Frame 61 (874 bytes on wire, 874 bytes captured) Arrival Time: Sep 1, 2006 14:08:36.666576000 Time delta from previous packet: 0.047441000 seconds Time since reference or first frame: 5.378644000 seconds Frame Number: 61 Packet Length: 874 bytes Capture Length: 874 bytes Protocols in frame: eth:ip:udp:sip:sdp Ethernet II, Src: Intel_af:4d:6c (00:11:11:af:4d:6c), Dst: TyanComp_2f:6d:9f (00:e0:81:2f:6d:9f) Destination: TyanComp_2f:6d:9f (00:e0:81:2f:6d:9f) Address: TyanComp_2f:6d:9f (00:e0:81:2f:6d:9f) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Source: Intel_af:4d:6c (00:11:11:af:4d:6c) Address: Intel_af:4d:6c (00:11:11:af:4d:6c) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Type: IP (0x0800) Internet Protocol, Src: 69.76.83.52 (69.76.83.52), Dst: 208.64.200.40 (208.64.200.40) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 860 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 47 Protocol: UDP (0x11) Header checksum: 0x17a8 [correct] Good: True Bad : False Source: 69.76.83.52 (69.76.83.52) Destination: 208.64.200.40 (208.64.200.40) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 840 Checksum: 0x36b9 [correct] Session Initiation Protocol Request-Line: INVITE sip:1000@208.64.200.40 SIP/2.0 Method: INVITE Resent Packet: False Message Header Via: SIP/2.0/UDP 69.76.83.52:5060;branch=z9hG4bK130101ea;rport From: "FUCKHEAD" ;tag=as1c2b2a73 SIP Display info: "FUCKHEAD" SIP from address: sip:4141231234@69.76.83.52 SIP tag: as1c2b2a73 To: SIP to address: sip:1000@208.64.200.40 Contact: Contact Binding: URI: SIP contact address: sip:4141231234@69.76.83.52 Call-ID: 54687b1e376f20a668d9f2e7673c5ee3@69.76.83.52 CSeq: 102 INVITE User-Agent: Asterisk PBX Max-Forwards: 70 Date: Fri, 01 Sep 2006 18:08:35 GMT Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, PRACK Content-Type: application/sdp Content-Length: 315 Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): root 28142 28142 IN IP4 69.76.83.52 Owner Username: root Session ID: 28142 Session Version: 28142 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 69.76.83.52 Session Name (s): session Connection Information (c): IN IP4 69.76.83.52 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 69.76.83.52 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 5196 RTP/AVP 0 8 98 10 97 101 Media Type: audio Media Port: 5196 Media Proto: RTP/AVP Media Format: ITU-T G.711 PCMU Media Format: ITU-T G.711 PCMA Media Format: 98 Media Format: 16-bit uncompressed audio, stereo Media Format: 97 Media Format: 101 Media Attribute (a): rtpmap:0 PCMU/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 0 PCMU/8000 Media Attribute (a): rtpmap:8 PCMA/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 8 PCMA/8000 Media Attribute (a): rtpmap:98 speex/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 98 speex/8000 Media Attribute (a): rtpmap:10 L16/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 10 L16/8000 Media Attribute (a): rtpmap:97 iLBC/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 97 iLBC/8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 101 telephone-event/8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Attribute Value: 101 0-16 Media Attribute (a): silenceSupp:off - - - - Media Attribute Fieldname: silenceSupp Media Attribute Value: off - - - - Frame 62 (317 bytes on wire, 317 bytes captured) Arrival Time: Sep 1, 2006 14:08:36.667739000 Time delta from previous packet: 0.001163000 seconds Time since reference or first frame: 5.379807000 seconds Frame Number: 62 Packet Length: 317 bytes Capture Length: 317 bytes Protocols in frame: eth:ip:udp:sip Ethernet II, Src: TyanComp_2f:6d:9f (00:e0:81:2f:6d:9f), Dst: Intel_af:4d:6c (00:11:11:af:4d:6c) Destination: Intel_af:4d:6c (00:11:11:af:4d:6c) Address: Intel_af:4d:6c (00:11:11:af:4d:6c) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Source: TyanComp_2f:6d:9f (00:e0:81:2f:6d:9f) Address: TyanComp_2f:6d:9f (00:e0:81:2f:6d:9f) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Type: IP (0x0800) Internet Protocol, Src: 208.64.200.40 (208.64.200.40), Dst: 69.76.83.52 (69.76.83.52) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 303 Identification: 0x0001 (1) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x08d4 [correct] Good: True Bad : False Source: 208.64.200.40 (208.64.200.40) Destination: 69.76.83.52 (69.76.83.52) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 