No.     Time        Packet length Hw src addr           Src addr              Src port Protocol Hw dest addr          Dest addr             Dest port Info
     95 94.539515   594           00:24:97:aa:53:00     10.0.0.2              49156    SIP      00:24:e8:94:02:40     10.0.0.1              5060      Request: REGISTER sip:10.0.0.1

Frame 95 (594 bytes on wire, 594 bytes captured)
    Arrival Time: Oct 18, 2010 17:29:36.971564000
    [Time delta from previous captured frame: 0.310055000 seconds]
    [Time delta from previous displayed frame: 94.539515000 seconds]
    [Time since reference or first frame: 94.539515000 seconds]
    Frame Number: 95
    Frame Length: 594 bytes
    Capture Length: 594 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:sip]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: Cisco_aa:53:00 (00:24:97:aa:53:00), Dst: Dell_94:02:40 (00:24:e8:94:02:40)
    Destination: Dell_94:02:40 (00:24:e8:94:02:40)
        Address: Dell_94:02:40 (00:24:e8:94:02:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: Cisco_aa:53:00 (00:24:97:aa:53:00)
        Address: Cisco_aa:53:00 (00:24:97:aa:53:00)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 10.0.0.2 (10.0.0.2), Dst: 10.0.0.1 (10.0.0.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x60 (DSCP 0x18: Class Selector 3; ECN: 0x00)
        0110 00.. = Differentiated Services Codepoint: Class Selector 3 (0x18)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 580
    Identification: 0x0013 (19)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x6434 [correct]
        [Good: True]
        [Bad : False]
    Source: 10.0.0.2 (10.0.0.2)
    Destination: 10.0.0.1 (10.0.0.1)
User Datagram Protocol, Src Port: 49156 (49156), Dst Port: sip (5060)
    Source port: 49156 (49156)
    Destination port: sip (5060)
    Length: 560
    Checksum: 0x0000 (none)
        Good Checksum: False
        Bad Checksum: False
Session Initiation Protocol
    Request-Line: REGISTER sip:10.0.0.1 SIP/2.0
        Method: REGISTER
        Request-URI: sip:10.0.0.1
            Request-URI Host Part: 10.0.0.1
        [Resent Packet: False]
    Message Header
        Via: SIP/2.0/UDP 10.0.0.2:5060;branch=z9hG4bK9371e970
            Transport: UDP
            Sent-by Address: 10.0.0.2
            Sent-by port: 5060
            Branch: z9hG4bK9371e970
        From: <sip:11@10.0.0.1>;tag=002497aa53000002c6625588-9b766220
            SIP from address: sip:11@10.0.0.1
                SIP from address User Part: 11
                SIP from address Host Part: 10.0.0.1
            SIP tag: 002497aa53000002c6625588-9b766220
        To: <sip:11@10.0.0.1>
            SIP to address: sip:11@10.0.0.1
                SIP to address User Part: 11
                SIP to address Host Part: 10.0.0.1
        Call-ID: 002497aa-53000002-98180e18-8e6fe250@10.0.0.2
        Max-Forwards: 70
        Date: Wed, 01 Jul 2009 03:07:25 GMT
        CSeq: 101 REGISTER
            Sequence Number: 101
            Method: REGISTER
        User-Agent: Cisco-CP7941G/8.5.2
        Contact: <sip:11@10.0.0.2:5060;transport=udp>;+sip.instance="<urn:uuid:00000000-0000-0000-0000-002497aa5300>";+u.sip!model.ccm.cisco.com="115"
            Contact Binding: <sip:11@10.0.0.2:5060;transport=udp>;+sip.instance="<urn:uuid:00000000-0000-0000-0000-002497aa5300>";+u.sip!model.ccm.cisco.com="115"
                URI: <sip:11@10.0.0.2:5060;transport=udp>
                    SIP contact address: sip:11@10.0.0.2:5060
        Supported: (null),X-cisco-xsi-7.0.1
        Content-Length: 0
        Expires: 3600

No.     Time        Packet length Hw src addr           Src addr              Src port Protocol Hw dest addr          Dest addr             Dest port Info
     96 94.544521   699           00:24:97:aa:53:00     10.0.0.2              49156    SIP      00:24:e8:94:02:40     10.0.0.1              5060      Request: REGISTER sip:10.0.0.1

Frame 96 (699 bytes on wire, 699 bytes captured)
    Arrival Time: Oct 18, 2010 17:29:36.976570000
    [Time delta from previous captured frame: 0.005006000 seconds]
    [Time delta from previous displayed frame: 0.005006000 seconds]
    [Time since reference or first frame: 94.544521000 seconds]
    Frame Number: 96
    Frame Length: 699 bytes
    Capture Length: 699 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:sip]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: Cisco_aa:53:00 (00:24:97:aa:53:00), Dst: Dell_94:02:40 (00:24:e8:94:02:40)
    Destination: Dell_94:02:40 (00:24:e8:94:02:40)
        Address: Dell_94:02:40 (00:24:e8:94:02:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: Cisco_aa:53:00 (00:24:97:aa:53:00)
        Address: Cisco_aa:53:00 (00:24:97:aa:53:00)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 10.0.0.2 (10.0.0.2), Dst: 10.0.0.1 (10.0.0.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x60 (DSCP 0x18: Class Selector 3; ECN: 0x00)
        0110 00.. = Differentiated Services Codepoint: Class Selector 3 (0x18)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 685
    Identification: 0x0014 (20)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x63ca [correct]
        [Good: True]
        [Bad : False]
    Source: 10.0.0.2 (10.0.0.2)
    Destination: 10.0.0.1 (10.0.0.1)
User Datagram Protocol, Src Port: 49156 (49156), Dst Port: sip (5060)
    Source port: 49156 (49156)
    Destination port: sip (5060)
    Length: 665
    Checksum: 0x0000 (none)
        Good Checksum: False
        Bad Checksum: False
Session Initiation Protocol
    Request-Line: REGISTER sip:10.0.0.1 SIP/2.0
        Method: REGISTER
        Request-URI: sip:10.0.0.1
            Request-URI Host Part: 10.0.0.1
        [Resent Packet: False]
    Message Header
        Via: SIP/2.0/UDP 10.0.0.2:5060;branch=z9hG4bKc79f1dd8
            Transport: UDP
            Sent-by Address: 10.0.0.2
            Sent-by port: 5060
            Branch: z9hG4bKc79f1dd8
        From: <sip:11@10.0.0.1>;tag=002497aa530000036b203a90-d26a55a8
            SIP from address: sip:11@10.0.0.1
                SIP from address User Part: 11
                SIP from address Host Part: 10.0.0.1
            SIP tag: 002497aa530000036b203a90-d26a55a8
        To: <sip:11@10.0.0.1>
            SIP to address: sip:11@10.0.0.1
                SIP to address User Part: 11
                SIP to address Host Part: 10.0.0.1
        Call-ID: 002497aa-53000003-fb8bcec0-f72f56b8@10.0.0.2
        Max-Forwards: 70
        Date: Wed, 01 Jul 2009 03:07:25 GMT
        CSeq: 101 REGISTER
            Sequence Number: 101
            Method: REGISTER
        User-Agent: Cisco-CP7941G/8.5.2
        Contact: <sip:11@10.0.0.2:5060;transport=udp>;+sip.instance="<urn:uuid:00000000-0000-0000-0000-002497aa5300>";+u.sip!model.ccm.cisco.com="115"
            Contact Binding: <sip:11@10.0.0.2:5060;transport=udp>;+sip.instance="<urn:uuid:00000000-0000-0000-0000-002497aa5300>";+u.sip!model.ccm.cisco.com="115"
                URI: <sip:11@10.0.0.2:5060;transport=udp>
                    SIP contact address: sip:11@10.0.0.2:5060
        Supported: (null),X-cisco-xsi-7.0.1
        Content-Length: 0
        Reason: SIP;cause=200;text="cisco-alarm:20 Name=SEP002497AA5300 Load=SIP41.8-5-2SR1S Last=phone-keypad"
            Reason Protocols: SIP
        Expires: 3600

No.     Time        Packet length Hw src addr           Src addr              Src port Protocol Hw dest addr          Dest addr             Dest port Info
     97 94.544923   500           00:24:e8:94:02:40     10.0.0.1              5060     SIP      00:24:97:aa:53:00     10.0.0.2              5060      Status: 407 Proxy Authentication Required    (0 bindings)

