Win=18607 Len=0

Frame 10 (60 bytes on wire, 60 bytes captured)
    Arrival Time: May 18, 2009 15:59:35.806856000
    Time delta from previous packet: 0.097411000 seconds
    Time since reference or first frame: 5.009132000 seconds
    Frame Number: 10
    Packet Length: 60 bytes
    Capture Length: 60 bytes
    Protocols in frame: eth:ip:tcp
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
    Destination: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
    Trailer: 000000000000
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.20 (192.168.1.20)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 40
    Identification: 0x88f6 (35062)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (0x06)
    Header checksum: 0x3457 [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.20 (192.168.1.20)
Transmission Control Protocol, Src Port: 5060 (5060), Dst Port: 5066 (5066), Seq: 545, Ack: 490, Len: 0
    Source port: 5060 (5060)
    Destination port: 5066 (5066)
    Sequence number: 545    (relative sequence number)
    Acknowledgement number: 490    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 18607
    Checksum: 0x0c4f [correct]

No.     Time        Source                Destination           Protocol Info
     11 11.400112   192.168.1.100         193.48.168.130        NTP      NTP

Frame 11 (90 bytes on wire, 90 bytes captured)
    Arrival Time: May 18, 2009 15:59:42.197836000
    Time delta from previous packet: 6.488391000 seconds
    Time since reference or first frame: 11.400112000 seconds
    Frame Number: 11
    Packet Length: 90 bytes
    Capture Length: 90 bytes
    Protocols in frame: eth:ip:udp:ntp
Ethernet II, Src: Palmmicr_56:1f:92 (00:09:45:56:1f:92), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: Palmmicr_56:1f:92 (00:09:45:56:1f:92)
        Address: Palmmicr_56:1f:92 (00:09:45:56:1f:92)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.100 (192.168.1.100), Dst: 193.48.168.130 (193.48.168.130)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 76
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x0ee2 [correct]
        Good: True
        Bad : False
    Source: 192.168.1.100 (192.168.1.100)
    Destination: 193.48.168.130 (193.48.168.130)
User Datagram Protocol, Src Port: ntp (123), Dst Port: ntp (123)
    Source port: ntp (123)
    Destination port: ntp (123)
    Length: 56
    Checksum: 0xf5a3 [correct]
Network Time Protocol
    Flags: 0x23
        00.. .... = Leap Indicator: no warning (0)
        ..10 0... = Version number: NTP Version 4 (4)
        .... .011 = Mode: client (3)
    Peer Clock Stratum: secondary reference (2)
    Peer Polling Interval: 6 (64 sec)
    Peer Clock Precision: 0,000031 sec
    Root Delay:    0,0473 sec
    Clock Dispersion:    0,0124 sec
    Reference Clock ID: 88.179.220.20
    Reference Clock Update Time: May 18, 2009 13:52:05,8457 UTC
    Originate Time Stamp: May 18, 2009 13:58:32,8258 UTC
    Receive Time Stamp: May 18, 2009 13:58:32,8447 UTC
    Transmit Time Stamp: May 18, 2009 13:59:37,8005 UTC

No.     Time        Source                Destination           Protocol Info
     12 11.440172   193.48.168.130        192.168.1.100         NTP      NTP

Frame 12 (90 bytes on wire, 90 bytes captured)
    Arrival Time: May 18, 2009 15:59:42.237896000
    Time delta from previous packet: 6.528451000 seconds
    Time since reference or first frame: 11.440172000 seconds
    Frame Number: 12
    Packet Length: 90 bytes
    Capture Length: 90 bytes
    Protocols in frame: eth:ip:udp:ntp
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: Palmmicr_56:1f:92 (00:09:45:56:1f:92)
    Destination: Palmmicr_56:1f:92 (00:09:45:56:1f:92)
        Address: Palmmicr_56:1f:92 (00:09:45:56:1f:92)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: 193.48.168.130 (193.48.168.130), Dst: 192.168.1.100 (192.168.1.100)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 76
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 53
    Protocol: UDP (0x11)
    Header checksum: 0x19e2 [correct]
        Good: True
        Bad : False
    Source: 193.48.168.130 (193.48.168.130)
    Destination: 192.168.1.100 (192.168.1.100)
User Datagram Protocol, Src Port: ntp (123), Dst Port: ntp (123)
    Source port: ntp (123)
    Destination port: ntp (123)
    Length: 56
    Checksum: 0x09f4 [correct]
Network Time Protocol
    Flags: 0x24
        00.. .... = Leap Indicator: no warning (0)
        ..10 0... = Version number: NTP Version 4 (4)
        .... .100 = Mode: server (4)
    Peer Clock Stratum: secondary reference (2)
    Peer Polling Interval: 6 (64 sec)
    Peer Clock Precision: 0,000001 sec
    Root Delay:    0,0040 sec
    Clock Dispersion:    0,0516 sec
    Reference Clock ID: 195.83.180.3
    Reference Clock Update Time: May 18, 2009 13:26:06,6047 UTC
    Originate Time Stamp: May 18, 2009 13:59:37,8005 UTC
    Receive Time Stamp: May 18, 2009 13:59:37,8208 UTC
    Transmit Time Stamp: May 18, 2009 13:59:37,8220 UTC

No.     Time        Source                Destination           Protocol Info
     13 12.798042   ip_pbx_xx.xx.xx.xx        192.168.1.20          TCP      [TCP Keep-Alive] 5060 > 5062 [ACK] Seq=544 Ack=490 Win=32767 Len=0

Frame 13 (60 bytes on wire, 60 bytes captured)
    Arrival Time: May 18, 2009 15:59:43.595766000
    Time delta from previous packet: 7.886321000 seconds
    Time since reference or first frame: 12.798042000 seconds
    Frame Number: 13
    Packet Length: 60 bytes
    Capture Length: 60 bytes
    Protocols in frame: eth:ip:tcp
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
    Destination: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
    Trailer: 000000000000
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.20 (192.168.1.20)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 40
    Identification: 0xcd97 (52631)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (0x06)
    Header checksum: 0xefb5 [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.20 (192.168.1.20)
Transmission Control Protocol, Src Port: 5060 (5060), Dst Port: 5062 (5062), Seq: 544, Ack: 490, Len: 0
    Source port: 5060 (5060)
    Destination port: 5062 (5062)
    Sequence number: 544    (relative sequence number)
    Acknowledgement number: 490    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 32767
    Checksum: 0x7dc8 [correct]
    SEQ/ACK analysis
        TCP Analysis Flags
            This is a TCP keep-alive segment

No.     Time        Source                Destination           Protocol Info
     14 12.803851   192.168.1.20          ip_pbx_xx.xx.xx.xx        TCP      [TCP Keep-Alive ACK] 5062 > 5060 [ACK] Seq=490 Ack=545 Win=3584 Len=0

Frame 14 (60 bytes on wire, 60 bytes captured)
    Arrival Time: May 18, 2009 15:59:43.601575000
    Time delta from previous packet: 7.892130000 seconds
    Time since reference or first frame: 12.803851000 seconds
    Frame Number: 14
    Packet Length: 60 bytes
    Capture Length: 60 bytes
    Protocols in frame: eth:ip:tcp
Ethernet II, Src: Grandstr_1b:85:6e (00:0b:82:1b:85:6e), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
    Trailer: 000000000000
Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0xc0 (DSCP 0x30: Class Selector 6; ECN: 0x00)
        1100 00.. = Differentiated Services Codepoint: Class Selector 6 (0x30)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 40
    Identification: 0x04c2 (1218)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: TCP (0x06)
    Header checksum: 0x2ecb [correct]
        Good: True
        Bad : False
    Source: 192.168.1.20 (192.168.1.20)
    Destination: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
Transmission Control Protocol, Src Port: 5062 (5062), Dst Port: 5060 (5060), Seq: 490, Ack: 545, Len: 0
    Source port: 5062 (5062)
    Destination port: 5060 (5060)
    Sequence number: 490    (relative sequence number)
    Acknowledgement number: 545    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 3584
    Checksum: 0xefc6 [correct]
    SEQ/ACK analysis
        TCP Analysis Flags
            This is an ACK to a TCP keep-alive segment

No.     Time        Source                Destination           Protocol Info
     15 14.221428   192.168.1.22          192.168.1.1           DNS      Standard query A stun.terasens.com

Frame 15 (77 bytes on wire, 77 bytes captured)
    Arrival Time: May 18, 2009 15:59:45.019152000
    Time delta from previous packet: 9.309707000 seconds
    Time since reference or first frame: 14.221428000 seconds
    Frame Number: 15
    Packet Length: 77 bytes
    Capture Length: 77 bytes
    Protocols in frame: eth:ip:udp:dns
Ethernet II, Src: AlliedTe_26:11:39 (00:30:84:26:11:39), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: AlliedTe_26:11:39 (00:30:84:26:11:39)
        Address: AlliedTe_26:11:39 (00:30:84:26:11:39)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.22 (192.168.1.22), Dst: 192.168.1.1 (192.168.1.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 63
    Identification: 0xf99a (63898)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xbdab [correct]
        Good: True
        Bad : False
    Source: 192.168.1.22 (192.168.1.22)
    Destination: 192.168.1.1 (192.168.1.1)
User Datagram Protocol, Src Port: 59561 (59561), Dst Port: domain (53)
    Source port: 59561 (59561)
    Destination port: domain (53)
    Length: 43
    Checksum: 0xc393 [correct]
Domain Name System (query)
    Transaction ID: 0xaa5b
    Flags: 0x0100 (Standard query)
        0... .... .... .... = Response: Message is a query
        .000 0... .... .... = Opcode: Standard query (0)
        .... ..0. .... .... = Truncated: Message is not truncated
        .... ...1 .... .... = Recursion desired: Do query recursively
        .... .... .0.. .... = Z: reserved (0)
        .... .... ...0 .... = Non-authenticated data OK: Non-authenticated data is unacceptable
    Questions: 1
    Answer RRs: 0
    Authority RRs: 0
    Additional RRs: 0
    Queries
        stun.terasens.com: type A, class IN
            Name: stun.terasens.com
            Type: A (Host address)
            Class: IN (0x0001)

No.     Time        Source                Destination           Protocol Info
     16 14.222785   192.168.1.1           192.168.1.22          DNS      Standard query response A 213.239.248.115

Frame 16 (93 bytes on wire, 93 bytes captured)
    Arrival Time: May 18, 2009 15:59:45.020509000
    Time delta from previous packet: 9.311064000 seconds
    Time since reference or first frame: 14.222785000 seconds
    Frame Number: 16
    Packet Length: 93 bytes
    Capture Length: 93 bytes
    Protocols in frame: eth:ip:udp:dns
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: AlliedTe_26:11:39 (00:30:84:26:11:39)
    Destination: AlliedTe_26:11:39 (00:30:84:26:11:39)
        Address: AlliedTe_26:11:39 (00:30:84:26:11:39)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.1 (192.168.1.1), Dst: 192.168.1.22 (192.168.1.22)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 79
    Identification: 0xad4e (44366)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x09e8 [correct]
        Good: True
        Bad : False
    Source: 192.168.1.1 (192.168.1.1)
    Destination: 192.168.1.22 (192.168.1.22)
User Datagram Protocol, Src Port: domain (53), Dst Port: 59561 (59561)
    Source port: domain (53)
    Destination port: 59561 (59561)
    Length: 59
    Checksum: 0xdb31 [correct]
Domain Name System (response)
    Transaction ID: 0xaa5b
    Flags: 0x8180 (Standard query response, No error)
        1... .... .... .... = Response: Message is a response
        .000 0... .... .... = Opcode: Standard query (0)
        .... .0.. .... .... = Authoritative: Server is not an authority for domain
        .... ..0. .... .... = Truncated: Message is not truncated
        .... ...1 .... .... = Recursion desired: Do query recursively
        .... .... 1... .... = Recursion available: Server can do recursive queries
        .... .... .0.. .... = Z: reserved (0)
        .... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server
        .... .... .... 0000 = Reply code: No error (0)
    Questions: 1
    Answer RRs: 1
    Authority RRs: 0
    Additional RRs: 0
    Queries
        stun.terasens.com: type A, class IN
            Name: stun.terasens.com
            Type: A (Host address)
            Class: IN (0x0001)
    Answers
        stun.terasens.com: type A, class IN, addr 213.239.248.115
            Name: stun.terasens.com
            Type: A (Host address)
            Class: IN (0x0001)
            Time to live: 3 hours, 33 minutes, 5 seconds
            Data length: 4
            Addr: 213.239.248.115

No.     Time        Source                Destination           Protocol Info
     17 14.245876   192.168.1.22          213.239.248.115       STUN     Message: Binding Request

Frame 17 (70 bytes on wire, 70 bytes captured)
    Arrival Time: May 18, 2009 15:59:45.043600000
    Time delta from previous packet: 9.334155000 seconds
    Time since reference or first frame: 14.245876000 seconds
    Frame Number: 17
    Packet Length: 70 bytes
    Capture Length: 70 bytes
    Protocols in frame: eth:ip:udp:stun
Ethernet II, Src: AlliedTe_26:11:39 (00:30:84:26:11:39), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: AlliedTe_26:11:39 (00:30:84:26:11:39)
        Address: AlliedTe_26:11:39 (00:30:84:26:11:39)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.22 (192.168.1.22), Dst: 213.239.248.115 (213.239.248.115)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 56
    Identification: 0xf99b (63899)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xb0f7 [correct]
        Good: True
        Bad : False
    Source: 192.168.1.22 (192.168.1.22)
    Destination: 213.239.248.115 (213.239.248.115)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 3478 (3478)
    Source port: 5060 (5060)
    Destination port: 3478 (3478)
    Length: 36
    Checksum: 0x312b [correct]
Simple Traversal of UDP Through NAT
    Message Type: Binding Request (0x0001)
    Message Length: 0x0008
    Message Transaction ID: 015EED1A8865403D613D321C922A404F
    Attributes
        Attribute: CHANGE-REQUEST
            Attribute Type: CHANGE-REQUEST (0x0003)
            Attribute Length: 4
            .... .... .... .0.. = Change IP: NOT SET
            .... .... .... ..0. = Change Port: NOT SET

No.     Time        Source                Destination           Protocol Info
     18 14.284199   192.168.1.22          ip_pbx_xx.xx.xx.xx        SIP      Request: REGISTER sip:ip_pbx_xx.xx.xx.xx

Frame 18 (614 bytes on wire, 614 bytes captured)
    Arrival Time: May 18, 2009 15:59:45.081923000
    Time delta from previous packet: 9.372478000 seconds
    Time since reference or first frame: 14.284199000 seconds
    Frame Number: 18
    Packet Length: 614 bytes
    Capture Length: 614 bytes
    Protocols in frame: eth:ip:udp:sip
Ethernet II, Src: AlliedTe_26:11:39 (00:30:84:26:11:39), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: AlliedTe_26:11:39 (00:30:84:26:11:39)
        Address: AlliedTe_26:11:39 (00:30:84:26:11:39)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.22 (192.168.1.22), Dst: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 600
    Identification: 0xf99c (63900)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xb773 [correct]
        Good: True
        Bad : False
    Source: 192.168.1.22 (192.168.1.22)
    Destination: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
    Source port: 5060 (5060)
    Destination port: 5060 (5060)
    Length: 580
    Checksum: 0xc2f9 [correct]
Session Initiation Protocol
    Request-Line: REGISTER sip:ip_pbx_xx.xx.xx.xx SIP/2.0
        Method: REGISTER
        Resent Packet: False
    Message Header
        Via: SIP/2.0/UDP 192.168.1.22:5060;branch=z9hG4bK-d8754z-d06c57739159f360-1---d8754z-;rport
        Max-Forwards: 70
        Contact: ;+sip.instance="1792"
            Contact Binding: ;+sip.instance="1792"
                URI:
                    SIP contact address: sip:323@192.168.1.22:5060
        To: "323"
            SIP Display info: "323"
            SIP to address: sip:323@ip_pbx_xx.xx.xx.xx
        From: "323";tag=14293b52
            SIP Display info: "323"
            SIP from address: sip:323@ip_pbx_xx.xx.xx.xx
            SIP tag: 14293b52
        Call-ID: ZDM5MzM4NDg3YjgzMWE4MmU2M2ZjYTU3MjAyMmJmYmQ.
        CSeq: 1 REGISTER
        Expires: 70
        Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, UPDATE, INVITE, INFO, OPTIONS, NOTIFY, OPTIONS, NOTIFY, OPTIONS, NOTIFY
        User-Agent: TERASIP/1.0.0.944
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
     19 14.304485   213.239.248.115       192.168.1.22          STUN     Message: Binding Response

