Frame 22: 1084 bytes on wire (8672 bits), 1084 bytes captured (8672 bits)
Ethernet II, Src: Cisco_a8:1e:c0 (00:19:07:a8:1e:c0), Dst: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3)
Internet Protocol Version 4, Src: 172.30.222.43 (172.30.222.43), Dst: 132.197.36.146 (132.197.36.146)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
Total Length: 1070
Identification: 0x0000 (0)
Flags: 0x00
Fragment offset: 0
Time to live: 123
Protocol: UDP (17)
Header checksum: 0x081e [correct]
Source: 172.30.222.43 (172.30.222.43)
Destination: 132.197.36.146 (132.197.36.146)
User Datagram Protocol, Src Port: 5089 (5089), Dst Port: sip (5060)
Source port: 5089 (5089)
Destination port: sip (5060)
Length: 1050
Checksum: 0x74ef [validation disabled]
Session Initiation Protocol
Request-Line: INVITE sip:7814660000@132.197.36.146:5060;useradd=132.197.36.146;userport=5060 SIP/2.0
Method: INVITE
Request-URI: sip:7814660000@132.197.36.146:5060;useradd=132.197.36.146;userport=5060
[Resent Packet: False]
Message Header
Via: SIP/2.0/UDP 172.30.222.43:5089;branch=z9hG4bK4nbaf300d051p31420l1.1
From: <sip:9085590000@65.211.120.225;user=phone>;tag=901634348-1320087121335To: "ELLIOT EICHEN"<sip:7814660000@verizonlabs.globalipcom.com;useradd=132.197.36.146;userport=5060>
Call-ID: BW145201335311011437264061@65.211.120.225
CSeq: 766080732 INVITE
Contact: <sip:9085590000@172.30.222.43:5089;transport=udp>
Allow: ACK,BYE,CANCEL,INFO,INVITE,OPTIONS,PRACK,REFER,NOTIFY,UPDATE
Accept: multipart/mixed,application/media_control+xml,application/sdp
Call-Info: <sip:65.211.120.225>;appearance-index=1
Supported:
Max-Forwards: 69
Content-Type: application/sdp
Content-Length: 288
Message Body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): BroadWorks 62493854 1 IN IP4 172.30.222.164
Session Name (s): Connection Information (c): IN IP4 172.30.222.164
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 172.30.222.164
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Media Description, name and address (m): audio 12512 RTP/AVP 18 0 8 101
Media Type: audio
Media Port: 12512
Media Protocol: RTP/AVP
Media Format: ITU-T G.729
Media Format: ITU-T G.711 PCMU
Media Format: ITU-T G.711 PCMA
Media Format: DynamicRTP-Type-101
Connection Information (c): IN IP4 172.30.222.164
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 172.30.222.164
Media Attribute (a): rtpmap:18 G729/8000
Media Attribute Fieldname: rtpmap
Media Format: 18
MIME Type: G729
Sample Rate: 8000
Media Attribute (a): fmtp:18 annexb=no
Midterm 2011
p1
Media Attribute Fieldname: fmtp
Media Format: 18 [G729]
Media format specific parameters: annexb=no
Media Attribute (a): rtpmap:0 PCMU/8000
Media Attribute Fieldname: rtpmap
Media Format: 0
MIME Type: PCMU
Sample Rate: 8000
Media Attribute (a): rtpmap:8 PCMA/8000
Media Attribute Fieldname: rtpmap
Media Format: 8
MIME Type: PCMA
Sample Rate: 8000
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Format: 101
MIME Type: telephone-event
Sample Rate: 8000
Media Attribute (a): fmtp:101 0-16
Media Attribute Fieldname: fmtp
Media Format: 101 [telephone-event]
Media format specific parameters: 0-16
No.
