Here's whole signalization of asterisk call attempt.
No. Time Source Destination Protocol Length Info
1744 10.903634 10.200.1.2 ip.of.call.server SIP 504 Request: REGISTER sip:sip.domain.xx (1 binding) |
Frame 1744: 504 bytes on wire (4032 bits), 504 bytes captured (4032 bits)
Ethernet II, Src: Microsof_b6:65:e3 (00:0d:3a:b6:65:e3), Dst: 12:34:56:78:9a:bc (12:34:56:78:9a:bc)
Internet Protocol Version 4, Src: 10.200.1.2, Dst: ip.of.call.server
Transmission Control Protocol, Src Port: 34652, Dst Port: 5060, Seq: 1, Ack: 1, Len: 438
Source Port: 34652
Destination Port: 5060
[Stream index: 37]
[TCP Segment Len: 438]
Sequence number: 1 (relative sequence number)
[Next sequence number: 439 (relative sequence number)]
Acknowledgment number: 1 (relative ack number)
Header Length: 32 bytes
Flags: 0x018 (PSH, ACK)
Window size value: 502
[Calculated window size: 64256]
[Window size scaling factor: 128]
Checksum: 0xc0a5 [unverified]
[Checksum Status: Unverified]
Urgent pointer: 0
Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
[SEQ/ACK analysis]
Session Initiation Protocol (REGISTER)
Request-Line: REGISTER sip:sip.domain.xx SIP/2.0
Method: REGISTER
Request-URI: sip:sip.domain.xx
Request-URI Host Part: sip.domain.xx
[Resent Packet: False]
Message Header
Via: SIP/2.0/TCP 10.200.1.2:5060;branch=z9hG4bK20026001
Transport: TCP
Sent-by Address: 10.200.1.2
Sent-by port: 5060
Branch: z9hG4bK20026001
Max-Forwards: 70
From: <sip:1234@sip.domain.xx>;tag=as7c472815
To: <sip:1234@sip.domain.xx>
Call-ID: 557e13381968b12a4ffb7e9923e28f58@10.200.1.2
CSeq: 102 REGISTER
Supported: replaces, timer
User-Agent: Asterisk PBX 15.7.4
Expires: 60
Contact: <sip:sipuser1@10.200.1.2:5060;transport=tcp>
Content-Length: 0
No. Time Source Destination Protocol Length Info
1820 10.949434 ip.of.call.server 10.200.1.2 SIP 666 Status: 401 Unauthorized |
Frame 1820: 666 bytes on wire (5328 bits), 666 bytes captured (5328 bits)
Ethernet II, Src: b0:8b:cf:4c:21:47 (b0:8b:cf:4c:21:47), Dst: Microsof_b6:65:e3 (00:0d:3a:b6:65:e3)
Internet Protocol Version 4, Src: ip.of.call.server, Dst: 10.200.1.2
Transmission Control Protocol, Src Port: 5060, Dst Port: 34652, Seq: 1, Ack: 439, Len: 600
Source Port: 5060
Destination Port: 34652
[Stream index: 37]
[TCP Segment Len: 600]
Sequence number: 1 (relative sequence number)
[Next sequence number: 601 (relative sequence number)]
Acknowledgment number: 439 (relative ack number)
Header Length: 32 bytes
Flags: 0x018 (PSH, ACK)
Window size value: 6432
[Calculated window size: 6432]
[Window size scaling factor: 1]
Checksum: 0x7caf [unverified]
[Checksum Status: Unverified]
Urgent pointer: 0
Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
[SEQ/ACK analysis]
Session Initiation Protocol (401)
Status-Line: SIP/2.0 401 Unauthorized
Status-Code: 401
[Resent Packet: False]