Frame 19 (130 bytes on wire, 130 bytes captured)
    Arrival Time: May 18, 2009 15:59:45.102209000
    Time delta from previous packet: 0.020286000 seconds
    Time since reference or first frame: 14.304485000 seconds
    Frame Number: 19
    Packet Length: 130 bytes
    Capture Length: 130 bytes
    Protocols in frame: eth:ip:udp:stun
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: AlliedTe_26:11:39 (00:30:84:26:11:39)
    Destination: AlliedTe_26:11:39 (00:30:84:26:11:39)
        Address: AlliedTe_26:11:39 (00:30:84:26:11:39)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: 213.239.248.115 (213.239.248.115), Dst: 192.168.1.22 (192.168.1.22)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 116
    Identification: 0x308d (12429)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 118
    Protocol: UDP (0x11)
    Header checksum: 0x83ca [correct]
        Good: True
        Bad : False
    Source: 213.239.248.115 (213.239.248.115)
    Destination: 192.168.1.22 (192.168.1.22)
User Datagram Protocol, Src Port: 3478 (3478), Dst Port: 5060 (5060)
    Source port: 3478 (3478)
    Destination port: 5060 (5060)
    Length: 96
    Checksum: 0x5b6b [correct]
Simple Traversal of UDP Through NAT
    Message Type: Binding Response (0x0101)
    Message Length: 0x0044
    Message Transaction ID: 015EED1A8865403D613D321C922A404F
    Attributes
        Attribute: MAPPED-ADDRESS
            Attribute Type: MAPPED-ADDRESS (0x0001)
            Attribute Length: 8
            Protocol Family: IPv4 (0x0001)
            Port: 5060
            IP: 86.68.99.61 (86.68.99.61)
        Attribute: SOURCE-ADDRESS
            Attribute Type: SOURCE-ADDRESS (0x0004)
            Attribute Length: 8
            Protocol Family: IPv4 (0x0001)
            Port: 3478
            IP: 213.239.248.115 (213.239.248.115)
        Attribute: CHANGED-ADDRESS
            Attribute Type: CHANGED-ADDRESS (0x0005)
            Attribute Length: 8
            Protocol Family: IPv4 (0x0001)
            Port: 3479
            IP: 213.239.248.116 (213.239.248.116)
        Attribute: XOR_MAPPED_ADDRESS
            Attribute Type: XOR_MAPPED_ADDRESS (0x8020)
            Attribute Length: 8
            Protocol Family: IPv4 (0x0001)
            Port (XOR-d): 4762
            Port: 5060
            IP (XOR-d): 87.26.142.39 (87.26.142.39)
            IP: 86.68.99.61 (86.68.99.61)
        Attribute: SERVER
            Attribute Type: SERVER (0x8022)
            Attribute Length: 16
            Server version: Vovida.org 0.96

No.     Time        Source                Destination           Protocol Info
     20 14.395602   ip_pbx_xx.xx.xx.xx        192.168.1.22          SIP      Status: 100 Trying    (1 bindings)

Frame 20 (554 bytes on wire, 554 bytes captured)
    Arrival Time: May 18, 2009 15:59:45.193326000
    Time delta from previous packet: 0.111403000 seconds
    Time since reference or first frame: 14.395602000 seconds
    Frame Number: 20
    Packet Length: 554 bytes
    Capture Length: 554 bytes
    Protocols in frame: eth:ip:udp:sip
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: AlliedTe_26:11:39 (00:30:84:26:11:39)
    Destination: AlliedTe_26:11:39 (00:30:84:26:11:39)
        Address: AlliedTe_26:11:39 (00:30:84:26:11:39)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.22 (192.168.1.22)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 540
    Identification: 0xb5bd (46525)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: UDP (0x11)
    Header checksum: 0x058f [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.22 (192.168.1.22)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
    Source port: 5060 (5060)
    Destination port: 5060 (5060)
    Length: 520
    Checksum: 0x7bde [correct]
Session Initiation Protocol
    Status-Line: SIP/2.0 100 Trying
        Status-Code: 100
        Resent Packet: False
    Message Header
        Via: SIP/2.0/UDP 192.168.1.22:5060;branch=z9hG4bK-d8754z-d06c57739159f360-1---d8754z-;rport;received=86.68.99.61
        From: "323" ;tag=14293b52
            SIP Display info: "323"
            SIP from address: sip:323@ip_pbx_xx.xx.xx.xx
            SIP tag: 14293b52
        To: "323"
            SIP Display info: "323"
            SIP to address: sip:323@ip_pbx_xx.xx.xx.xx
        Call-ID: ZDM5MzM4NDg3YjgzMWE4MmU2M2ZjYTU3MjAyMmJmYmQ.
        CSeq: 1 REGISTER
        Contact:
            Contact Binding:
                URI:
                    SIP contact address: sip:ip_pbx_xx.xx.xx.xx:5060
        Supported: replaces, timer
        User-Agent: Grandstream GXE5024 1.0.1.40
        Allow: INVITE, ACK, OPTIONS, CANCEL, BYE, SUBSCRIBE, NOTIFY, PUBLISH, INFO, REFER, UPDATE
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
     21 14.403278   ip_pbx_xx.xx.xx.xx        192.168.1.22          SIP      Status: 401 Unauthorized    (1 bindings)

Frame 21 (664 bytes on wire, 664 bytes captured)
    Arrival Time: May 18, 2009 15:59:45.201002000
    Time delta from previous packet: 0.007676000 seconds
    Time since reference or first frame: 14.403278000 seconds
    Frame Number: 21
    Packet Length: 664 bytes
    Capture Length: 664 bytes
    Protocols in frame: eth:ip:udp:sip
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: AlliedTe_26:11:39 (00:30:84:26:11:39)
    Destination: AlliedTe_26:11:39 (00:30:84:26:11:39)
        Address: AlliedTe_26:11:39 (00:30:84:26:11:39)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.22 (192.168.1.22)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 650
    Identification: 0xb5be (46526)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: UDP (0x11)
    Header checksum: 0x0520 [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.22 (192.168.1.22)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
    Source port: 5060 (5060)
    Destination port: 5060 (5060)
    Length: 630
    Checksum: 0x22dd [correct]
Session Initiation Protocol
    Status-Line: SIP/2.0 401 Unauthorized
        Status-Code: 401
        Resent Packet: False
    Message Header
        Via: SIP/2.0/UDP 192.168.1.22:5060;branch=z9hG4bK-d8754z-d06c57739159f360-1---d8754z-;rport;received=86.68.99.61
        From: "323" ;tag=14293b52
            SIP Display info: "323"
            SIP from address: sip:323@ip_pbx_xx.xx.xx.xx
            SIP tag: 14293b52
        To: "323" ;tag=48781180
            SIP Display info: "323"
            SIP to address: sip:323@ip_pbx_xx.xx.xx.xx
            SIP tag: 48781180
        Call-ID: ZDM5MzM4NDg3YjgzMWE4MmU2M2ZjYTU3MjAyMmJmYmQ.
        CSeq: 1 REGISTER
        Contact:
            Contact Binding:
                URI:
                    SIP contact address: sip:ip_pbx_xx.xx.xx.xx:5060
        WWW-Authenticate: Digest realm="grandstream", nonce="005f031d", stale=true, algorithm=MD5
            Authentication Scheme: Digest
            Realm: "grandstream"
            Nonce Value: "005f031d"
            Stale Flag: true
            Algorithm: MD5
        Supported: replaces, timer
        User-Agent: Grandstream GXE5024 1.0.1.40
        Allow: INVITE, ACK, OPTIONS, CANCEL, BYE, SUBSCRIBE, NOTIFY, PUBLISH, INFO, REFER, UPDATE
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
     22 14.428677   192.168.1.22          ip_pbx_xx.xx.xx.xx        SIP      Request: REGISTER sip:ip_pbx_xx.xx.xx.xx

Frame 22 (772 bytes on wire, 772 bytes captured)
    Arrival Time: May 18, 2009 15:59:45.226401000
    Time delta from previous packet: 0.025399000 seconds
    Time since reference or first frame: 14.428677000 seconds
    Frame Number: 22
    Packet Length: 772 bytes
    Capture Length: 772 bytes
    Protocols in frame: eth:ip:udp:sip
Ethernet II, Src: AlliedTe_26:11:39 (00:30:84:26:11:39), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: AlliedTe_26:11:39 (00:30:84:26:11:39)
        Address: AlliedTe_26:11:39 (00:30:84:26:11:39)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.22 (192.168.1.22), Dst: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 758
    Identification: 0xf99f (63903)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xb6d2 [correct]
        Good: True
        Bad : False
    Source: 192.168.1.22 (192.168.1.22)
    Destination: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
    Source port: 5060 (5060)
    Destination port: 5060 (5060)
    Length: 738
    Checksum: 0x63c8 [correct]
Session Initiation Protocol
    Request-Line: REGISTER sip:ip_pbx_xx.xx.xx.xx SIP/2.0
        Method: REGISTER
        Resent Packet: False
    Message Header
        Via: SIP/2.0/UDP 192.168.1.22:5060;branch=z9hG4bK-d8754z-9867f60c58537124-1---d8754z-;rport
        Max-Forwards: 70
        Contact: ;+sip.instance="1792"
            Contact Binding: ;+sip.instance="1792"
                URI:
                    SIP contact address: sip:323@192.168.1.22:5060
        To: "323"
            SIP Display info: "323"
            SIP to address: sip:323@ip_pbx_xx.xx.xx.xx
        From: "323";tag=14293b52
            SIP Display info: "323"
            SIP from address: sip:323@ip_pbx_xx.xx.xx.xx
            SIP tag: 14293b52
        Call-ID: ZDM5MzM4NDg3YjgzMWE4MmU2M2ZjYTU3MjAyMmJmYmQ.
        CSeq: 2 REGISTER
        Expires: 70
        Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, UPDATE, INVITE, INFO, OPTIONS, NOTIFY, OPTIONS, NOTIFY, OPTIONS, NOTIFY
        User-Agent: TERASIP/1.0.0.944
        Authorization: Digest username="323",realm="grandstream",nonce="005f031d",uri="sip:ip_pbx_xx.xx.xx.xx",response="e6910ac1b383b2d67366b376ac4fddcb",algorithm=MD5
            Authentication Scheme: Digest
            Username: "323"
            Realm: "grandstream"
            Nonce Value: "005f031d"
            Authentication URI: "sip:ip_pbx_xx.xx.xx.xx"
            Digest Authentication Response: "e6910ac1b383b2d67366b376ac4fddcb"
            Algorithm: MD5
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
     23 14.539669   ip_pbx_xx.xx.xx.xx        192.168.1.22          SIP      Status: 100 Trying    (1 bindings)

Frame 23 (554 bytes on wire, 554 bytes captured)
    Arrival Time: May 18, 2009 15:59:45.337393000
    Time delta from previous packet: 0.110992000 seconds
    Time since reference or first frame: 14.539669000 seconds
    Frame Number: 23
    Packet Length: 554 bytes
    Capture Length: 554 bytes
    Protocols in frame: eth:ip:udp:sip
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: AlliedTe_26:11:39 (00:30:84:26:11:39)
    Destination: AlliedTe_26:11:39 (00:30:84:26:11:39)
        Address: AlliedTe_26:11:39 (00:30:84:26:11:39)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.22 (192.168.1.22)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 540
    Identification: 0xb5bf (46527)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: UDP (0x11)
    Header checksum: 0x058d [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.22 (192.168.1.22)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
    Source port: 5060 (5060)
    Destination port: 5060 (5060)
    Length: 520
    Checksum: 0x6d16 [correct]
Session Initiation Protocol
    Status-Line: SIP/2.0 100 Trying
        Status-Code: 100
        Resent Packet: False
    Message Header
        Via: SIP/2.0/UDP 192.168.1.22:5060;branch=z9hG4bK-d8754z-9867f60c58537124-1---d8754z-;rport;received=86.68.99.61
        From: "323" ;tag=14293b52
            SIP Display info: "323"
            SIP from address: sip:323@ip_pbx_xx.xx.xx.xx
            SIP tag: 14293b52
        To: "323"
            SIP Display info: "323"
            SIP to address: sip:323@ip_pbx_xx.xx.xx.xx
        Call-ID: ZDM5MzM4NDg3YjgzMWE4MmU2M2ZjYTU3MjAyMmJmYmQ.
        CSeq: 2 REGISTER
        Contact:
            Contact Binding:
                URI:
                    SIP contact address: sip:ip_pbx_xx.xx.xx.xx:5060
        Supported: replaces, timer
        User-Agent: Grandstream GXE5024 1.0.1.40
        Allow: INVITE, ACK, OPTIONS, CANCEL, BYE, SUBSCRIBE, NOTIFY, PUBLISH, INFO, REFER, UPDATE
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
     24 14.547611   ip_pbx_xx.xx.xx.xx        192.168.1.22          SIP      Request: NOTIFY sip:323@86.68.99.61:5060

Frame 24 (616 bytes on wire, 616 bytes captured)
    Arrival Time: May 18, 2009 15:59:45.345335000
    Time delta from previous packet: 0.007942000 seconds
    Time since reference or first frame: 14.547611000 seconds
    Frame Number: 24
    Packet Length: 616 bytes
    Capture Length: 616 bytes
    Protocols in frame: eth:ip:udp:sip
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: AlliedTe_26:11:39 (00:30:84:26:11:39)
    Destination: AlliedTe_26:11:39 (00:30:84:26:11:39)
        Address: AlliedTe_26:11:39 (00:30:84:26:11:39)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.22 (192.168.1.22)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 602
    Identification: 0xb5c0 (46528)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: UDP (0x11)
    Header checksum: 0x054e [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.22 (192.168.1.22)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
    Source port: 5060 (5060)
    Destination port: 5060 (5060)
    Length: 582
    Checksum: 0xd75c [correct]
Session Initiation Protocol
    Request-Line: NOTIFY sip:323@86.68.99.61:5060 SIP/2.0
        Method: NOTIFY
        Resent Packet: False
    Message Header
        Via: SIP/2.0/UDP ip_pbx_xx.xx.xx.xx:5060;branch=z9hG4bK640999119
        From: ;tag=1394518389
            SIP from address: sip:grandstream@ip_pbx_xx.xx.xx.xx:5060
            SIP tag: 1394518389
        To:
            SIP to address: sip:323@86.68.99.61:5060
        Call-ID: 1826671672-5060-178132@ip_pbx_xx.xx.xx.xx
        CSeq: 1905780 NOTIFY
        Contact:
            Contact Binding:
                URI:
                    SIP contact address: sip:grandstream@ip_pbx_xx.xx.xx.xx:5060
        Max-Forwards: 70
        User-Agent: Grandstream GXE5024 1.0.1.40
        Event: message-summary
        Content-Type: application/simple-message-summary
        Content-Length:   102
    Message body
        Messages-Waiting: no\r\n
        Message-Account: sip:grandstream@ip_pbx_xx.xx.xx.xx:5060\r\n
        Voice-Message: 0/0 (0/0)\r\n

