Re: [Ekiga-list] Invalid Contact header field, or bug in ekiga.net?



On Mon, 25 Oct 2010 11:26:40 +0200
Eugen Dedu <Eugen Dedu pu-pm univ-fcomte fr> wrote:

> 
> Send us the whole conversation (REGISTER and 606 answer I suppose).

No.     Time        Source                Destination           Protocol Info
    108 283.537345  192.168.1.105         192.168.10.1          DNS      Standard query SRV _sip._udp.ekiga.net

Frame 108 (79 bytes on wire, 79 bytes captured)
    Arrival Time: Oct 24, 2010 20:17:09.216261000
    [Time delta from previous captured frame: 7.392260000 seconds]
    [Time delta from previous displayed frame: 7.392260000 seconds]
    [Time since reference or first frame: 283.537345000 seconds]
    Frame Number: 108
    Frame Length: 79 bytes
    Capture Length: 79 bytes
    [Frame is marked: True]
    [Protocols in frame: eth:ip:udp:dns]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: QuantaMi_10:a4:48 (00:17:c4:10:a4:48), Dst: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
    Destination: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        Address: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        Address: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.105 (192.168.1.105), Dst: 192.168.10.1 (192.168.10.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 65
    Identification: 0xdd66 (56678)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xd08a [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.1.105 (192.168.1.105)
    Destination: 192.168.10.1 (192.168.10.1)
User Datagram Protocol, Src Port: 45367 (45367), Dst Port: domain (53)
    Source port: 45367 (45367)
    Destination port: domain (53)
    Length: 45
    Checksum: 0x91cd [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Domain Name System (query)
    [Response In: 109]
    Transaction ID: 0x1fd9
    Flags: 0x0100 (Standard query)
        0... .... .... .... = Response: Message is a query
        .000 0... .... .... = Opcode: Standard query (0)
        .... ..0. .... .... = Truncated: Message is not truncated
        .... ...1 .... .... = Recursion desired: Do query recursively
        .... .... .0.. .... = Z: reserved (0)
        .... .... ...0 .... = Non-authenticated data OK: Non-authenticated data is unacceptable
    Questions: 1
    Answer RRs: 0
    Authority RRs: 0
    Additional RRs: 0
    Queries
        _sip._udp.ekiga.net: type SRV, class IN
            Name: _sip._udp.ekiga.net
            Type: SRV (Service location)
            Class: IN (0x0001)

0000  00 1d 7e 2f bd 0c 00 17 c4 10 a4 48 08 00 45 00   ..~/.......H..E.
0010  00 41 dd 66 40 00 40 11 d0 8a c0 a8 01 69 c0 a8    A f  @......i..
0020  0a 01 b1 37 00 35 00 2d 91 cd 1f d9 01 00 00 01   ...7.5.-........
0030  00 00 00 00 00 00 04 5f 73 69 70 04 5f 75 64 70   ......._sip._udp
0040  05 65 6b 69 67 61 03 6e 65 74 00 00 21 00 01      .ekiga.net..!..

No.     Time        Source                Destination           Protocol Info
    109 283.629180  192.168.10.1          192.168.1.105         DNS      Standard query response, No such name