Message Header
WWW-Authenticate: Digest realm="sip.domain.xx",qop="auth",opaque="1234567890abcedef",nonce="17014aaf58227bff56d1a492968d9d6c665cfd4f8eb",algorithm=MD5,stale=false
Call-ID: 557e13381968b12a4ffb7e9923e28f58@10.200.1.2
CSeq: 102 REGISTER
From: <sip:1234@sip.domain.xx>;tag=as7c472815
To: <sip:1234@sip.domain.xx>;tag=6892319547233379_local.1563400185172_62949499_66766725
Via: SIP/2.0/TCP 10.200.1.2:5060;branch=z9hG4bK20026001
Transport: TCP
Sent-by Address: 10.200.1.2
Sent-by port: 5060
Branch: z9hG4bK20026001
Av-Global-Session-ID: 69976620-47f9-11ea-bc6b-000c29409cbf
Server: AVAYA-SM-7.0.1.2.701230
Content-Length: 0
No. Time Source Destination Protocol Length Info
1822 10.949752 10.200.1.2 ip.of.call.server SIP 793 Request: REGISTER sip:sip.domain.xx (1 binding) |
Frame 1822: 793 bytes on wire (6344 bits), 793 bytes captured (6344 bits)
Ethernet II, Src: Microsof_b6:65:e3 (00:0d:3a:b6:65:e3), Dst: 12:34:56:78:9a:bc (12:34:56:78:9a:bc)
Internet Protocol Version 4, Src: 10.200.1.2, Dst: ip.of.call.server
Transmission Control Protocol, Src Port: 34652, Dst Port: 5060, Seq: 439, Ack: 601, Len: 727
Source Port: 34652
Destination Port: 5060
[Stream index: 37]
[TCP Segment Len: 727]
Sequence number: 439 (relative sequence number)
[Next sequence number: 1166 (relative sequence number)]
Acknowledgment number: 601 (relative ack number)
Header Length: 32 bytes
Flags: 0x018 (PSH, ACK)
Window size value: 501
[Calculated window size: 64128]
[Window size scaling factor: 128]
Checksum: 0xc1c6 [unverified]
[Checksum Status: Unverified]
Urgent pointer: 0
Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
[SEQ/ACK analysis]
Session Initiation Protocol (REGISTER)
Request-Line: REGISTER sip:sip.domain.xx SIP/2.0
Method: REGISTER
Request-URI: sip:sip.domain.xx
Request-URI Host Part: sip.domain.xx
[Resent Packet: False]
Message Header
Via: SIP/2.0/TCP 10.200.1.2:5060;branch=z9hG4bK48f0c1aa
Transport: TCP
Sent-by Address: 10.200.1.2
Sent-by port: 5060
Branch: z9hG4bK48f0c1aa
Max-Forwards: 70
From: <sip:1234@sip.domain.xx>;tag=as7c472815
To: <sip:1234@sip.domain.xx>
Call-ID: 557e13381968b12a4ffb7e9923e28f58@10.200.1.2
CSeq: 103 REGISTER
Supported: replaces, timer
User-Agent: Asterisk PBX 15.7.4
[truncated]Authorization: Digest username="1234", realm="sip.domain.xx", algorithm=MD5, uri="sip:sip.domain.xx", nonce="17014aaf58227bff56d1a492968d9d6c665cfd4f8eb", response="bebd3b07975e64d21f84695a3107631c", opaque="
Expires: 60
Contact: <sip:sipuser1@10.200.1.2:5060;transport=tcp>
Content-Length: 0
No. Time Source Destination Protocol Length Info
1823 10.997858 ip.of.call.server 10.200.1.2 SIP 760 Status: 200 OK (2 bindings) |
Frame 1823: 760 bytes on wire (6080 bits), 760 bytes captured (6080 bits)
Ethernet II, Src: b0:8b:cf:4c:21:47 (b0:8b:cf:4c:21:47), Dst: Microsof_b6:65:e3 (00:0d:3a:b6:65:e3)
