I don't really care where or to the packets come from but the actual contents of the "contact" header in each packet.    

/b

On Nov 28, 2008, at 9:50 AM, x y wrote:

The whole situation:

xxx.xxx.xxx.xxx:56956---INVITE--->yyy.yyy.yyy.yyy:5060
yyy.yyy.yyy.yyy:5060---100-Trying--->xxx.xxx.xxx.xxx:5060
yyy.yyy.yyy.yyy:5060---INVITE--->zzz.zzz.zzz.zzz:1352
zzz.zzz.zzz.zzz:1352---100-Trying--->yyy.yyy.yyy.yyy:5060
zzz.zzz.zzz.zzz:1352---183-Session-Progress--->yyy.yyy.yyy.yyy:5060
yyy.yyy.yyy.yyy:5060---PRACK--->zzz.zzz.zzz.zzz:5060
zzz.zzz.zzz.zzz:5060---481-No-Such-Response--->yyy.yyy.yyy.yyy:5060
yyy.yyy.yyy.yyy:5060---CANCEL--->zzz.zzz.zzz.zzz:1352
yyy.yyy.yyy.yyy:5060---481-Call/Transaction-Does-Not-Exist--->xxx.xxx.xxx.xxx:5060
xxx.xxx.xxx.xxx:56956---ACK--->yyy.yyy.yyy.yyy:5060
zzz.zzz.zzz.zzz:1352---200-OK--->yyy.yyy.yyy.yyy:5060
zzz.zzz.zzz.zzz:1352---487-Request-Terminated--->yyy.yyy.yyy.yyy:5060
yyy.yyy.yyy.yyy:5060---ACK--->zzz.zzz.zzz.zzz:1352

Cheers,
Viktor