Frame 109 (128 bytes on wire, 128 bytes captured)
    Arrival Time: Oct 24, 2010 20:17:09.308096000
    [Time delta from previous captured frame: 0.091835000 seconds]
    [Time delta from previous displayed frame: 0.091835000 seconds]
    [Time since reference or first frame: 283.629180000 seconds]
    Frame Number: 109
    Frame Length: 128 bytes
    Capture Length: 128 bytes
    [Frame is marked: True]
    [Protocols in frame: eth:ip:udp:dns]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c), Dst: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
    Destination: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        Address: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        Address: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.1.105 (192.168.1.105)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 114
    Identification: 0xba14 (47636)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 63
    Protocol: UDP (0x11)
    Header checksum: 0x34ac [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.10.1 (192.168.10.1)
    Destination: 192.168.1.105 (192.168.1.105)
User Datagram Protocol, Src Port: domain (53), Dst Port: 45367 (45367)
    Source port: domain (53)
    Destination port: 45367 (45367)
    Length: 94
    Checksum: 0xaa7d [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Domain Name System (response)
    [Request In: 108]
    [Time: 0.091835000 seconds]
    Transaction ID: 0x1fd9
    Flags: 0x8183 (Standard query response, No such name)
        1... .... .... .... = Response: Message is a response
        .000 0... .... .... = Opcode: Standard query (0)
        .... .0.. .... .... = Authoritative: Server is not an authority for domain
        .... ..0. .... .... = Truncated: Message is not truncated
        .... ...1 .... .... = Recursion desired: Do query recursively
        .... .... 1... .... = Recursion available: Server can do recursive queries
        .... .... .0.. .... = Z: reserved (0)
        .... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server
        .... .... .... 0011 = Reply code: No such name (3)
    Questions: 1
    Answer RRs: 0
    Authority RRs: 1
    Additional RRs: 0
    Queries
        _sip._udp.ekiga.net: type SRV, class IN
            Name: _sip._udp.ekiga.net
            Type: SRV (Service location)
            Class: IN (0x0001)
    Authoritative nameservers
        ekiga.net: type SOA, class IN, mname dns.ovh.net
            Name: ekiga.net
            Type: SOA (Start of zone of authority)
            Class: IN (0x0001)
            Time to live: 3 hours
            Data length: 37
            Primary name server: dns.ovh.net
            Responsible authority's mailbox: tech.ovh.net
            Serial number: 2009102401
            Refresh interval: 1 day
            Retry interval: 1 hour
            Expiration limit: 41 days, 16 hours
            Minimum TTL: 1 day

0000  00 17 c4 10 a4 48 00 1d 7e 2f bd 0c 08 00 45 00   .....H..~/....E.
0010  00 72 ba 14 00 00 3f 11 34 ac c0 a8 0a 01 c0 a8   .r....?.4.......
0020  01 69 00 35 b1 37 00 5e aa 7d 1f d9 81 83 00 01   .i.5.7.^.}......
0030  00 00 00 01 00 00 04 5f 73 69 70 04 5f 75 64 70   ......._sip._udp
0040  05 65 6b 69 67 61 03 6e 65 74 00 00 21 00 01 c0   .ekiga.net..!...
0050  16 00 06 00 01 00 00 2a 30 00 25 03 64 6e 73 03   .......*0.%.dns.
0060  6f 76 68 c0 1c 04 74 65 63 68 c0 35 77 c0 78 41   ovh...tech.5w.xA
0070  00 01 51 80 00 00 0e 10 00 36 ee 80 00 01 51 80   ..Q......6....Q.

No.     Time        Source                Destination           Protocol Info
    110 283.629534  192.168.1.105         192.168.10.1          DNS      Standard query SRV _sip._udp.ekiga.net.gathman.org