Internet Protocol Version 4, Src: ip.of.call.server, Dst: 10.200.1.2
Transmission Control Protocol, Src Port: 5060, Dst Port: 34652, Seq: 601, Ack: 1166, Len: 694
Source Port: 5060
Destination Port: 34652
[Stream index: 37]
[TCP Segment Len: 694]
Sequence number: 601 (relative sequence number)
[Next sequence number: 1295 (relative sequence number)]
Acknowledgment number: 1166 (relative ack number)
Header Length: 32 bytes
Flags: 0x018 (PSH, ACK)
Window size value: 7997
[Calculated window size: 7997]
[Window size scaling factor: 1]
Checksum: 0x9a63 [unverified]
[Checksum Status: Unverified]
Urgent pointer: 0
Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
[SEQ/ACK analysis]
Session Initiation Protocol (200)
Status-Line: SIP/2.0 200 OK
Status-Code: 200
[Resent Packet: False]
Message Header
Contact: <sip:95306241@10.151.1.2:52672;transport=tcp>;expires=266;reg-id=1;+sip.instance="<urn:uuid:5dcc53b7-a780-4e63-aa08-a01aa1053364>", <sip:sipuser1@10.200.1.2:5060;transport=tcp>;expires=60
Feature-Caps: *;+sip.avaya-sips-handling
Call-ID: 557e13381968b12a4ffb7e9923e28f58@10.200.1.2
CSeq: 103 REGISTER
From: <sip:1234@sip.domain.xx>;tag=as7c472815
To: <sip:1234@sip.domain.xx>;tag=6612743099036518_local.1563400185172_62949506_66766733
Via: SIP/2.0/TCP 10.200.1.2:5060;branch=z9hG4bK48f0c1aa
Transport: TCP
Sent-by Address: 10.200.1.2
Sent-by port: 5060
Branch: z9hG4bK48f0c1aa
Av-Global-Session-ID: 699e6b00-47f9-11ea-bc6b-000c29409cbf
Server: AVAYA-SM-7.0.1.2.701230
Date: Wed, 05 Feb 2020 09:25:13 GMT
Content-Length: 0
No. Time Source Destination Protocol Length Info
2022 19.394639 ip.of.call.server 10.200.1.2 SIP/SDP 856 Request: INVITE sip:sipuser1@10.200.1.2:5060;transport=tcp |
Frame 2022: 856 bytes on wire (6848 bits), 856 bytes captured (6848 bits)
Ethernet II, Src: b0:8b:cf:4c:21:47 (b0:8b:cf:4c:21:47), Dst: Microsof_b6:65:e3 (00:0d:3a:b6:65:e3)
Internet Protocol Version 4, Src: ip.of.call.server, Dst: 10.200.1.2
Transmission Control Protocol, Src Port: 38352, Dst Port: 5060, Seq: 2697, Ack: 1, Len: 790
Source Port: 38352
Destination Port: 5060
[Stream index: 51]
[TCP Segment Len: 790]
Sequence number: 2697 (relative sequence number)
[Next sequence number: 3487 (relative sequence number)]
Acknowledgment number: 1 (relative ack number)
Header Length: 32 bytes
Flags: 0x018 (PSH, ACK)
Window size value: 2796
[Calculated window size: 5592]
[Window size scaling factor: 2]
Checksum: 0x1e48 [unverified]
[Checksum Status: Unverified]
Urgent pointer: 0
Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
[SEQ/ACK analysis]
TCP segment data (790 bytes)
[2 Reassembled TCP Segments (3486 bytes): #2015(2696), #2022(790)]
Session Initiation Protocol (INVITE)
Request-Line: INVITE sip:sipuser1@10.200.1.2:5060;transport=tcp SIP/2.0
Method: INVITE