No.     Time        Source                Destination           Protocol Info
     25 14.554957   ip_pbx_xx.xx.xx.xx        192.168.1.22          SIP      Status: 200 OK    (1 bindings)

Frame 25 (589 bytes on wire, 589 bytes captured)
    Arrival Time: May 18, 2009 15:59:45.352681000
    Time delta from previous packet: 0.007346000 seconds
    Time since reference or first frame: 14.554957000 seconds
    Frame Number: 25
    Packet Length: 589 bytes
    Capture Length: 589 bytes
    Protocols in frame: eth:ip:udp:sip
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: AlliedTe_26:11:39 (00:30:84:26:11:39)
    Destination: AlliedTe_26:11:39 (00:30:84:26:11:39)
        Address: AlliedTe_26:11:39 (00:30:84:26:11:39)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.22 (192.168.1.22)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 575
    Identification: 0xb5c1 (46529)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: UDP (0x11)
    Header checksum: 0x0568 [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.22 (192.168.1.22)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
    Source port: 5060 (5060)
    Destination port: 5060 (5060)
    Length: 555
    Checksum: 0x4776 [correct]
Session Initiation Protocol
    Status-Line: SIP/2.0 200 OK
        Status-Code: 200
        Resent Packet: False
    Message Header
        Via: SIP/2.0/UDP 192.168.1.22:5060;branch=z9hG4bK-d8754z-9867f60c58537124-1---d8754z-;rport;received=86.68.99.61
        From: "323" ;tag=14293b52
            SIP Display info: "323"
            SIP from address: sip:323@ip_pbx_xx.xx.xx.xx
            SIP tag: 14293b52
        To: "323" ;tag=14703021
            SIP Display info: "323"
            SIP to address: sip:323@ip_pbx_xx.xx.xx.xx
            SIP tag: 14703021
        Call-ID: ZDM5MzM4NDg3YjgzMWE4MmU2M2ZjYTU3MjAyMmJmYmQ.
        CSeq: 2 REGISTER
        Supported: replaces, timer
        User-Agent: Grandstream GXE5024 1.0.1.40
        Expires: 70
        Contact: ;expires=70
            Contact Binding: ;expires=70
                URI:
                    SIP contact address: sip:323@192.168.1.22:5060
        Allow: INVITE, ACK, OPTIONS, CANCEL, BYE, SUBSCRIBE, NOTIFY, PUBLISH, INFO, REFER, UPDATE
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
     26 14.555887   192.168.1.22          ip_pbx_xx.xx.xx.xx        SIP      Status: 405 Method Not Allowed

Frame 26 (363 bytes on wire, 363 bytes captured)
    Arrival Time: May 18, 2009 15:59:45.353611000
    Time delta from previous packet: 0.000930000 seconds
    Time since reference or first frame: 14.555887000 seconds
    Frame Number: 26
    Packet Length: 363 bytes
    Capture Length: 363 bytes
    Protocols in frame: eth:ip:udp:sip
Ethernet II, Src: AlliedTe_26:11:39 (00:30:84:26:11:39), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: AlliedTe_26:11:39 (00:30:84:26:11:39)
        Address: AlliedTe_26:11:39 (00:30:84:26:11:39)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.22 (192.168.1.22), Dst: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 349
    Identification: 0xf9a0 (63904)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xb86a [correct]
        Good: True
        Bad : False
    Source: 192.168.1.22 (192.168.1.22)
    Destination: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
    Source port: 5060 (5060)
    Destination port: 5060 (5060)
    Length: 329
    Checksum: 0x4369 [correct]
Session Initiation Protocol
    Status-Line: SIP/2.0 405 Method Not Allowed
        Status-Code: 405
        Resent Packet: False
    Message Header
        Via: SIP/2.0/UDP ip_pbx_xx.xx.xx.xx:5060;branch=z9hG4bK640999119
        To: ;tag=151bd77f
            SIP to address: sip:323@86.68.99.61:5060
            SIP tag: 151bd77f
        From: ;tag=1394518389
            SIP from address: sip:grandstream@ip_pbx_xx.xx.xx.xx:5060
            SIP tag: 1394518389
        Call-ID: 1826671672-5060-178132@ip_pbx_xx.xx.xx.xx
        CSeq: 1905780 NOTIFY
        User-Agent: TERASIP/1.0.0.944
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
     27 14.997928   ip_pbx_xx.xx.xx.xx        192.168.1.20          TCP      [TCP Keep-Alive] 5060 > 5066 [ACK] Seq=544 Ack=490 Win=18607 Len=0

Frame 27 (60 bytes on wire, 60 bytes captured)
    Arrival Time: May 18, 2009 15:59:45.795652000
    Time delta from previous packet: 0.442041000 seconds
    Time since reference or first frame: 14.997928000 seconds
    Frame Number: 27
    Packet Length: 60 bytes
    Capture Length: 60 bytes
    Protocols in frame: eth:ip:tcp
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
    Destination: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
    Trailer: 000000000000
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.20 (192.168.1.20)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 40
    Identification: 0x88f8 (35064)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (0x06)
    Header checksum: 0x3455 [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.20 (192.168.1.20)
Transmission Control Protocol, Src Port: 5060 (5060), Dst Port: 5066 (5066), Seq: 544, Ack: 490, Len: 0
    Source port: 5060 (5060)
    Destination port: 5066 (5066)
    Sequence number: 544    (relative sequence number)
    Acknowledgement number: 490    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 18607
    Checksum: 0x0c50 [correct]
    SEQ/ACK analysis
        TCP Analysis Flags
            This is a TCP keep-alive segment

No.     Time        Source                Destination           Protocol Info
     28 15.003675   192.168.1.20          ip_pbx_xx.xx.xx.xx        TCP      [TCP Keep-Alive ACK] 5066 > 5060 [ACK] Seq=490 Ack=545 Win=3584 Len=0

Frame 28 (60 bytes on wire, 60 bytes captured)
    Arrival Time: May 18, 2009 15:59:45.801399000
    Time delta from previous packet: 0.447788000 seconds
    Time since reference or first frame: 15.003675000 seconds
    Frame Number: 28
    Packet Length: 60 bytes
    Capture Length: 60 bytes
    Protocols in frame: eth:ip:tcp
Ethernet II, Src: Grandstr_1b:85:6e (00:0b:82:1b:85:6e), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
    Trailer: 000000000000
Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0xc0 (DSCP 0x30: Class Selector 6; ECN: 0x00)
        1100 00.. = Differentiated Services Codepoint: Class Selector 6 (0x30)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 40
    Identification: 0x04c3 (1219)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: TCP (0x06)
    Header checksum: 0x2eca [correct]
        Good: True
        Bad : False
    Source: 192.168.1.20 (192.168.1.20)
    Destination: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
Transmission Control Protocol, Src Port: 5066 (5066), Dst Port: 5060 (5060), Seq: 490, Ack: 545, Len: 0
    Source port: 5066 (5066)
    Destination port: 5060 (5060)
    Sequence number: 490    (relative sequence number)
    Acknowledgement number: 545    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 3584
    Checksum: 0x46fe [correct]
    SEQ/ACK analysis
        TCP Analysis Flags
            This is an ACK to a TCP keep-alive segment

No.     Time        Source                Destination           Protocol Info
     29 15.399893   192.168.1.100         88.179.220.20         NTP      NTP

Frame 29 (90 bytes on wire, 90 bytes captured)
    Arrival Time: May 18, 2009 15:59:46.197617000
    Time delta from previous packet: 0.844006000 seconds
    Time since reference or first frame: 15.399893000 seconds
    Frame Number: 29
    Packet Length: 90 bytes
    Capture Length: 90 bytes
    Protocols in frame: eth:ip:udp:ntp
Ethernet II, Src: Palmmicr_56:1f:92 (00:09:45:56:1f:92), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: Palmmicr_56:1f:92 (00:09:45:56:1f:92)
        Address: Palmmicr_56:1f:92 (00:09:45:56:1f:92)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.100 (192.168.1.100), Dst: 88.179.220.20 (88.179.220.20)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 76
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x43cd [correct]
        Good: True
        Bad : False
    Source: 192.168.1.100 (192.168.1.100)
    Destination: 88.179.220.20 (88.179.220.20)
User Datagram Protocol, Src Port: ntp (123), Dst Port: ntp (123)
    Source port: ntp (123)
    Destination port: ntp (123)
    Length: 56
    Checksum: 0xfcd5 [correct]
Network Time Protocol
    Flags: 0x23
        00.. .... = Leap Indicator: no warning (0)
        ..10 0... = Version number: NTP Version 4 (4)
        .... .011 = Mode: client (3)
    Peer Clock Stratum: secondary reference (2)
    Peer Polling Interval: 6 (64 sec)
    Peer Clock Precision: 0,000031 sec
    Root Delay:    0,0473 sec
    Clock Dispersion:    0,0124 sec
    Reference Clock ID: 88.179.220.20
    Reference Clock Update Time: May 18, 2009 13:52:05,8457 UTC
    Originate Time Stamp: May 18, 2009 13:58:35,8241 UTC
    Receive Time Stamp: May 18, 2009 13:58:35,8481 UTC
    Transmit Time Stamp: May 18, 2009 13:59:41,8005 UTC

No.     Time        Source                Destination           Protocol Info
     30 15.448044   88.179.220.20         192.168.1.100         NTP      NTP

Frame 30 (90 bytes on wire, 90 bytes captured)
    Arrival Time: May 18, 2009 15:59:46.245768000
    Time delta from previous packet: 0.892157000 seconds
    Time since reference or first frame: 15.448044000 seconds
    Frame Number: 30
    Packet Length: 90 bytes
    Capture Length: 90 bytes
    Protocols in frame: eth:ip:udp:ntp
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: Palmmicr_56:1f:92 (00:09:45:56:1f:92)
    Destination: Palmmicr_56:1f:92 (00:09:45:56:1f:92)
        Address: Palmmicr_56:1f:92 (00:09:45:56:1f:92)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: 88.179.220.20 (88.179.220.20), Dst: 192.168.1.100 (192.168.1.100)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 76
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: UDP (0x11)
    Header checksum: 0x4dcd [correct]
        Good: True
        Bad : False
    Source: 88.179.220.20 (88.179.220.20)
    Destination: 192.168.1.100 (192.168.1.100)
User Datagram Protocol, Src Port: ntp (123), Dst Port: ntp (123)
    Source port: ntp (123)
    Destination port: ntp (123)
    Length: 56
    Checksum: 0xbe40 [correct]
Network Time Protocol
    Flags: 0x24
        00.. .... = Leap Indicator: no warning (0)
        ..10 0... = Version number: NTP Version 4 (4)
        .... .100 = Mode: server (4)
    Peer Clock Stratum: primary reference (1)
    Peer Polling Interval: 6 (64 sec)
    Peer Clock Precision: 0,000002 sec
    Root Delay:    0,0000 sec
    Clock Dispersion:    0,0006 sec
    Reference Clock ID: Global Positioning Service
    Reference Clock Update Time: May 18, 2009 13:59:30,2828 UTC
    Originate Time Stamp: May 18, 2009 13:59:41,8005 UTC
    Receive Time Stamp: May 18, 2009 13:59:41,8248 UTC
    Transmit Time Stamp: May 18, 2009 13:59:41,8249 UTC

No.     Time        Source                Destination           Protocol Info
     31 16.399634   Palmmicr_56:1f:92     NeufCege_a2:76:60     ARP      Who has 192.168.1.1?  Tell 192.168.1.100

Frame 31 (60 bytes on wire, 60 bytes captured)
    Arrival Time: May 18, 2009 15:59:47.197358000
    Time delta from previous packet: 1.843747000 seconds
    Time since reference or first frame: 16.399634000 seconds
    Frame Number: 31
    Packet Length: 60 bytes
    Capture Length: 60 bytes
    Protocols in frame: eth:arp
Ethernet II, Src: Palmmicr_56:1f:92 (00:09:45:56:1f:92), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: Palmmicr_56:1f:92 (00:09:45:56:1f:92)
        Address: Palmmicr_56:1f:92 (00:09:45:56:1f:92)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: ARP (0x0806)
    Trailer: 000000000000000000000000000000000000
Address Resolution Protocol (request)
    Hardware type: Ethernet (0x0001)
    Protocol type: IP (0x0800)
    Hardware size: 6
    Protocol size: 4
    Opcode: request (0x0001)
    Sender MAC address: Palmmicr_56:1f:92 (00:09:45:56:1f:92)
    Sender IP address: 192.168.1.100 (192.168.1.100)
    Target MAC address: 00:00:00_00:00:00 (00:00:00:00:00:00)
    Target IP address: 192.168.1.1 (192.168.1.1)

No.     Time        Source                Destination           Protocol Info
     32 16.399873   NeufCege_a2:76:60     Palmmicr_56:1f:92     ARP      192.168.1.1 is at 00:17:33:a2:76:60

Frame 32 (60 bytes on wire, 60 bytes captured)
    Arrival Time: May 18, 2009 15:59:47.197597000
    Time delta from previous packet: 1.843986000 seconds
    Time since reference or first frame: 16.399873000 seconds
    Frame Number: 32
    Packet Length: 60 bytes
    Capture Length: 60 bytes
    Protocols in frame: eth:arp
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: Palmmicr_56:1f:92 (00:09:45:56:1f:92)
    Destination: Palmmicr_56:1f:92 (00:09:45:56:1f:92)
        Address: Palmmicr_56:1f:92 (00:09:45:56:1f:92)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: ARP (0x0806)
    Trailer: 000000000000000000000000000000000000
Address Resolution Protocol (reply)
    Hardware type: Ethernet (0x0001)
    Protocol type: IP (0x0800)
    Hardware size: 6
    Protocol size: 4
    Opcode: reply (0x0002)
    Sender MAC address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Sender IP address: 192.168.1.1 (192.168.1.1)
    Target MAC address: Palmmicr_56:1f:92 (00:09:45:56:1f:92)
    Target IP address: 192.168.1.100 (192.168.1.100)

No.     Time        Source                Destination           Protocol Info
     33 17.795431   NeufCege_a2:76:60     Grandstr_1b:85:6e     ARP      Who has 192.168.1.20?  Tell 192.168.1.1

Frame 33 (60 bytes on wire, 60 bytes captured)
    Arrival Time: May 18, 2009 15:59:48.593155000
    Time delta from previous packet: 3.239544000 seconds
    Time since reference or first frame: 17.795431000 seconds
    Frame Number: 33
    Packet Length: 60 bytes
    Capture Length: 60 bytes
    Protocols in frame: eth:arp
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
    Destination: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: ARP (0x0806)
    Trailer: 000000000000000000000000000000000000
Address Resolution Protocol (request)
    Hardware type: Ethernet (0x0001)
    Protocol type: IP (0x0800)
    Hardware size: 6
    Protocol size: 4
    Opcode: request (0x0001)
    Sender MAC address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Sender IP address: 192.168.1.1 (192.168.1.1)
    Target MAC address: 00:00:00_00:00:00 (00:00:00:00:00:00)
    Target IP address: 192.168.1.20 (192.168.1.20)

No.     Time        Source                Destination           Protocol Info
     34 17.802999   Grandstr_1b:85:6e     NeufCege_a2:76:60     ARP      192.168.1.20 is at 00:0b:82:1b:85:6e

