Frame 22: 1084 bytes on wire (8672 bits), 1084 bytes captured (8672 bits) Ethernet II, Src: Cisco_a8:1e:c0 (00:19:07:a8:1e:c0), Dst: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3) Internet Protocol Version 4, Src: 172.30.222.43 (172.30.222.43), Dst: 132.197.36.146 (132.197.36.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) Total Length: 1070 Identification: 0x0000 (0) Flags: 0x00 Fragment offset: 0 Time to live: 123 Protocol: UDP (17) Header checksum: 0x081e [correct] Source: 172.30.222.43 (172.30.222.43) Destination: 132.197.36.146 (132.197.36.146) User Datagram Protocol, Src Port: 5089 (5089), Dst Port: sip (5060) Source port: 5089 (5089) Destination port: sip (5060) Length: 1050 Checksum: 0x74ef [validation disabled] Session Initiation Protocol Request-Line: INVITE sip:7814660000@132.197.36.146:5060;useradd=132.197.36.146;userport=5060 SIP/2.0 Method: INVITE Request-URI: sip:7814660000@132.197.36.146:5060;useradd=132.197.36.146;userport=5060 [Resent Packet: False] Message Header Via: SIP/2.0/UDP 172.30.222.43:5089;branch=z9hG4bK4nbaf300d051p31420l1.1 From: <sip:9085590000@65.211.120.225;user=phone>;tag=901634348-1320087121335To: "ELLIOT EICHEN"<sip:7814660000@verizonlabs.globalipcom.com;useradd=132.197.36.146;userport=5060> Call-ID: BW145201335311011437264061@65.211.120.225 CSeq: 766080732 INVITE Contact: <sip:9085590000@172.30.222.43:5089;transport=udp> Allow: ACK,BYE,CANCEL,INFO,INVITE,OPTIONS,PRACK,REFER,NOTIFY,UPDATE Accept: multipart/mixed,application/media_control+xml,application/sdp Call-Info: <sip:65.211.120.225>;appearance-index=1 Supported: Max-Forwards: 69 Content-Type: application/sdp Content-Length: 288 Message Body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): BroadWorks 62493854 1 IN IP4 172.30.222.164 Session Name (s): Connection Information (c): IN IP4 172.30.222.164 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 172.30.222.164 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 12512 RTP/AVP 18 0 8 101 Media Type: audio Media Port: 12512 Media Protocol: RTP/AVP Media Format: ITU-T G.729 Media Format: ITU-T G.711 PCMU Media Format: ITU-T G.711 PCMA Media Format: DynamicRTP-Type-101 Connection Information (c): IN IP4 172.30.222.164 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 172.30.222.164 Media Attribute (a): rtpmap:18 G729/8000 Media Attribute Fieldname: rtpmap Media Format: 18 MIME Type: G729 Sample Rate: 8000 Media Attribute (a): fmtp:18 annexb=no Midterm 2011 p1 Media Attribute Fieldname: fmtp Media Format: 18 [G729] Media format specific parameters: annexb=no Media Attribute (a): rtpmap:0 PCMU/8000 Media Attribute Fieldname: rtpmap Media Format: 0 MIME Type: PCMU Sample Rate: 8000 Media Attribute (a): rtpmap:8 PCMA/8000 Media Attribute Fieldname: rtpmap Media Format: 8 MIME Type: PCMA Sample Rate: 8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Format: 101 MIME Type: telephone-event Sample Rate: 8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Format: 101 [telephone-event] Media format specific parameters: 0-16 No. Time 23 9.643199 Source 132.197.36.146 Destination 172.30.222.43 Protocol Length Info SIP 542 Status: 100 Trying Frame 23: 542 bytes on wire (4336 bits), 542 bytes captured (4336 bits) Ethernet II, Src: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3), Dst: All-HSRP-routers_00 (00:00:0c:07:ac:00) Internet Protocol Version 4, Src: 132.197.36.146 (132.197.36.146), Dst: 172.30.222.43 (172.30.222.43) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) Total