Request-URI: sip:sipuser1@10.200.1.2:5060;transport=tcp
Request-URI User Part: sipuser1
Request-URI Host Part: 10.200.1.2
Request-URI Host Port: 5060
[Resent Packet: False]
Message Header
Max-Breadth: 30
cisco-GUID: 534516911-3104165311-3593881599-963945775
h323-conf-id: 534516911-3104165311-3593881599-963945775
P-Early-Media: supported
P-Charging-Vector: icid-value="6e8a7d20-47f9-11ea-bc6b-000c29409cbf"
User-to-User: 00FA080001038F5E3A8A01;encoding=hex
Session-Expires: 3600;refresher=uac
Record-Route: <sip:230e965@ip.of.call.server:5080;transport=tcp;lr>
Record-Route: <sip:2nd.ip.of.call.server:15060;transport=tcp;ibmsid=local.1563400185172_62950529_66767998;lr;ibmdrr>
Record-Route: <sip:2nd.ip.of.call.server:15061;transport=tls;ibmsid=local.1563400185172_62950529_66767998;lr;ibmdrr>
Record-Route: <sip:230e965@ip.of.call.server;transport=tls;lr>
Record-Route: <sip:230e965@ip.of.call.server;transport=tls;lr>
Record-Route: <sip:2nd.ip.of.call.server:15061;transport=tls;lr;ibmsid=local.1563400185172_62950526_66767995>
Record-Route: <sip:230e965@ip.of.call.server;transport=tls;lr>
Record-Route: <sip:ip.of.avaya.cm:5061;transport=tls;lr>
P-Asserted-Identity: <sip:12345678901@ip.of.call.server>
Min-SE: 3600
History-Info: <sip:sip.domain.xx>;index=1
History-Info: <sip:sip.domain.xx>;index=1.1
Alert-Info: <cid:external@sip.domain.xx>;avaya-cm-alert-type=external
Accept-Contact: *;+avaya-cm-line=1
Accept-Language: en
Contact: <sip:12345678901@ip.of.avaya.cm:5061;transport=tls;user=phone;gsid=6e8a7d20-47f9-11ea-bc6b-000c29409cbf>
User-Agent: Sippy AVAYA-SM-7.0.1.2.701230 Avaya CM/R017x.00.0.441.0 AVAYA-SM-7.0.1.2.701230
Allow: INVITE, ACK, OPTIONS, BYE, CANCEL, SUBSCRIBE, NOTIFY, REFER, INFO, PRACK, PUBLISH, UPDATE
Supported: 100rel, histinfo, join, replaces, timer
Via: SIP/2.0/TCP ip.of.call.server:5080;branch=z9hG4bK828140349764002-AP;ft=21
Transport: TCP
Sent-by Address: ip.of.call.server
Sent-by port: 5080
Branch: z9hG4bK828140349764002-AP
ft=21
Via: SIP/2.0/TCP 2nd.ip.of.call.server:15060;rport=37469;ibmsid=local.1563400185172_62950531_66768000;branch=z9hG4bK828140349764002
Transport: TCP
Sent-by Address: 2nd.ip.of.call.server
Sent-by port: 15060
RPort: 37469
ibmsid=local.1563400185172_62950531_66768000
Branch: z9hG4bK828140349764002
Via: SIP/2.0/TCP 2nd.ip.of.call.server:15060;rport;ibmsid=local.1563400185172_62950529_66767998;branch=z9hG4bK749935742799516
Transport: TCP
Sent-by Address: 2nd.ip.of.call.server
Sent-by port: 15060
RPort: rport
ibmsid=local.1563400185172_62950529_66767998
Branch: z9hG4bK749935742799516
Via: SIP/2.0/TLS ip.of.call.server;branch=z9hG4bK6e8b623a47f941ea8a960c29e8a801-AP;ft=28018;received=ip.of.call.server;rport=37878
Transport: TLS
Sent-by Address: ip.of.call.server
Branch: z9hG4bK6e8b623a47f941ea8a960c29e8a801-AP
ft=28018
Received: ip.of.call.server