Frame 97 (500 bytes on wire, 500 bytes captured)
    Arrival Time: Oct 18, 2010 17:29:36.976972000
    [Time delta from previous captured frame: 0.000402000 seconds]
    [Time delta from previous displayed frame: 0.000402000 seconds]
    [Time since reference or first frame: 94.544923000 seconds]
    Frame Number: 97
    Frame Length: 500 bytes
    Capture Length: 500 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:sip]
    [Coloring Rule Name: Checksum Errors]
    [Coloring Rule String: cdp.checksum_bad==1 || edp.checksum_bad==1 || ip.checksum_bad==1 || tcp.checksum_bad==1 || udp.checksum_bad==1 || mstp.checksum_bad==1]
Ethernet II, Src: Dell_94:02:40 (00:24:e8:94:02:40), Dst: Cisco_aa:53:00 (00:24:97:aa:53:00)
    Destination: Cisco_aa:53:00 (00:24:97:aa:53:00)
        Address: Cisco_aa:53:00 (00:24:97:aa:53:00)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: Dell_94:02:40 (00:24:e8:94:02:40)
        Address: Dell_94:02:40 (00:24:e8:94:02:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 10.0.0.1 (10.0.0.1), Dst: 10.0.0.2 (10.0.0.2)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 486
    Identification: 0x50fc (20732)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x0000 [incorrect, should be 0xd408]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 10.0.0.1 (10.0.0.1)
    Destination: 10.0.0.2 (10.0.0.2)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
    Source port: sip (5060)
    Destination port: sip (5060)
    Length: 466
    Checksum: 0x15e6 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Session Initiation Protocol
    Status-Line: SIP/2.0 407 Proxy Authentication Required
        Status-Code: 407
        [Resent Packet: False]
    Message Header
        Via: SIP/2.0/UDP 10.0.0.2:5060;branch=z9hG4bK9371e970
            Transport: UDP
            Sent-by Address: 10.0.0.2
            Sent-by port: 5060
            Branch: z9hG4bK9371e970
        Proxy-Authenticate: Digest nonce="414d535c02ccead063:ae9681949fb1d96a8d1cd0e80aa10290",algorithm=MD5,realm="3CXPhoneSystem"
            Authentication Scheme: Digest
            Nonce Value: "414d535c02ccead063:ae9681949fb1d96a8d1cd0e80aa10290"
            Algorithm: MD5
            Realm: "3CXPhoneSystem"
        To: <sip:11@10.0.0.1>;tag=792d916a
            SIP to address: sip:11@10.0.0.1
                SIP to address User Part: 11
                SIP to address Host Part: 10.0.0.1
            SIP tag: 792d916a
        From: <sip:11@10.0.0.1>;tag=002497aa53000002c6625588-9b766220
            SIP from address: sip:11@10.0.0.1
                SIP from address User Part: 11
                SIP from address Host Part: 10.0.0.1
            SIP tag: 002497aa53000002c6625588-9b766220
        Call-ID: 002497aa-53000002-98180e18-8e6fe250@10.0.0.2
        CSeq: 101 REGISTER
            Sequence Number: 101
            Method: REGISTER
        User-Agent: 3CXPhoneSystem 9.0.14474.0
        Content-Length: 0

No.     Time        Packet length Hw src addr           Src addr              Src port Protocol Hw dest addr          Dest addr             Dest port Info
     98 94.555212   797           00:24:97:aa:53:00     10.0.0.2              49156    SIP      00:24:e8:94:02:40     10.0.0.1              5060      Request: REGISTER sip:10.0.0.1

Frame 98 (797 bytes on wire, 797 bytes captured)
    Arrival Time: Oct 18, 2010 17:29:36.987261000
    [Time delta from previous captured frame: 0.010289000 seconds]
    [Time delta from previous displayed frame: 0.010289000 seconds]
    [Time since reference or first frame: 94.555212000 seconds]
    Frame Number: 98
    Frame Length: 797 bytes
    Capture Length: 797 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:sip]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: Cisco_aa:53:00 (00:24:97:aa:53:00), Dst: Dell_94:02:40 (00:24:e8:94:02:40)
    Destination: Dell_94:02:40 (00:24:e8:94:02:40)
        Address: Dell_94:02:40 (00:24:e8:94:02:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: Cisco_aa:53:00 (00:24:97:aa:53:00)
        Address: Cisco_aa:53:00 (00:24:97:aa:53:00)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 10.0.0.2 (10.0.0.2), Dst: 10.0.0.1 (10.0.0.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x60 (DSCP 0x18: Class Selector 3; ECN: 0x00)
        0110 00.. = Differentiated Services Codepoint: Class Selector 3 (0x18)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 783
    Identification: 0x0015 (21)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x6367 [correct]
        [Good: True]
        [Bad : False]
    Source: 10.0.0.2 (10.0.0.2)
    Destination: 10.0.0.1 (10.0.0.1)
User Datagram Protocol, Src Port: 49156 (49156), Dst Port: sip (5060)
    Source port: 49156 (49156)
    Destination port: sip (5060)
    Length: 763
    Checksum: 0x0000 (none)
        Good Checksum: False
        Bad Checksum: False
Session Initiation Protocol
    Request-Line: REGISTER sip:10.0.0.1 SIP/2.0
        Method: REGISTER
        Request-URI: sip:10.0.0.1
            Request-URI Host Part: 10.0.0.1
        [Resent Packet: False]
    Message Header
        Via: SIP/2.0/UDP 10.0.0.2:5060;branch=z9hG4bKe8885760
            Transport: UDP
            Sent-by Address: 10.0.0.2
            Sent-by port: 5060
            Branch: z9hG4bKe8885760
        From: <sip:11@10.0.0.1>;tag=002497aa53000002c6625588-9b766220
            SIP from address: sip:11@10.0.0.1
                SIP from address User Part: 11
                SIP from address Host Part: 10.0.0.1
            SIP tag: 002497aa53000002c6625588-9b766220
        To: <sip:11@10.0.0.1>
            SIP to address: sip:11@10.0.0.1
                SIP to address User Part: 11
                SIP to address Host Part: 10.0.0.1
        Call-ID: 002497aa-53000002-98180e18-8e6fe250@10.0.0.2
        Max-Forwards: 70
        Date: Wed, 01 Jul 2009 03:07:25 GMT
        CSeq: 102 REGISTER
            Sequence Number: 102
            Method: REGISTER
        User-Agent: Cisco-CP7941G/8.5.2
        Contact: <sip:11@10.0.0.2:5060;transport=udp>;+sip.instance="<urn:uuid:00000000-0000-0000-0000-002497aa5300>";+u.sip!model.ccm.cisco.com="115"
            Contact Binding: <sip:11@10.0.0.2:5060;transport=udp>;+sip.instance="<urn:uuid:00000000-0000-0000-0000-002497aa5300>";+u.sip!model.ccm.cisco.com="115"
                URI: <sip:11@10.0.0.2:5060;transport=udp>
                    SIP contact address: sip:11@10.0.0.2:5060
        Proxy-Authorization: Digest username="11",realm="3CXPhoneSystem",uri="sip:10.0.0.1",response="738a9d335d55381de0c427359ea2d8d0",nonce="414d535c02ccead063:ae9681949fb1d96a8d1cd0e80aa10290",algorithm=MD5
            Authentication Scheme: Digest
            Username: "11"
            Realm: "3CXPhoneSystem"
            Authentication URI: "sip:10.0.0.1"
            Digest Authentication Response: "738a9d335d55381de0c427359ea2d8d0"
            Nonce Value: "414d535c02ccead063:ae9681949fb1d96a8d1cd0e80aa10290"
            Algorithm: MD5
        Supported: (null),X-cisco-xsi-7.0.1
        Content-Length: 0
        Expires: 3600

No.     Time        Packet length Hw src addr           Src addr              Src port Protocol Hw dest addr          Dest addr             Dest port Info
     99 94.555555   500           00:24:e8:94:02:40     10.0.0.1              5060     SIP      00:24:97:aa:53:00     10.0.0.2              5060      Status: 407 Proxy Authentication Required    (0 bindings)