Length: 528 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) Fragment offset: 0 Time to live: 63 Protocol: UDP (17) Header checksum: 0x063c [correct] Source: 132.197.36.146 (132.197.36.146) Destination: 172.30.222.43 (172.30.222.43) User Datagram Protocol, Src Port: sip (5060), Dst Port: 5089 (5089) Source port: sip (5060) Destination port: 5089 (5089) Length: 508 Checksum: 0x4033 [validation disabled] Session Initiation Protocol Status-Line: SIP/2.0 100 Trying Status-Code: 100 [Resent Packet: False] [Request Frame: 22] [Response Time (ms): 8] Message Header Via: SIP/2.0/UDP 172.30.222.43:5089;received=172.30.222.43;branch=z9hG4bK4nbaf300d051p31420l1.1 From: <sip:9085590000@65.211.120.225;user=phone>;tag=901634348-1320087121335To: "ELLIOT EICHEN"<sip:7814660000@verizonlabs.globalipcom.com;useradd=132.197.36.146;userport=5060> Call-ID: BW145201335311011437264061@65.211.120.225 CSeq: 766080732 INVITE User-Agent: HelloCommunicator/2.0 P-Access-Network-Info: IEEE-802.3 Date: Mon, 31 Oct 2011 18:52:16 GMT Content-Length: 0 No. Time 24 9.644791 Source 132.197.36.146 Destination 172.30.222.43 Protocol Length Info SIP 692 Status: 401 Unauthorized Frame 24: 692 bytes on wire (5536 bits), 692 bytes captured (5536 bits) Ethernet II, Src: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3), Dst: All-HSRP-routers_00 (00:00:0c:07:ac:00) Internet Protocol Version 4, Src: 132.197.36.146 (132.197.36.146), Dst: 172.30.222.43 (172.30.222.43) Midterm 2011 p2 Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) Total Length: 678 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) Fragment offset: 0 Time to live: 63 Protocol: UDP (17) Header checksum: 0x05a6 [correct] Source: 132.197.36.146 (132.197.36.146) Destination: 172.30.222.43 (172.30.222.43) User Datagram Protocol, Src Port: sip (5060), Dst Port: 5089 (5089) Source port: sip (5060) Destination port: 5089 (5089) Length: 658 Checksum: 0x5705 [validation disabled] Session Initiation Protocol Status-Line: SIP/2.0 401 Unauthorized Status-Code: 401 [Resent Packet: False] [Request Frame: 22] [Response Time (ms): 9] Message Header Via: SIP/2.0/UDP 172.30.222.43:5089;received=172.30.222.43;branch=z9hG4bK4nbaf300d051p31420l1.1 From: <sip:9085590000@65.211.120.225;user=phone>;tag=901634348-1320087121335To: "ELLIOT EICHEN"<sip:7814660000@verizonlabs.globalipcom.com;useradd=132.197.36.146;userport=5060>;tag=f1a77f96 Call-ID: BW145201335311011437264061@65.211.120.225 CSeq: 766080732 INVITE User-Agent: HelloCommunicator/2.0 P-Access-Network-Info: IEEE-802.3 WWW-Authenticate: Digest realm="verizonlabs.globalipcom.com", algorithm=MD5, qop="auth", nonce="d89c9c25f234320f8c92815777790af0" Date: Mon, 31 Oct 2011 18:52:16 GMT Content-Length: 0 No. Time Source Destination Protocol Length Info 25 9.676391 172.30.222.43 132.197.36.146 SIP 505 Request: ACK sip:7814660000@132.197.36.146:5060;useradd=132.197.36.146;userport=5060 Frame 25: 505 bytes on wire (4040 bits), 505 bytes captured (4040 bits) Ethernet II, Src: Cisco_a8:1e:c0 (00:19:07:a8:1e:c0), Dst: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3) Internet Protocol Version 4, Src: 172.30.222.43 (172.30.222.43), Dst: 132.197.36.146 (132.197.36.