Frame 34 (60 bytes on wire, 60 bytes captured)
    Arrival Time: May 18, 2009 15:59:48.600723000
    Time delta from previous packet: 3.247112000 seconds
    Time since reference or first frame: 17.802999000 seconds
    Frame Number: 34
    Packet Length: 60 bytes
    Capture Length: 60 bytes
    Protocols in frame: eth:arp
Ethernet II, Src: Grandstr_1b:85:6e (00:0b:82:1b:85:6e), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: ARP (0x0806)
    Trailer: 000000000000000000000000000000000000
Address Resolution Protocol (reply)
    Hardware type: Ethernet (0x0001)
    Protocol type: IP (0x0800)
    Hardware size: 6
    Protocol size: 4
    Opcode: reply (0x0002)
    Sender MAC address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
    Sender IP address: 192.168.1.20 (192.168.1.20)
    Target MAC address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Target IP address: 192.168.1.1 (192.168.1.1)

No.     Time        Source                Destination           Protocol Info
     35 18.399804   192.168.1.100         192.43.244.18         NTP      NTP

Frame 35 (90 bytes on wire, 90 bytes captured)
    Arrival Time: May 18, 2009 15:59:49.197528000
    Time delta from previous packet: 3.843917000 seconds
    Time since reference or first frame: 18.399804000 seconds
    Frame Number: 35
    Packet Length: 90 bytes
    Capture Length: 90 bytes
    Protocols in frame: eth:ip:udp:ntp
Ethernet II, Src: Palmmicr_56:1f:92 (00:09:45:56:1f:92), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: Palmmicr_56:1f:92 (00:09:45:56:1f:92)
        Address: Palmmicr_56:1f:92 (00:09:45:56:1f:92)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.100 (192.168.1.100), Dst: 192.43.244.18 (192.43.244.18)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 76
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xc456 [correct]
        Good: True
        Bad : False
    Source: 192.168.1.100 (192.168.1.100)
    Destination: 192.43.244.18 (192.43.244.18)
User Datagram Protocol, Src Port: ntp (123), Dst Port: ntp (123)
    Source port: ntp (123)
    Destination port: ntp (123)
    Length: 56
    Checksum: 0x26ee [correct]
Network Time Protocol
    Flags: 0x23
        00.. .... = Leap Indicator: no warning (0)
        ..10 0... = Version number: NTP Version 4 (4)
        .... .011 = Mode: client (3)
    Peer Clock Stratum: secondary reference (2)
    Peer Polling Interval: 6 (64 sec)
    Peer Clock Precision: 0,000031 sec
    Root Delay:    0,0473 sec
    Clock Dispersion:    0,0125 sec
    Reference Clock ID: 88.179.220.20
    Reference Clock Update Time: May 18, 2009 13:52:05,8457 UTC
    Originate Time Stamp: May 18, 2009 13:58:39,8921 UTC
    Receive Time Stamp: May 18, 2009 13:58:39,9909 UTC
    Transmit Time Stamp: May 18, 2009 13:59:44,8005 UTC

No.     Time        Source                Destination           Protocol Info
     36 18.584881   192.43.244.18         192.168.1.100         NTP      NTP

Frame 36 (90 bytes on wire, 90 bytes captured)
    Arrival Time: May 18, 2009 15:59:49.382605000
    Time delta from previous packet: 4.028994000 seconds
    Time since reference or first frame: 18.584881000 seconds
    Frame Number: 36
    Packet Length: 90 bytes
    Capture Length: 90 bytes
    Protocols in frame: eth:ip:udp:ntp
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: Palmmicr_56:1f:92 (00:09:45:56:1f:92)
    Destination: Palmmicr_56:1f:92 (00:09:45:56:1f:92)
        Address: Palmmicr_56:1f:92 (00:09:45:56:1f:92)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: 192.43.244.18 (192.43.244.18), Dst: 192.168.1.100 (192.168.1.100)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 76
    Identification: 0xe154 (57684)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 46
    Protocol: UDP (0x11)
    Header checksum: 0x3502 [correct]
        Good: True
        Bad : False
    Source: 192.43.244.18 (192.43.244.18)
    Destination: 192.168.1.100 (192.168.1.100)
User Datagram Protocol, Src Port: ntp (123), Dst Port: ntp (123)
    Source port: ntp (123)
    Destination port: ntp (123)
    Length: 56
    Checksum: 0x57cf [correct]
Network Time Protocol
    Flags: 0x24
        00.. .... = Leap Indicator: no warning (0)
        ..10 0... = Version number: NTP Version 4 (4)
        .... .100 = Mode: server (4)
    Peer Clock Stratum: primary reference (1)
    Peer Polling Interval: 6 (64 sec)
    Peer Clock Precision: 0,000000 sec
    Root Delay:    0,0000 sec
    Clock Dispersion:    0,0000 sec
    Reference Clock ID: NIST dialup modem service
    Reference Clock Update Time: May 18, 2009 13:59:25,1130 UTC
    Originate Time Stamp: May 18, 2009 13:59:44,8005 UTC
    Receive Time Stamp: May 18, 2009 13:59:44,8883 UTC
    Transmit Time Stamp: May 18, 2009 13:59:44,8883 UTC

No.     Time        Source                Destination           Protocol Info
     37 18.938094   192.168.1.22          ip_pbx_xx.xx.xx.xx        SIP/SDP  Request: INVITE sip:324@ip_pbx_xx.xx.xx.xx, with session description

Frame 37 (1020 bytes on wire, 1020 bytes captured)
    Arrival Time: May 18, 2009 15:59:49.735818000
    Time delta from previous packet: 4.382207000 seconds
    Time since reference or first frame: 18.938094000 seconds
    Frame Number: 37
    Packet Length: 1020 bytes
    Capture Length: 1020 bytes
    Protocols in frame: eth:ip:udp:sip:sdp
Ethernet II, Src: AlliedTe_26:11:39 (00:30:84:26:11:39), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: AlliedTe_26:11:39 (00:30:84:26:11:39)
        Address: AlliedTe_26:11:39 (00:30:84:26:11:39)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.22 (192.168.1.22), Dst: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1006
    Identification: 0xf9a5 (63909)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xb5d4 [correct]
        Good: True
        Bad : False
    Source: 192.168.1.22 (192.168.1.22)
    Destination: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
    Source port: 5060 (5060)
    Destination port: 5060 (5060)
    Length: 986
    Checksum: 0xda5a [correct]
Session Initiation Protocol
    Request-Line: INVITE sip:324@ip_pbx_xx.xx.xx.xx SIP/2.0
        Method: INVITE
        Resent Packet: False
    Message Header
        Via: SIP/2.0/UDP 192.168.1.22:5060;branch=z9hG4bK-d8754z-373c5f57bd63fb21-1---d8754z-;rport
        Max-Forwards: 70
        Contact:
            Contact Binding:
                URI:
                    SIP contact address: sip:323@192.168.1.22:5060
        To:
            SIP to address: sip:324@ip_pbx_xx.xx.xx.xx
        From: "323";tag=4a7fa229
            SIP Display info: "323"
            SIP from address: sip:323@ip_pbx_xx.xx.xx.xx
            SIP tag: 4a7fa229
        Call-ID: MzBhYTIxMmQyOTYzMjFhOWNlZGI4NTBiMDViNGUwNTk.
        CSeq: 1 INVITE
        Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, UPDATE, INVITE, INFO, OPTIONS, NOTIFY, OPTIONS, NOTIFY, OPTIONS, NOTIFY
        Content-Type: application/sdp
        User-Agent: TERASIP/1.0.0.944
        Content-Length: 439
    Message body
        Session Description Protocol
            Session Description Protocol Version (v): 0
            Owner/Creator, Session Id (o): - 1242655189 1242655189 IN IP4 192.168.1.22
                Owner Username: -
                Session ID: 1242655189
                Session Version: 1242655189
                Owner Network Type: IN
                Owner Address Type: IP4
                Owner Address: 192.168.1.22
            Session Name (s): TERASIP
            Connection Information (c): IN IP4 192.168.1.22
                Connection Network Type: IN
                Connection Address Type: IP4
                Connection Address: 192.168.1.22
            Time Description, active time (t): 0 0
                Session Start Time: 0
                Session Stop Time: 0
            Media Description, name and address (m): audio 5004 RTP/AVP 0 8 113 114 3 110 111 112 101
                Media Type: audio
                Media Port: 5004
                Media Proto: RTP/AVP
                Media Format: ITU-T G.711 PCMU
                Media Format: ITU-T G.711 PCMA
                Media Format: 113
                Media Format: 114
                Media Format: GSM 06.10
                Media Format: 110
                Media Format: 111
                Media Format: 112
                Media Format: 101
            Media Attribute (a): rtpmap:0 PCMU/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 0 PCMU/8000
            Media Attribute (a): rtpmap:8 PCMA/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 8 PCMA/8000
            Media Attribute (a): rtpmap:113 iLBC/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 113 iLBC/8000
            Media Attribute (a): fmtp:113 mode=20
                Media Attribute Fieldname: fmtp
                Media Attribute Value: 113 mode=20
            Media Attribute (a): rtpmap:114 iLBC/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 114 iLBC/8000
            Media Attribute (a): fmtp:114 mode=30
                Media Attribute Fieldname: fmtp
                Media Attribute Value: 114 mode=30
            Media Attribute (a): rtpmap:3 GSM/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 3 GSM/8000
            Media Attribute (a): rtpmap:110 speex/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 110 speex/8000
            Media Attribute (a): rtpmap:111 speex/16000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 111 speex/16000
            Media Attribute (a): rtpmap:112 speex/32000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 112 speex/32000
            Media Attribute (a): rtpmap:101 telephone-event/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 101 telephone-event/8000
            Media Attribute (a): fmtp:101 0-16
                Media Attribute Fieldname: fmtp
                Media Attribute Value: 101 0-16
            Media Attribute (a): sendrecv

No.     Time        Source                Destination           Protocol Info
     38 19.053980   ip_pbx_xx.xx.xx.xx        192.168.1.22          SIP      Status: 100 Trying

Frame 38 (565 bytes on wire, 565 bytes captured)
    Arrival Time: May 18, 2009 15:59:49.851704000
    Time delta from previous packet: 0.115886000 seconds
    Time since reference or first frame: 19.053980000 seconds
    Frame Number: 38
    Packet Length: 565 bytes
    Capture Length: 565 bytes
    Protocols in frame: eth:ip:udp:sip
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: AlliedTe_26:11:39 (00:30:84:26:11:39)
    Destination: AlliedTe_26:11:39 (00:30:84:26:11:39)
        Address: AlliedTe_26:11:39 (00:30:84:26:11:39)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.22 (192.168.1.22)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 551
    Identification: 0xb5c7 (46535)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: UDP (0x11)
    Header checksum: 0x057a [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.22 (192.168.1.22)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
    Source port: 5060 (5060)
    Destination port: 5060 (5060)
    Length: 531
    Checksum: 0xeda4 [correct]
Session Initiation Protocol
    Status-Line: SIP/2.0 100 Trying
        Status-Code: 100
        Resent Packet: False
    Message Header
        Via: SIP/2.0/UDP 192.168.1.22:5060;branch=z9hG4bK-d8754z-373c5f57bd63fb21-1---d8754z-;rport;received=86.68.99.61
        From: "323" ;tag=4a7fa229
            SIP Display info: "323"
            SIP from address: sip:323@ip_pbx_xx.xx.xx.xx
            SIP tag: 4a7fa229
        To: ;tag=1251257753
            SIP to address: sip:324@ip_pbx_xx.xx.xx.xx
            SIP tag: 1251257753
        Call-ID: MzBhYTIxMmQyOTYzMjFhOWNlZGI4NTBiMDViNGUwNTk.
        CSeq: 1 INVITE
        Contact:
            Contact Binding:
                URI:
                    SIP contact address: sip:324@ip_pbx_xx.xx.xx.xx:5060
        Supported: replaces, timer
        User-Agent: Grandstream GXE5024 1.0.1.40
        Allow: INVITE, ACK, OPTIONS, CANCEL, BYE, SUBSCRIBE, NOTIFY, PUBLISH, INFO, REFER, UPDATE
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
     39 19.062474   ip_pbx_xx.xx.xx.xx        192.168.1.22          SIP      Status: 407 Proxy Authentication Required

Frame 39 (681 bytes on wire, 681 bytes captured)
    Arrival Time: May 18, 2009 15:59:49.860198000
    Time delta from previous packet: 0.008494000 seconds
    Time since reference or first frame: 19.062474000 seconds
    Frame Number: 39
    Packet Length: 681 bytes
    Capture Length: 681 bytes
    Protocols in frame: eth:ip:udp:sip
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: AlliedTe_26:11:39 (00:30:84:26:11:39)
    Destination: AlliedTe_26:11:39 (00:30:84:26:11:39)
        Address: AlliedTe_26:11:39 (00:30:84:26:11:39)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.22 (192.168.1.22)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 667
    Identification: 0xb5c8 (46536)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: UDP (0x11)
    Header checksum: 0x0505 [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.22 (192.168.1.22)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
    Source port: 5060 (5060)
    Destination port: 5060 (5060)
    Length: 647
    Checksum: 0x6391 [correct]
Session Initiation Protocol
    Status-Line: SIP/2.0 407 Proxy Authentication Required
        Status-Code: 407
        Resent Packet: False
    Message Header
        Via: SIP/2.0/UDP 192.168.1.22:5060;branch=z9hG4bK-d8754z-373c5f57bd63fb21-1---d8754z-;rport;received=86.68.99.61
        From: "323" ;tag=4a7fa229
            SIP Display info: "323"
            SIP from address: sip:323@ip_pbx_xx.xx.xx.xx
            SIP tag: 4a7fa229
        To: ;tag=1251257753
            SIP to address: sip:324@ip_pbx_xx.xx.xx.xx
            SIP tag: 1251257753
        Call-ID: MzBhYTIxMmQyOTYzMjFhOWNlZGI4NTBiMDViNGUwNTk.
        CSeq: 1 INVITE
        Contact:
            Contact Binding:
                URI:
                    SIP contact address: sip:324@ip_pbx_xx.xx.xx.xx:5060
        Proxy-Authenticate: Digest realm="grandstream", nonce="0064a93d", stale=true, algorithm=MD5
            Authentication Scheme: Digest
            Realm: "grandstream"
            Nonce Value: "0064a93d"
            Stale Flag: true
            Algorithm: MD5
        Supported: replaces, timer
        User-Agent: Grandstream GXE5024 1.0.1.40
        Allow: INVITE, ACK, OPTIONS, CANCEL, BYE, SUBSCRIBE, NOTIFY, PUBLISH, INFO, REFER, UPDATE
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
     40 19.063140   192.168.1.22          ip_pbx_xx.xx.xx.xx        SIP      Request: ACK sip:324@ip_pbx_xx.xx.xx.xx

Frame 40 (355 bytes on wire, 355 bytes captured)
    Arrival Time: May 18, 2009 15:59:49.860864000
    Time delta from previous packet: 0.000666000 seconds
    Time since reference or first frame: 19.063140000 seconds
    Frame Number: 40
    Packet Length: 355 bytes
    Capture Length: 355 bytes
    Protocols in frame: eth:ip:udp:sip
Ethernet II, Src: AlliedTe_26:11:39 (00:30:84:26:11:39), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: AlliedTe_26:11:39 (00:30:84:26:11:39)
        Address: AlliedTe_26:11:39 (00:30:84:26:11:39)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.22 (192.168.1.22), Dst: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 341
    Identification: 0xf9a6 (63910)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xb86c [correct]
        Good: True
        Bad : False
    Source: 192.168.1.22 (192.168.1.22)
    Destination: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
    Source port: 5060 (5060)
    Destination port: 5060 (5060)
    Length: 321
    Checksum: 0xfe41 [correct]
Session Initiation Protocol
    Request-Line: ACK sip:324@ip_pbx_xx.xx.xx.xx SIP/2.0
        Method: ACK
        Resent Packet: False
    Message Header
        Via: SIP/2.0/UDP 192.168.1.22:5060;branch=z9hG4bK-d8754z-373c5f57bd63fb21-1---d8754z-;rport
        To: ;tag=1251257753
            SIP to address: sip:324@ip_pbx_xx.xx.xx.xx
            SIP tag: 1251257753
        From: "323";tag=4a7fa229
            SIP Display info: "323"
            SIP from address: sip:323@ip_pbx_xx.xx.xx.xx
            SIP tag: 4a7fa229
        Call-ID: MzBhYTIxMmQyOTYzMjFhOWNlZGI4NTBiMDViNGUwNTk.
        CSeq: 1 ACK
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
     41 19.089495   192.168.1.22          ip_pbx_xx.xx.xx.xx        SIP/SDP  Request: INVITE sip:324@ip_pbx_xx.xx.xx.xx, with session description