Time
23 9.643199
Source
132.197.36.146
Destination
172.30.222.43
Protocol Length Info
SIP
542
Status: 100 Trying
Frame 23: 542 bytes on wire (4336 bits), 542 bytes captured (4336 bits)
Ethernet II, Src: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3), Dst: All-HSRP-routers_00 (00:00:0c:07:ac:00)
Internet Protocol Version 4, Src: 132.197.36.146 (132.197.36.146), Dst: 172.30.222.43 (172.30.222.43)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
Total Length: 528
Identification: 0x0000 (0)
Flags: 0x02 (Don't Fragment)
Fragment offset: 0
Time to live: 63
Protocol: UDP (17)
Header checksum: 0x063c [correct]
Source: 132.197.36.146 (132.197.36.146)
Destination: 172.30.222.43 (172.30.222.43)
User Datagram Protocol, Src Port: sip (5060), Dst Port: 5089 (5089)
Source port: sip (5060)
Destination port: 5089 (5089)
Length: 508
Checksum: 0x4033 [validation disabled]
Session Initiation Protocol
Status-Line: SIP/2.0 100 Trying
Status-Code: 100
[Resent Packet: False]
[Request Frame: 22]
[Response Time (ms): 8]
Message Header
Via: SIP/2.0/UDP 172.30.222.43:5089;received=172.30.222.43;branch=z9hG4bK4nbaf300d051p31420l1.1
From: <sip:9085590000@65.211.120.225;user=phone>;tag=901634348-1320087121335To: "ELLIOT EICHEN"<sip:7814660000@verizonlabs.globalipcom.com;useradd=132.197.36.146;userport=5060>
Call-ID: BW145201335311011437264061@65.211.120.225
CSeq: 766080732 INVITE
User-Agent: HelloCommunicator/2.0
P-Access-Network-Info: IEEE-802.3
Date: Mon, 31 Oct 2011 18:52:16 GMT
Content-Length: 0
No.
Time
24 9.644791
Source
132.197.36.146
Destination
172.30.222.43
Protocol Length Info
SIP
692
Status: 401 Unauthorized
Frame 24: 692 bytes on wire (5536 bits), 692 bytes captured (5536 bits)
Ethernet II, Src: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3), Dst: All-HSRP-routers_00 (00:00:0c:07:ac:00)
Internet Protocol Version 4, Src: 132.197.36.146 (132.197.36.146), Dst: 172.30.222.43 (172.30.222.43)
Midterm 2011
p2
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
Total Length: 678
Identification: 0x0000 (0)
Flags: 0x02 (Don't Fragment)
Fragment offset: 0
Time to live: 63
Protocol: UDP (17)
Header checksum: 0x05a6 [correct]
Source: 132.197.36.146 (132.197.36.146)
Destination: 172.30.222.43 (172.30.222.43)
User Datagram Protocol, Src Port: sip (5060), Dst Port: 5089 (5089)
Source port: sip (5060)
Destination port: 5089 (5089)
Length: 658
Checksum: 0x5705 [validation disabled]
Session Initiation Protocol
Status-Line: SIP/2.0 401 Unauthorized
Status-Code: 401
[Resent Packet: False]
[Request Frame: 22]
[Response Time (ms): 9]
Message Header
Via: SIP/2.0/UDP 172.30.222.43:5089;received=172.30.222.43;branch=z9hG4bK4nbaf300d051p31420l1.1
From: <sip:9085590000@65.211.120.225;user=phone>;tag=901634348-1320087121335To: "ELLIOT
EICHEN"<sip:7814660000@verizonlabs.globalipcom.com;useradd=132.197.36.146;userport=5060>;tag=f1a77f96
Call-ID: BW145201335311011437264061@65.211.120.225
CSeq: 766080732 INVITE
User-Agent: HelloCommunicator/2.0
P-Access-Network-Info: IEEE-802.3
WWW-Authenticate: Digest realm="verizonlabs.globalipcom.com", algorithm=MD5, qop="auth",
nonce="d89c9c25f234320f8c92815777790af0"
Date: Mon, 31 Oct 2011 18:52:16 GMT
Content-Length: 0
No.