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) Total Length: 491 Identification: 0x0000 (0) Flags: 0x00 Fragment offset: 0 Time to live: 123 Protocol: UDP (17) Header checksum: 0x0a61 [correct] Source: 172.30.222.43 (172.30.222.43) Destination: 132.197.36.146 (132.197.36.146) User Datagram Protocol, Src Port: 5089 (5089), Dst Port: sip (5060) Source port: 5089 (5089) Destination port: sip (5060) Length: 471 Checksum: 0xb389 [validation disabled] Session Initiation Protocol Request-Line: ACK sip:7814660000@132.197.36.146:5060;useradd=132.197.36.146;userport=5060 SIP/2.0 Method: ACK Request-URI: sip:7814660000@132.197.36.146:5060;useradd=132.197.36.146;userport=5060 [Resent Packet: False] [Request Frame: 22] [Response Time (ms): 41] Message Header Midterm 2011 p3 Via: SIP/2.0/UDP 172.30.222.43:5089;branch=z9hG4bK4nbaf300d051p31420l1.1 CSeq: 766080732 ACK From: <sip:9085590000@65.211.120.225;user=phone>;tag=901634348-1320087121335To: "ELLIOT EICHEN"<sip:7814660000@verizonlabs.globalipcom.com;useradd=132.197.36.146;userport=5060>;tag=f1a77f96 Call-ID: BW145201335311011437264061@65.211.120.225 Max-Forwards: 69 Content-Length: 0 No. Time Source Destination Protocol Length Info 26 9.704956 172.30.222.43 132.197.36.146 SIP/SDP 1412 Request: INVITE sip:7814660000@132.197.36.146:5060;useradd=132.197.36.146;userport=5060, with session description Frame 26: 1412 bytes on wire (11296 bits), 1412 bytes captured (11296 bits) Ethernet II, Src: Cisco_a8:1e:c0 (00:19:07:a8:1e:c0), Dst: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3) Internet Protocol Version 4, Src: 172.30.222.43 (172.30.222.43), Dst: 132.197.36.146 (132.197.36.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) Total Length: 1398 Identification: 0x0000 (0) Flags: 0x00 Fragment offset: 0 Time to live: 123 Protocol: UDP (17) Header checksum: 0x06d6 [correct] Source: 172.30.222.43 (172.30.222.43) Destination: 132.197.36.146 (132.197.36.146) User Datagram Protocol, Src Port: 5089 (5089), Dst Port: sip (5060) Source port: 5089 (5089) Destination port: sip (5060) Length: 1378 Checksum: 0x37c8 [validation disabled] Session Initiation Protocol Request-Line: INVITE sip:7814660000@132.197.36.146:5060;useradd=132.197.36.146;userport=5060 SIP/2.0 Method: INVITE Request-URI: sip:7814660000@132.197.36.146:5060;useradd=132.197.36.146;userport=5060 [Resent Packet: False] Message Header Via: SIP/2.0/UDP 172.30.222.43:5089;branch=z9hG4bK6v5j7710eg91035j7390.1 From: <sip:9085590000@65.211.120.225;user=phone>;tag=901634348-1320087121335To: "ELLIOT EICHEN"<sip:7814660000@verizonlabs.globalipcom.com;useradd=132.197.36.146;userport=5060> Call-ID: BW145201335311011437264061@65.211.120.225 CSeq: 766080733 INVITE Contact: <sip:9085590000@172.30.222.43:5089;transport=udp> Allow: ACK,BYE,CANCEL,INFO,INVITE,OPTIONS,PRACK,REFER,NOTIFY,UPDATE Accept: multipart/mixed,application/media_control+xml,application/sdp Call-Info: <sip:65.211.120.225>;appearance-index=1 Supported: Max-Forwards: 69 [truncated] Authorization: DIGEST cnonce="guftsdui",qop=auth,uri="sip:7814660000ak0gcrrfrkl28@63.79.7.171:5060;useradd=132.197.36.146;userport=5060;transport=udp",realm="verizonlabs.globalip om.com",username="vzlab-waltham220",nonce="d89c Content-Type: application/sdp Content-Length: 288 Message Body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): BroadWorks 62493854 1 IN IP4 172.30.222.164 Session Name (s): Connection Information (c): IN IP4 172.30.222.164 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 172.30.222.164 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Media Description, name and address (m): audio 12512 RTP/AVP 18 0 8 101 Media Type: audio Midterm 2011 p4 Media Port: 12512 Media Protocol: RTP/AVP Media Format: ITU-T G.729 Media Format: ITU-T G.711 