Frame 110 (91 bytes on wire, 91 bytes captured)
    Arrival Time: Oct 24, 2010 20:17:09.308450000
    [Time delta from previous captured frame: 0.000354000 seconds]
    [Time delta from previous displayed frame: 0.000354000 seconds]
    [Time since reference or first frame: 283.629534000 seconds]
    Frame Number: 110
    Frame Length: 91 bytes
    Capture Length: 91 bytes
    [Frame is marked: True]
    [Protocols in frame: eth:ip:udp:dns]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: QuantaMi_10:a4:48 (00:17:c4:10:a4:48), Dst: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
    Destination: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        Address: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        Address: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.105 (192.168.1.105), Dst: 192.168.10.1 (192.168.10.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 77
    Identification: 0xdd6f (56687)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xd075 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.1.105 (192.168.1.105)
    Destination: 192.168.10.1 (192.168.10.1)
User Datagram Protocol, Src Port: 42337 (42337), Dst Port: domain (53)
    Source port: 42337 (42337)
    Destination port: domain (53)
    Length: 57
    Checksum: 0x27bc [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Domain Name System (query)
    [Response In: 111]
    Transaction ID: 0xed1a
    Flags: 0x0100 (Standard query)
        0... .... .... .... = Response: Message is a query
        .000 0... .... .... = Opcode: Standard query (0)
        .... ..0. .... .... = Truncated: Message is not truncated
        .... ...1 .... .... = Recursion desired: Do query recursively
        .... .... .0.. .... = Z: reserved (0)
        .... .... ...0 .... = Non-authenticated data OK: Non-authenticated data is unacceptable
    Questions: 1
    Answer RRs: 0
    Authority RRs: 0
    Additional RRs: 0
    Queries
        _sip._udp.ekiga.net.gathman.org: type SRV, class IN
            Name: _sip._udp.ekiga.net.gathman.org
            Type: SRV (Service location)
            Class: IN (0x0001)

0000  00 1d 7e 2f bd 0c 00 17 c4 10 a4 48 08 00 45 00   ..~/.......H..E.
0010  00 4d dd 6f 40 00 40 11 d0 75 c0 a8 01 69 c0 a8    M o  @..u...i..
0020  0a 01 a5 61 00 35 00 39 27 bc ed 1a 01 00 00 01   ...a.5.9'.......
0030  00 00 00 00 00 00 04 5f 73 69 70 04 5f 75 64 70   ......._sip._udp
0040  05 65 6b 69 67 61 03 6e 65 74 07 67 61 74 68 6d   .ekiga.net.gathm
0050  61 6e 03 6f 72 67 00 00 21 00 01                  an.org..!..

No.     Time        Source                Destination           Protocol Info
    111 283.648436  192.168.10.1          192.168.1.105         DNS      Standard query response

Frame 111 (149 bytes on wire, 149 bytes captured)
    Arrival Time: Oct 24, 2010 20:17:09.327352000
    [Time delta from previous captured frame: 0.018902000 seconds]
    [Time delta from previous displayed frame: 0.018902000 seconds]
    [Time since reference or first frame: 283.648436000 seconds]
    Frame Number: 111
    Frame Length: 149 bytes
    Capture Length: 149 bytes
    [Frame is marked: True]
    [Protocols in frame: eth:ip:udp:dns]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c), Dst: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
    Destination: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        Address: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        Address: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.1.105 (192.168.1.105)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 135
    Identification: 0xba15 (47637)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 63
    Protocol: UDP (0x11)
    Header checksum: 0x3496 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.10.1 (192.168.10.1)
    Destination: 192.168.1.105 (192.168.1.105)
User Datagram Protocol, Src Port: domain (53), Dst Port: 42337 (42337)
    Source port: domain (53)
    Destination port: 42337 (42337)
    Length: 115
    Checksum: 0x9866 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Domain Name System (response)
    [Request In: 110]
    [Time: 0.018902000 seconds]
    Transaction ID: 0xed1a
    Flags: 0x8180 (Standard query response, No error)
        1... .... .... .... = Response: Message is a response
        .000 0... .... .... = Opcode: Standard query (0)
        .... .0.. .... .... = Authoritative: Server is not an authority for domain
        .... ..0. .... .... = Truncated: Message is not truncated
        .... ...1 .... .... = Recursion desired: Do query recursively
        .... .... 1... .... = Recursion available: Server can do recursive queries
        .... .... .0.. .... = Z: reserved (0)
        .... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server
        .... .... .... 0000 = Reply code: No error (0)
    Questions: 1
    Answer RRs: 0
    Authority RRs: 1
    Additional RRs: 0
    Queries
        _sip._udp.ekiga.net.gathman.org: type SRV, class IN
            Name: _sip._udp.ekiga.net.gathman.org
            Type: SRV (Service location)
            Class: IN (0x0001)
    Authoritative nameservers
        gathman.org: type SOA, class IN, mname ns1.bmsi.com
            Name: gathman.org
            Type: SOA (Start of zone of authority)
            Class: IN (0x0001)
            Time to live: 3 hours
            Data length: 46
            Primary name server: ns1.bmsi.com
            Responsible authority's mailbox: hostadmin.bmsi.com
            Serial number: 2007052605
            Refresh interval: 1 hour
            Retry interval: 15 minutes
            Expiration limit: 14 days
            Minimum TTL: 12 hours