Time
Source
Destination
Protocol Length Info
25 9.676391
172.30.222.43
132.197.36.146
SIP
505
Request: ACK
sip:7814660000@132.197.36.146:5060;useradd=132.197.36.146;userport=5060
Frame 25: 505 bytes on wire (4040 bits), 505 bytes captured (4040 bits)
Ethernet II, Src: Cisco_a8:1e:c0 (00:19:07:a8:1e:c0), Dst: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3)
Internet Protocol Version 4, Src: 172.30.222.43 (172.30.222.43), Dst: 132.197.36.146 (132.197.36.146)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
Total Length: 491
Identification: 0x0000 (0)
Flags: 0x00
Fragment offset: 0
Time to live: 123
Protocol: UDP (17)
Header checksum: 0x0a61 [correct]
Source: 172.30.222.43 (172.30.222.43)
Destination: 132.197.36.146 (132.197.36.146)
User Datagram Protocol, Src Port: 5089 (5089), Dst Port: sip (5060)
Source port: 5089 (5089)
Destination port: sip (5060)
Length: 471
Checksum: 0xb389 [validation disabled]
Session Initiation Protocol
Request-Line: ACK sip:7814660000@132.197.36.146:5060;useradd=132.197.36.146;userport=5060 SIP/2.0
Method: ACK
Request-URI: sip:7814660000@132.197.36.146:5060;useradd=132.197.36.146;userport=5060
[Resent Packet: False]
[Request Frame: 22]
[Response Time (ms): 41]
Message Header
Midterm 2011
p3
Via: SIP/2.0/UDP 172.30.222.43:5089;branch=z9hG4bK4nbaf300d051p31420l1.1
CSeq: 766080732 ACK
From: <sip:9085590000@65.211.120.225;user=phone>;tag=901634348-1320087121335To: "ELLIOT
EICHEN"<sip:7814660000@verizonlabs.globalipcom.com;useradd=132.197.36.146;userport=5060>;tag=f1a77f96
Call-ID: BW145201335311011437264061@65.211.120.225
Max-Forwards: 69
Content-Length: 0
No.
Time
Source
Destination
Protocol Length Info
26 9.704956
172.30.222.43
132.197.36.146
SIP/SDP 1412
Request: INVITE
sip:7814660000@132.197.36.146:5060;useradd=132.197.36.146;userport=5060, with session description
Frame 26: 1412 bytes on wire (11296 bits), 1412 bytes captured (11296 bits)
Ethernet II, Src: Cisco_a8:1e:c0 (00:19:07:a8:1e:c0), Dst: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3)
Internet Protocol Version 4, Src: 172.30.222.43 (172.30.222.43), Dst: 132.197.36.146 (132.197.36.146)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
Total Length: 1398
Identification: 0x0000 (0)
Flags: 0x00
Fragment offset: 0
Time to live: 123
Protocol: UDP (17)
Header checksum: 0x06d6 [correct]
Source: 172.30.222.43 (172.30.222.43)
Destination: 132.197.36.146 (132.197.36.146)
User Datagram Protocol, Src Port: 5089 (5089), Dst Port: sip (5060)
Source port: 5089 (5089)
Destination port: sip (5060)
Length: 1378
Checksum: 0x37c8 [validation disabled]
Session Initiation Protocol
Request-Line: INVITE sip:7814660000@132.197.36.146:5060;useradd=132.197.36.146;userport=5060 SIP/2.0
Method: INVITE
Request-URI: sip:7814660000@132.197.36.146:5060;useradd=132.197.36.146;userport=5060
[Resent Packet: False]
Message Header
Via: SIP/2.0/UDP 172.30.222.43:5089;branch=z9hG4bK6v5j7710eg91035j7390.1
From: <sip:9085590000@65.211.120.225;user=phone>;tag=901634348-1320087121335To: "ELLIOT EICHEN"<sip:7814660000@verizonlabs.globalipcom.com;useradd=132.197.36.146;userport=5060>
Call-ID: BW145201335311011437264061@65.211.120.225
CSeq: 766080733 INVITE
Contact: <sip:9085590000@172.30.222.43:5089;transport=udp>
Allow: ACK,BYE,CANCEL,INFO,INVITE,OPTIONS,PRACK,REFER,NOTIFY,UPDATE
Accept: multipart/mixed,application/media_control+xml,application/sdp
Call-Info: <sip:65.211.120.225>;appearance-index=1
Supported:
Max-Forwards: 69
[truncated] Authorization: DIGEST cnonce="guftsdui",qop=auth,uri="sip:7814660000ak0gcrrfrkl28@63.79.7.171:5060;useradd=132.197.36.146;userport=5060;transport=udp",realm="verizonlabs.globalip
om.com",username="vzlab-waltham220",nonce="d89c
Content-Type: application/sdp
Content-Length: 288
Message Body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): BroadWorks 62493854 1 IN IP4 172.30.222.164
Session Name (s): Connection Information (c): IN IP4 172.30.222.164
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 172.30.222.164
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Media Description, name and address (m): audio 12512 RTP/AVP 18 0 8 101
Media Type: audio
Midterm 2011
p4
Media Port: 12512
Media Protocol: RTP/AVP
Media Format: ITU-T G.729
Media Format: ITU-T G.711 PCMU
Media Format: ITU-T G.711 PCMA
Media Format: DynamicRTP-Type-101
Connection Information (c): IN IP4 172.30.222.164
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 172.30.222.164
Media Attribute (a): rtpmap:18 G729/8000
Media Attribute Fieldname: rtpmap
Media Format: 18
MIME Type: G729
Sample Rate: 8000
Media Attribute (a): fmtp:18 annexb=no
Media Attribute Fieldname: fmtp
Media Format: 18 [G729]
Media format specific parameters: annexb=no
Media Attribute (a): rtpmap:0 PCMU/8000
Media Attribute Fieldname: rtpmap
Media Format: 0
MIME Type: PCMU
Sample Rate: 8000
Media Attribute (a): rtpmap:8 PCMA/8000
Media Attribute Fieldname: rtpmap
Media Format: 8
MIME Type: PCMA
Sample Rate: 8000
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Format: 101
MIME Type: telephone-event
Sample Rate: 8000
Media Attribute (a): fmtp:101 0-16
Media Attribute Fieldname: fmtp
Media Format: 101 [telephone-event]
Media format specific parameters: 0-16
No.