PCMU Media Format: ITU-T G.711 PCMA Media Format: DynamicRTP-Type-101 Connection Information (c): IN IP4 172.30.222.164 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 172.30.222.164 Media Attribute (a): rtpmap:18 G729/8000 Media Attribute Fieldname: rtpmap Media Format: 18 MIME Type: G729 Sample Rate: 8000 Media Attribute (a): fmtp:18 annexb=no Media Attribute Fieldname: fmtp Media Format: 18 [G729] Media format specific parameters: annexb=no Media Attribute (a): rtpmap:0 PCMU/8000 Media Attribute Fieldname: rtpmap Media Format: 0 MIME Type: PCMU Sample Rate: 8000 Media Attribute (a): rtpmap:8 PCMA/8000 Media Attribute Fieldname: rtpmap Media Format: 8 MIME Type: PCMA Sample Rate: 8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Format: 101 MIME Type: telephone-event Sample Rate: 8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Format: 101 [telephone-event] Media format specific parameters: 0-16 No. Time 27 9.715798 Source 132.197.36.146 Destination 172.30.222.43 Protocol Length Info SIP 542 Status: 100 Trying Frame 27: 542 bytes on wire (4336 bits), 542 bytes captured (4336 bits) Ethernet II, Src: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3), Dst: All-HSRP-routers_00 (00:00:0c:07:ac:00) Internet Protocol Version 4, Src: 132.197.36.146 (132.197.36.146), Dst: 172.30.222.43 (172.30.222.43) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) Total Length: 528 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) Fragment offset: 0 Time to live: 63 Protocol: UDP (17) Header checksum: 0x063c [correct] Source: 132.197.36.146 (132.197.36.146) Destination: 172.30.222.43 (172.30.222.43) User Datagram Protocol, Src Port: sip (5060), Dst Port: 5089 (5089) Source port: sip (5060) Destination port: 5089 (5089) Length: 508 Checksum: 0xbbf0 [validation disabled] Session Initiation Protocol Status-Line: SIP/2.0 100 Trying Status-Code: 100 [Resent Packet: False] [Request Frame: 26] [Response Time (ms): 10] Message Header Midterm 2011 p5 Via: SIP/2.0/UDP 172.30.222.43:5089;received=172.30.222.43;branch=z9hG4bK6v5j7710eg91035j7390.1 From: <sip:9085590000@65.211.120.225;user=phone>;tag=901634348-1320087121335To: "ELLIOT EICHEN"<sip:7814660000@verizonlabs.globalipcom.com;useradd=132.197.36.146;userport=5060> Call-ID: BW145201335311011437264061@65.211.120.225 CSeq: 766080733 INVITE User-Agent: HelloCommunicator/2.0 P-Access-Network-Info: IEEE-802.3 Date: Mon, 31 Oct 2011 18:52:16 GMT Content-Length: 0 No. Time 28 9.724126 Source 132.197.36.146 Destination 132.197.204.92 Protocol Length Info CLASSIC-STUN 62 Message: Binding Request Time 33 9.757406 Source 132.197.36.146 Destination 172.30.222.43 Protocol Length Info SIP 603 Status: 180 Ringing .. No. Frame 33: 603 bytes on wire (4824 bits), 603 bytes captured (4824 bits) Ethernet II, Src: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3), Dst: All-HSRP-routers_00 (00:00:0c:07:ac:00) Internet Protocol Version 4, Src: 132.197.36.146 (132.197.36.146), Dst: 172.30.222.43 (172.30.222.43) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) Total Length: 589 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) Fragment offset: 0 Time to live: 63 Protocol: UDP (17) Header checksum: 0x05ff [correct] Source: 132.197.36.146 (132.197.36.146) Destination: 172.30.222.43 (172.30.222.43) User Datagram Protocol, Src Port: sip (5060), Dst Port: 5089 (5089) Source port: sip (5060) Destination port: 5089 (5089) Length: 569 Checksum: 0x49e4 [validation disabled] Session Initiation