283 Checksum: 0x3216 [incorrect, should be 0x5f62] Session Initiation Protocol Status-Line: SIP/2.0 100 Trying Status-Code: 100 Resent Packet: False Message Header Via: SIP/2.0/UDP 69.76.83.52:5060;branch=z9hG4bK130101ea;rport=5060 From: "FUCKHEAD" ;tag=as1c2b2a73 SIP Display info: "FUCKHEAD" SIP from address: sip:4141231234@69.76.83.52 SIP tag: as1c2b2a73 To: SIP to address: sip:1000@208.64.200.40 Call-ID: 54687b1e376f20a668d9f2e7673c5ee3@69.76.83.52 CSeq: 102 INVITE Content-Length: 0 Frame 67 (763 bytes on wire, 763 bytes captured) Arrival Time: Sep 1, 2006 14:08:36.676506000 Time delta from previous packet: 0.002155000 seconds Time since reference or first frame: 5.388574000 seconds Frame Number: 67 Packet Length: 763 bytes Capture Length: 763 bytes Protocols in frame: eth:ip:udp:sip:sdp Ethernet II, Src: TyanComp_2f:6d:9f (00:e0:81:2f:6d:9f), Dst: Intel_af:4d:6c (00:11:11:af:4d:6c) Destination: Intel_af:4d:6c (00:11:11:af:4d:6c) Address: Intel_af:4d:6c (00:11:11:af:4d:6c) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Source: TyanComp_2f:6d:9f (00:e0:81:2f:6d:9f) Address: TyanComp_2f:6d:9f (00:e0:81:2f:6d:9f) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Type: IP (0x0800) Internet Protocol, Src: 208.64.200.40 (208.64.200.40), Dst: 69.76.83.52 (69.76.83.52) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 749 Identification: 0x0002 (2) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x0715 [correct] Good: True Bad : False Source: 208.64.200.40 (208.64.200.40) Destination: 69.76.83.52 (69.76.83.52) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 729 Checksum: 0x33d4 [incorrect, should be 0xb2b5] Session Initiation Protocol Status-Line: SIP/2.0 200 OK Status-Code: 200 Resent Packet: False Message Header Via: SIP/2.0/UDP 69.76.83.52:5060;branch=z9hG4bK130101ea;rport=5060 From: "FUCKHEAD" ;tag=as1c2b2a73 SIP Display info: "FUCKHEAD" SIP from address: sip:4141231234@69.76.83.52 SIP tag: as1c2b2a73 To: ;tag=509m5tmgXyrtp SIP to address: sip:1000@208.64.200.40 SIP tag: 509m5tmgXyrtp Call-ID: 54687b1e376f20a668d9f2e7673c5ee3@69.76.83.52 CSeq: 102 INVITE Contact: Contact Binding: URI: SIP contact address: sip:208.64.200.40 User-Agent: sofia-sip/1.12.1 Allow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, MESSAGE, SUBSCRIBE, NOTIFY, REFER, UPDATE Supported: 100rel, precondition Content-Type: application/sdp Content-Disposition: session Content-Length: 184 Message body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): FreeSWITCH 2749519377665056405 7618044605732196536 IN IP4 208.64.200.40 Owner Username: FreeSWITCH Session ID: 2749519377665056405 Session Version: 7618044605732196536 Owner Network Type: IN Owner Address Type: IP4 Owner Address: 208.64.200.40 Session Name (s): FreeSWITCH Connection Information (c): IN IP4 208.64.200.40 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 208.64.200.40 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Session Attribute (a): sendrecv Media Description, name and address (m): audio 16384 RTP/AVP 0 Media Type: audio Media Port: 16384 Media Proto: RTP/AVP Media Format: ITU-T G.711 PCMU Media Attribute (a): rtpmap:0 PCMU/8000 Media Attribute Fieldname: rtpmap Media Attribute Value: 0 PCMU/8000 Frame 74 (421 bytes on wire, 421 bytes captured) Arrival Time: Sep 1, 2006 14:08:36.761791000 Time delta from previous packet: 0.006980000 seconds Time since reference or first frame: 5.473859000 seconds Frame Number: 74 Packet Length: 421 bytes Capture Length: 421 bytes Protocols in frame: eth:ip:udp:sip Ethernet II, Src: Intel_af:4d:6c (00:11:11:af:4d:6c), Dst: TyanComp_2f:6d:9f (00:e0:81:2f:6d:9f) Destination: TyanComp_2f:6d:9f (00:e0:81:2f:6d:9f) Address: TyanComp_2f:6d:9f (00:e0:81:2f:6d:9f) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Source: Intel_af:4d:6c (00:11:11:af:4d:6c) Address: Intel_af:4d:6c (00:11:11:af:4d:6c) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Type: IP (0x0800) Internet Protocol, Src: 69.76.83.52 (69.76.83.52), Dst: 208.64.200.40 (208.64.200.40) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 407 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 47 Protocol: UDP (0x11) Header checksum: 0x196d [correct] Good: True Bad : False Source: 69.76.83.52 (69.76.83.52) Destination: 208.64.200.40 (208.64.200.40) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 387 Checksum: 