Time
27 9.715798
Source
132.197.36.146
Destination
172.30.222.43
Protocol Length Info
SIP
542
Status: 100 Trying
Frame 27: 542 bytes on wire (4336 bits), 542 bytes captured (4336 bits)
Ethernet II, Src: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3), Dst: All-HSRP-routers_00 (00:00:0c:07:ac:00)
Internet Protocol Version 4, Src: 132.197.36.146 (132.197.36.146), Dst: 172.30.222.43 (172.30.222.43)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
Total Length: 528
Identification: 0x0000 (0)
Flags: 0x02 (Don't Fragment)
Fragment offset: 0
Time to live: 63
Protocol: UDP (17)
Header checksum: 0x063c [correct]
Source: 132.197.36.146 (132.197.36.146)
Destination: 172.30.222.43 (172.30.222.43)
User Datagram Protocol, Src Port: sip (5060), Dst Port: 5089 (5089)
Source port: sip (5060)
Destination port: 5089 (5089)
Length: 508
Checksum: 0xbbf0 [validation disabled]
Session Initiation Protocol
Status-Line: SIP/2.0 100 Trying
Status-Code: 100
[Resent Packet: False]
[Request Frame: 26]
[Response Time (ms): 10]
Message Header
Midterm 2011
p5
Via: SIP/2.0/UDP 172.30.222.43:5089;received=172.30.222.43;branch=z9hG4bK6v5j7710eg91035j7390.1
From: <sip:9085590000@65.211.120.225;user=phone>;tag=901634348-1320087121335To: "ELLIOT EICHEN"<sip:7814660000@verizonlabs.globalipcom.com;useradd=132.197.36.146;userport=5060>
Call-ID: BW145201335311011437264061@65.211.120.225
CSeq: 766080733 INVITE
User-Agent: HelloCommunicator/2.0
P-Access-Network-Info: IEEE-802.3
Date: Mon, 31 Oct 2011 18:52:16 GMT
Content-Length: 0
No.
Time
28 9.724126
Source
132.197.36.146
Destination
132.197.204.92
Protocol Length Info
CLASSIC-STUN 62
Message: Binding Request
Time
33 9.757406
Source
132.197.36.146
Destination
172.30.222.43
Protocol Length Info
SIP
603
Status: 180 Ringing
..
No.