Protocol Status-Line: SIP/2.0 180 Ringing Status-Code: 180 [Resent Packet: False] [Request Frame: 26] [Response Time (ms): 52] Message Header Via: SIP/2.0/UDP 172.30.222.43:5089;received=172.30.222.43;branch=z9hG4bK6v5j7710eg91035j7390.1 From: <sip:9085590000@65.211.120.225;user=phone>;tag=901634348-1320087121335To: "ELLIOT EICHEN"<sip:7814660000@verizonlabs.globalipcom.com;useradd=132.197.36.146;userport=5060>;tag=941acfde Call-ID: BW145201335311011437264061@65.211.120.225 CSeq: 766080733 INVITE Contact: <sip:7814660000@132.197.36.146:5060> User-Agent: HelloCommunicator/2.0 P-Access-Network-Info: IEEE-802.3 Date: Mon, 31 Oct 2011 18:52:16 GMT Content-Length: 0 .. No. Time 54 14.300766 description Source 132.197.36.146 Destination 172.30.222.43 Protocol Length Info SIP/SDP 1023 Status: 200 OK, with session Frame 54: 1023 bytes on wire (8184 bits), 1023 bytes captured (8184 bits) Ethernet II, Src: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3), Dst: All-HSRP-routers_00 (00:00:0c:07:ac:00) Internet Protocol Version 4, Src: 132.197.36.146 (132.197.36.146), Dst: 172.30.222.43 (172.30.222.43) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) Midterm 2011 p6 Total Length: 1009 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) Fragment offset: 0 Time to live: 63 Protocol: UDP (17) Header checksum: 0x045b [correct] Source: 132.197.36.146 (132.197.36.146) Destination: 172.30.222.43 (172.30.222.43) User Datagram Protocol, Src Port: sip (5060), Dst Port: 5089 (5089) Source port: sip (5060) Destination port: 5089 (5089) Length: 989 Checksum: 0x30b3 [validation disabled] Session Initiation Protocol Status-Line: SIP/2.0 200 OK Status-Code: 200 [Resent Packet: False] [Request Frame: 26] [Response Time (ms): 4596] Message Header Via: SIP/2.0/UDP 172.30.222.43:5089;received=172.30.222.43;branch=z9hG4bK6v5j7710eg91035j7390.1 From: <sip:9085590000@65.211.120.225;user=phone>;tag=901634348-1320087121335To: "ELLIOT EICHEN"<sip:7814660000@verizonlabs.globalipcom.com;useradd=132.197.36.146;userport=5060>;tag=941acfde Call-ID: BW145201335311011437264061@65.211.120.225 CSeq: 766080733 INVITE Contact: <sip:7814660000@132.197.36.146:5060> User-Agent: HelloCommunicator/2.0 P-Access-Network-Info: IEEE-802.3 Allow: INVITE,ACK,BYE,CANCEL,REFER,NOTIFY,OPTIONS,PRACK,UPDATE,INFO,MESSAGE,SUBSCRIBE,SERVICE,PING Allow-Events: refer,call-info,line-seize Supported: 100rel, replaces, join Date: Mon, 31 Oct 2011 18:52:21 GMT Content-Type: application/sdp Content-Length: 215 Message Body Session Description Protocol Session Description Protocol Version (v): 0 Owner/Creator, Session Id (o): - 814469861 615070845 IN IP4 192.168.100.2 Session Name (s): Connection Information (c): IN IP4 132.197.36.146 Connection Network Type: IN Connection Address Type: IP4 Connection Address: 132.197.36.146 Time Description, active time (t): 0 0 Session Start Time: 0 Session Stop Time: 0 Session Attribute (a): sendrecv Media Description, name and address (m): audio 49016 RTP/AVP 0 101 Media Type: audio Media Port: 49016 Media Protocol: RTP/AVP Media Format: ITU-T G.711 PCMU Media Format: DynamicRTP-Type-101 Media Attribute (a): sendrecv Media Attribute (a): rtpmap:0 PCMU/8000 Media Attribute Fieldname: rtpmap Media Format: 0 MIME Type: PCMU Sample Rate: 8000 Media Attribute (a): rtpmap:101 telephone-event/8000 Media Attribute Fieldname: rtpmap Media Format: 101 MIME Type: telephone-event Sample Rate: 8000 Media Attribute (a): fmtp:101 0-16 Media Attribute Fieldname: fmtp Media