0000  00 17 c4 10 a4 48 00 1d 7e 2f bd 0c 08 00 45 00   .....H..~/....E.
0010  00 87 ba 15 00 00 3f 11 34 96 c0 a8 0a 01 c0 a8   ......?.4.......
0020  01 69 00 35 a5 61 00 73 98 66 ed 1a 81 80 00 01   .i.5.a.s.f......
0030  00 00 00 01 00 00 04 5f 73 69 70 04 5f 75 64 70   ......._sip._udp
0040  05 65 6b 69 67 61 03 6e 65 74 07 67 61 74 68 6d   .ekiga.net.gathm
0050  61 6e 03 6f 72 67 00 00 21 00 01 c0 20 00 06 00   an.org..!... ...
0060  01 00 00 2a 30 00 2e 03 6e 73 31 04 62 6d 73 69   ...*0...ns1.bmsi
0070  03 63 6f 6d 00 09 68 6f 73 74 61 64 6d 69 6e c0   .com..hostadmin.
0080  41 77 a1 31 3d 00 00 0e 10 00 00 03 84 00 12 75   Aw.1=..........u
0090  00 00 00 a8 c0                                    .....

No.     Time        Source                Destination           Protocol Info
    112 283.650074  192.168.1.105         192.168.10.1          DNS      Standard query A ekiga.net

Frame 112 (69 bytes on wire, 69 bytes captured)
    Arrival Time: Oct 24, 2010 20:17:09.328990000
    [Time delta from previous captured frame: 0.001638000 seconds]
    [Time delta from previous displayed frame: 0.001638000 seconds]
    [Time since reference or first frame: 283.650074000 seconds]
    Frame Number: 112
    Frame Length: 69 bytes
    Capture Length: 69 bytes
    [Frame is marked: True]
    [Protocols in frame: eth:ip:udp:dns]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: QuantaMi_10:a4:48 (00:17:c4:10:a4:48), Dst: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
    Destination: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        Address: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        Address: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.105 (192.168.1.105), Dst: 192.168.10.1 (192.168.10.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 55
    Identification: 0xdd71 (56689)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xd089 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.1.105 (192.168.1.105)
    Destination: 192.168.10.1 (192.168.10.1)
User Datagram Protocol, Src Port: 45758 (45758), Dst Port: domain (53)
    Source port: 45758 (45758)
    Destination port: domain (53)
    Length: 35
    Checksum: 0x2e66 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Domain Name System (query)
    [Response In: 113]
    Transaction ID: 0x4d80
    Flags: 0x0100 (Standard query)
        0... .... .... .... = Response: Message is a query
        .000 0... .... .... = Opcode: Standard query (0)
        .... ..0. .... .... = Truncated: Message is not truncated
        .... ...1 .... .... = Recursion desired: Do query recursively
        .... .... .0.. .... = Z: reserved (0)
        .... .... ...0 .... = Non-authenticated data OK: Non-authenticated data is unacceptable
    Questions: 1
    Answer RRs: 0
    Authority RRs: 0
    Additional RRs: 0
    Queries
        ekiga.net: type A, class IN
            Name: ekiga.net
            Type: A (Host address)
            Class: IN (0x0001)

0000  00 1d 7e 2f bd 0c 00 17 c4 10 a4 48 08 00 45 00   ..~/.......H..E.
0010  00 37 dd 71 40 00 40 11 d0 89 c0 a8 01 69 c0 a8    7 q  @......i..
0020  0a 01 b2 be 00 35 00 23 2e 66 4d 80 01 00 00 01   .....5.#.fM.....
0030  00 00 00 00 00 00 05 65 6b 69 67 61 03 6e 65 74   .......ekiga.net
0040  00 00 01 00 01                                    .....