Frame 33: 603 bytes on wire (4824 bits), 603 bytes captured (4824 bits)
Ethernet II, Src: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3), Dst: All-HSRP-routers_00 (00:00:0c:07:ac:00)
Internet Protocol Version 4, Src: 132.197.36.146 (132.197.36.146), Dst: 172.30.222.43 (172.30.222.43)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
Total Length: 589
Identification: 0x0000 (0)
Flags: 0x02 (Don't Fragment)
Fragment offset: 0
Time to live: 63
Protocol: UDP (17)
Header checksum: 0x05ff [correct]
Source: 132.197.36.146 (132.197.36.146)
Destination: 172.30.222.43 (172.30.222.43)
User Datagram Protocol, Src Port: sip (5060), Dst Port: 5089 (5089)
Source port: sip (5060)
Destination port: 5089 (5089)
Length: 569
Checksum: 0x49e4 [validation disabled]
Session Initiation Protocol
Status-Line: SIP/2.0 180 Ringing
Status-Code: 180
[Resent Packet: False]
[Request Frame: 26]
[Response Time (ms): 52]
Message Header
Via: SIP/2.0/UDP 172.30.222.43:5089;received=172.30.222.43;branch=z9hG4bK6v5j7710eg91035j7390.1
From: <sip:9085590000@65.211.120.225;user=phone>;tag=901634348-1320087121335To: "ELLIOT
EICHEN"<sip:7814660000@verizonlabs.globalipcom.com;useradd=132.197.36.146;userport=5060>;tag=941acfde
Call-ID: BW145201335311011437264061@65.211.120.225
CSeq: 766080733 INVITE
Contact: <sip:7814660000@132.197.36.146:5060>
User-Agent: HelloCommunicator/2.0
P-Access-Network-Info: IEEE-802.3
Date: Mon, 31 Oct 2011 18:52:16 GMT
Content-Length: 0
..
No.
Time
54 14.300766
description
Source
132.197.36.146
Destination
172.30.222.43
Protocol Length Info
SIP/SDP 1023
Status: 200 OK, with session
Frame 54: 1023 bytes on wire (8184 bits), 1023 bytes captured (8184 bits)
Ethernet II, Src: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3), Dst: All-HSRP-routers_00 (00:00:0c:07:ac:00)
Internet Protocol Version 4, Src: 132.197.36.146 (132.197.36.146), Dst: 172.30.222.43 (172.30.222.43)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
Midterm 2011
p6
Total Length: 1009
Identification: 0x0000 (0)
Flags: 0x02 (Don't Fragment)
Fragment offset: 0
Time to live: 63
Protocol: UDP (17)
Header checksum: 0x045b [correct]
Source: 132.197.36.146 (132.197.36.146)
Destination: 172.30.222.43 (172.30.222.43)
User Datagram Protocol, Src Port: sip (5060), Dst Port: 5089 (5089)
Source port: sip (5060)
Destination port: 5089 (5089)
Length: 989
Checksum: 0x30b3 [validation disabled]
Session Initiation Protocol
Status-Line: SIP/2.0 200 OK
Status-Code: 200
[Resent Packet: False]
[Request Frame: 26]
[Response Time (ms): 4596]
Message Header
Via: SIP/2.0/UDP 172.30.222.43:5089;received=172.30.222.43;branch=z9hG4bK6v5j7710eg91035j7390.1
From: <sip:9085590000@65.211.120.225;user=phone>;tag=901634348-1320087121335To: "ELLIOT
EICHEN"<sip:7814660000@verizonlabs.globalipcom.com;useradd=132.197.36.146;userport=5060>;tag=941acfde
Call-ID: BW145201335311011437264061@65.211.120.225
CSeq: 766080733 INVITE
Contact: <sip:7814660000@132.197.36.146:5060>
User-Agent: HelloCommunicator/2.0
P-Access-Network-Info: IEEE-802.3
Allow: INVITE,ACK,BYE,CANCEL,REFER,NOTIFY,OPTIONS,PRACK,UPDATE,INFO,MESSAGE,SUBSCRIBE,SERVICE,PING
Allow-Events: refer,call-info,line-seize
Supported: 100rel, replaces, join
Date: Mon, 31 Oct 2011 18:52:21 GMT
Content-Type: application/sdp
Content-Length: 215
Message Body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): - 814469861 615070845 IN IP4 192.168.100.2
Session Name (s): Connection Information (c): IN IP4 132.197.36.146
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 132.197.36.146
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Session Attribute (a): sendrecv
Media Description, name and address (m): audio 49016 RTP/AVP 0 101
Media Type: audio
Media Port: 49016
Media Protocol: RTP/AVP
Media Format: ITU-T G.711 PCMU
Media Format: DynamicRTP-Type-101
Media Attribute (a): sendrecv
Media Attribute (a): rtpmap:0 PCMU/8000
Media Attribute Fieldname: rtpmap
Media Format: 0
MIME Type: PCMU
Sample Rate: 8000
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Format: 101
MIME Type: telephone-event
Sample Rate: 8000
Media Attribute (a): fmtp:101 0-16
Media Attribute Fieldname: fmtp
Media Format: 101 [telephone-event]
Midterm 2011
p7
Media format specific parameters: 0-16
No.