Format: 101 [telephone-event] Midterm 2011 p7 Media format specific parameters: 0-16 No. Time Source Destination 56 14.375332 132.197.36.146 172.30.222.164 SSRC=0xA93C1684, Seq=43777, Time=849324303 Protocol Length Info RTP 214 PT=ITU-T G.711 PCMU, Frame 56: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits) Ethernet II, Src: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3), Dst: All-HSRP-routers_00 (00:00:0c:07:ac:00) Internet Protocol Version 4, Src: 132.197.36.146 (132.197.36.146), Dst: 172.30.222.164 (172.30.222.164) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) Total Length: 200 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) Fragment offset: 0 Time to live: 63 Protocol: UDP (17) Header checksum: 0x070b [correct] Source: 132.197.36.146 (132.197.36.146) Destination: 172.30.222.164 (172.30.222.164) User Datagram Protocol, Src Port: 49016 (49016), Dst Port: 12512 (12512) Source port: 49016 (49016) Destination port: 12512 (12512) Length: 180 Checksum: 0xbacc [validation disabled] Real-Time Transport Protocol No. Time Source Destination 57 14.394994 132.197.36.146 172.30.222.164 SSRC=0xA93C1684, Seq=43778, Time=849324463 Protocol Length Info RTP 214 PT=ITU-T G.711 PCMU, Frame 57: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits) Ethernet II, Src: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3), Dst: All-HSRP-routers_00 (00:00:0c:07:ac:00) Internet Protocol Version 4, Src: 132.197.36.146 (132.197.36.146), Dst: 172.30.222.164 (172.30.222.164) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) Total Length: 200 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) Fragment offset: 0 Time to live: 63 Protocol: UDP (17) Header checksum: 0x070b [correct] Source: 132.197.36.146 (132.197.36.146) Destination: 172.30.222.164 (172.30.222.164) User Datagram Protocol, Src Port: 49016 (49016), Dst Port: 12512 (12512) Source port: 49016 (49016) Destination port: 12512 (12512) Length: 180 Checksum: 0xa690 [validation disabled] Real-Time Transport Protocol Note that there are many more RTP frames like frames 56 and 57, this is just reprentative. No. Time Source 69 14.520756 172.30.222.43 sip:7814660000@132.197.36.146:5060 Destination 132.197.36.146 Protocol Length Info SIP 856 Request: ACK Frame 69: 856 bytes on wire (6848 bits), 856 bytes captured (6848 bits) Ethernet II, Src: Cisco_a8:1e:c0 (00:19:07:a8:1e:c0), Dst: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3) Internet Protocol Version 4, Src: 172.30.222.43 (172.30.222.43), Dst: 132.197.36.146 (132.197.36.146) Version: 4 Midterm 2011 p8 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) Total Length: 842 Identification: 0x0000 (0) Flags: 0x00 Fragment offset: 0 Time to live: 123 Protocol: UDP (17) Header checksum: 0x0902 [correct] Source: 172.30.222.43 (172.30.222.43) Destination: 132.197.36.146 (132.197.36.146) User Datagram Protocol, Src Port: 5089 (5089), Dst Port: sip (5060) Source port: 5089 (5089) Destination port: sip (5060) Length: 822 Checksum: 0xdd85 [validation disabled] Session Initiation Protocol Request-Line: ACK sip:7814660000@132.197.36.146:5060 SIP/2.0 Method: ACK Request-URI: sip:7814660000@132.197.36.146:5060 [Resent Packet: False] [Request Frame: 26] [Response Time (ms): 4816] Message Header Via: SIP/2.0/UDP 172.30.222.43:5089;branch=z9hG4bKkhg6ii10bon113h5r410.1 From: <sip:9085590000@65.211.120.225;user=phone>;tag=901634348-1320087121335To: "ELLIOT EICHEN"<sip:7814660000@verizonlabs.globalipcom.com;useradd=132.197.36.146;userport=5060>;tag=941acfde