Frame 41 (1188 bytes on wire, 1188 bytes captured)
    Arrival Time: May 18, 2009 15:59:49.887219000
    Time delta from previous packet: 0.026355000 seconds
    Time since reference or first frame: 19.089495000 seconds
    Frame Number: 41
    Packet Length: 1188 bytes
    Capture Length: 1188 bytes
    Protocols in frame: eth:ip:udp:sip:sdp
Ethernet II, Src: AlliedTe_26:11:39 (00:30:84:26:11:39), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: AlliedTe_26:11:39 (00:30:84:26:11:39)
        Address: AlliedTe_26:11:39 (00:30:84:26:11:39)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.22 (192.168.1.22), Dst: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 1174
    Identification: 0xf9a7 (63911)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xb52a [correct]
        Good: True
        Bad : False
    Source: 192.168.1.22 (192.168.1.22)
    Destination: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
    Source port: 5060 (5060)
    Destination port: 5060 (5060)
    Length: 1154
    Checksum: 0xb5c1 [correct]
Session Initiation Protocol
    Request-Line: INVITE sip:324@ip_pbx_xx.xx.xx.xx SIP/2.0
        Method: INVITE
        Resent Packet: False
    Message Header
        Via: SIP/2.0/UDP 192.168.1.22:5060;branch=z9hG4bK-d8754z-9614fc626c1e4621-1---d8754z-;rport
        Max-Forwards: 70
        Contact:
            Contact Binding:
                URI:
                    SIP contact address: sip:323@192.168.1.22:5060
        To:
            SIP to address: sip:324@ip_pbx_xx.xx.xx.xx
        From: "323";tag=4a7fa229
            SIP Display info: "323"
            SIP from address: sip:323@ip_pbx_xx.xx.xx.xx
            SIP tag: 4a7fa229
        Call-ID: MzBhYTIxMmQyOTYzMjFhOWNlZGI4NTBiMDViNGUwNTk.
        CSeq: 2 INVITE
        Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, UPDATE, INVITE, INFO, OPTIONS, NOTIFY, OPTIONS, NOTIFY, OPTIONS, NOTIFY
        Content-Type: application/sdp
        Proxy-Authorization: Digest username="323",realm="grandstream",nonce="0064a93d",uri="sip:324@ip_pbx_xx.xx.xx.xx",response="e7381664e608da1df880a925c54b2480",algorithm=MD5
            Authentication Scheme: Digest
            Username: "323"
            Realm: "grandstream"
            Nonce Value: "0064a93d"
            Authentication URI: "sip:324@ip_pbx_xx.xx.xx.xx"
            Digest Authentication Response: "e7381664e608da1df880a925c54b2480"
            Algorithm: MD5
        User-Agent: TERASIP/1.0.0.944
        Content-Length: 439
    Message body
        Session Description Protocol
            Session Description Protocol Version (v): 0
            Owner/Creator, Session Id (o): - 1242655189 1242655189 IN IP4 192.168.1.22
                Owner Username: -
                Session ID: 1242655189
                Session Version: 1242655189
                Owner Network Type: IN
                Owner Address Type: IP4
                Owner Address: 192.168.1.22
            Session Name (s): TERASIP
            Connection Information (c): IN IP4 192.168.1.22
                Connection Network Type: IN
                Connection Address Type: IP4
                Connection Address: 192.168.1.22
            Time Description, active time (t): 0 0
                Session Start Time: 0
                Session Stop Time: 0
            Media Description, name and address (m): audio 5004 RTP/AVP 0 8 113 114 3 110 111 112 101
                Media Type: audio
                Media Port: 5004
                Media Proto: RTP/AVP
                Media Format: ITU-T G.711 PCMU
                Media Format: ITU-T G.711 PCMA
                Media Format: 113
                Media Format: 114
                Media Format: GSM 06.10
                Media Format: 110
                Media Format: 111
                Media Format: 112
                Media Format: 101
            Media Attribute (a): rtpmap:0 PCMU/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 0 PCMU/8000
            Media Attribute (a): rtpmap:8 PCMA/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 8 PCMA/8000
            Media Attribute (a): rtpmap:113 iLBC/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 113 iLBC/8000
            Media Attribute (a): fmtp:113 mode=20
                Media Attribute Fieldname: fmtp
                Media Attribute Value: 113 mode=20
            Media Attribute (a): rtpmap:114 iLBC/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 114 iLBC/8000
            Media Attribute (a): fmtp:114 mode=30
                Media Attribute Fieldname: fmtp
                Media Attribute Value: 114 mode=30
            Media Attribute (a): rtpmap:3 GSM/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 3 GSM/8000
            Media Attribute (a): rtpmap:110 speex/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 110 speex/8000
            Media Attribute (a): rtpmap:111 speex/16000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 111 speex/16000
            Media Attribute (a): rtpmap:112 speex/32000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 112 speex/32000
            Media Attribute (a): rtpmap:101 telephone-event/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 101 telephone-event/8000
            Media Attribute (a): fmtp:101 0-16
                Media Attribute Fieldname: fmtp
                Media Attribute Value: 101 0-16
            Media Attribute (a): sendrecv

No.     Time        Source                Destination           Protocol Info
     42 19.214150   ip_pbx_xx.xx.xx.xx        192.168.1.22          SIP      Status: 100 Trying

Frame 42 (564 bytes on wire, 564 bytes captured)
    Arrival Time: May 18, 2009 15:59:50.011874000
    Time delta from previous packet: 0.124655000 seconds
    Time since reference or first frame: 19.214150000 seconds
    Frame Number: 42
    Packet Length: 564 bytes
    Capture Length: 564 bytes
    Protocols in frame: eth:ip:udp:sip
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: AlliedTe_26:11:39 (00:30:84:26:11:39)
    Destination: AlliedTe_26:11:39 (00:30:84:26:11:39)
        Address: AlliedTe_26:11:39 (00:30:84:26:11:39)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.22 (192.168.1.22)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 550
    Identification: 0xb5c9 (46537)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: UDP (0x11)
    Header checksum: 0x0579 [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.22 (192.168.1.22)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
    Source port: 5060 (5060)
    Destination port: 5060 (5060)
    Length: 530
    Checksum: 0x898c [correct]
Session Initiation Protocol
    Status-Line: SIP/2.0 100 Trying
        Status-Code: 100
        Resent Packet: False
    Message Header
        Via: SIP/2.0/UDP 192.168.1.22:5060;branch=z9hG4bK-d8754z-9614fc626c1e4621-1---d8754z-;rport;received=86.68.99.61
        From: "323" ;tag=4a7fa229
            SIP Display info: "323"
            SIP from address: sip:323@ip_pbx_xx.xx.xx.xx
            SIP tag: 4a7fa229
        To: ;tag=968066386
            SIP to address: sip:324@ip_pbx_xx.xx.xx.xx
            SIP tag: 968066386
        Call-ID: MzBhYTIxMmQyOTYzMjFhOWNlZGI4NTBiMDViNGUwNTk.
        CSeq: 2 INVITE
        Contact:
            Contact Binding:
                URI:
                    SIP contact address: sip:324@ip_pbx_xx.xx.xx.xx:5060
        Supported: replaces, timer
        User-Agent: Grandstream GXE5024 1.0.1.40
        Allow: INVITE, ACK, OPTIONS, CANCEL, BYE, SUBSCRIBE, NOTIFY, PUBLISH, INFO, REFER, UPDATE
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
     43 19.221167   ip_pbx_xx.xx.xx.xx        192.168.1.22          SIP      Status: 180 Ringing

Frame 43 (565 bytes on wire, 565 bytes captured)
    Arrival Time: May 18, 2009 15:59:50.018891000
    Time delta from previous packet: 0.007017000 seconds
    Time since reference or first frame: 19.221167000 seconds
    Frame Number: 43
    Packet Length: 565 bytes
    Capture Length: 565 bytes
    Protocols in frame: eth:ip:udp:sip
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: AlliedTe_26:11:39 (00:30:84:26:11:39)
    Destination: AlliedTe_26:11:39 (00:30:84:26:11:39)
        Address: AlliedTe_26:11:39 (00:30:84:26:11:39)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.22 (192.168.1.22)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 551
    Identification: 0xb5ca (46538)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: UDP (0x11)
    Header checksum: 0x0577 [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.22 (192.168.1.22)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
    Source port: 5060 (5060)
    Destination port: 5060 (5060)
    Length: 531
    Checksum: 0x7e3c [correct]
Session Initiation Protocol
    Status-Line: SIP/2.0 180 Ringing
        Status-Code: 180
        Resent Packet: False
    Message Header
        Via: SIP/2.0/UDP 192.168.1.22:5060;branch=z9hG4bK-d8754z-9614fc626c1e4621-1---d8754z-;rport;received=86.68.99.61
        From: "323" ;tag=4a7fa229
            SIP Display info: "323"
            SIP from address: sip:323@ip_pbx_xx.xx.xx.xx
            SIP tag: 4a7fa229
        To: ;tag=968066386
            SIP to address: sip:324@ip_pbx_xx.xx.xx.xx
            SIP tag: 968066386
        Call-ID: MzBhYTIxMmQyOTYzMjFhOWNlZGI4NTBiMDViNGUwNTk.
        CSeq: 2 INVITE
        Contact:
            Contact Binding:
                URI:
                    SIP contact address: sip:324@ip_pbx_xx.xx.xx.xx:5060
        Supported: replaces, timer
        User-Agent: Grandstream GXE5024 1.0.1.40
        Allow: INVITE, ACK, OPTIONS, CANCEL, BYE, SUBSCRIBE, NOTIFY, PUBLISH, INFO, REFER, UPDATE
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
     44 19.221215   NeufCege_a2:76:60     AlliedTe_26:11:39     ARP      Who has 192.168.1.22?  Tell 192.168.1.1

Frame 44 (60 bytes on wire, 60 bytes captured)
    Arrival Time: May 18, 2009 15:59:50.018939000
    Time delta from previous packet: 0.000048000 seconds
    Time since reference or first frame: 19.221215000 seconds
    Frame Number: 44
    Packet Length: 60 bytes
    Capture Length: 60 bytes
    Protocols in frame: eth:arp
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: AlliedTe_26:11:39 (00:30:84:26:11:39)
    Destination: AlliedTe_26:11:39 (00:30:84:26:11:39)
        Address: AlliedTe_26:11:39 (00:30:84:26:11:39)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: ARP (0x0806)
    Trailer: 000000000000000000000000000000000000
Address Resolution Protocol (request)
    Hardware type: Ethernet (0x0001)
    Protocol type: IP (0x0800)
    Hardware size: 6
    Protocol size: 4
    Opcode: request (0x0001)
    Sender MAC address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Sender IP address: 192.168.1.1 (192.168.1.1)
    Target MAC address: 00:00:00_00:00:00 (00:00:00:00:00:00)
    Target IP address: 192.168.1.22 (192.168.1.22)

No.     Time        Source                Destination           Protocol Info
     45 19.221245   AlliedTe_26:11:39     NeufCege_a2:76:60     ARP      192.168.1.22 is at 00:30:84:26:11:39

Frame 45 (42 bytes on wire, 42 bytes captured)
    Arrival Time: May 18, 2009 15:59:50.018969000
    Time delta from previous packet: 0.000078000 seconds
    Time since reference or first frame: 19.221245000 seconds
    Frame Number: 45
    Packet Length: 42 bytes
    Capture Length: 42 bytes
    Protocols in frame: eth:arp
Ethernet II, Src: AlliedTe_26:11:39 (00:30:84:26:11:39), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: AlliedTe_26:11:39 (00:30:84:26:11:39)
        Address: AlliedTe_26:11:39 (00:30:84:26:11:39)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: ARP (0x0806)
Address Resolution Protocol (reply)
    Hardware type: Ethernet (0x0001)
    Protocol type: IP (0x0800)
    Hardware size: 6
    Protocol size: 4
    Opcode: reply (0x0002)
    Sender MAC address: AlliedTe_26:11:39 (00:30:84:26:11:39)
    Sender IP address: 192.168.1.22 (192.168.1.22)
    Target MAC address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Target IP address: 192.168.1.1 (192.168.1.1)

No.     Time        Source                Destination           Protocol Info
     46 19.232344   ip_pbx_xx.xx.xx.xx        192.168.1.22          SIP/SDP  Status: 200 OK, with session description

Frame 46 (794 bytes on wire, 794 bytes captured)
    Arrival Time: May 18, 2009 15:59:50.030068000
    Time delta from previous packet: 0.011177000 seconds
    Time since reference or first frame: 19.232344000 seconds
    Frame Number: 46
    Packet Length: 794 bytes
    Capture Length: 794 bytes
    Protocols in frame: eth:ip:udp:sip:sdp
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: AlliedTe_26:11:39 (00:30:84:26:11:39)
    Destination: AlliedTe_26:11:39 (00:30:84:26:11:39)
        Address: AlliedTe_26:11:39 (00:30:84:26:11:39)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.22 (192.168.1.22)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 780
    Identification: 0xb5cb (46539)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: UDP (0x11)
    Header checksum: 0x0491 [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.22 (192.168.1.22)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
    Source port: 5060 (5060)
    Destination port: 5060 (5060)
    Length: 760
    Checksum: 0xecc3 [correct]
Session Initiation Protocol
    Status-Line: SIP/2.0 200 OK
        Status-Code: 200
        Resent Packet: False
    Message Header
        Via: SIP/2.0/UDP 192.168.1.22:5060;branch=z9hG4bK-d8754z-9614fc626c1e4621-1---d8754z-;rport;received=86.68.99.61
        From: "323" ;tag=4a7fa229
            SIP Display info: "323"
            SIP from address: sip:323@ip_pbx_xx.xx.xx.xx
            SIP tag: 4a7fa229
        To: ;tag=968066386
            SIP to address: sip:324@ip_pbx_xx.xx.xx.xx
            SIP tag: 968066386
        Call-ID: MzBhYTIxMmQyOTYzMjFhOWNlZGI4NTBiMDViNGUwNTk.
        CSeq: 2 INVITE
        Contact:
            Contact Binding:
                URI:
                    SIP contact address: sip:324@ip_pbx_xx.xx.xx.xx:5060
        Supported: replaces, timer
        User-Agent: Grandstream GXE5024 1.0.1.40
        Allow: INVITE, ACK, OPTIONS, CANCEL, BYE, SUBSCRIBE, NOTIFY, PUBLISH, INFO, REFER, UPDATE
        Content-Type: application/sdp
        Content-Length:   199
    Message body
        Session Description Protocol
            Session Description Protocol Version (v): 0
            Owner/Creator, Session Id (o): 324 24522 24522 IN IP4 ip_pbx_xx.xx.xx.xx
                Owner Username: 324
                Session ID: 24522
                Session Version: 24522
                Owner Network Type: IN
                Owner Address Type: IP4
                Owner Address: ip_pbx_xx.xx.xx.xx
            Session Name (s): SIP Call
            Connection Information (c): IN IP4 ip_pbx_xx.xx.xx.xx
                Connection Network Type: IN
                Connection Address Type: IP4
                Connection Address: ip_pbx_xx.xx.xx.xx
            Time Description, active time (t): 0 0
                Session Start Time: 0
                Session Stop Time: 0
            Media Description, name and address (m): audio 6360 RTP/AVP 0 101
                Media Type: audio
                Media Port: 6360
                Media Proto: RTP/AVP
                Media Format: ITU-T G.711 PCMU
                Media Format: 101
            Media Attribute (a): rtpmap:0 PCMU/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 0 PCMU/8000
            Media Attribute (a): rtpmap:101 telephone-event/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 101 telephone-event/8000
            Media Attribute (a): ptime:20
                Media Attribute Fieldname: ptime
                Media Attribute Value: 20
            Media Attribute (a): sendrecv