Time
Source
Destination
56 14.375332
132.197.36.146
172.30.222.164
SSRC=0xA93C1684, Seq=43777, Time=849324303
Protocol Length Info
RTP
214
PT=ITU-T G.711 PCMU,
Frame 56: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits)
Ethernet II, Src: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3), Dst: All-HSRP-routers_00 (00:00:0c:07:ac:00)
Internet Protocol Version 4, Src: 132.197.36.146 (132.197.36.146), Dst: 172.30.222.164
(172.30.222.164)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable
Transport))
Total Length: 200
Identification: 0x0000 (0)
Flags: 0x02 (Don't Fragment)
Fragment offset: 0
Time to live: 63
Protocol: UDP (17)
Header checksum: 0x070b [correct]
Source: 132.197.36.146 (132.197.36.146)
Destination: 172.30.222.164 (172.30.222.164)
User Datagram Protocol, Src Port: 49016 (49016), Dst Port: 12512 (12512)
Source port: 49016 (49016)
Destination port: 12512 (12512)
Length: 180
Checksum: 0xbacc [validation disabled]
Real-Time Transport Protocol
No.
Time
Source
Destination
57 14.394994
132.197.36.146
172.30.222.164
SSRC=0xA93C1684, Seq=43778, Time=849324463
Protocol Length Info
RTP
214
PT=ITU-T G.711 PCMU,
Frame 57: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits)
Ethernet II, Src: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3), Dst: All-HSRP-routers_00 (00:00:0c:07:ac:00)
Internet Protocol Version 4, Src: 132.197.36.146 (132.197.36.146), Dst: 172.30.222.164
(172.30.222.164)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable
Transport))
Total Length: 200
Identification: 0x0000 (0)
Flags: 0x02 (Don't Fragment)
Fragment offset: 0
Time to live: 63
Protocol: UDP (17)
Header checksum: 0x070b [correct]
Source: 132.197.36.146 (132.197.36.146)
Destination: 172.30.222.164 (172.30.222.164)
User Datagram Protocol, Src Port: 49016 (49016), Dst Port: 12512 (12512)
Source port: 49016 (49016)
Destination port: 12512 (12512)
Length: 180
Checksum: 0xa690 [validation disabled]
Real-Time Transport Protocol
Note that there are many more RTP frames like frames 56 and 57, this is just reprentative.
No.
Time
Source
69 14.520756
172.30.222.43
sip:7814660000@132.197.36.146:5060
Destination
132.197.36.146
Protocol Length Info
SIP
856
Request: ACK
Frame 69: 856 bytes on wire (6848 bits), 856 bytes captured (6848 bits)
Ethernet II, Src: Cisco_a8:1e:c0 (00:19:07:a8:1e:c0), Dst: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3)
Internet Protocol Version 4, Src: 172.30.222.43 (172.30.222.43), Dst: 132.197.36.146 (132.197.36.146)
Version: 4
Midterm 2011
p8
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable
Transport))
Total Length: 842
Identification: 0x0000 (0)
Flags: 0x00
Fragment offset: 0
Time to live: 123
Protocol: UDP (17)
Header checksum: 0x0902 [correct]
Source: 172.30.222.43 (172.30.222.43)
Destination: 132.197.36.146 (132.197.36.146)
User Datagram Protocol, Src Port: 5089 (5089), Dst Port: sip (5060)
Source port: 5089 (5089)
Destination port: sip (5060)
Length: 822
Checksum: 0xdd85 [validation disabled]
Session Initiation Protocol
Request-Line: ACK sip:7814660000@132.197.36.146:5060 SIP/2.0
Method: ACK
Request-URI: sip:7814660000@132.197.36.146:5060
[Resent Packet: False]
[Request Frame: 26]
[Response Time (ms): 4816]
Message Header
Via: SIP/2.0/UDP 172.30.222.43:5089;branch=z9hG4bKkhg6ii10bon113h5r410.1
From: <sip:9085590000@65.211.120.225;user=phone>;tag=901634348-1320087121335To: "ELLIOT
EICHEN"<sip:7814660000@verizonlabs.globalipcom.com;useradd=132.197.36.146;userport=5060>;tag=941acfde
Call-ID: BW145201335311011437264061@65.211.120.225
CSeq: 766080733 ACK
Contact: <sip:9085590000@172.30.222.43:5089;transport=udp>