Call-ID: BW145201335311011437264061@65.211.120.225 CSeq: 766080733 ACK Contact: <sip:9085590000@172.30.222.43:5089;transport=udp> [truncated] Authorization: DIGEST cnonce="guftsdui",qop=auth,uri="sip:7814660000ak0gcrrfrkl28@63.79.7.171:5060;useradd=132.197.36.146;userport=5060;transport=udp",realm="verizonlabs .globalipcom.com",username="vzlab-waltham220",nonce="d89c Max-Forwards: 69 Content-Length: 0 Frame 81: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits) Ethernet II, Src: Cisco_a8:19:c0 (00:19:07:a8:19:c0), Dst: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3) Internet Protocol Version 4, Src: 172.30.222.164 (172.30.222.164), Dst: 132.197.36.146 (132.197.36.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) Total Length: 200 Identification: 0xfba9 (64425) Flags: 0x00 Fragment offset: 0 Time to live: 241 Protocol: UDP (17) Header checksum: 0x9960 [correct] Source: 172.30.222.164 (172.30.222.164) Destination: 132.197.36.146 (132.197.36.146) User Datagram Protocol, Src Port: 12512 (12512), Dst Port: 49016 (49016) Source port: 12512 (12512) Destination port: 49016 (49016) Length: 180 Checksum: 0x0000 (none) Real-Time Transport Protocol No. Time Source Destination 82 14.655051 132.197.36.146 172.30.222.164 SSRC=0xA93C1684, Seq=43791, Time=849326543 Protocol Length Info RTP 214 PT=ITU-T G.711 PCMU, Frame 82: 214 bytes on wire (1712 bits), 214 bytes captured (1712 bits) Ethernet II, Src: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3), Dst: All-HSRP-routers_00 (00:00:0c:07:ac:00) Midterm 2011 p9 Internet Protocol Version 4, Src: 132.197.36.146 (132.197.36.146), Dst: 172.30.222.164 (172.30.222.164) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) Total Length: 200 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) Fragment offset: 0 Time to live: 63 Protocol: UDP (17) Header checksum: 0x070b [correct] Source: 132.197.36.146 (132.197.36.146) Destination: 172.30.222.164 (172.30.222.164) User Datagram Protocol, Src Port: 49016 (49016), Dst Port: 12512 (12512) Source port: 49016 (49016) Destination port: 12512 (12512) Length: 180 Checksum: 0x551c [validation disabled] Real-Time Transport Protocol Note that there are many more RTP frames just like Frame 81/82 .. this is just representative. No. Time Source Destination 1221 24.269921 132.197.36.146 172.30.222.43 sip:9085590000@172.30.222.43:5089;transport=udp Protocol Length Info SIP 587 Request: BYE Frame 1221: 587 bytes on wire (4696 bits), 587 bytes captured (4696 bits) Ethernet II, Src: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3), Dst: All-HSRP-routers_00 (00:00:0c:07:ac:00) Internet Protocol Version 4, Src: 132.197.36.146 (132.197.36.146), Dst: 172.30.222.43 (172.30.222.43) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) Total Length: 573 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) Fragment offset: 0 Time to live: 63 Protocol: UDP (17) Header checksum: 0x060f [correct] Source: 132.197.36.146 (132.197.36.146) Destination: 172.30.222.43 (172.30.222.43) User Datagram Protocol, Src Port: sip (5060), Dst Port: 5089 (5089) Source port: sip (5060) Destination port: 5089 (5089) Length: 553 Checksum: 0x5cc7 [validation disabled] Session Initiation Protocol Request-Line: BYE sip:9085590000@172.30.222.43:5089;transport=udp SIP/2.0 Method: BYE Request-URI: sip:9085590000@172.30.222.43:5089;transport=udp [Resent Packet: False] Message Header Via: SIP/2.0/UDP 132.197.36.146:5060;rport;branch=z9hG4bK14c48dcd00035 