No.     Time        Source                Destination           Protocol Info
    113 283.652424  192.168.10.1          192.168.1.105         DNS      Standard query response A 86.64.162.35

Frame 113 (156 bytes on wire, 156 bytes captured)
    Arrival Time: Oct 24, 2010 20:17:09.331340000
    [Time delta from previous captured frame: 0.002350000 seconds]
    [Time delta from previous displayed frame: 0.002350000 seconds]
    [Time since reference or first frame: 283.652424000 seconds]
    Frame Number: 113
    Frame Length: 156 bytes
    Capture Length: 156 bytes
    [Frame is marked: True]
    [Protocols in frame: eth:ip:udp:dns]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c), Dst: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
    Destination: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        Address: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        Address: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.1.105 (192.168.1.105)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 142
    Identification: 0xba16 (47638)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 63
    Protocol: UDP (0x11)
    Header checksum: 0x348e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.10.1 (192.168.10.1)
    Destination: 192.168.1.105 (192.168.1.105)
User Datagram Protocol, Src Port: domain (53), Dst Port: 45758 (45758)
    Source port: domain (53)
    Destination port: 45758 (45758)
    Length: 122
    Checksum: 0x5756 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Domain Name System (response)
    [Request In: 112]
    [Time: 0.002350000 seconds]
    Transaction ID: 0x4d80
    Flags: 0x8180 (Standard query response, No error)
        1... .... .... .... = Response: Message is a response
        .000 0... .... .... = Opcode: Standard query (0)
        .... .0.. .... .... = Authoritative: Server is not an authority for domain
        .... ..0. .... .... = Truncated: Message is not truncated
        .... ...1 .... .... = Recursion desired: Do query recursively
        .... .... 1... .... = Recursion available: Server can do recursive queries
        .... .... .0.. .... = Z: reserved (0)
        .... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server
        .... .... .... 0000 = Reply code: No error (0)
    Questions: 1
    Answer RRs: 1
    Authority RRs: 2
    Additional RRs: 2
    Queries
        ekiga.net: type A, class IN
            Name: ekiga.net
            Type: A (Host address)
            Class: IN (0x0001)
    Answers
        ekiga.net: type A, class IN, addr 86.64.162.35
            Name: ekiga.net
            Type: A (Host address)
            Class: IN (0x0001)
            Time to live: 2 hours, 32 minutes, 24 seconds
            Data length: 4
            Addr: 86.64.162.35
    Authoritative nameservers
        ekiga.net: type NS, class IN, ns ns.ovh.net
            Name: ekiga.net
            Type: NS (Authoritative name server)
            Class: IN (0x0001)
            Time to live: 2 hours, 32 minutes, 24 seconds
            Data length: 9
            Name server: ns.ovh.net
        ekiga.net: type NS, class IN, ns dns.ovh.net
            Name: ekiga.net
            Type: NS (Authoritative name server)
            Class: IN (0x0001)
            Time to live: 2 hours, 32 minutes, 24 seconds
            Data length: 6
            Name server: dns.ovh.net
    Additional records
        ns.ovh.net: type A, class IN, addr 213.251.128.136
            Name: ns.ovh.net
            Type: A (Host address)
            Class: IN (0x0001)
            Time to live: 7 hours, 10 minutes, 11 seconds
            Data length: 4
            Addr: 213.251.128.136
        dns.ovh.net: type A, class IN, addr 213.186.33.102
            Name: dns.ovh.net
            Type: A (Host address)
            Class: IN (0x0001)
            Time to live: 7 hours, 10 minutes, 11 seconds
            Data length: 4
            Addr: 213.186.33.102