[truncated] Authorization: DIGEST cnonce="guftsdui",qop=auth,uri="sip:7814660000ak0gcrrfrkl28@63.79.7.171:5060;useradd=132.197.36.146;userport=5060;transport=udp",realm="verizonlabs
.globalipcom.com",username="vzlab-waltham220",nonce="d89c
Max-Forwards: 69
Content-Length: 0
Frame 81: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits)
Ethernet II, Src: Cisco_a8:19:c0 (00:19:07:a8:19:c0), Dst: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3)
Internet Protocol Version 4, Src: 172.30.222.164 (172.30.222.164), Dst: 132.197.36.146
(132.197.36.146)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable
Transport))
Total Length: 200
Identification: 0xfba9 (64425)
Flags: 0x00
Fragment offset: 0
Time to live: 241
Protocol: UDP (17)
Header checksum: 0x9960 [correct]
Source: 172.30.222.164 (172.30.222.164)
Destination: 132.197.36.146 (132.197.36.146)
User Datagram Protocol, Src Port: 12512 (12512), Dst Port: 49016 (49016)
Source port: 12512 (12512)
Destination port: 49016 (49016)
Length: 180
Checksum: 0x0000 (none)
Real-Time Transport Protocol
No.
Time
Source
Destination
82 14.655051
132.197.36.146
172.30.222.164
SSRC=0xA93C1684, Seq=43791, Time=849326543
Protocol Length Info
RTP
214
PT=ITU-T G.711 PCMU,
Frame 82: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits)
Ethernet II, Src: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3), Dst: All-HSRP-routers_00 (00:00:0c:07:ac:00)
Midterm 2011
p9
Internet Protocol Version 4, Src: 132.197.36.146 (132.197.36.146), Dst: 172.30.222.164
(172.30.222.164)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable
Transport))
Total Length: 200
Identification: 0x0000 (0)
Flags: 0x02 (Don't Fragment)
Fragment offset: 0
Time to live: 63
Protocol: UDP (17)
Header checksum: 0x070b [correct]
Source: 132.197.36.146 (132.197.36.146)
Destination: 172.30.222.164 (172.30.222.164)
User Datagram Protocol, Src Port: 49016 (49016), Dst Port: 12512 (12512)
Source port: 49016 (49016)
Destination port: 12512 (12512)
Length: 180
Checksum: 0x551c [validation disabled]
Real-Time Transport Protocol
Note that there are many more RTP frames just like Frame 81/82 .. this is just representative.
No.
Time
Source
Destination
1221 24.269921
132.197.36.146
172.30.222.43
sip:9085590000@172.30.222.43:5089;transport=udp
Protocol Length Info
SIP
587
Request: BYE
Frame 1221: 587 bytes on wire (4696 bits), 587 bytes captured (4696 bits)
Ethernet II, Src: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3), Dst: All-HSRP-routers_00 (00:00:0c:07:ac:00)
Internet Protocol Version 4, Src: 132.197.36.146 (132.197.36.146), Dst: 172.30.222.43 (172.30.222.43)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable
Transport))
Total Length: 573
Identification: 0x0000 (0)
Flags: 0x02 (Don't Fragment)
Fragment offset: 0
Time to live: 63
Protocol: UDP (17)
Header checksum: 0x060f [correct]
Source: 132.197.36.146 (132.197.36.146)
Destination: 172.30.222.43 (172.30.222.43)
User Datagram Protocol, Src Port: sip (5060), Dst Port: 5089 (5089)
Source port: sip (5060)
Destination port: 5089 (5089)
Length: 553
Checksum: 0x5cc7 [validation disabled]
Session Initiation Protocol
Request-Line: BYE sip:9085590000@172.30.222.43:5089;transport=udp SIP/2.0
Method: BYE
Request-URI: sip:9085590000@172.30.222.43:5089;transport=udp
[Resent Packet: False]
Message Header
Via: SIP/2.0/UDP 132.197.36.146:5060;rport;branch=z9hG4bK14c48dcd00035
From: "ELLIOT
EICHEN"<sip:7814660000@verizonlabs.globalipcom.com;useradd=132.197.36.146;userport=5060>;tag=941acfde
To: <sip:9085590000@65.211.120.225;user=phone>;tag=901634348-1320087121335Call-ID: BW145201335311011437264061@65.211.120.225
CSeq: 1263404461 BYE
Max-Forwards: 70
User-Agent: HelloCommunicator/2.0
P-Access-Network-Info: IEEE-802.3
Date: Mon, 31 Oct 2011 18:52:31 GMT
Content-Length: 0
No.