From: "ELLIOT EICHEN"<sip:7814660000@verizonlabs.globalipcom.com;useradd=132.197.36.146;userport=5060>;tag=941acfde To: <sip:9085590000@65.211.120.225;user=phone>;tag=901634348-1320087121335Call-ID: BW145201335311011437264061@65.211.120.225 CSeq: 1263404461 BYE Max-Forwards: 70 User-Agent: HelloCommunicator/2.0 P-Access-Network-Info: IEEE-802.3 Date: Mon, 31 Oct 2011 18:52:31 GMT Content-Length: 0 No. Time Source Destination Protocol Length Info Midterm 2011 p 10 1221 24.269921 132.197.36.146 172.30.222.43 sip:9085590000@172.30.222.43:5089;transport=udp SIP 587 Request: BYE Frame 1221: 587 bytes on wire (4696 bits), 587 bytes captured (4696 bits) Ethernet II, Src: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3), Dst: All-HSRP-routers_00 (00:00:0c:07:ac:00) Internet Protocol Version 4, Src: 132.197.36.146 (132.197.36.146), Dst: 172.30.222.43 (172.30.222.43) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) Total Length: 573 Identification: 0x0000 (0) Flags: 0x02 (Don't Fragment) Fragment offset: 0 Time to live: 63 Protocol: UDP (17) Header checksum: 0x060f [correct] Source: 132.197.36.146 (132.197.36.146) Destination: 172.30.222.43 (172.30.222.43) User Datagram Protocol, Src Port: sip (5060), Dst Port: 5089 (5089) Source port: sip (5060) Destination port: 5089 (5089) Length: 553 Checksum: 0x5cc7 [validation disabled] Session Initiation Protocol Request-Line: BYE sip:9085590000@172.30.222.43:5089;transport=udp SIP/2.0 Method: BYE Request-URI: sip:9085590000@172.30.222.43:5089;transport=udp [Resent Packet: False] Message Header Via: SIP/2.0/UDP 132.197.36.146:5060;rport;branch=z9hG4bK14c48dcd00035 From: "ELLIOT EICHEN"<sip:7814660000@verizonlabs.globalipcom.com;useradd=132.197.36.146;userport=5060>;tag=941acfde To: <sip:9085590000@65.211.120.225;user=phone>;tag=901634348-1320087121335Call-ID: BW145201335311011437264061@65.211.120.225 CSeq: 1263404461 BYE Max-Forwards: 70 User-Agent: HelloCommunicator/2.0 P-Access-Network-Info: IEEE-802.3 Date: Mon, 31 Oct 2011 18:52:31 GMT Content-Length: 0 No. Time 1226 24.325609 Source 172.30.222.43 Destination 132.197.36.146 Protocol Length Info SIP 446 Status: 200 OK Frame 1226: 446 bytes on wire (3568 bits), 446 bytes captured (3568 bits) Ethernet II, Src: Cisco_a8:1e:c0 (00:19:07:a8:1e:c0), Dst: Lg-Erics_b2:e3:c3 (b4:0e:dc:b2:e3:c3) Internet Protocol Version 4, Src: 172.30.222.43 (172.30.222.43), Dst: 132.197.36.146 (132.197.36.146) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) Total Length: 432 Identification: 0x0000 (0) Flags: 0x00 Fragment offset: 0 Time to live: 123 Protocol: UDP (17) Header checksum: 0x0a9c [correct] Source: 172.30.222.43 (172.30.222.43) Destination: 132.197.36.146 (132.197.36.146) User Datagram Protocol, Src Port: 5089 (5089), Dst Port: sip (5060) Source port: 5089 (5089) Destination port: sip (5060) Length: 412 Checksum: 0xa867 [validation disabled] Session Initiation Protocol Status-Line: SIP/2.0 200 OK Midterm 2011 p 11 Status-Code: 200 [Resent Packet: False] [Request Frame: 1221] [Response Time (ms): 55] [Release Time (ms): 55] Message Header Via: SIP/2.0/UDP 132.197.36.146:5060;received=132.197.36.146;branch=z9hG4bK14c48dcd00035;rport=5060 From: "ELLIOT EICHEN"<sip:7814660000@verizonlabs.globalipcom.com;useradd=132.197.36.146;userport=5060>;tag=941acfde To: <sip:9085590000@65.211.120.225;user=phone>;tag=901634348-1320087121335Call-ID: BW145201335311011437264061@65.211.120.225 CSeq: 1263404461 BYE Content-Length: 0 Midterm 2011 p 12