s15293146:~# ngrep -pql -t -W byline "" host 220.224.129.21 and port 5060 interface: eth0 (87.106.212.173/255.255.255.255) filter: (ip or ip6) and ( host 220.224.129.21 and port 5060 ) U 2010/06/25 21:01:11.536941 220.224.129.21:5060 -> 87.106.166.145:5060 INVITE sip:66.234.138.73:5061 SIP/2.0. Via: SIP/2.0/UDP 220.224.129.21:5060;branch=z9hG4bK9t00jc007on1ak0ti300sb10etf22.1. Call-ID: 7B556361-7FCA11DF-9C6B9643-3FD0180@66.234.138.68. From: ;tag=97.56.30.751064+1+27170028+55f292df. To: ;tag=a95529d8630fabcc3a6c37aaa2a7e68a. CSeq: 28900996 INVITE. Expires: 180. Contact: . Min-SE: 600. Session-Expires: 600;refresher=uac. Supported: replaces, 100rel, timer. Allow: INVITE, BYE, REGISTER, ACK, OPTIONS, CANCEL, SUBSCRIBE, NOTIFY, PRACK, INFO, REFER, UPDATE. Max-Forwards: 69. Content-Type: application/sdp. Content-Length: 200. Route: . . v=0. o=- 3486484562 3486484562 IN IP4 220.224.129.21. s=-. c=IN IP4 220.224.129.21. t=0 0. m=audio 44578 RTP/AVP 0 13. a=ptime:20. a=rtpmap:0 PCMU/8000. a=rtpmap:13 CN/8000. a=silenceSupp:on - - - -. U 2010/06/25 21:01:11.537365 87.106.166.145:5060 -> 220.224.129.21:5060 SIP/2.0 403 Forbidden here xx. Via: SIP/2.0/UDP 220.224.129.21:5060;branch=z9hG4bK9t00jc007on1ak0ti300sb10etf22.1. Call-ID: 7B556361-7FCA11DF-9C6B9643-3FD0180@66.234.138.68. From: ;tag=97.56.30.751064+1+27170028+55f292df. To: ;tag=a95529d8630fabcc3a6c37aaa2a7e68a. CSeq: 28900996 INVITE. Server: Kamailio (1.5.1-notls (i386/linux)). Content-Length: 0. Warning: 392 87.106.166.145:5060 "Noisy feedback tells: pid=24969 req_src_ip=220.224.129.21 req_src_port=5060 in_uri=sip:66.234.138.73:5061 out_uri=sip:66.234.138.73:5061 via_cnt==1". . U 2010/06/25 21:01:11.819001 220.224.129.21:5060 -> 87.106.166.145:5060 ACK sip:66.234.138.73:5061 SIP/2.0. Via: SIP/2.0/UDP 220.224.129.21:5060;branch=z9hG4bK9t00jc007on1ak0ti300sb10etf22.1. CSeq: 28900996 ACK. Call-ID: 7B556361-7FCA11DF-9C6B9643-3FD0180@66.234.138.68. From: ;tag=97.56.30.751064+1+27170028+55f292df. To: ;tag=a95529d8630fabcc3a6c37aaa2a7e68a. Max-Forwards: 69. Route: . Content-Length: 0. . U 2010/06/25 21:01:11.823863 220.224.129.21:5060 -> 87.106.166.145:5060 BYE sip:66.234.138.73:5061 SIP/2.0. Via: SIP/2.0/UDP 220.224.129.21:5060;branch=z9hG4bK9t00jc007on1ak0ti300sd10etv22.1. Call-ID: 7B556361-7FCA11DF-9C6B9643-3FD0180@66.234.138.68. From: ;tag=97.56.30.751064+1+27170028+55f292df. To: ;tag=a95529d8630fabcc3a6c37aaa2a7e68a. CSeq: 28900997 BYE. Supported: replaces, 100rel, timer. Content-Length: 0. Max-Forwards: 69. Route: . . U 2010/06/25 21:01:11.823953 87.106.166.145:5060 -> 220.224.129.21:5060 SIP/2.0 403 Forbidden here xx. Via: SIP/2.0/UDP 220.224.129.21:5060;branch=z9hG4bK9t00jc007on1ak0ti300sd10etv22.1. Call-ID: 7B556361-7FCA11DF-9C6B9643-3FD0180@66.234.138.68. From: ;tag=97.56.30.751064+1+27170028+55f292df. To: ;tag=a95529d8630fabcc3a6c37aaa2a7e68a. CSeq: 28900997 BYE. Server: Kamailio (1.5.1-notls (i386/linux)). Content-Length: 0. Warning: 392 87.106.166.145:5060 "Noisy feedback tells: pid=24968 req_src_ip=220.224.129.21 req_src_port=5060 in_uri=sip:66.234.138.73:5061 out_uri=sip:66.234.138.73:5061 via_cnt==1". . U 2010/06/25 21:01:36.874454 87.106.166.145:5060 -> 220.224.129.21:5060 BYE sip:37410230653@220.224.129.21:5060;transport=udp SIP/2.0. Via: SIP/2.0/UDP 87.106.166.145;branch=z9hG4bK0f1e.94076107.0. Via: SIP/2.0/UDP 66.234.138.73:5061;received=66.234.138.73;branch=z9hG4bKc2ac35115849decb182a08e1199b4768;rport=5061. Max-Forwards: 69. From: ;tag=a95529d8630fabcc3a6c37aaa2a7e68a. To: ;tag=97.56.30.751064+1+27170028+55f292df. Call-ID: 7B556361-7FCA11DF-9C6B9643-3FD0180@66.234.138.68. CSeq: 211 BYE. Contact: Anonymous . Expires: 300. User-Agent: Sippy. cisco-GUID: 1717002062-2143949279-2367815689-3893906310. h323-conf-id: 1717002062-2143949279-2367815689-3893906310. . U 2010/06/25 21:01:37.156354 220.224.129.21:5060 -> 87.106.166.145:5060 SIP/2.0 481 Unknown Dialog. Via: SIP/2.0/UDP 87.106.166.145;branch=z9hG4bK0f1e.94076107.0. Via: SIP/2.0/UDP 66.234.138.73:5061;received=66.234.138.73;branch=z9hG4bKc2ac35115849decb182a08e1199b4768;rport=5061. From: ;tag=a95529d8630fabcc3a6c37aaa2a7e68a. To: ;tag=97.56.30.751064+1+27170028+55f292df. Call-ID: 7B556361-7FCA11DF-9C6B9643-3FD0180@66.234.138.68. CSeq: 211 BYE. .