Frame 99 (500 bytes on wire, 500 bytes captured)
    Arrival Time: Oct 18, 2010 17:29:36.987604000
    [Time delta from previous captured frame: 0.000343000 seconds]
    [Time delta from previous displayed frame: 0.000343000 seconds]
    [Time since reference or first frame: 94.555555000 seconds]
    Frame Number: 99
    Frame Length: 500 bytes
    Capture Length: 500 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:sip]
    [Coloring Rule Name: Checksum Errors]
    [Coloring Rule String: cdp.checksum_bad==1 || edp.checksum_bad==1 || ip.checksum_bad==1 || tcp.checksum_bad==1 || udp.checksum_bad==1 || mstp.checksum_bad==1]
Ethernet II, Src: Dell_94:02:40 (00:24:e8:94:02:40), Dst: Cisco_aa:53:00 (00:24:97:aa:53:00)
    Destination: Cisco_aa:53:00 (00:24:97:aa:53:00)
        Address: Cisco_aa:53:00 (00:24:97:aa:53:00)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: Dell_94:02:40 (00:24:e8:94:02:40)
        Address: Dell_94:02:40 (00:24:e8:94:02:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 10.0.0.1 (10.0.0.1), Dst: 10.0.0.2 (10.0.0.2)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 486
    Identification: 0x50fd (20733)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x0000 [incorrect, should be 0xd407]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 10.0.0.1 (10.0.0.1)
    Destination: 10.0.0.2 (10.0.0.2)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
    Source port: sip (5060)
    Destination port: sip (5060)
    Length: 466
    Checksum: 0x15e6 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Session Initiation Protocol
    Status-Line: SIP/2.0 407 Proxy Authentication Required
        Status-Code: 407
        [Resent Packet: False]
    Message Header
        Via: SIP/2.0/UDP 10.0.0.2:5060;branch=z9hG4bKc79f1dd8
            Transport: UDP
            Sent-by Address: 10.0.0.2
            Sent-by port: 5060
            Branch: z9hG4bKc79f1dd8
        Proxy-Authenticate: Digest nonce="414d535c02ccead059:cac8e68e98165b1fb5c35ef118badf6f",algorithm=MD5,realm="3CXPhoneSystem"
            Authentication Scheme: Digest
            Nonce Value: "414d535c02ccead059:cac8e68e98165b1fb5c35ef118badf6f"
            Algorithm: MD5
            Realm: "3CXPhoneSystem"
        To: <sip:11@10.0.0.1>;tag=d40ab15e
            SIP to address: sip:11@10.0.0.1
                SIP to address User Part: 11
                SIP to address Host Part: 10.0.0.1
            SIP tag: d40ab15e
        From: <sip:11@10.0.0.1>;tag=002497aa530000036b203a90-d26a55a8
            SIP from address: sip:11@10.0.0.1
                SIP from address User Part: 11
                SIP from address Host Part: 10.0.0.1
            SIP tag: 002497aa530000036b203a90-d26a55a8
        Call-ID: 002497aa-53000003-fb8bcec0-f72f56b8@10.0.0.2
        CSeq: 101 REGISTER
            Sequence Number: 101
            Method: REGISTER
        User-Agent: 3CXPhoneSystem 9.0.14474.0
        Content-Length: 0

No.     Time        Packet length Hw src addr           Src addr              Src port Protocol Hw dest addr          Dest addr             Dest port Info
    100 94.564645   902           00:24:97:aa:53:00     10.0.0.2              49156    SIP      00:24:e8:94:02:40     10.0.0.1              5060      Request: REGISTER sip:10.0.0.1

Frame 100 (902 bytes on wire, 902 bytes captured)
    Arrival Time: Oct 18, 2010 17:29:36.996694000
    [Time delta from previous captured frame: 0.009090000 seconds]
    [Time delta from previous displayed frame: 0.009090000 seconds]
    [Time since reference or first frame: 94.564645000 seconds]
    Frame Number: 100
    Frame Length: 902 bytes
    Capture Length: 902 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:sip]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: Cisco_aa:53:00 (00:24:97:aa:53:00), Dst: Dell_94:02:40 (00:24:e8:94:02:40)
    Destination: Dell_94:02:40 (00:24:e8:94:02:40)
        Address: Dell_94:02:40 (00:24:e8:94:02:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: Cisco_aa:53:00 (00:24:97:aa:53:00)
        Address: Cisco_aa:53:00 (00:24:97:aa:53:00)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 10.0.0.2 (10.0.0.2), Dst: 10.0.0.1 (10.0.0.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x60 (DSCP 0x18: Class Selector 3; ECN: 0x00)
        0110 00.. = Differentiated Services Codepoint: Class Selector 3 (0x18)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 888
    Identification: 0x0016 (22)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x62fd [correct]
        [Good: True]
        [Bad : False]
    Source: 10.0.0.2 (10.0.0.2)
    Destination: 10.0.0.1 (10.0.0.1)
User Datagram Protocol, Src Port: 49156 (49156), Dst Port: sip (5060)
    Source port: 49156 (49156)
    Destination port: sip (5060)
    Length: 868
    Checksum: 0x0000 (none)
        Good Checksum: False
        Bad Checksum: False
Session Initiation Protocol
    Request-Line: REGISTER sip:10.0.0.1 SIP/2.0
        Method: REGISTER
        Request-URI: sip:10.0.0.1
            Request-URI Host Part: 10.0.0.1
        [Resent Packet: False]
    Message Header
        Via: SIP/2.0/UDP 10.0.0.2:5060;branch=z9hG4bK0e834648
            Transport: UDP
            Sent-by Address: 10.0.0.2
            Sent-by port: 5060
            Branch: z9hG4bK0e834648
        From: <sip:11@10.0.0.1>;tag=002497aa530000036b203a90-d26a55a8
            SIP from address: sip:11@10.0.0.1
                SIP from address User Part: 11
                SIP from address Host Part: 10.0.0.1
            SIP tag: 002497aa530000036b203a90-d26a55a8
        To: <sip:11@10.0.0.1>
            SIP to address: sip:11@10.0.0.1
                SIP to address User Part: 11
                SIP to address Host Part: 10.0.0.1
        Call-ID: 002497aa-53000003-fb8bcec0-f72f56b8@10.0.0.2
        Max-Forwards: 70
        Date: Wed, 01 Jul 2009 03:07:25 GMT
        CSeq: 102 REGISTER
            Sequence Number: 102
            Method: REGISTER
        User-Agent: Cisco-CP7941G/8.5.2
        Contact: <sip:11@10.0.0.2:5060;transport=udp>;+sip.instance="<urn:uuid:00000000-0000-0000-0000-002497aa5300>";+u.sip!model.ccm.cisco.com="115"
            Contact Binding: <sip:11@10.0.0.2:5060;transport=udp>;+sip.instance="<urn:uuid:00000000-0000-0000-0000-002497aa5300>";+u.sip!model.ccm.cisco.com="115"
                URI: <sip:11@10.0.0.2:5060;transport=udp>
                    SIP contact address: sip:11@10.0.0.2:5060
        Proxy-Authorization: Digest username="11",realm="3CXPhoneSystem",uri="sip:10.0.0.1",response="159638def9378f4683abdb62033710a9",nonce="414d535c02ccead059:cac8e68e98165b1fb5c35ef118badf6f",algorithm=MD5
            Authentication Scheme: Digest
            Username: "11"
            Realm: "3CXPhoneSystem"
            Authentication URI: "sip:10.0.0.1"
            Digest Authentication Response: "159638def9378f4683abdb62033710a9"
            Nonce Value: "414d535c02ccead059:cac8e68e98165b1fb5c35ef118badf6f"
            Algorithm: MD5
        Supported: (null),X-cisco-xsi-7.0.1
        Content-Length: 0
        Reason: SIP;cause=200;text="cisco-alarm:20 Name=SEP002497AA5300 Load=SIP41.8-5-2SR1S Last=phone-keypad"
            Reason Protocols: SIP
        Expires: 3600

No.     Time        Packet length Hw src addr           Src addr              Src port Protocol Hw dest addr          Dest addr             Dest port Info
    101 94.565030   505           00:24:e8:94:02:40     10.0.0.1              5060     SIP      00:24:97:aa:53:00     10.0.0.2              5060      Status: 200 OK    (1 bindings)

Frame 101 (505 bytes on wire, 505 bytes captured)
    Arrival Time: Oct 18, 2010 17:29:36.997079000
    [Time delta from previous captured frame: 0.000385000 seconds]
    [Time delta from previous displayed frame: 0.000385000 seconds]
    [Time since reference or first frame: 94.565030000 seconds]
    Frame Number: 101
    Frame Length: 505 bytes
    Capture Length: 505 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:sip]
    [Coloring Rule Name: Checksum Errors]
    [Coloring Rule String: cdp.checksum_bad==1 || edp.checksum_bad==1 || ip.checksum_bad==1 || tcp.checksum_bad==1 || udp.checksum_bad==1 || mstp.checksum_bad==1]
Ethernet II, Src: Dell_94:02:40 (00:24:e8:94:02:40), Dst: Cisco_aa:53:00 (00:24:97:aa:53:00)
    Destination: Cisco_aa:53:00 (00:24:97:aa:53:00)
        Address: Cisco_aa:53:00 (00:24:97:aa:53:00)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: Dell_94:02:40 (00:24:e8:94:02:40)
        Address: Dell_94:02:40 (00:24:e8:94:02:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 10.0.0.1 (10.0.0.1), Dst: 10.0.0.2 (10.0.0.2)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 491
    Identification: 0x50fe (20734)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x0000 [incorrect, should be 0xd401]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 10.0.0.1 (10.0.0.1)
    Destination: 10.0.0.2 (10.0.0.2)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
    Source port: sip (5060)
    Destination port: sip (5060)
    Length: 471
    Checksum: 0x15eb [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Session Initiation Protocol
    Status-Line: SIP/2.0 200 OK
        Status-Code: 200
        [Resent Packet: False]
    Message Header
        Via: SIP/2.0/UDP 10.0.0.2:5060;branch=z9hG4bKe8885760
            Transport: UDP
            Sent-by Address: 10.0.0.2
            Sent-by port: 5060
            Branch: z9hG4bKe8885760
        Contact: <sip:11@10.0.0.2:5060;transport=udp>;+sip.instance="<urn:uuid:00000000-0000-0000-0000-002497aa5300>";expires=1800;+u.sip!model.ccm.cisco.com="115"
            Contact Binding: <sip:11@10.0.0.2:5060;transport=udp>;+sip.instance="<urn:uuid:00000000-0000-0000-0000-002497aa5300>";expires=1800;+u.sip!model.ccm.cisco.com="115"
                URI: <sip:11@10.0.0.2:5060;transport=udp>
                    SIP contact address: sip:11@10.0.0.2:5060
        To: <sip:11@10.0.0.1>;tag=9b515361
            SIP to address: sip:11@10.0.0.1
                SIP to address User Part: 11
                SIP to address Host Part: 10.0.0.1
            SIP tag: 9b515361
        From: <sip:11@10.0.0.1>;tag=002497aa53000002c6625588-9b766220
            SIP from address: sip:11@10.0.0.1
                SIP from address User Part: 11
                SIP from address Host Part: 10.0.0.1
            SIP tag: 002497aa53000002c6625588-9b766220
        Call-ID: 002497aa-53000002-98180e18-8e6fe250@10.0.0.2
        CSeq: 102 REGISTER
            Sequence Number: 102
            Method: REGISTER
        User-Agent: 3CXPhoneSystem 9.0.14474.0
        Content-Length: 0