No.     Time        Source                Destination           Protocol Info
     47 19.264743   192.168.1.22          ip_pbx_xx.xx.xx.xx        SIP      Request: ACK sip:324@ip_pbx_xx.xx.xx.xx:5060

Frame 47 (614 bytes on wire, 614 bytes captured)
    Arrival Time: May 18, 2009 15:59:50.062467000
    Time delta from previous packet: 0.032399000 seconds
    Time since reference or first frame: 19.264743000 seconds
    Frame Number: 47
    Packet Length: 614 bytes
    Capture Length: 614 bytes
    Protocols in frame: eth:ip:udp:sip
Ethernet II, Src: AlliedTe_26:11:39 (00:30:84:26:11:39), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: AlliedTe_26:11:39 (00:30:84:26:11:39)
        Address: AlliedTe_26:11:39 (00:30:84:26:11:39)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.22 (192.168.1.22), Dst: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 600
    Identification: 0xf9a8 (63912)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xb767 [correct]
        Good: True
        Bad : False
    Source: 192.168.1.22 (192.168.1.22)
    Destination: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
    Source port: 5060 (5060)
    Destination port: 5060 (5060)
    Length: 580
    Checksum: 0x2410 [correct]
Session Initiation Protocol
    Request-Line: ACK sip:324@ip_pbx_xx.xx.xx.xx:5060 SIP/2.0
        Method: ACK
        Resent Packet: False
    Message Header
        Via: SIP/2.0/UDP 192.168.1.22:5060;branch=z9hG4bK-d8754z-225dac617b6ead42-1---d8754z-;rport
        Max-Forwards: 70
        Contact:
            Contact Binding:
                URI:
                    SIP contact address: sip:323@192.168.1.22:5060
        To: ;tag=968066386
            SIP to address: sip:324@ip_pbx_xx.xx.xx.xx
            SIP tag: 968066386
        From: "323";tag=4a7fa229
            SIP Display info: "323"
            SIP from address: sip:323@ip_pbx_xx.xx.xx.xx
            SIP tag: 4a7fa229
        Call-ID: MzBhYTIxMmQyOTYzMjFhOWNlZGI4NTBiMDViNGUwNTk.
        CSeq: 2 ACK
        Proxy-Authorization: Digest username="323",realm="grandstream",nonce="0064a93d",uri="sip:324@ip_pbx_xx.xx.xx.xx",response="e7381664e608da1df880a925c54b2480",algorithm=MD5
            Authentication Scheme: Digest
            Username: "323"
            Realm: "grandstream"
            Nonce Value: "0064a93d"
            Authentication URI: "sip:324@ip_pbx_xx.xx.xx.xx"
            Digest Authentication Response: "e7381664e608da1df880a925c54b2480"
            Algorithm: MD5
        User-Agent: TERASIP/1.0.0.944
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
     48 19.396405   ip_pbx_xx.xx.xx.xx        192.168.1.20          SIP/SDP  Request: INVITE sip:324@86.68.99.61:1030, with session description

Frame 48 (1001 bytes on wire, 1001 bytes captured)
    Arrival Time: May 18, 2009 15:59:50.194129000
    Time delta from previous packet: 0.131662000 seconds
    Time since reference or first frame: 19.396405000 seconds
    Frame Number: 48
    Packet Length: 1001 bytes
    Capture Length: 1001 bytes
    Protocols in frame: eth:ip:tcp:sip:sdp
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
    Destination: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.20 (192.168.1.20)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 987
    Identification: 0x88fa (35066)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (0x06)
    Header checksum: 0x30a0 [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.20 (192.168.1.20)
Transmission Control Protocol, Src Port: 5060 (5060), Dst Port: 5066 (5066), Seq: 545, Ack: 490, Len: 947
    Source port: 5060 (5060)
    Destination port: 5066 (5066)
    Sequence number: 545    (relative sequence number)
    Next sequence number: 1492    (relative sequence number)
    Acknowledgement number: 490    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 18607
    Checksum: 0x60a7 [correct]
Session Initiation Protocol
    Request-Line: INVITE sip:324@86.68.99.61:1030 SIP/2.0
        Method: INVITE
        Resent Packet: False
    Message Header
        Via: SIP/2.0/TCP ip_pbx_xx.xx.xx.xx:5060;branch=z9hG4bK1236081177;alias
        From: "323" ;tag=852961145
            SIP Display info: "323"
            SIP from address: sip:323@ip_pbx_xx.xx.xx.xx:5060
            SIP tag: 852961145
        To: "324"
            SIP Display info: "324"
            SIP to address: sip:324@86.68.99.61:1030
        Call-ID: 328238417-5060-178134@ip_pbx_xx.xx.xx.xx
        CSeq: 1905800 INVITE
        Contact:
            Contact Binding:
                URI:
                    SIP contact address: sip:323@ip_pbx_xx.xx.xx.xx:5060
        Max-Forwards: 70
        Supported: replaces, timer
        User-Agent: Grandstream GXE5024 1.0.1.40
        Session-Expires: 180;refresher=uac
        Min-SE: 90
        Allow: INVITE, ACK, OPTIONS, CANCEL, BYE, SUBSCRIBE, NOTIFY, PUBLISH, INFO, REFER, UPDATE
        Content-Type: application/sdp
        Content-Length:   336
    Message body
        Session Description Protocol
            Session Description Protocol Version (v): 0
            Owner/Creator, Session Id (o): 323 24522 24522 IN IP4 ip_pbx_xx.xx.xx.xx
                Owner Username: 323
                Session ID: 24522
                Session Version: 24522
                Owner Network Type: IN
                Owner Address Type: IP4
                Owner Address: ip_pbx_xx.xx.xx.xx
            Session Name (s): SIP Call
            Connection Information (c): IN IP4 ip_pbx_xx.xx.xx.xx
                Connection Network Type: IN
                Connection Address Type: IP4
                Connection Address: ip_pbx_xx.xx.xx.xx
            Time Description, active time (t): 0 0
                Session Start Time: 0
                Session Stop Time: 0
            Media Description, name and address (m): audio 6370 RTP/AVP 0 8 97 97 3 101
                Media Type: audio
                Media Port: 6370
                Media Proto: RTP/AVP
                Media Format: ITU-T G.711 PCMU
                Media Format: ITU-T G.711 PCMA
                Media Format: 97
                Media Format: 97
                Media Format: GSM 06.10
                Media Format: 101
            Media Attribute (a): rtpmap:0 PCMU/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 0 PCMU/8000
            Media Attribute (a): rtpmap:8 PCMA/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 8 PCMA/8000
            Media Attribute (a): rtpmap:97 iLBC/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 97 iLBC/8000
            Media Attribute (a): fmtp:97 mode=20
                Media Attribute Fieldname: fmtp
                Media Attribute Value: 97 mode=20
            Media Attribute (a): rtpmap:97 iLBC/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 97 iLBC/8000
            Media Attribute (a): fmtp:97 mode=30
                Media Attribute Fieldname: fmtp
                Media Attribute Value: 97 mode=30
            Media Attribute (a): rtpmap:3 GSM/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 3 GSM/8000
            Media Attribute (a): rtpmap:101 telephone-event/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 101 telephone-event/8000
            Media Attribute (a): ptime:20
                Media Attribute Fieldname: ptime
                Media Attribute Value: 20
            Media Attribute (a): sendrecv

No.     Time        Source                Destination           Protocol Info
     49 19.470196   192.168.1.20          ip_pbx_xx.xx.xx.xx        SIP      Status: 180 Ringing

Frame 49 (531 bytes on wire, 531 bytes captured)
    Arrival Time: May 18, 2009 15:59:50.267920000
    Time delta from previous packet: 0.073791000 seconds
    Time since reference or first frame: 19.470196000 seconds
    Frame Number: 49
    Packet Length: 531 bytes
    Capture Length: 531 bytes
    Protocols in frame: eth:ip:tcp:sip
Ethernet II, Src: Grandstr_1b:85:6e (00:0b:82:1b:85:6e), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0xc0 (DSCP 0x30: Class Selector 6; ECN: 0x00)
        1100 00.. = Differentiated Services Codepoint: Class Selector 6 (0x30)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 517
    Identification: 0x04c4 (1220)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: TCP (0x06)
    Header checksum: 0x2cec [correct]
        Good: True
        Bad : False
    Source: 192.168.1.20 (192.168.1.20)
    Destination: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
Transmission Control Protocol, Src Port: 5066 (5066), Dst Port: 5060 (5060), Seq: 490, Ack: 1492, Len: 477
    Source port: 5066 (5066)
    Destination port: 5060 (5060)
    Sequence number: 490    (relative sequence number)
    Next sequence number: 967    (relative sequence number)
    Acknowledgement number: 1492    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 3584
    Checksum: 0xbe89 [correct]
Session Initiation Protocol
    Status-Line: SIP/2.0 180 Ringing
        Status-Code: 180
        Resent Packet: False
    Message Header
        Via: SIP/2.0/TCP ip_pbx_xx.xx.xx.xx:5060;branch=z9hG4bK1236081177;alias
        From: "323" ;tag=852961145
            SIP Display info: "323"
            SIP from address: sip:323@ip_pbx_xx.xx.xx.xx:5060
            SIP tag: 852961145
        To: "324" ;tag=590205e1c0c7fa6d
            SIP Display info: "324"
            SIP to address: sip:324@86.68.99.61:1030
            SIP tag: 590205e1c0c7fa6d
        Call-ID: 328238417-5060-178134@ip_pbx_xx.xx.xx.xx
        CSeq: 1905800 INVITE
        User-Agent: Grandstream GXP2010 1.1.6.37
        Contact:
            Contact Binding:
                URI:
                    SIP contact address: sip:324@192.168.1.20:5066
        Allow: INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE,UPDATE,PRACK,MESSAGE
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
     50 19.567535   ip_pbx_xx.xx.xx.xx        192.168.1.20          TCP      5060 > 5066 [ACK] Seq=1492 Ack=967 Win=18607 Len=0

Frame 50 (60 bytes on wire, 60 bytes captured)
    Arrival Time: May 18, 2009 15:59:50.365259000
    Time delta from previous packet: 0.097339000 seconds
    Time since reference or first frame: 19.567535000 seconds
    Frame Number: 50
    Packet Length: 60 bytes
    Capture Length: 60 bytes
    Protocols in frame: eth:ip:tcp
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
    Destination: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
    Trailer: 000000000000
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.20 (192.168.1.20)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 40
    Identification: 0x88fc (35068)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (0x06)
    Header checksum: 0x3451 [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.20 (192.168.1.20)
Transmission Control Protocol, Src Port: 5060 (5060), Dst Port: 5066 (5066), Seq: 1492, Ack: 967, Len: 0
    Source port: 5060 (5060)
    Destination port: 5066 (5066)
    Sequence number: 1492    (relative sequence number)
    Acknowledgement number: 967    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 18607
    Checksum: 0x06bf [correct]

No.     Time        Source                Destination           Protocol Info
     51 19.595148   ip_pbx_xx.xx.xx.xx        192.168.1.22          SIP/SDP  Request: INVITE sip:323@86.68.99.61:5060, with session description

Frame 51 (941 bytes on wire, 941 bytes captured)
    Arrival Time: May 18, 2009 15:59:50.392872000
    Time delta from previous packet: 0.124952000 seconds
    Time since reference or first frame: 19.595148000 seconds
    Frame Number: 51
    Packet Length: 941 bytes
    Capture Length: 941 bytes
    Protocols in frame: eth:ip:udp:sip:sdp
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: AlliedTe_26:11:39 (00:30:84:26:11:39)
    Destination: AlliedTe_26:11:39 (00:30:84:26:11:39)
        Address: AlliedTe_26:11:39 (00:30:84:26:11:39)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.22 (192.168.1.22)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 927
    Identification: 0xb5cc (46540)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: UDP (0x11)
    Header checksum: 0x03fd [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.22 (192.168.1.22)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
    Source port: 5060 (5060)
    Destination port: 5060 (5060)
    Length: 907
    Checksum: 0x3d9f [correct]
Session Initiation Protocol
    Request-Line: INVITE sip:323@86.68.99.61:5060 SIP/2.0
        Method: INVITE
        Resent Packet: False
    Message Header
        Via: SIP/2.0/UDP ip_pbx_xx.xx.xx.xx:5060;branch=z9hG4bK1233851537;rport
        From: ;tag=968066386
            SIP from address: sip:324@ip_pbx_xx.xx.xx.xx
            SIP tag: 968066386
        To: "323" ;tag=4a7fa229
            SIP Display info: "323"
            SIP to address: sip:323@ip_pbx_xx.xx.xx.xx
            SIP tag: 4a7fa229
        Call-ID: MzBhYTIxMmQyOTYzMjFhOWNlZGI4NTBiMDViNGUwNTk.
        CSeq: 5760 INVITE
        Contact:
            Contact Binding:
                URI:
                    SIP contact address: sip:324@ip_pbx_xx.xx.xx.xx:5060
        Max-Forwards: 70
        Supported: replaces, timer
        User-Agent: Grandstream GXE5024 1.0.1.40
        Allow: INVITE, ACK, OPTIONS, CANCEL, BYE, SUBSCRIBE, NOTIFY, PUBLISH, INFO, REFER, UPDATE
        Content-Type: application/sdp
        Content-Length:   345
    Message body
        Session Description Protocol
            Session Description Protocol Version (v): 0
            Owner/Creator, Session Id (o): 324 24522 24523 IN IP4 ip_pbx_xx.xx.xx.xx
                Owner Username: 324
                Session ID: 24522
                Session Version: 24523
                Owner Network Type: IN
                Owner Address Type: IP4
                Owner Address: ip_pbx_xx.xx.xx.xx
            Session Name (s): SIP Call
            Connection Information (c): IN IP4 ip_pbx_xx.xx.xx.xx
                Connection Network Type: IN
                Connection Address Type: IP4
                Connection Address: ip_pbx_xx.xx.xx.xx
            Time Description, active time (t): 0 0
                Session Start Time: 0
                Session Stop Time: 0
            Media Description, name and address (m): audio 6360 RTP/AVP 0 8 18 97 2 4 101
                Media Type: audio
                Media Port: 6360
                Media Proto: RTP/AVP
                Media Format: ITU-T G.711 PCMU
                Media Format: ITU-T G.711 PCMA
                Media Format: ITU-T G.729
                Media Format: 97
                Media Format: ITU-T G.721
                Media Format: ITU-T G.723
                Media Format: 101
            Media Attribute (a): rtpmap:0 PCMU/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 0 PCMU/8000
            Media Attribute (a): rtpmap:8 PCMA/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 8 PCMA/8000
            Media Attribute (a): rtpmap:18 G729/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 18 G729/8000
            Media Attribute (a): rtpmap:97 iLBC/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 97 iLBC/8000
            Media Attribute (a): fmtp:97 mode=20
                Media Attribute Fieldname: fmtp
                Media Attribute Value: 97 mode=20
            Media Attribute (a): rtpmap:2 G726-32/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 2 G726-32/8000
            Media Attribute (a): rtpmap:4 G723/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 4 G723/8000
            Media Attribute (a): rtpmap:101 telephone-event/8000
                Media Attribute Fieldname: rtpmap
                Media Attribute Value: 101 telephone-event/8000
            Media Attribute (a): ptime:20
                Media Attribute Fieldname: ptime
                Media Attribute Value: 20
            Media Attribute (a): sendrecv