Time
Source
Destination
Protocol Length Info
Midterm 2011
p 10
1221 24.269921
132.197.36.146
172.30.222.43
sip:9085590000@172.30.222.43:5089;transport=udp
SIP
587
Request: BYE
Frame 1221: 587 bytes on wire (4696 bits), 587 bytes captured (4696 bits)
Ethernet II, Src: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3), Dst: All-HSRP-routers_00 (00:00:0c:07:ac:00)
Internet Protocol Version 4, Src: 132.197.36.146 (132.197.36.146), Dst: 172.30.222.43 (172.30.222.43)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable
Transport))
Total Length: 573
Identification: 0x0000 (0)
Flags: 0x02 (Don't Fragment)
Fragment offset: 0
Time to live: 63
Protocol: UDP (17)
Header checksum: 0x060f [correct]
Source: 132.197.36.146 (132.197.36.146)
Destination: 172.30.222.43 (172.30.222.43)
User Datagram Protocol, Src Port: sip (5060), Dst Port: 5089 (5089)
Source port: sip (5060)
Destination port: 5089 (5089)
Length: 553
Checksum: 0x5cc7 [validation disabled]
Session Initiation Protocol
Request-Line: BYE sip:9085590000@172.30.222.43:5089;transport=udp SIP/2.0
Method: BYE
Request-URI: sip:9085590000@172.30.222.43:5089;transport=udp
[Resent Packet: False]
Message Header
Via: SIP/2.0/UDP 132.197.36.146:5060;rport;branch=z9hG4bK14c48dcd00035
From: "ELLIOT
EICHEN"<sip:7814660000@verizonlabs.globalipcom.com;useradd=132.197.36.146;userport=5060>;tag=941acfde
To: <sip:9085590000@65.211.120.225;user=phone>;tag=901634348-1320087121335Call-ID: BW145201335311011437264061@65.211.120.225
CSeq: 1263404461 BYE
Max-Forwards: 70
User-Agent: HelloCommunicator/2.0
P-Access-Network-Info: IEEE-802.3
Date: Mon, 31 Oct 2011 18:52:31 GMT
Content-Length: 0
No.
Time
1226 24.325609
Source
172.30.222.43
Destination
132.197.36.146
Protocol Length Info
SIP
446
Status: 200 OK
Frame 1226: 446 bytes on wire (3568 bits), 446 bytes captured (3568 bits)
Ethernet II, Src: Cisco_a8:1e:c0 (00:19:07:a8:1e:c0), Dst: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3)
Internet Protocol Version 4, Src: 172.30.222.43 (172.30.222.43), Dst: 132.197.36.146 (132.197.36.146)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable
Transport))
Total Length: 432
Identification: 0x0000 (0)
Flags: 0x00
Fragment offset: 0
Time to live: 123
Protocol: UDP (17)
Header checksum: 0x0a9c [correct]
Source: 172.30.222.43 (172.30.222.43)
Destination: 132.197.36.146 (132.197.36.146)
User Datagram Protocol, Src Port: 5089 (5089), Dst Port: sip (5060)
Source port: 5089 (5089)
Destination port: sip (5060)
Length: 412
Checksum: 0xa867 [validation disabled]
Session Initiation Protocol
Status-Line: SIP/2.0 200 OK
Midterm 2011
p 11
Status-Code: 200
[Resent Packet: False]
[Request Frame: 1221]
[Response Time (ms): 55]
[Release Time (ms): 55]
Message Header
Via: SIP/2.0/UDP
132.197.36.146:5060;received=132.197.36.146;branch=z9hG4bK14c48dcd00035;rport=5060
From: "ELLIOT
EICHEN"<sip:7814660000@verizonlabs.globalipcom.com;useradd=132.197.36.146;userport=5060>;tag=941acfde
To: <sip:9085590000@65.211.120.225;user=phone>;tag=901634348-1320087121335Call-ID: BW145201335311011437264061@65.211.120.225
CSeq: 1263404461 BYE
Content-Length: 0
Midterm 2011
p 12