No.     Time        Packet length Hw src addr           Src addr              Src port Protocol Hw dest addr          Dest addr             Dest port Info
    102 94.668754   661           00:24:e8:94:02:40     10.0.0.1              5060     SIP      00:24:97:aa:53:00     10.0.0.2              5060      Request: NOTIFY sip:11@10.0.0.2:5060;transport=udp

Frame 102 (661 bytes on wire, 661 bytes captured)
    Arrival Time: Oct 18, 2010 17:29:37.100803000
    [Time delta from previous captured frame: 0.103724000 seconds]
    [Time delta from previous displayed frame: 0.103724000 seconds]
    [Time since reference or first frame: 94.668754000 seconds]
    Frame Number: 102
    Frame Length: 661 bytes
    Capture Length: 661 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:sip]
    [Coloring Rule Name: Checksum Errors]
    [Coloring Rule String: cdp.checksum_bad==1 || edp.checksum_bad==1 || ip.checksum_bad==1 || tcp.checksum_bad==1 || udp.checksum_bad==1 || mstp.checksum_bad==1]
Ethernet II, Src: Dell_94:02:40 (00:24:e8:94:02:40), Dst: Cisco_aa:53:00 (00:24:97:aa:53:00)
    Destination: Cisco_aa:53:00 (00:24:97:aa:53:00)
        Address: Cisco_aa:53:00 (00:24:97:aa:53:00)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: Dell_94:02:40 (00:24:e8:94:02:40)
        Address: Dell_94:02:40 (00:24:e8:94:02:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 10.0.0.1 (10.0.0.1), Dst: 10.0.0.2 (10.0.0.2)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 647
    Identification: 0x50ff (20735)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x0000 [incorrect, should be 0xd364]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 10.0.0.1 (10.0.0.1)
    Destination: 10.0.0.2 (10.0.0.2)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
    Source port: sip (5060)
    Destination port: sip (5060)
    Length: 627
    Checksum: 0x1687 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Session Initiation Protocol
    Request-Line: NOTIFY sip:11@10.0.0.2:5060;transport=udp SIP/2.0
        Method: NOTIFY
        Request-URI: sip:11@10.0.0.2:5060;transport=udp
            Request-URI User Part: 11
            Request-URI Host Part: 10.0.0.2
            Request-URI Host Port: 5060
        [Resent Packet: False]
    Message Header
        Via: SIP/2.0/UDP 10.0.0.1:5060;branch=z9hG4bK-d8754z-d14c3d7cc325924f-1---d8754z-;rport
            Transport: UDP
            Sent-by Address: 10.0.0.1
            Sent-by port: 5060
            Branch: z9hG4bK-d8754z-d14c3d7cc325924f-1---d8754z-
            RPort: rport
        Max-Forwards: 70
        Contact: <sip:99@10.0.0.1:5060>
            Contact Binding: <sip:99@10.0.0.1:5060>
                URI: <sip:99@10.0.0.1:5060>
                    SIP contact address: sip:99@10.0.0.1:5060
        To: <sip:11@10.0.0.2:5060;transport=udp>
            SIP to address: sip:11@10.0.0.2:5060
                SIP to address User Part: 11
                SIP to address Host Part: 10.0.0.2
                SIP to address Host Port: 5060
        From: <sip:99@10.0.0.1:5060>;tag=c63e0d48
            SIP from address: sip:99@10.0.0.1:5060
                SIP from address User Part: 99
                SIP from address Host Part: 10.0.0.1
                SIP from address Host Port: 5060
            SIP tag: c63e0d48
        Call-ID: YTA1MDM4OTgzMzYxM2MzODc5MTk4YjY2NGUyMDA3ZmM.
        CSeq: 1 NOTIFY
            Sequence Number: 1
            Method: NOTIFY
        Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REGISTER, SUBSCRIBE, NOTIFY, REFER, INFO, MESSAGE
        Content-Type: application/simple-message-summary
        Supported: replaces
        User-Agent: 3CXPhoneSystem 9.0.14474.0
        Event: message-summary
        Content-Length: 22
    Message Body
        Messages-Waiting: no\r\n

No.     Time        Packet length Hw src addr           Src addr              Src port Protocol Hw dest addr          Dest addr             Dest port Info
    103 94.668806   505           00:24:e8:94:02:40     10.0.0.1              5060     SIP      00:24:97:aa:53:00     10.0.0.2              5060      Status: 200 OK    (1 bindings)

Frame 103 (505 bytes on wire, 505 bytes captured)
    Arrival Time: Oct 18, 2010 17:29:37.100855000
    [Time delta from previous captured frame: 0.000052000 seconds]
    [Time delta from previous displayed frame: 0.000052000 seconds]
    [Time since reference or first frame: 94.668806000 seconds]
    Frame Number: 103
    Frame Length: 505 bytes
    Capture Length: 505 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:sip]
    [Coloring Rule Name: Checksum Errors]
    [Coloring Rule String: cdp.checksum_bad==1 || edp.checksum_bad==1 || ip.checksum_bad==1 || tcp.checksum_bad==1 || udp.checksum_bad==1 || mstp.checksum_bad==1]
Ethernet II, Src: Dell_94:02:40 (00:24:e8:94:02:40), Dst: Cisco_aa:53:00 (00:24:97:aa:53:00)
    Destination: Cisco_aa:53:00 (00:24:97:aa:53:00)
        Address: Cisco_aa:53:00 (00:24:97:aa:53:00)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: Dell_94:02:40 (00:24:e8:94:02:40)
        Address: Dell_94:02:40 (00:24:e8:94:02:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 10.0.0.1 (10.0.0.1), Dst: 10.0.0.2 (10.0.0.2)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 491
    Identification: 0x5100 (20736)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x0000 [incorrect, should be 0xd3ff]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 10.0.0.1 (10.0.0.1)
    Destination: 10.0.0.2 (10.0.0.2)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
    Source port: sip (5060)
    Destination port: sip (5060)
    Length: 471
    Checksum: 0x15eb [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Session Initiation Protocol
    Status-Line: SIP/2.0 200 OK
        Status-Code: 200
        [Resent Packet: False]
    Message Header
        Via: SIP/2.0/UDP 10.0.0.2:5060;branch=z9hG4bK0e834648
            Transport: UDP
            Sent-by Address: 10.0.0.2
            Sent-by port: 5060
            Branch: z9hG4bK0e834648
        Contact: <sip:11@10.0.0.2:5060;transport=udp>;+sip.instance="<urn:uuid:00000000-0000-0000-0000-002497aa5300>";expires=1800;+u.sip!model.ccm.cisco.com="115"
            Contact Binding: <sip:11@10.0.0.2:5060;transport=udp>;+sip.instance="<urn:uuid:00000000-0000-0000-0000-002497aa5300>";expires=1800;+u.sip!model.ccm.cisco.com="115"
                URI: <sip:11@10.0.0.2:5060;transport=udp>
                    SIP contact address: sip:11@10.0.0.2:5060
        To: <sip:11@10.0.0.1>;tag=951c165a
            SIP to address: sip:11@10.0.0.1
                SIP to address User Part: 11
                SIP to address Host Part: 10.0.0.1
            SIP tag: 951c165a
        From: <sip:11@10.0.0.1>;tag=002497aa530000036b203a90-d26a55a8
            SIP from address: sip:11@10.0.0.1
                SIP from address User Part: 11
                SIP from address Host Part: 10.0.0.1
            SIP tag: 002497aa530000036b203a90-d26a55a8
        Call-ID: 002497aa-53000003-fb8bcec0-f72f56b8@10.0.0.2
        CSeq: 102 REGISTER
            Sequence Number: 102
            Method: REGISTER
        User-Agent: 3CXPhoneSystem 9.0.14474.0
        Content-Length: 0