No.     Time        Source                Destination           Protocol Info
     52 19.620544   192.168.1.22          ip_pbx_xx.xx.xx.xx        SIP      Status: 488 Not Acceptable Here

Frame 52 (369 bytes on wire, 369 bytes captured)
    Arrival Time: May 18, 2009 15:59:50.418268000
    Time delta from previous packet: 0.025396000 seconds
    Time since reference or first frame: 19.620544000 seconds
    Frame Number: 52
    Packet Length: 369 bytes
    Capture Length: 369 bytes
    Protocols in frame: eth:ip:udp:sip
Ethernet II, Src: AlliedTe_26:11:39 (00:30:84:26:11:39), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: AlliedTe_26:11:39 (00:30:84:26:11:39)
        Address: AlliedTe_26:11:39 (00:30:84:26:11:39)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.22 (192.168.1.22), Dst: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 355
    Identification: 0xf9a9 (63913)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xb85b [correct]
        Good: True
        Bad : False
    Source: 192.168.1.22 (192.168.1.22)
    Destination: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
    Source port: 5060 (5060)
    Destination port: 5060 (5060)
    Length: 335
    Checksum: 0x970f [correct]
Session Initiation Protocol
    Status-Line: SIP/2.0 488 Not Acceptable Here
        Status-Code: 488
        Resent Packet: False
    Message Header
        Via: SIP/2.0/UDP ip_pbx_xx.xx.xx.xx:5060;branch=z9hG4bK1233851537;rport=5060
        To: "323";tag=4a7fa229
            SIP Display info: "323"
            SIP to address: sip:323@ip_pbx_xx.xx.xx.xx
            SIP tag: 4a7fa229
        From: ;tag=968066386
            SIP from address: sip:324@ip_pbx_xx.xx.xx.xx
            SIP tag: 968066386
        Call-ID: MzBhYTIxMmQyOTYzMjFhOWNlZGI4NTBiMDViNGUwNTk.
        CSeq: 5760 INVITE
        User-Agent: TERASIP/1.0.0.944
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
     53 19.724238   ip_pbx_xx.xx.xx.xx        192.168.1.22          SIP      Request: ACK sip:323@86.68.99.61:5060

Frame 53 (336 bytes on wire, 336 bytes captured)
    Arrival Time: May 18, 2009 15:59:50.521962000
    Time delta from previous packet: 0.103694000 seconds
    Time since reference or first frame: 19.724238000 seconds
    Frame Number: 53
    Packet Length: 336 bytes
    Capture Length: 336 bytes
    Protocols in frame: eth:ip:udp:sip
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: AlliedTe_26:11:39 (00:30:84:26:11:39)
    Destination: AlliedTe_26:11:39 (00:30:84:26:11:39)
        Address: AlliedTe_26:11:39 (00:30:84:26:11:39)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.22 (192.168.1.22)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 322
    Identification: 0xb5cd (46541)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: UDP (0x11)
    Header checksum: 0x0659 [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.22 (192.168.1.22)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
    Source port: 5060 (5060)
    Destination port: 5060 (5060)
    Length: 302
    Checksum: 0xd640 [correct]
Session Initiation Protocol
    Request-Line: ACK sip:323@86.68.99.61:5060 SIP/2.0
        Method: ACK
        Resent Packet: False
    Message Header
        Via: SIP/2.0/UDP ip_pbx_xx.xx.xx.xx:5060;branch=z9hG4bK1233851537;rport
        From: ;tag=968066386
            SIP from address: sip:324@ip_pbx_xx.xx.xx.xx
            SIP tag: 968066386
        To: "323" ;tag=4a7fa229
            SIP Display info: "323"
            SIP to address: sip:323@ip_pbx_xx.xx.xx.xx
            SIP tag: 4a7fa229
        Call-ID: MzBhYTIxMmQyOTYzMjFhOWNlZGI4NTBiMDViNGUwNTk.
        CSeq: 5760 ACK
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
     54 19.734099   ip_pbx_xx.xx.xx.xx        192.168.1.22          SIP      Request: BYE sip:323@86.68.99.61:5060

Frame 54 (605 bytes on wire, 605 bytes captured)
    Arrival Time: May 18, 2009 15:59:50.531823000
    Time delta from previous packet: 0.009861000 seconds
    Time since reference or first frame: 19.734099000 seconds
    Frame Number: 54
    Packet Length: 605 bytes
    Capture Length: 605 bytes
    Protocols in frame: eth:ip:udp:sip
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: AlliedTe_26:11:39 (00:30:84:26:11:39)
    Destination: AlliedTe_26:11:39 (00:30:84:26:11:39)
        Address: AlliedTe_26:11:39 (00:30:84:26:11:39)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.22 (192.168.1.22)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 591
    Identification: 0xb5ce (46542)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: UDP (0x11)
    Header checksum: 0x054b [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.22 (192.168.1.22)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
    Source port: 5060 (5060)
    Destination port: 5060 (5060)
    Length: 571
    Checksum: 0xe303 [correct]
Session Initiation Protocol
    Request-Line: BYE sip:323@86.68.99.61:5060 SIP/2.0
        Method: BYE
        Resent Packet: False
    Message Header
        Via: SIP/2.0/UDP ip_pbx_xx.xx.xx.xx:5060;branch=z9hG4bK1934322157;rport
        From: ;tag=968066386
            SIP from address: sip:324@ip_pbx_xx.xx.xx.xx
            SIP tag: 968066386
        To: "323" ;tag=4a7fa229
            SIP Display info: "323"
            SIP to address: sip:323@ip_pbx_xx.xx.xx.xx
            SIP tag: 4a7fa229
        Call-ID: MzBhYTIxMmQyOTYzMjFhOWNlZGI4NTBiMDViNGUwNTk.
        CSeq: 5761 BYE
        Contact:
            Contact Binding:
                URI:
                    SIP contact address: sip:324@ip_pbx_xx.xx.xx.xx:5060
        Max-Forwards: 70
        Supported: replaces, timer
        User-Agent: Grandstream GXE5024 1.0.1.40
        Reason: sip;cause=488;text="Not Acceptable Here"
        Allow: INVITE, ACK, OPTIONS, CANCEL, BYE, SUBSCRIBE, NOTIFY, PUBLISH, INFO, REFER, UPDATE
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
     55 19.740417   ip_pbx_xx.xx.xx.xx        192.168.1.20          SIP      Request: CANCEL sip:324@86.68.99.61:1030

Frame 55 (540 bytes on wire, 540 bytes captured)
    Arrival Time: May 18, 2009 15:59:50.538141000
    Time delta from previous packet: 0.006318000 seconds
    Time since reference or first frame: 19.740417000 seconds
    Frame Number: 55
    Packet Length: 540 bytes
    Capture Length: 540 bytes
    Protocols in frame: eth:ip:tcp:sip
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
    Destination: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.20 (192.168.1.20)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 526
    Identification: 0x88fe (35070)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (0x06)
    Header checksum: 0x3269 [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.20 (192.168.1.20)
Transmission Control Protocol, Src Port: 5060 (5060), Dst Port: 5066 (5066), Seq: 1492, Ack: 967, Len: 486
    Source port: 5060 (5060)
    Destination port: 5066 (5066)
    Sequence number: 1492    (relative sequence number)
    Next sequence number: 1978    (relative sequence number)
    Acknowledgement number: 967    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 18607
    Checksum: 0x7698 [correct]
Session Initiation Protocol
    Request-Line: CANCEL sip:324@86.68.99.61:1030 SIP/2.0
        Method: CANCEL
        Resent Packet: False
    Message Header
        Via: SIP/2.0/TCP ip_pbx_xx.xx.xx.xx:5060;branch=z9hG4bK1236081177;alias
        From: "323" ;tag=852961145
            SIP Display info: "323"
            SIP from address: sip:323@ip_pbx_xx.xx.xx.xx:5060
            SIP tag: 852961145
        To: "324"
            SIP Display info: "324"
            SIP to address: sip:324@86.68.99.61:1030
        Call-ID: 328238417-5060-178134@ip_pbx_xx.xx.xx.xx
        CSeq: 1905800 CANCEL
        Max-Forwards: 70
        User-Agent: Grandstream GXE5024 1.0.1.40
        Contact:
            Contact Binding:
                URI:
                    SIP contact address: sip:323@ip_pbx_xx.xx.xx.xx:5060
        Allow: INVITE, ACK, OPTIONS, CANCEL, BYE, SUBSCRIBE, NOTIFY, PUBLISH, INFO, REFER, UPDATE
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
     56 19.761021   192.168.1.22          ip_pbx_xx.xx.xx.xx        SIP      Status: 200 OK

Frame 56 (387 bytes on wire, 387 bytes captured)
    Arrival Time: May 18, 2009 15:59:50.558745000
    Time delta from previous packet: 0.020604000 seconds
    Time since reference or first frame: 19.761021000 seconds
    Frame Number: 56
    Packet Length: 387 bytes
    Capture Length: 387 bytes
    Protocols in frame: eth:ip:udp:sip
Ethernet II, Src: AlliedTe_26:11:39 (00:30:84:26:11:39), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: AlliedTe_26:11:39 (00:30:84:26:11:39)
        Address: AlliedTe_26:11:39 (00:30:84:26:11:39)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.22 (192.168.1.22), Dst: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 373
    Identification: 0xf9aa (63914)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0xb848 [correct]
        Good: True
        Bad : False
    Source: 192.168.1.22 (192.168.1.22)
    Destination: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
    Source port: 5060 (5060)
    Destination port: 5060 (5060)
    Length: 353
    Checksum: 0x8ac1 [correct]
Session Initiation Protocol
    Status-Line: SIP/2.0 200 OK
        Status-Code: 200
        Resent Packet: False
    Message Header
        Via: SIP/2.0/UDP ip_pbx_xx.xx.xx.xx:5060;branch=z9hG4bK1934322157;rport=5060
        Contact:
            Contact Binding:
                URI:
                    SIP contact address: sip:323@192.168.1.22:5060
        To: "323";tag=4a7fa229
            SIP Display info: "323"
            SIP to address: sip:323@ip_pbx_xx.xx.xx.xx
            SIP tag: 4a7fa229
        From: ;tag=968066386
            SIP from address: sip:324@ip_pbx_xx.xx.xx.xx
            SIP tag: 968066386
        Call-ID: MzBhYTIxMmQyOTYzMjFhOWNlZGI4NTBiMDViNGUwNTk.
        CSeq: 5761 BYE
        User-Agent: TERASIP/1.0.0.944
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
     57 19.768596   192.168.1.20          ip_pbx_xx.xx.xx.xx        SIP      Status: 487 Request Cancelled

Frame 57 (763 bytes on wire, 763 bytes captured)
    Arrival Time: May 18, 2009 15:59:50.566320000
    Time delta from previous packet: 0.007575000 seconds
    Time since reference or first frame: 19.768596000 seconds
    Frame Number: 57
    Packet Length: 763 bytes
    Capture Length: 763 bytes
    Protocols in frame: eth:ip:tcp:sip
Ethernet II, Src: Grandstr_1b:85:6e (00:0b:82:1b:85:6e), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0xc0 (DSCP 0x30: Class Selector 6; ECN: 0x00)
        1100 00.. = Differentiated Services Codepoint: Class Selector 6 (0x30)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 749
    Identification: 0x04c5 (1221)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: TCP (0x06)
    Header checksum: 0x2c03 [correct]
        Good: True
        Bad : False
    Source: 192.168.1.20 (192.168.1.20)
    Destination: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
Transmission Control Protocol, Src Port: 5066 (5066), Dst Port: 5060 (5060), Seq: 967, Ack: 1978, Len: 709
    Source port: 5066 (5066)
    Destination port: 5060 (5060)
    Sequence number: 967    (relative sequence number)
    Next sequence number: 1676    (relative sequence number)
    Acknowledgement number: 1978    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 3584
    Checksum: 0xa9bd [correct]
Session Initiation Protocol
    Status-Line: SIP/2.0 200 OK
        Status-Code: 200
        Resent Packet: False
    Message Header
        Via: SIP/2.0/TCP ip_pbx_xx.xx.xx.xx:5060;branch=z9hG4bK1236081177;alias
        From: "323" ;tag=852961145
            SIP Display info: "323"
            SIP from address: sip:323@ip_pbx_xx.xx.xx.xx:5060
            SIP tag: 852961145
        To: "324" ;tag=590205e1c0c7fa6d
            SIP Display info: "324"
            SIP to address: sip:324@86.68.99.61:1030
            SIP tag: 590205e1c0c7fa6d
        Call-ID: 328238417-5060-178134@ip_pbx_xx.xx.xx.xx
        CSeq: 1905800 CANCEL
        User-Agent: Grandstream GXP2010 1.1.6.37
        Supported: replaces, timer
        Content-Length: 0
Session Initiation Protocol
    Status-Line: SIP/2.0 487 Request Cancelled
        Status-Code: 200
        Resent Packet: False
    Message Header
        Via: SIP/2.0/TCP ip_pbx_xx.xx.xx.xx:5060;branch=z9hG4bK1236081177;alias
        From: "323" ;tag=852961145
            SIP Display info: "323"
            SIP from address: sip:323@ip_pbx_xx.xx.xx.xx:5060
            SIP tag: 852961145
        To: "324" ;tag=590205e1c0c7fa6d
            SIP Display info: "324"
            SIP to address: sip:324@86.68.99.61:1030
            SIP tag: 590205e1c0c7fa6d
        Call-ID: 328238417-5060-178134@ip_pbx_xx.xx.xx.xx
        CSeq: 1905800 INVITE
        User-Agent: Grandstream GXP2010 1.1.6.37
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
     58 19.867138   ip_pbx_xx.xx.xx.xx        192.168.1.20          TCP      5060 > 5066 [ACK] Seq=1978 Ack=1676 Win=20225 Len=0

Frame 58 (60 bytes on wire, 60 bytes captured)
    Arrival Time: May 18, 2009 15:59:50.664862000
    Time delta from previous packet: 0.098542000 seconds
    Time since reference or first frame: 19.867138000 seconds
    Frame Number: 58
    Packet Length: 60 bytes
    Capture Length: 60 bytes
    Protocols in frame: eth:ip:tcp
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
    Destination: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
    Trailer: 000000000000
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.20 (192.168.1.20)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 40
    Identification: 0x8900 (35072)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (0x06)
    Header checksum: 0x344d [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.20 (192.168.1.20)
Transmission Control Protocol, Src Port: 5060 (5060), Dst Port: 5066 (5066), Seq: 1978, Ack: 1676, Len: 0
    Source port: 5060 (5060)
    Destination port: 5066 (5066)
    Sequence number: 1978    (relative sequence number)
    Acknowledgement number: 1676    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 20225
    Checksum: 0xfbc1 [correct]

No.     Time        Source                Destination           Protocol Info
     59 19.877139   ip_pbx_xx.xx.xx.xx        192.168.1.20          SIP      Request: ACK sip:324@86.68.99.61:1030