RPort: 37878
Via: SIP/2.0/TLS ip.of.avaya.cm;branch=z9hG4bK6e8b623a47f941ea8a960c29e8a801;avaya-cm-term-reaction=shortcut
Transport: TLS
Sent-by Address: ip.of.avaya.cm
Branch: z9hG4bK6e8b623a47f941ea8a960c29e8a801
avaya-cm-term-reaction=shortcut
Via: SIP/2.0/TLS ip.of.call.server;branch=z9hG4bK568807281446590-AP;ft=14
Transport: TLS
Sent-by Address: ip.of.call.server
Branch: z9hG4bK568807281446590-AP
ft=14
Via: SIP/2.0/TLS 2nd.ip.of.call.server:15061;branch=z9hG4bK568807281446590;rport=30258;ibmsid=local.1563400185172_62950528_66767997
Transport: TLS
Sent-by Address: 2nd.ip.of.call.server
Sent-by port: 15061
Branch: z9hG4bK568807281446590
RPort: 30258
ibmsid=local.1563400185172_62950528_66767997
Via: SIP/2.0/TLS 2nd.ip.of.call.server:15061;branch=z9hG4bK852980233463146;ibmsid=local.1563400185172_62950526_66767995
Transport: TLS
Sent-by Address: 2nd.ip.of.call.server
Sent-by port: 15061
Branch: z9hG4bK852980233463146
ibmsid=local.1563400185172_62950526_66767995
Via: SIP/2.0/TLS ip.of.call.server;branch=z9hG4bK6e8b6a5047f941ea8a980c29e8a80-AP;received=ip.of.call.server;rport=37878;ft=28018
Transport: TLS
Sent-by Address: ip.of.call.server
Branch: z9hG4bK6e8b6a5047f941ea8a980c29e8a80-AP
Received: ip.of.call.server
RPort: 37878
ft=28018
Via: SIP/2.0/TLS ip.of.avaya.cm;branch=z9hG4bK6e8b6a5047f941ea8a980c29e8a80
Transport: TLS
Sent-by Address: ip.of.avaya.cm
Branch: z9hG4bK6e8b6a5047f941ea8a980c29e8a80
Via: SIP/2.0/TCP secondary.call.server.ip:5070;branch=z9hG4bK-s1632-001373494357-1--s1632-
Transport: TCP
Sent-by Address: secondary.call.server.ip
Sent-by port: 5070
Branch: z9hG4bK-s1632-001373494357-1--s1632-
From: <sip:12345678901@ip.of.call.server;user=phone>;tag=6e8b623a47f941ea8a960c29e8a80
To: <sip:1234@sip.domain.xx;user=phone>
Call-ID: 6e8b625847f941ea8a970c29e8a80
Max-Forwards: 53
CSeq: 1 INVITE
Content-Type: application/sdp
Content-Length: 229
Av-Global-Session-ID: 6e8a7d20-47f9-11ea-bc6b-000c29409cbf
P-Location: SM;origlocname="mainlocation";origsiglocname="mainlocation";origmedialocname="mainlocation";termlocname="mainlocation";termhomelocname="mainlocation";smaccounting="true"
Message Body
No. Time Source Destination Protocol Length Info
2024 19.395233 10.200.1.2 ip.of.call.server SIP 1692 Status: 401 Unauthorized |
Frame 2024: 1692 bytes on wire (13536 bits), 1692 bytes captured (13536 bits)
Ethernet II, Src: Microsof_b6:65:e3 (00:0d:3a:b6:65:e3), Dst: 12:34:56:78:9a:bc (12:34:56:78:9a:bc)
Internet Protocol Version 4, Src: 10.200.1.2, Dst: ip.of.call.server
Transmission Control Protocol, Src Port: 5060, Dst Port: 38352, Seq: 1, Ack: 3487, Len: 1626
Source Port: 5060
Destination Port: 38352
[Stream index: 51]
[TCP Segment Len: 1626]
Sequence number: 1 (relative sequence number)
[Next sequence number: 1627 (relative sequence number)]