0000  00 17 c4 10 a4 48 00 1d 7e 2f bd 0c 08 00 45 00   .....H..~/....E.
0010  00 8e ba 16 00 00 3f 11 34 8e c0 a8 0a 01 c0 a8   ......?.4.......
0020  01 69 00 35 b2 be 00 7a 57 56 4d 80 81 80 00 01   .i.5...zWVM.....
0030  00 01 00 02 00 02 05 65 6b 69 67 61 03 6e 65 74   .......ekiga.net
0040  00 00 01 00 01 c0 0c 00 01 00 01 00 00 23 b8 00   .............#..
0050  04 56 40 a2 23 c0 0c 00 02 00 01 00 00 23 b8 00    V  #        #  
0060  09 02 6e 73 03 6f 76 68 c0 12 c0 0c 00 02 00 01   ..ns.ovh........
0070  00 00 23 b8 00 06 03 64 6e 73 c0 3a c0 37 00 01   ..#....dns.:.7..
0080  00 01 00 00 64 d3 00 04 d5 fb 80 88 c0 4c 00 01   ....d........L..
0090  00 01 00 00 64 d3 00 04 d5 ba 21 66               ....d.....!f

No.     Time        Source                Destination           Protocol Info
    114 283.652920  192.168.1.105         192.168.10.1          DNS      Standard query PTR 35.162.64.86.in-addr.arpa

Frame 114 (85 bytes on wire, 85 bytes captured)
    Arrival Time: Oct 24, 2010 20:17:09.331836000
    [Time delta from previous captured frame: 0.000496000 seconds]
    [Time delta from previous displayed frame: 0.000496000 seconds]
    [Time since reference or first frame: 283.652920000 seconds]
    Frame Number: 114
    Frame Length: 85 bytes
    Capture Length: 85 bytes
    [Frame is marked: True]
    [Protocols in frame: eth:ip:udp:dns]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: QuantaMi_10:a4:48 (00:17:c4:10:a4:48), Dst: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
    Destination: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        Address: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        Address: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.105 (192.168.1.105), Dst: 192.168.10.1 (192.168.10.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 71
    Identification: 0xdd71 (56689)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xd079 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.1.105 (192.168.1.105)
    Destination: 192.168.10.1 (192.168.10.1)
User Datagram Protocol, Src Port: 56442 (56442), Dst Port: domain (53)
    Source port: 56442 (56442)
    Destination port: domain (53)
    Length: 51
    Checksum: 0x6d8a [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Domain Name System (query)
    [Response In: 115]
    Transaction ID: 0xd2a3
    Flags: 0x0100 (Standard query)
        0... .... .... .... = Response: Message is a query
        .000 0... .... .... = Opcode: Standard query (0)
        .... ..0. .... .... = Truncated: Message is not truncated
        .... ...1 .... .... = Recursion desired: Do query recursively
        .... .... .0.. .... = Z: reserved (0)
        .... .... ...0 .... = Non-authenticated data OK: Non-authenticated data is unacceptable
    Questions: 1
    Answer RRs: 0
    Authority RRs: 0
    Additional RRs: 0
    Queries
        35.162.64.86.in-addr.arpa: type PTR, class IN
            Name: 35.162.64.86.in-addr.arpa
            Type: PTR (Domain name pointer)
            Class: IN (0x0001)

0000  00 1d 7e 2f bd 0c 00 17 c4 10 a4 48 08 00 45 00   ..~/.......H..E.
0010  00 47 dd 71 40 00 40 11 d0 79 c0 a8 01 69 c0 a8    G q  @..y...i..
0020  0a 01 dc 7a 00 35 00 33 6d 8a d2 a3 01 00 00 01   ...z.5.3m.......
0030  00 00 00 00 00 00 02 33 35 03 31 36 32 02 36 34   .......35.162.64
0040  02 38 36 07 69 6e 2d 61 64 64 72 04 61 72 70 61   .86.in-addr.arpa
0050  00 00 0c 00 01                                    .....