No.     Time        Packet length Hw src addr           Src addr              Src port Protocol Hw dest addr          Dest addr             Dest port Info
    104 94.674483   361           00:24:97:aa:53:00     10.0.0.2              49190    SIP      00:24:e8:94:02:40     10.0.0.1              5060      Status: 200 OK

Frame 104 (361 bytes on wire, 361 bytes captured)
    Arrival Time: Oct 18, 2010 17:29:37.106532000
    [Time delta from previous captured frame: 0.005677000 seconds]
    [Time delta from previous displayed frame: 0.005677000 seconds]
    [Time since reference or first frame: 94.674483000 seconds]
    Frame Number: 104
    Frame Length: 361 bytes
    Capture Length: 361 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:sip]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: Cisco_aa:53:00 (00:24:97:aa:53:00), Dst: Dell_94:02:40 (00:24:e8:94:02:40)
    Destination: Dell_94:02:40 (00:24:e8:94:02:40)
        Address: Dell_94:02:40 (00:24:e8:94:02:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: Cisco_aa:53:00 (00:24:97:aa:53:00)
        Address: Cisco_aa:53:00 (00:24:97:aa:53:00)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 10.0.0.2 (10.0.0.2), Dst: 10.0.0.1 (10.0.0.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x60 (DSCP 0x18: Class Selector 3; ECN: 0x00)
        0110 00.. = Differentiated Services Codepoint: Class Selector 3 (0x18)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 347
    Identification: 0x0017 (23)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x6519 [correct]
        [Good: True]
        [Bad : False]
    Source: 10.0.0.2 (10.0.0.2)
    Destination: 10.0.0.1 (10.0.0.1)
User Datagram Protocol, Src Port: 49190 (49190), Dst Port: sip (5060)
    Source port: 49190 (49190)
    Destination port: sip (5060)
    Length: 327
    Checksum: 0x0000 (none)
        Good Checksum: False
        Bad Checksum: False
Session Initiation Protocol
    Status-Line: SIP/2.0 200 OK
        Status-Code: 200
        [Resent Packet: False]
    Message Header
        Via: SIP/2.0/UDP 10.0.0.1:5060;branch=z9hG4bK-d8754z-d14c3d7cc325924f-1---d8754z-;rport
            Transport: UDP
            Sent-by Address: 10.0.0.1
            Sent-by port: 5060
            Branch: z9hG4bK-d8754z-d14c3d7cc325924f-1---d8754z-
            RPort: rport
        From: <sip:99@10.0.0.1:5060>;tag=c63e0d48
            SIP from address: sip:99@10.0.0.1:5060
                SIP from address User Part: 99
                SIP from address Host Part: 10.0.0.1
                SIP from address Host Port: 5060
            SIP tag: c63e0d48
        To: <sip:11@10.0.0.2:5060;transport=udp>
            SIP to address: sip:11@10.0.0.2:5060
                SIP to address User Part: 11
                SIP to address Host Part: 10.0.0.2
                SIP to address Host Port: 5060
        Call-ID: YTA1MDM4OTgzMzYxM2MzODc5MTk4YjY2NGUyMDA3ZmM.
        Date: Wed, 01 Jul 2009 03:07:25 GMT
        CSeq: 1 NOTIFY
            Sequence Number: 1
            Method: NOTIFY
        Content-Length: 0

No.     Time        Packet length Hw src addr           Src addr              Src port Protocol Hw dest addr          Dest addr             Dest port Info
    120 115.555094  856           00:24:e8:94:02:40     10.0.0.1              5060     SIP/SDP  00:24:97:aa:53:00     10.0.0.2              5060      Request: INVITE sip:11@10.0.0.2:5060;transport=udp, with session description

Frame 120 (856 bytes on wire, 856 bytes captured)
    Arrival Time: Oct 18, 2010 17:29:57.987143000
    [Time delta from previous captured frame: 1.276852000 seconds]
    [Time delta from previous displayed frame: 20.880611000 seconds]
    [Time since reference or first frame: 115.555094000 seconds]
    Frame Number: 120
    Frame Length: 856 bytes
    Capture Length: 856 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:sip:sdp]
    [Coloring Rule Name: Checksum Errors]
    [Coloring Rule String: cdp.checksum_bad==1 || edp.checksum_bad==1 || ip.checksum_bad==1 || tcp.checksum_bad==1 || udp.checksum_bad==1 || mstp.checksum_bad==1]
Ethernet II, Src: Dell_94:02:40 (00:24:e8:94:02:40), Dst: Cisco_aa:53:00 (00:24:97:aa:53:00)
    Destination: Cisco_aa:53:00 (00:24:97:aa:53:00)
        Address: Cisco_aa:53:00 (00:24:97:aa:53:00)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: Dell_94:02:40 (00:24:e8:94:02:40)
        Address: Dell_94:02:40 (00:24:e8:94:02:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 10.0.0.1 (10.0.0.1), Dst: 10.0.0.2 (10.0.0.2)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 842
    Identification: 0x5109 (20745)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x0000 [incorrect, should be 0xd297]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 10.0.0.1 (10.0.0.1)
    Destination: 10.0.0.2 (10.0.0.2)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
    Source port: sip (5060)
    Destination port: sip (5060)
    Length: 822
    Checksum: 0x174a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Session Initiation Protocol
    Request-Line: INVITE sip:11@10.0.0.2:5060;transport=udp SIP/2.0
        Method: INVITE
        Request-URI: sip:11@10.0.0.2:5060;transport=udp
            Request-URI User Part: 11
            Request-URI Host Part: 10.0.0.2
            Request-URI Host Port: 5060
        [Resent Packet: False]
    Message Header
        Via: SIP/2.0/UDP 10.0.0.1:5060;branch=z9hG4bK-d8754z-827d5e7e3277f426-1---d8754z-;rport
            Transport: UDP
            Sent-by Address: 10.0.0.1
            Sent-by port: 5060
            Branch: z9hG4bK-d8754z-827d5e7e3277f426-1---d8754z-
            RPort: rport
        Max-Forwards: 70
        Contact: <sip:10@10.0.0.1:5060>
            Contact Binding: <sip:10@10.0.0.1:5060>
                URI: <sip:10@10.0.0.1:5060>
                    SIP contact address: sip:10@10.0.0.1:5060
        To: <sip:11@10.0.0.1>
            SIP to address: sip:11@10.0.0.1
                SIP to address User Part: 11
                SIP to address Host Part: 10.0.0.1
        From: "Ten Zehn"<sip:10@10.0.0.1:5060>;tag=2736265e
            SIP Display info: "Ten Zehn"
            SIP from address: sip:10@10.0.0.1:5060
                SIP from address User Part: 10
                SIP from address Host Part: 10.0.0.1
                SIP from address Host Port: 5060
            SIP tag: 2736265e
        Call-ID: ZTFlMDg0ZDZiYzgwODM0M2U5YTU0N2QwNzU5YmJhMTI.
        CSeq: 1 INVITE
            Sequence Number: 1
            Method: INVITE
        Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REGISTER, SUBSCRIBE, NOTIFY, REFER, INFO, MESSAGE
        Content-Type: application/sdp
        Supported: replaces
        User-Agent: 3CXPhoneSystem 9.0.14474.0
        Content-Length: 268
    Message Body
        Session Description Protocol
            Session Description Protocol Version (v): 0
            Owner/Creator, Session Id (o): - 12931885797571504 1 IN IP4 10.0.0.1
                Owner Username: -
                Session ID: 12931885797571504
                Session Version: 1
                Owner Network Type: IN
                Owner Address Type: IP4
                Owner Address: 10.0.0.1
            Session Name (s): Counterpath Bria 3.1
            Connection Information (c): IN IP4 10.0.0.1
                Connection Network Type: IN
                Connection Address Type: IP4
                Connection Address: 10.0.0.1
            Time Description, active time (t): 0 0
                Session Start Time: 0
                Session Stop Time: 0
            Media Description, name and address (m): audio 56034 RTP/AVP 107 0 8 18 101
                Media Type: audio
                Media Port: 56034
                Media Protocol: RTP/AVP
                Media Format: DynamicRTP-Type-107
                Media Format: ITU-T G.711 PCMU
                Media Format: ITU-T G.711 PCMA
                Media Format: ITU-T G.729
                Media Format: DynamicRTP-Type-101
            Media Attribute (a): rtpmap:107 BV32/16000
                Media Attribute Fieldname: rtpmap
                Media Format: 107
                MIME Type: BV32
                Sample Rate: 16000
            Media Attribute (a): rtpmap:18 G729/8000
                Media Attribute Fieldname: rtpmap
                Media Format: 18
                MIME Type: G729
                Sample Rate: 8000
            Media Attribute (a): fmtp:18 annexb=yes
                Media Attribute Fieldname: fmtp
                Media Format: 18 [G729]
                Media format specific parameters: annexb=yes
            Media Attribute (a): rtpmap:101 telephone-event/8000
                Media Attribute Fieldname: rtpmap
                Media Format: 101
                MIME Type: telephone-event
                Sample Rate: 8000
            Media Attribute (a): fmtp:101 0-15
                Media Attribute Fieldname: fmtp
                Media Format: 101 [telephone-event]
                Media format specific parameters: 0-15
            Media Attribute (a): sendrecv