Acknowledgment number: 3487 (relative ack number)
Header Length: 32 bytes
Flags: 0x018 (PSH, ACK)
Window size value: 501
[Calculated window size: 64128]
[Window size scaling factor: 128]
Checksum: 0xc549 [unverified]
[Checksum Status: Unverified]
Urgent pointer: 0
Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
[SEQ/ACK analysis]
Session Initiation Protocol (401)
Status-Line: SIP/2.0 401 Unauthorized
Status-Code: 401
[Resent Packet: False]
Message Header
Via: SIP/2.0/TCP ip.of.call.server:5080;branch=z9hG4bK828140349764002-AP;ft=21;received=ip.of.call.server
Transport: TCP
Sent-by Address: ip.of.call.server
Sent-by port: 5080
Branch: z9hG4bK828140349764002-AP
ft=21
Received: ip.of.call.server
Via: SIP/2.0/TCP 2nd.ip.of.call.server:15060;rport=37469;ibmsid=local.1563400185172_62950531_66768000;branch=z9hG4bK828140349764002
Transport: TCP
Sent-by Address: 2nd.ip.of.call.server
Sent-by port: 15060
RPort: 37469
ibmsid=local.1563400185172_62950531_66768000
Branch: z9hG4bK828140349764002
Via: SIP/2.0/TCP 2nd.ip.of.call.server:15060;rport;ibmsid=local.1563400185172_62950529_66767998;branch=z9hG4bK749935742799516
Transport: TCP
Sent-by Address: 2nd.ip.of.call.server
Sent-by port: 15060
RPort: rport
ibmsid=local.1563400185172_62950529_66767998
Branch: z9hG4bK749935742799516
Via: SIP/2.0/TLS ip.of.call.server;branch=z9hG4bK6e8b623a47f941ea8a960c29e8a801-AP;ft=28018;received=ip.of.call.server;rport=37878
Transport: TLS
Sent-by Address: ip.of.call.server
Branch: z9hG4bK6e8b623a47f941ea8a960c29e8a801-AP
ft=28018
Received: ip.of.call.server
RPort: 37878
Via: SIP/2.0/TLS ip.of.avaya.cm;branch=z9hG4bK6e8b623a47f941ea8a960c29e8a801;avaya-cm-term-reaction=shortcut
Transport: TLS
Sent-by Address: ip.of.avaya.cm
Branch: z9hG4bK6e8b623a47f941ea8a960c29e8a801
avaya-cm-term-reaction=shortcut
Via: SIP/2.0/TLS ip.of.call.server;branch=z9hG4bK568807281446590-AP;ft=14
Transport: TLS
Sent-by Address: ip.of.call.server
Branch: z9hG4bK568807281446590-AP
ft=14
Via: SIP/2.0/TLS 2nd.ip.of.call.server:15061;branch=z9hG4bK568807281446590;rport=30258;ibmsid=local.1563400185172_62950528_66767997
Transport: TLS
Sent-by Address: 2nd.ip.of.call.server
Sent-by port: 15061
Branch: z9hG4bK568807281446590
RPort: 30258
ibmsid=local.1563400185172_62950528_66767997
Via: SIP/2.0/TLS 2nd.ip.of.call.server:15061;branch=z9hG4bK852980233463146;ibmsid=local.1563400185172_62950526_66767995
Transport: TLS
Sent-by Address: 2nd.ip.of.call.server
Sent-by port: 15061
Branch: z9hG4bK852980233463146
ibmsid=local.1563400185172_62950526_66767995
Via: SIP/2.0/TLS ip.of.call.server;branch=z9hG4bK6e8b6a5047f941ea8a980c29e8a80-AP;received=ip.of.call.server;rport=37878;ft=28018
Transport: TLS
Sent-by Address: ip.of.call.server
Branch: z9hG4bK6e8b6a5047f941ea8a980c29e8a80-AP
Received: ip.of.call.server
RPort: 37878
ft=28018