Frame 59 (364 bytes on wire, 364 bytes captured)
    Arrival Time: May 18, 2009 15:59:50.674863000
    Time delta from previous packet: 0.108543000 seconds
    Time since reference or first frame: 19.877139000 seconds
    Frame Number: 59
    Packet Length: 364 bytes
    Capture Length: 364 bytes
    Protocols in frame: eth:ip:tcp:sip
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
    Destination: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.20 (192.168.1.20)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 350
    Identification: 0x8902 (35074)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (0x06)
    Header checksum: 0x3315 [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.20 (192.168.1.20)
Transmission Control Protocol, Src Port: 5060 (5060), Dst Port: 5066 (5066), Seq: 1978, Ack: 1676, Len: 310
    Source port: 5060 (5060)
    Destination port: 5066 (5066)
    Sequence number: 1978    (relative sequence number)
    Next sequence number: 2288    (relative sequence number)
    Acknowledgement number: 1676    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 20225
    Checksum: 0x107b [correct]
Session Initiation Protocol
    Request-Line: ACK sip:324@86.68.99.61:1030 SIP/2.0
        Method: ACK
        Resent Packet: False
    Message Header
        Via: SIP/2.0/TCP ip_pbx_xx.xx.xx.xx:5060;branch=z9hG4bK1236081177;alias
        From: "323" ;tag=852961145
            SIP Display info: "323"
            SIP from address: sip:323@ip_pbx_xx.xx.xx.xx:5060
            SIP tag: 852961145
        To: "324" ;tag=590205e1c0c7fa6d
            SIP Display info: "324"
            SIP to address: sip:324@86.68.99.61:1030
            SIP tag: 590205e1c0c7fa6d
        Call-ID: 328238417-5060-178134@ip_pbx_xx.xx.xx.xx
        CSeq: 1905800 ACK
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
     60 19.885599   ip_pbx_xx.xx.xx.xx        192.168.1.20          SIP      Request: OPTIONS sip:324@86.68.99.61:1030

Frame 60 (597 bytes on wire, 597 bytes captured)
    Arrival Time: May 18, 2009 15:59:50.683323000
    Time delta from previous packet: 0.008460000 seconds
    Time since reference or first frame: 19.885599000 seconds
    Frame Number: 60
    Packet Length: 597 bytes
    Capture Length: 597 bytes
    Protocols in frame: eth:ip:tcp:sip
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
    Destination: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.20 (192.168.1.20)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 583
    Identification: 0x8904 (35076)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (0x06)
    Header checksum: 0x322a [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.20 (192.168.1.20)
Transmission Control Protocol, Src Port: 5060 (5060), Dst Port: 5066 (5066), Seq: 2288, Ack: 1676, Len: 543
    Source port: 5060 (5060)
    Destination port: 5066 (5066)
    Sequence number: 2288    (relative sequence number)
    Next sequence number: 2831    (relative sequence number)
    Acknowledgement number: 1676    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 20225
    Checksum: 0xd509 [correct]
Session Initiation Protocol
    Request-Line: OPTIONS sip:324@86.68.99.61:1030 SIP/2.0
        Method: OPTIONS
        Resent Packet: False
    Message Header
        Via: SIP/2.0/TCP ip_pbx_xx.xx.xx.xx:5060;branch=z9hG4bK2014089312;alias
        From: ;tag=798778404
            SIP from address: sip:324@ip_pbx_xx.xx.xx.xx:5060
            SIP tag: 798778404
        To:
            SIP to address: sip:324@86.68.99.61:1030
        Call-ID: 878697773-5060-178135@ip_pbx_xx.xx.xx.xx
        CSeq: 1905810 OPTIONS
        Contact:
            Contact Binding:
                URI:
                    SIP contact address: sip:324@ip_pbx_xx.xx.xx.xx:5060
        Max-Forwards: 70
        Supported: replaces, timer
        User-Agent: Grandstream GXE5024 1.0.1.40
        Allow: INVITE, ACK, OPTIONS, CANCEL, BYE, SUBSCRIBE, NOTIFY, PUBLISH, INFO, REFER, UPDATE
        Accept: application/sdp
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
     61 19.889256   192.168.1.20          ip_pbx_xx.xx.xx.xx        TCP      5066 > 5060 [ACK] Seq=1676 Ack=2288 Win=3584 Len=0

Frame 61 (60 bytes on wire, 60 bytes captured)
    Arrival Time: May 18, 2009 15:59:50.686980000
    Time delta from previous packet: 0.003657000 seconds
    Time since reference or first frame: 19.889256000 seconds
    Frame Number: 61
    Packet Length: 60 bytes
    Capture Length: 60 bytes
    Protocols in frame: eth:ip:tcp
Ethernet II, Src: Grandstr_1b:85:6e (00:0b:82:1b:85:6e), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
    Trailer: 000000000000
Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0xc0 (DSCP 0x30: Class Selector 6; ECN: 0x00)
        1100 00.. = Differentiated Services Codepoint: Class Selector 6 (0x30)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 40
    Identification: 0x04c6 (1222)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: TCP (0x06)
    Header checksum: 0x2ec7 [correct]
        Good: True
        Bad : False
    Source: 192.168.1.20 (192.168.1.20)
    Destination: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
Transmission Control Protocol, Src Port: 5066 (5066), Dst Port: 5060 (5060), Seq: 1676, Ack: 2288, Len: 0
    Source port: 5066 (5066)
    Destination port: 5060 (5060)
    Sequence number: 1676    (relative sequence number)
    Acknowledgement number: 2288    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 3584
    Checksum: 0x3b8d [correct]

No.     Time        Source                Destination           Protocol Info
     62 19.907383   192.168.1.20          ip_pbx_xx.xx.xx.xx        SIP      Status: 200 OK

Frame 62 (543 bytes on wire, 543 bytes captured)
    Arrival Time: May 18, 2009 15:59:50.705107000
    Time delta from previous packet: 0.021784000 seconds
    Time since reference or first frame: 19.907383000 seconds
    Frame Number: 62
    Packet Length: 543 bytes
    Capture Length: 543 bytes
    Protocols in frame: eth:ip:tcp:sip
Ethernet II, Src: Grandstr_1b:85:6e (00:0b:82:1b:85:6e), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0xc0 (DSCP 0x30: Class Selector 6; ECN: 0x00)
        1100 00.. = Differentiated Services Codepoint: Class Selector 6 (0x30)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 529
    Identification: 0x04c7 (1223)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: TCP (0x06)
    Header checksum: 0x2cdd [correct]
        Good: True
        Bad : False
    Source: 192.168.1.20 (192.168.1.20)
    Destination: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
Transmission Control Protocol, Src Port: 5066 (5066), Dst Port: 5060 (5060), Seq: 1676, Ack: 2831, Len: 489
    Source port: 5066 (5066)
    Destination port: 5060 (5060)
    Sequence number: 1676    (relative sequence number)
    Next sequence number: 2165    (relative sequence number)
    Acknowledgement number: 2831    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 3584
    Checksum: 0x7e25 [correct]
Session Initiation Protocol
    Status-Line: SIP/2.0 200 OK
        Status-Code: 200
        Resent Packet: False
    Message Header
        Via: SIP/2.0/TCP ip_pbx_xx.xx.xx.xx:5060;branch=z9hG4bK2014089312;alias
        From: ;tag=798778404
            SIP from address: sip:324@ip_pbx_xx.xx.xx.xx:5060
            SIP tag: 798778404
        To: ;tag=b0de47679bdb9eb2
            SIP to address: sip:324@86.68.99.61:1030
            SIP tag: b0de47679bdb9eb2
        Call-ID: 878697773-5060-178135@ip_pbx_xx.xx.xx.xx
        CSeq: 1905810 OPTIONS
        User-Agent: Grandstream GXP2010 1.1.6.37
        Contact:
            Contact Binding:
                URI:
                    SIP contact address: sip:324@192.168.1.20:5066
        Allow: INVITE,ACK,CANCEL,BYE,NOTIFY,REFER,OPTIONS,INFO,SUBSCRIBE,UPDATE,PRACK,MESSAGE
        Supported: replaces, timer
        Content-Length: 0

No.     Time        Source                Destination           Protocol Info
     63 20.035701   ip_pbx_xx.xx.xx.xx        192.168.1.20          TCP      5060 > 5066 [ACK] Seq=2831 Ack=2165 Win=20225 Len=0

Frame 63 (60 bytes on wire, 60 bytes captured)
    Arrival Time: May 18, 2009 15:59:50.833425000
    Time delta from previous packet: 0.128318000 seconds
    Time since reference or first frame: 20.035701000 seconds
    Frame Number: 63
    Packet Length: 60 bytes
    Capture Length: 60 bytes
    Protocols in frame: eth:ip:tcp
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
    Destination: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
    Trailer: 000000000000
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.20 (192.168.1.20)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 40
    Identification: 0x8906 (35078)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (0x06)
    Header checksum: 0x3447 [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.20 (192.168.1.20)
Transmission Control Protocol, Src Port: 5060 (5060), Dst Port: 5066 (5066), Seq: 2831, Ack: 2165, Len: 0
    Source port: 5060 (5060)
    Destination port: 5066 (5066)
    Sequence number: 2831    (relative sequence number)
    Acknowledgement number: 2165    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 20225
    Checksum: 0xf683 [correct]

No.     Time        Source                Destination           Protocol Info
     64 22.886643   ip_pbx_xx.xx.xx.xx        192.168.1.20          TCP      [TCP Keep-Alive] 5060 > 5062 [ACK] Seq=544 Ack=490 Win=32767 Len=0

Frame 64 (60 bytes on wire, 60 bytes captured)
    Arrival Time: May 18, 2009 15:59:53.684367000
    Time delta from previous packet: 2.979260000 seconds
    Time since reference or first frame: 22.886643000 seconds
    Frame Number: 64
    Packet Length: 60 bytes
    Capture Length: 60 bytes
    Protocols in frame: eth:ip:tcp
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
    Destination: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
    Trailer: 000000000000
Internet Protocol, Src: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx), Dst: 192.168.1.20 (192.168.1.20)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 40
    Identification: 0xcd99 (52633)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: TCP (0x06)
    Header checksum: 0xefb3 [correct]
        Good: True
        Bad : False
    Source: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Destination: 192.168.1.20 (192.168.1.20)
Transmission Control Protocol, Src Port: 5060 (5060), Dst Port: 5062 (5062), Seq: 544, Ack: 490, Len: 0
    Source port: 5060 (5060)
    Destination port: 5062 (5062)
    Sequence number: 544    (relative sequence number)
    Acknowledgement number: 490    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 32767
    Checksum: 0x7dc8 [correct]
    SEQ/ACK analysis
        TCP Analysis Flags
            This is a TCP keep-alive segment

No.     Time        Source                Destination           Protocol Info
     65 22.892630   192.168.1.20          ip_pbx_xx.xx.xx.xx        TCP      [TCP Keep-Alive ACK] 5062 > 5060 [ACK] Seq=490 Ack=545 Win=3584 Len=0

Frame 65 (60 bytes on wire, 60 bytes captured)
    Arrival Time: May 18, 2009 15:59:53.690354000
    Time delta from previous packet: 2.985247000 seconds
    Time since reference or first frame: 22.892630000 seconds
    Frame Number: 65
    Packet Length: 60 bytes
    Capture Length: 60 bytes
    Protocols in frame: eth:ip:tcp
Ethernet II, Src: Grandstr_1b:85:6e (00:0b:82:1b:85:6e), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        Address: Grandstr_1b:85:6e (00:0b:82:1b:85:6e)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: IP (0x0800)
    Trailer: 000000000000
Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0xc0 (DSCP 0x30: Class Selector 6; ECN: 0x00)
        1100 00.. = Differentiated Services Codepoint: Class Selector 6 (0x30)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 40
    Identification: 0x04c8 (1224)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255
    Protocol: TCP (0x06)
    Header checksum: 0x2ec5 [correct]
        Good: True
        Bad : False
    Source: 192.168.1.20 (192.168.1.20)
    Destination: ip_pbx_xx.xx.xx.xx (ip_pbx_xx.xx.xx.xx)
Transmission Control Protocol, Src Port: 5062 (5062), Dst Port: 5060 (5060), Seq: 490, Ack: 545, Len: 0
    Source port: 5062 (5062)
    Destination port: 5060 (5060)
    Sequence number: 490    (relative sequence number)
    Acknowledgement number: 545    (relative ack number)
    Header length: 20 bytes
    Flags: 0x0010 (ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 0... = Push: Not set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 3584
    Checksum: 0xefc6 [correct]
    SEQ/ACK analysis
        TCP Analysis Flags
            This is an ACK to a TCP keep-alive segment

No.     Time        Source                Destination           Protocol Info
     66 23.580235   NeufCege_a2:76:60     Palmmicr_56:1f:92     ARP      Who has 192.168.1.100?  Tell 192.168.1.1

Frame 66 (60 bytes on wire, 60 bytes captured)
    Arrival Time: May 18, 2009 15:59:54.377959000
    Time delta from previous packet: 3.672852000 seconds
    Time since reference or first frame: 23.580235000 seconds
    Frame Number: 66
    Packet Length: 60 bytes
    Capture Length: 60 bytes
    Protocols in frame: eth:arp
Ethernet II, Src: NeufCege_a2:76:60 (00:17:33:a2:76:60), Dst: Palmmicr_56:1f:92 (00:09:45:56:1f:92)
    Destination: Palmmicr_56:1f:92 (00:09:45:56:1f:92)
        Address: Palmmicr_56:1f:92 (00:09:45:56:1f:92)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: ARP (0x0806)
    Trailer: 000000000000000000000000000000000000
Address Resolution Protocol (request)
    Hardware type: Ethernet (0x0001)
    Protocol type: IP (0x0800)
    Hardware size: 6
    Protocol size: 4
    Opcode: request (0x0001)
    Sender MAC address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Sender IP address: 192.168.1.1 (192.168.1.1)
    Target MAC address: 00:00:00_00:00:00 (00:00:00:00:00:00)
    Target IP address: 192.168.1.100 (192.168.1.100)

No.     Time        Source                Destination           Protocol Info
     67 23.580376   Palmmicr_56:1f:92     NeufCege_a2:76:60     ARP      192.168.1.100 is at 00:09:45:56:1f:92

Frame 67 (60 bytes on wire, 60 bytes captured)
    Arrival Time: May 18, 2009 15:59:54.378100000
    Time delta from previous packet: 3.672993000 seconds
    Time since reference or first frame: 23.580376000 seconds
    Frame Number: 67
    Packet Length: 60 bytes
    Capture Length: 60 bytes
    Protocols in frame: eth:arp
Ethernet II, Src: Palmmicr_56:1f:92 (00:09:45:56:1f:92), Dst: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Destination: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        Address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Source: Palmmicr_56:1f:92 (00:09:45:56:1f:92)
        Address: Palmmicr_56:1f:92 (00:09:45:56:1f:92)
        .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
        .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
    Type: ARP (0x0806)
    Trailer: 000000000000000000000000000000000000
Address Resolution Protocol (reply)
    Hardware type: Ethernet (0x0001)
    Protocol type: IP (0x0800)
    Hardware size: 6
    Protocol size: 4
    Opcode: reply (0x0002)
    Sender MAC address: Palmmicr_56:1f:92 (00:09:45:56:1f:92)
    Sender IP address: 192.168.1.100 (192.168.1.100)
    Target MAC address: NeufCege_a2:76:60 (00:17:33:a2:76:60)
    Target IP address: 192.168.1.1 (192.168.1.1)



-------end ethereal capture---------
Thank you for helping.
--------------------------
felix
--------------------------
 
 
 Write Us|  Add to favorites
 
 
 ©2009 TERASENS GmbH. All rights reserved. Copyright Notice