No.     Time        Packet length Hw src addr           Src addr              Src port Protocol Hw dest addr          Dest addr             Dest port Info
    121 115.566123  536           00:24:97:aa:53:00     10.0.0.2              49156    SIP      00:24:e8:94:02:40     10.0.0.1              5060      Status: 100 Trying

Frame 121 (536 bytes on wire, 536 bytes captured)
    Arrival Time: Oct 18, 2010 17:29:57.998172000
    [Time delta from previous captured frame: 0.011029000 seconds]
    [Time delta from previous displayed frame: 0.011029000 seconds]
    [Time since reference or first frame: 115.566123000 seconds]
    Frame Number: 121
    Frame Length: 536 bytes
    Capture Length: 536 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:sip]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: Cisco_aa:53:00 (00:24:97:aa:53:00), Dst: Dell_94:02:40 (00:24:e8:94:02:40)
    Destination: Dell_94:02:40 (00:24:e8:94:02:40)
        Address: Dell_94:02:40 (00:24:e8:94:02:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: Cisco_aa:53:00 (00:24:97:aa:53:00)
        Address: Cisco_aa:53:00 (00:24:97:aa:53:00)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 10.0.0.2 (10.0.0.2), Dst: 10.0.0.1 (10.0.0.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x60 (DSCP 0x18: Class Selector 3; ECN: 0x00)
        0110 00.. = Differentiated Services Codepoint: Class Selector 3 (0x18)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 522
    Identification: 0x001b (27)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x6466 [correct]
        [Good: True]
        [Bad : False]
    Source: 10.0.0.2 (10.0.0.2)
    Destination: 10.0.0.1 (10.0.0.1)
User Datagram Protocol, Src Port: 49156 (49156), Dst Port: sip (5060)
    Source port: 49156 (49156)
    Destination port: sip (5060)
    Length: 502
    Checksum: 0x0000 (none)
        Good Checksum: False
        Bad Checksum: False
Session Initiation Protocol
    Status-Line: SIP/2.0 100 Trying
        Status-Code: 100
        [Resent Packet: False]
    Message Header
        Via: SIP/2.0/UDP 10.0.0.1:5060;branch=z9hG4bK-d8754z-827d5e7e3277f426-1---d8754z-;rport
            Transport: UDP
            Sent-by Address: 10.0.0.1
            Sent-by port: 5060
            Branch: z9hG4bK-d8754z-827d5e7e3277f426-1---d8754z-
            RPort: rport
        From: "Ten Zehn"<sip:10@10.0.0.1:5060>;tag=2736265e
            SIP Display info: "Ten Zehn"
            SIP from address: sip:10@10.0.0.1:5060
                SIP from address User Part: 10
                SIP from address Host Part: 10.0.0.1
                SIP from address Host Port: 5060
            SIP tag: 2736265e
        To: <sip:11@10.0.0.1>
            SIP to address: sip:11@10.0.0.1
                SIP to address User Part: 11
                SIP to address Host Part: 10.0.0.1
        Call-ID: ZTFlMDg0ZDZiYzgwODM0M2U5YTU0N2QwNzU5YmJhMTI.
        Date: Mon, 18 Oct 2010 14:29:57 GMT
        CSeq: 1 INVITE
            Sequence Number: 1
            Method: INVITE
        Server: Cisco-CP7941G/8.5.2
        Contact: <sip:11@10.0.0.2:5060;transport=udp>
            Contact Binding: <sip:11@10.0.0.2:5060;transport=udp>
                URI: <sip:11@10.0.0.2:5060;transport=udp>
                    SIP contact address: sip:11@10.0.0.2:5060
        Allow: ACK,BYE,CANCEL,INVITE,NOTIFY,OPTIONS,REFER,REGISTER,UPDATE,SUBSCRIBE
        Allow-Events: kpml,dialog
        Content-Length: 0

No.     Time        Packet length Hw src addr           Src addr              Src port Protocol Hw dest addr          Dest addr             Dest port Info
    122 115.800965  671           00:24:97:aa:53:00     10.0.0.2              49156    SIP      00:24:e8:94:02:40     10.0.0.1              5060      Status: 180 Ringing

Frame 122 (671 bytes on wire, 671 bytes captured)
    Arrival Time: Oct 18, 2010 17:29:58.233014000
    [Time delta from previous captured frame: 0.234842000 seconds]
    [Time delta from previous displayed frame: 0.234842000 seconds]
    [Time since reference or first frame: 115.800965000 seconds]
    Frame Number: 122
    Frame Length: 671 bytes
    Capture Length: 671 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:sip]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: Cisco_aa:53:00 (00:24:97:aa:53:00), Dst: Dell_94:02:40 (00:24:e8:94:02:40)
    Destination: Dell_94:02:40 (00:24:e8:94:02:40)
        Address: Dell_94:02:40 (00:24:e8:94:02:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: Cisco_aa:53:00 (00:24:97:aa:53:00)
        Address: Cisco_aa:53:00 (00:24:97:aa:53:00)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 10.0.0.2 (10.0.0.2), Dst: 10.0.0.1 (10.0.0.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x60 (DSCP 0x18: Class Selector 3; ECN: 0x00)
        0110 00.. = Differentiated Services Codepoint: Class Selector 3 (0x18)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 657
    Identification: 0x001c (28)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x63de [correct]
        [Good: True]
        [Bad : False]
    Source: 10.0.0.2 (10.0.0.2)
    Destination: 10.0.0.1 (10.0.0.1)
User Datagram Protocol, Src Port: 49156 (49156), Dst Port: sip (5060)
    Source port: 49156 (49156)
    Destination port: sip (5060)
    Length: 637
    Checksum: 0x0000 (none)
        Good Checksum: False
        Bad Checksum: False
Session Initiation Protocol
    Status-Line: SIP/2.0 180 Ringing
        Status-Code: 180
        [Resent Packet: False]
    Message Header
        Via: SIP/2.0/UDP 10.0.0.1:5060;branch=z9hG4bK-d8754z-827d5e7e3277f426-1---d8754z-;rport
            Transport: UDP
            Sent-by Address: 10.0.0.1
            Sent-by port: 5060
            Branch: z9hG4bK-d8754z-827d5e7e3277f426-1---d8754z-
            RPort: rport
        From: "Ten Zehn"<sip:10@10.0.0.1:5060>;tag=2736265e
            SIP Display info: "Ten Zehn"
            SIP from address: sip:10@10.0.0.1:5060
                SIP from address User Part: 10
                SIP from address Host Part: 10.0.0.1
                SIP from address Host Port: 5060
            SIP tag: 2736265e
        To: <sip:11@10.0.0.1>;tag=002497aa53000004e8322ad8-7fb26780
            SIP to address: sip:11@10.0.0.1
                SIP to address User Part: 11
                SIP to address Host Part: 10.0.0.1
            SIP tag: 002497aa53000004e8322ad8-7fb26780
        Call-ID: ZTFlMDg0ZDZiYzgwODM0M2U5YTU0N2QwNzU5YmJhMTI.
        Date: Mon, 18 Oct 2010 14:29:57 GMT
        CSeq: 1 INVITE
            Sequence Number: 1
            Method: INVITE
        Server: Cisco-CP7941G/8.5.2
        Contact: <sip:11@10.0.0.2:5060;transport=udp>
            Contact Binding: <sip:11@10.0.0.2:5060;transport=udp>
                URI: <sip:11@10.0.0.2:5060;transport=udp>
                    SIP contact address: sip:11@10.0.0.2:5060
        Allow: ACK,BYE,CANCEL,INVITE,NOTIFY,OPTIONS,REFER,REGISTER,UPDATE,SUBSCRIBE
        Remote-Party-ID: "11" <sip:11@10.0.0.1>;party=called;id-type=subscriber;privacy=off;screen=yes
            [Expert Info (Note/Undecoded): Unrecognised SIP header (Remote-Party-ID)]
                [Message: Unrecognised SIP header (Remote-Party-ID)]
                [Severity level: Note]
                [Group: Undecoded]
        Allow-Events: kpml,dialog
        Content-Length: 0