0xa8c3 [correct] Session Initiation Protocol Request-Line: ACK sip:208.64.200.40 SIP/2.0 Method: ACK Resent Packet: False Message Header Via: SIP/2.0/UDP 69.76.83.52:5060;branch=z9hG4bK4bbe62fd;rport From: "FUCKHEAD" ;tag=as1c2b2a73 SIP Display info: "FUCKHEAD" SIP from address: sip:4141231234@69.76.83.52 SIP tag: as1c2b2a73 To: ;tag=509m5tmgXyrtp SIP to address: sip:1000@208.64.200.40 SIP tag: 509m5tmgXyrtp Contact: Contact Binding: URI: SIP contact address: sip:4141231234@69.76.83.52 Call-ID: 54687b1e376f20a668d9f2e7673c5ee3@69.76.83.52 CSeq: 102 ACK User-Agent: Asterisk PBX Max-Forwards: 70 Content-Length: 0 Frame 868 (435 bytes on wire, 435 bytes captured) Arrival Time: Sep 1, 2006 14:08:44.152110000 Time delta from previous packet: 0.002700000 seconds Time since reference or first frame: 12.864178000 seconds Frame Number: 868 Packet Length: 435 bytes Capture Length: 435 bytes Protocols in frame: eth:ip:udp:sip Ethernet II, Src: TyanComp_2f:6d:9f (00:e0:81:2f:6d:9f), Dst: Intel_af:4d:6c (00:11:11:af:4d:6c) Destination: Intel_af:4d:6c (00:11:11:af:4d:6c) Address: Intel_af:4d:6c (00:11:11:af:4d:6c) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Source: TyanComp_2f:6d:9f (00:e0:81:2f:6d:9f) Address: TyanComp_2f:6d:9f (00:e0:81:2f:6d:9f) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Type: IP (0x0800) Internet Protocol, Src: 208.64.200.40 (208.64.200.40), Dst: 69.76.83.52 (69.76.83.52) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 421 Identification: 0x0003 (3) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x085c [correct] Good: True Bad : False Source: 208.64.200.40 (208.64.200.40) Destination: 69.76.83.52 (69.76.83.52) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 401 Checksum: 0x328c [incorrect, should be 0x699f] Session Initiation Protocol Request-Line: BYE sip:4141231234@69.76.83.52 SIP/2.0 Method: BYE Resent Packet: False Message Header Via: SIP/2.0/UDP 208.64.200.40;rport;branch=z9hG4bK5pXtcc65Xy11Q Max-Forwards: 70 From: ;tag=509m5tmgXyrtp SIP from address: sip:1000@208.64.200.40 SIP tag: 509m5tmgXyrtp To: "FUCKHEAD" ;tag=as1c2b2a73 SIP Display info: "FUCKHEAD" SIP to address: sip:4141231234@69.76.83.52 SIP tag: as1c2b2a73 Call-ID: 54687b1e376f20a668d9f2e7673c5ee3@69.76.83.52 CSeq: 72448723 BYE User-Agent: sofia-sip/1.12.1 Supported: 100rel, precondition Content-Length: 0 Frame 877 (552 bytes on wire, 552 bytes captured) Arrival Time: Sep 1, 2006 14:08:44.231635000 Time delta from previous packet: 0.002947000 seconds Time since reference or first frame: 12.943703000 seconds Frame Number: 877 Packet Length: 552 bytes Capture Length: 552 bytes Protocols in frame: eth:ip:udp:sip Ethernet II, Src: Intel_af:4d:6c (00:11:11:af:4d:6c), Dst: TyanComp_2f:6d:9f (00:e0:81:2f:6d:9f) Destination: TyanComp_2f:6d:9f (00:e0:81:2f:6d:9f) Address: TyanComp_2f:6d:9f (00:e0:81:2f:6d:9f) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Source: Intel_af:4d:6c (00:11:11:af:4d:6c) Address: Intel_af:4d:6c (00:11:11:af:4d:6c) .... ...0 .... .... .... .... = Multicast: This is a UNICAST frame .... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address Type: IP (0x0800) Internet Protocol, Src: 69.76.83.52 (69.76.83.52), Dst: 208.64.200.40 (208.64.200.40) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 538 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 47 Protocol: UDP (0x11) Header checksum: 0x18ea [correct] Good: True Bad : False Source: 69.76.83.52 (69.76.83.52) Destination: 208.64.200.40 (208.64.200.40) User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060) Source port: 5060 (5060) Destination port: 5060 (5060) Length: 518 Checksum: 0xa11b [correct] Session Initiation Protocol Status-Line: SIP/2.0 200 OK Status-Code: 200 Resent Packet: False Message Header Via: SIP/2.0/UDP 208.64.200.40;rport;branch=z9hG4bK5pXtcc65Xy11Q;received=208.64.200.40 From: ;tag=509m5tmgXyrtp SIP from address: sip:1000@208.64.200.40 SIP tag: 509m5tmgXyrtp To: "FUCKHEAD" ;tag=as1c2b2a73 SIP Display info: "FUCKHEAD" SIP to address: sip:4141231234@69.76.83.52 SIP tag: as1c2b2a73 Call-ID: 54687b1e376f20a668d9f2e7673c5ee3@69.76.83.52 CSeq: 72448723 BYE User-Agent: Asterisk PBX Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, PRACK Max-Forwards: 70 Contact: Contact Binding: URI: SIP contact address: sip:4141231234@69.76.83.52 Content-Length: 0 X-Asterisk-HangupCause: Normal Clearing