Via: SIP/2.0/TLS ip.of.avaya.cm;branch=z9hG4bK6e8b6a5047f941ea8a980c29e8a80
Transport: TLS
Sent-by Address: ip.of.avaya.cm
Branch: z9hG4bK6e8b6a5047f941ea8a980c29e8a80
Via: SIP/2.0/TCP secondary.call.server.ip:5070;branch=z9hG4bK-s1632-001373494357-1--s1632-
Transport: TCP
Sent-by Address: secondary.call.server.ip
Sent-by port: 5070
Branch: z9hG4bK-s1632-001373494357-1--s1632-
From: <sip:12345678901@ip.of.call.server;user=phone>;tag=6e8b623a47f941ea8a960c29e8a80
To: <sip:1234@sip.domain.xx;user=phone>;tag=as75c36763
Call-ID: 6e8b625847f941ea8a970c29e8a80
CSeq: 1 INVITE
Server: Asterisk PBX 15.7.4
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH, MESSAGE
Supported: replaces, timer
WWW-Authenticate: Digest algorithm=MD5, realm="asterisk", nonce="54f98947"
Content-Length: 0
No. Time Source Destination Protocol Length Info
2027 19.440738 ip.of.call.server 10.200.1.2 SIP 559 Request: ACK sip:sipuser1@10.200.1.2:5060;transport=tcp |
Frame 2027: 559 bytes on wire (4472 bits), 559 bytes captured (4472 bits)
Ethernet II, Src: b0:8b:cf:4c:21:47 (b0:8b:cf:4c:21:47), Dst: Microsof_b6:65:e3 (00:0d:3a:b6:65:e3)
Internet Protocol Version 4, Src: ip.of.call.server, Dst: 10.200.1.2
Transmission Control Protocol, Src Port: 38352, Dst Port: 5060, Seq: 3487, Ack: 1627, Len: 493
Source Port: 38352
Destination Port: 5060
[Stream index: 51]
[TCP Segment Len: 493]
Sequence number: 3487 (relative sequence number)
[Next sequence number: 3980 (relative sequence number)]
Acknowledgment number: 1627 (relative ack number)
Header Length: 32 bytes
Flags: 0x018 (PSH, ACK)
Window size value: 3948
[Calculated window size: 7896]
[Window size scaling factor: 2]
Checksum: 0x467c [unverified]
[Checksum Status: Unverified]
Urgent pointer: 0
Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps
[SEQ/ACK analysis]
Session Initiation Protocol (ACK)
Request-Line: ACK sip:sipuser1@10.200.1.2:5060;transport=tcp SIP/2.0
Method: ACK
Request-URI: sip:sipuser1@10.200.1.2:5060;transport=tcp
Request-URI User Part: sipuser1
Request-URI Host Part: 10.200.1.2
Request-URI Host Port: 5060
[Resent Packet: False]
Message Header
Call-ID: 6e8b625847f941ea8a970c29e8a80
From: <sip:12345678901@ip.of.call.server;user=phone>;tag=6e8b623a47f941ea8a960c29e8a80
To: <sip:1234@sip.domain.xx;user=phone>;tag=as75c36763
Via: SIP/2.0/TCP ip.of.call.server:5080;branch=z9hG4bK828140349764002-AP;ft=21
Transport: TCP
Sent-by Address: ip.of.call.server
Sent-by port: 5080
Branch: z9hG4bK828140349764002-AP
ft=21
Via: SIP/2.0/TCP 2nd.ip.of.call.server:15060;rport=37469;ibmsid=local.1563400185172_62950531_66768000;branch=z9hG4bK828140349764002
Transport: TCP
Sent-by Address: 2nd.ip.of.call.server
Sent-by port: 15060
RPort: 37469
ibmsid=local.1563400185172_62950531_66768000
Branch: z9hG4bK828140349764002
CSeq: 1 ACK
Max-Forwards: 53
Content-Length: 0