No.     Time        Packet length Hw src addr           Src addr              Src port Protocol Hw dest addr          Dest addr             Dest port Info
    127 124.277861  981           00:24:97:aa:53:00     10.0.0.2              49156    SIP/SDP  00:24:e8:94:02:40     10.0.0.1              5060      Status: 200 OK, with session description

Frame 127 (981 bytes on wire, 981 bytes captured)
    Arrival Time: Oct 18, 2010 17:30:06.709910000
    [Time delta from previous captured frame: 1.980128000 seconds]
    [Time delta from previous displayed frame: 8.476896000 seconds]
    [Time since reference or first frame: 124.277861000 seconds]
    Frame Number: 127
    Frame Length: 981 bytes
    Capture Length: 981 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:sip:sdp]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: Cisco_aa:53:00 (00:24:97:aa:53:00), Dst: Dell_94:02:40 (00:24:e8:94:02:40)
    Destination: Dell_94:02:40 (00:24:e8:94:02:40)
        Address: Dell_94:02:40 (00:24:e8:94:02:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: Cisco_aa:53:00 (00:24:97:aa:53:00)
        Address: Cisco_aa:53:00 (00:24:97:aa:53:00)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 10.0.0.2 (10.0.0.2), Dst: 10.0.0.1 (10.0.0.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x60 (DSCP 0x18: Class Selector 3; ECN: 0x00)
        0110 00.. = Differentiated Services Codepoint: Class Selector 3 (0x18)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 967
    Identification: 0x001d (29)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x62a7 [correct]
        [Good: True]
        [Bad : False]
    Source: 10.0.0.2 (10.0.0.2)
    Destination: 10.0.0.1 (10.0.0.1)
User Datagram Protocol, Src Port: 49156 (49156), Dst Port: sip (5060)
    Source port: 49156 (49156)
    Destination port: sip (5060)
    Length: 947
    Checksum: 0x0000 (none)
        Good Checksum: False
        Bad Checksum: False
Session Initiation Protocol
    Status-Line: SIP/2.0 200 OK
        Status-Code: 200
        [Resent Packet: False]
    Message Header
        Via: SIP/2.0/UDP 10.0.0.1:5060;branch=z9hG4bK-d8754z-827d5e7e3277f426-1---d8754z-;rport
            Transport: UDP
            Sent-by Address: 10.0.0.1
            Sent-by port: 5060
            Branch: z9hG4bK-d8754z-827d5e7e3277f426-1---d8754z-
            RPort: rport
        From: "Ten Zehn"<sip:10@10.0.0.1:5060>;tag=2736265e
            SIP Display info: "Ten Zehn"
            SIP from address: sip:10@10.0.0.1:5060
                SIP from address User Part: 10
                SIP from address Host Part: 10.0.0.1
                SIP from address Host Port: 5060
            SIP tag: 2736265e
        To: <sip:11@10.0.0.1>;tag=002497aa53000004e8322ad8-7fb26780
            SIP to address: sip:11@10.0.0.1
                SIP to address User Part: 11
                SIP to address Host Part: 10.0.0.1
            SIP tag: 002497aa53000004e8322ad8-7fb26780
        Call-ID: ZTFlMDg0ZDZiYzgwODM0M2U5YTU0N2QwNzU5YmJhMTI.
        Date: Mon, 18 Oct 2010 14:30:06 GMT
        CSeq: 1 INVITE
            Sequence Number: 1
            Method: INVITE
        Server: Cisco-CP7941G/8.5.2
        Contact: <sip:11@10.0.0.2:5060;transport=udp>
            Contact Binding: <sip:11@10.0.0.2:5060;transport=udp>
                URI: <sip:11@10.0.0.2:5060;transport=udp>
                    SIP contact address: sip:11@10.0.0.2:5060
        Allow: ACK,BYE,CANCEL,INVITE,NOTIFY,OPTIONS,REFER,REGISTER,UPDATE,SUBSCRIBE
        Remote-Party-ID: "11" <sip:11@10.0.0.1>;party=called;id-type=subscriber;privacy=off;screen=yes
            [Expert Info (Note/Undecoded): Unrecognised SIP header (Remote-Party-ID)]
                [Message: Unrecognised SIP header (Remote-Party-ID)]
                [Severity level: Note]
                [Group: Undecoded]
        Supported: replaces,join,norefersub
        Allow-Events: kpml,dialog
        Content-Length: 197
        Content-Type: application/sdp
        Content-Disposition: session;handling=optional
    Message Body
        Session Description Protocol
            Session Description Protocol Version (v): 0
            Owner/Creator, Session Id (o): Cisco-SIPUA 23830 0 IN IP4 10.0.0.2
                Owner Username: Cisco-SIPUA
                Session ID: 23830
                Session Version: 0
                Owner Network Type: IN
                Owner Address Type: IP4
                Owner Address: 10.0.0.2
            Session Name (s): SIP Call
            Time Description, active time (t): 0 0
                Session Start Time: 0
                Session Stop Time: 0
            Media Description, name and address (m): audio 29128 RTP/AVP 0 101
                Media Type: audio
                Media Port: 29128
                Media Protocol: RTP/AVP
                Media Format: ITU-T G.711 PCMU
                Media Format: DynamicRTP-Type-101
            Connection Information (c): IN IP4 10.0.0.2
                Connection Network Type: IN
                Connection Address Type: IP4
                Connection Address: 10.0.0.2
            Media Attribute (a): rtpmap:0 PCMU/8000
                Media Attribute Fieldname: rtpmap
                Media Format: 0
                MIME Type: PCMU
                Sample Rate: 8000
            Media Attribute (a): rtpmap:101 telephone-event/8000
                Media Attribute Fieldname: rtpmap
                Media Format: 101
                MIME Type: telephone-event
                Sample Rate: 8000
            Media Attribute (a): fmtp:101 0-15
                Media Attribute Fieldname: fmtp
                Media Format: 101 [telephone-event]
                Media format specific parameters: 0-15
            Media Attribute (a): sendrecv

No.     Time        Packet length Hw src addr           Src addr              Src port Protocol Hw dest addr          Dest addr             Dest port Info
    129 124.382472  473           00:24:e8:94:02:40     10.0.0.1              5060     SIP      00:24:97:aa:53:00     10.0.0.2              5060      Request: ACK sip:11@10.0.0.2:5060;transport=udp

Frame 129 (473 bytes on wire, 473 bytes captured)
    Arrival Time: Oct 18, 2010 17:30:06.814521000
    [Time delta from previous captured frame: 0.079824000 seconds]
    [Time delta from previous displayed frame: 0.104611000 seconds]
    [Time since reference or first frame: 124.382472000 seconds]
    Frame Number: 129
    Frame Length: 473 bytes
    Capture Length: 473 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:sip]
    [Coloring Rule Name: Checksum Errors]
    [Coloring Rule String: cdp.checksum_bad==1 || edp.checksum_bad==1 || ip.checksum_bad==1 || tcp.checksum_bad==1 || udp.checksum_bad==1 || mstp.checksum_bad==1]
Ethernet II, Src: Dell_94:02:40 (00:24:e8:94:02:40), Dst: Cisco_aa:53:00 (00:24:97:aa:53:00)
    Destination: Cisco_aa:53:00 (00:24:97:aa:53:00)
        Address: Cisco_aa:53:00 (00:24:97:aa:53:00)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: Dell_94:02:40 (00:24:e8:94:02:40)
        Address: Dell_94:02:40 (00:24:e8:94:02:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 10.0.0.1 (10.0.0.1), Dst: 10.0.0.2 (10.0.0.2)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 459
    Identification: 0x510b (20747)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x0000 [incorrect, should be 0xd414]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 10.0.0.1 (10.0.0.1)
    Destination: 10.0.0.2 (10.0.0.2)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
    Source port: sip (5060)
    Destination port: sip (5060)
    Length: 439
    Checksum: 0x15cb [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Session Initiation Protocol
    Request-Line: ACK sip:11@10.0.0.2:5060;transport=udp SIP/2.0
        Method: ACK
        Request-URI: sip:11@10.0.0.2:5060;transport=udp
            Request-URI User Part: 11
            Request-URI Host Part: 10.0.0.2
            Request-URI Host Port: 5060
        [Resent Packet: False]
        [Request Frame: 120]
        [Response Time (ms): 8828]
    Message Header
        Via: SIP/2.0/UDP 10.0.0.1:5060;branch=z9hG4bK-d8754z-e649106744247474-1---d8754z-;rport
            Transport: UDP
            Sent-by Address: 10.0.0.1
            Sent-by port: 5060
            Branch: z9hG4bK-d8754z-e649106744247474-1---d8754z-
            RPort: rport
        Max-Forwards: 70
        Contact: <sip:10@10.0.0.1:5060>
            Contact Binding: <sip:10@10.0.0.1:5060>
                URI: <sip:10@10.0.0.1:5060>
                    SIP contact address: sip:10@10.0.0.1:5060
        To: <sip:11@10.0.0.1>;tag=002497aa53000004e8322ad8-7fb26780
            SIP to address: sip:11@10.0.0.1
                SIP to address User Part: 11
                SIP to address Host Part: 10.0.0.1
            SIP tag: 002497aa53000004e8322ad8-7fb26780
        From: "Ten Zehn"<sip:10@10.0.0.1:5060>;tag=2736265e
            SIP Display info: "Ten Zehn"
            SIP from address: sip:10@10.0.0.1:5060
                SIP from address User Part: 10
                SIP from address Host Part: 10.0.0.1
                SIP from address Host Port: 5060
            SIP tag: 2736265e
        Call-ID: ZTFlMDg0ZDZiYzgwODM0M2U5YTU0N2QwNzU5YmJhMTI.
        CSeq: 1 ACK
            Sequence Number: 1
            Method: ACK
        User-Agent: 3CXPhoneSystem 9.0.14474.0
        Content-Length: 0