No.     Time        Source                Destination           Protocol Info
    115 283.655308  192.168.10.1          192.168.1.105         DNS      Standard query response PTR ekiga.net

Frame 115 (186 bytes on wire, 186 bytes captured)
    Arrival Time: Oct 24, 2010 20:17:09.334224000
    [Time delta from previous captured frame: 0.002388000 seconds]
    [Time delta from previous displayed frame: 0.002388000 seconds]
    [Time since reference or first frame: 283.655308000 seconds]
    Frame Number: 115
    Frame Length: 186 bytes
    Capture Length: 186 bytes
    [Frame is marked: True]
    [Protocols in frame: eth:ip:udp:dns]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c), Dst: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
    Destination: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        Address: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        Address: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.1.105 (192.168.1.105)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 172
    Identification: 0xba17 (47639)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 63
    Protocol: UDP (0x11)
    Header checksum: 0x346f [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.10.1 (192.168.10.1)
    Destination: 192.168.1.105 (192.168.1.105)
User Datagram Protocol, Src Port: domain (53), Dst Port: 56442 (56442)
    Source port: domain (53)
    Destination port: 56442 (56442)
    Length: 152
    Checksum: 0x7a6d [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Domain Name System (response)
    [Request In: 114]
    [Time: 0.002388000 seconds]
    Transaction ID: 0xd2a3
    Flags: 0x8180 (Standard query response, No error)
        1... .... .... .... = Response: Message is a response
        .000 0... .... .... = Opcode: Standard query (0)
        .... .0.. .... .... = Authoritative: Server is not an authority for domain
        .... ..0. .... .... = Truncated: Message is not truncated
        .... ...1 .... .... = Recursion desired: Do query recursively
        .... .... 1... .... = Recursion available: Server can do recursive queries
        .... .... .0.. .... = Z: reserved (0)
        .... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server
        .... .... .... 0000 = Reply code: No error (0)
    Questions: 1
    Answer RRs: 1
    Authority RRs: 2
    Additional RRs: 2
    Queries
        35.162.64.86.in-addr.arpa: type PTR, class IN
            Name: 35.162.64.86.in-addr.arpa
            Type: PTR (Domain name pointer)
            Class: IN (0x0001)
    Answers
        35.162.64.86.in-addr.arpa: type PTR, class IN, ekiga.net
            Name: 35.162.64.86.in-addr.arpa
            Type: PTR (Domain name pointer)
            Class: IN (0x0001)
            Time to live: 2 hours, 32 minutes, 25 seconds
            Data length: 11
            Domain name: ekiga.net
    Authoritative nameservers
        162.64.86.in-addr.arpa: type NS, class IN, ns dns1.gaoland.net
            Name: 162.64.86.in-addr.arpa
            Type: NS (Authoritative name server)
            Class: IN (0x0001)
            Time to live: 2 hours, 32 minutes, 25 seconds
            Data length: 15
            Name server: dns1.gaoland.net
        162.64.86.in-addr.arpa: type NS, class IN, ns dns2.gaoland.net
            Name: 162.64.86.in-addr.arpa
            Type: NS (Authoritative name server)
            Class: IN (0x0001)
            Time to live: 2 hours, 32 minutes, 25 seconds
            Data length: 7
            Name server: dns2.gaoland.net
    Additional records
        dns1.gaoland.net: type A, class IN, addr 212.94.162.1
            Name: dns1.gaoland.net
            Type: A (Host address)
            Class: IN (0x0001)
            Time to live: 2 hours, 32 minutes, 24 seconds
            Data length: 4
            Addr: 212.94.162.1
        dns2.gaoland.net: type A, class IN, addr 212.94.162.33
            Name: dns2.gaoland.net
            Type: A (Host address)
            Class: IN (0x0001)
            Time to live: 2 hours, 32 minutes, 24 seconds
            Data length: 4
            Addr: 212.94.162.33