No.     Time        Packet length Hw src addr           Src addr              Src port Protocol Hw dest addr          Dest addr             Dest port Info
   1628 139.318679  424           00:24:97:aa:53:00     10.0.0.2              49156    SIP      00:24:e8:94:02:40     10.0.0.1              5060      Request: BYE sip:10@10.0.0.1:5060

Frame 1628 (424 bytes on wire, 424 bytes captured)
    Arrival Time: Oct 18, 2010 17:30:21.750728000
    [Time delta from previous captured frame: 0.000138000 seconds]
    [Time delta from previous displayed frame: 14.936207000 seconds]
    [Time since reference or first frame: 139.318679000 seconds]
    Frame Number: 1628
    Frame Length: 424 bytes
    Capture Length: 424 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:sip]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: Cisco_aa:53:00 (00:24:97:aa:53:00), Dst: Dell_94:02:40 (00:24:e8:94:02:40)
    Destination: Dell_94:02:40 (00:24:e8:94:02:40)
        Address: Dell_94:02:40 (00:24:e8:94:02:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: Cisco_aa:53:00 (00:24:97:aa:53:00)
        Address: Cisco_aa:53:00 (00:24:97:aa:53:00)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 10.0.0.2 (10.0.0.2), Dst: 10.0.0.1 (10.0.0.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x60 (DSCP 0x18: Class Selector 3; ECN: 0x00)
        0110 00.. = Differentiated Services Codepoint: Class Selector 3 (0x18)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 410
    Identification: 0x0304 (772)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x61ed [correct]
        [Good: True]
        [Bad : False]
    Source: 10.0.0.2 (10.0.0.2)
    Destination: 10.0.0.1 (10.0.0.1)
User Datagram Protocol, Src Port: 49156 (49156), Dst Port: sip (5060)
    Source port: 49156 (49156)
    Destination port: sip (5060)
    Length: 390
    Checksum: 0x0000 (none)
        Good Checksum: False
        Bad Checksum: False
Session Initiation Protocol
    Request-Line: BYE sip:10@10.0.0.1:5060 SIP/2.0
        Method: BYE
        Request-URI: sip:10@10.0.0.1:5060
            Request-URI User Part: 10
            Request-URI Host Part: 10.0.0.1
            Request-URI Host Port: 5060
        [Resent Packet: False]
    Message Header
        Via: SIP/2.0/UDP 10.0.0.2:5060;branch=z9hG4bKd700e1c7
            Transport: UDP
            Sent-by Address: 10.0.0.2
            Sent-by port: 5060
            Branch: z9hG4bKd700e1c7
        From: <sip:11@10.0.0.1>;tag=002497aa53000004e8322ad8-7fb26780
            SIP from address: sip:11@10.0.0.1
                SIP from address User Part: 11
                SIP from address Host Part: 10.0.0.1
            SIP tag: 002497aa53000004e8322ad8-7fb26780
        To: "Ten Zehn"<sip:10@10.0.0.1:5060>;tag=2736265e
            SIP Display info: "Ten Zehn"
            SIP to address: sip:10@10.0.0.1:5060
                SIP to address User Part: 10
                SIP to address Host Part: 10.0.0.1
                SIP to address Host Port: 5060
            SIP tag: 2736265e
        Call-ID: ZTFlMDg0ZDZiYzgwODM0M2U5YTU0N2QwNzU5YmJhMTI.
        Max-Forwards: 70
        Date: Mon, 18 Oct 2010 14:30:21 GMT
        CSeq: 101 BYE
            Sequence Number: 101
            Method: BYE
        User-Agent: Cisco-CP7941G/8.5.2
        Content-Length: 0

No.     Time        Packet length Hw src addr           Src addr              Src port Protocol Hw dest addr          Dest addr             Dest port Info
   1635 139.422830  391           00:24:e8:94:02:40     10.0.0.1              5060     SIP      00:24:97:aa:53:00     10.0.0.2              5060      Status: 200 OK

Frame 1635 (391 bytes on wire, 391 bytes captured)
    Arrival Time: Oct 18, 2010 17:30:21.854879000
    [Time delta from previous captured frame: 0.004367000 seconds]
    [Time delta from previous displayed frame: 0.104151000 seconds]
    [Time since reference or first frame: 139.422830000 seconds]
    Frame Number: 1635
    Frame Length: 391 bytes
    Capture Length: 391 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:udp:sip]
    [Coloring Rule Name: Checksum Errors]
    [Coloring Rule String: cdp.checksum_bad==1 || edp.checksum_bad==1 || ip.checksum_bad==1 || tcp.checksum_bad==1 || udp.checksum_bad==1 || mstp.checksum_bad==1]
Ethernet II, Src: Dell_94:02:40 (00:24:e8:94:02:40), Dst: Cisco_aa:53:00 (00:24:97:aa:53:00)
    Destination: Cisco_aa:53:00 (00:24:97:aa:53:00)
        Address: Cisco_aa:53:00 (00:24:97:aa:53:00)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: Dell_94:02:40 (00:24:e8:94:02:40)
        Address: Dell_94:02:40 (00:24:e8:94:02:40)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 10.0.0.1 (10.0.0.1), Dst: 10.0.0.2 (10.0.0.2)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 377
    Identification: 0x53ff (21503)
    Flags: 0x00
        0.. = Reserved bit: Not Set
        .0. = Don't fragment: Not Set
        ..0 = More fragments: Not Set
    Fragment offset: 0
    Time to live: 128
    Protocol: UDP (0x11)
    Header checksum: 0x0000 [incorrect, should be 0xd172]
        [Good: False]
        [Bad : True]
            [Expert Info (Error/Checksum): Bad checksum]
                [Message: Bad checksum]
                [Severity level: Error]
                [Group: Checksum]
    Source: 10.0.0.1 (10.0.0.1)
    Destination: 10.0.0.2 (10.0.0.2)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
    Source port: sip (5060)
    Destination port: sip (5060)
    Length: 357
    Checksum: 0x1579 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Session Initiation Protocol
    Status-Line: SIP/2.0 200 OK
        Status-Code: 200
        [Resent Packet: False]
    Message Header
        Via: SIP/2.0/UDP 10.0.0.2:5060;branch=z9hG4bKd700e1c7
            Transport: UDP
            Sent-by Address: 10.0.0.2
            Sent-by port: 5060
            Branch: z9hG4bKd700e1c7
        Contact: <sip:10@10.0.0.1:5060>
            Contact Binding: <sip:10@10.0.0.1:5060>
                URI: <sip:10@10.0.0.1:5060>
                    SIP contact address: sip:10@10.0.0.1:5060
        To: "Ten Zehn"<sip:10@10.0.0.1:5060>;tag=2736265e
            SIP Display info: "Ten Zehn"
            SIP to address: sip:10@10.0.0.1:5060
                SIP to address User Part: 10
                SIP to address Host Part: 10.0.0.1
                SIP to address Host Port: 5060
            SIP tag: 2736265e
        From: <sip:11@10.0.0.1>;tag=002497aa53000004e8322ad8-7fb26780
            SIP from address: sip:11@10.0.0.1
                SIP from address User Part: 11
                SIP from address Host Part: 10.0.0.1
            SIP tag: 002497aa53000004e8322ad8-7fb26780
        Call-ID: ZTFlMDg0ZDZiYzgwODM0M2U5YTU0N2QwNzU5YmJhMTI.
        CSeq: 101 BYE
            Sequence Number: 101
            Method: BYE
        User-Agent: 3CXPhoneSystem 9.0.14474.0
        Content-Length: 0