0000  00 17 c4 10 a4 48 00 1d 7e 2f bd 0c 08 00 45 00   .....H..~/....E.
0010  00 ac ba 17 00 00 3f 11 34 6f c0 a8 0a 01 c0 a8   ......?.4o......
0020  01 69 00 35 dc 7a 00 98 7a 6d d2 a3 81 80 00 01   .i.5.z..zm......
0030  00 01 00 02 00 02 02 33 35 03 31 36 32 02 36 34   .......35.162.64
0040  02 38 36 07 69 6e 2d 61 64 64 72 04 61 72 70 61   .86.in-addr.arpa
0050  00 00 0c 00 01 c0 0c 00 0c 00 01 00 00 23 b9 00   .............#..
0060  0b 05 65 6b 69 67 61 03 6e 65 74 00 c0 0f 00 02   ..ekiga.net.....
0070  00 01 00 00 23 b9 00 0f 04 64 6e 73 31 07 67 61   ....#....dns1.ga
0080  6f 6c 61 6e 64 c0 3d c0 0f 00 02 00 01 00 00 23   oland.=........#
0090  b9 00 07 04 64 6e 73 32 c0 53 c0 4e 00 01 00 01   ....dns2.S.N....
00a0  00 00 23 b8 00 04 d4 5e a2 01 c0 69 00 01 00 01   ..#....^...i....
00b0  00 00 23 b8 00 04 d4 5e a2 21                     ..#....^.!

No.     Time        Source                Destination           Protocol Info
    116 283.663436  192.168.1.105         75.101.138.128        STUN     Message: Binding Request

Frame 116 (70 bytes on wire, 70 bytes captured)
    Arrival Time: Oct 24, 2010 20:17:09.342352000
    [Time delta from previous captured frame: 0.008128000 seconds]
    [Time delta from previous displayed frame: 0.008128000 seconds]
    [Time since reference or first frame: 283.663436000 seconds]
    Frame Number: 116
    Frame Length: 70 bytes
    Capture Length: 70 bytes
    [Frame is marked: True]
    [Protocols in frame: eth:ip:udp:stun]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: QuantaMi_10:a4:48 (00:17:c4:10:a4:48), Dst: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
    Destination: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        Address: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        Address: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.105 (192.168.1.105), Dst: 75.101.138.128 (75.101.138.128)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 56
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xa2be [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.1.105 (192.168.1.105)
    Destination: 75.101.138.128 (75.101.138.128)
User Datagram Protocol, Src Port: 5068 (5068), Dst Port: stun (3478)
    Source port: 5068 (5068)
    Destination port: stun (3478)
    Length: 36
    Checksum: 0x9548 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Simple Traversal of UDP Through NAT
    [Response In: 117]
    Message Type: Binding Request (0x0001)
    Message Length: 0x0008
    Message Transaction ID: 111258645A405E08C8FFBFF9F65D0FDE
    Attributes
        Attribute: CHANGE-REQUEST
            Attribute Type: CHANGE-REQUEST (0x0003)
            Attribute Length: 4
            .... .... .... .0.. = Change IP: NOT SET
            .... .... .... ..0. = Change Port: NOT SET

0000  00 1d 7e 2f bd 0c 00 17 c4 10 a4 48 08 00 45 00   ..~/.......H..E.
0010  00 38 00 00 40 00 40 11 a2 be c0 a8 01 69 4b 65    8    @......iKe
0020  8a 80 13 cc 0d 96 00 24 95 48 00 01 00 08 11 12   .......$.H......
0030  58 64 5a 40 5e 08 c8 ff bf f9 f6 5d 0f de 00 03   XdZ ^      ]    
0040  00 04 00 00 00 00                                 ......

No.     Time        Source                Destination           Protocol Info
    117 283.675190  75.101.138.128        192.168.1.105         STUN     Message: Binding Response

Frame 117 (130 bytes on wire, 130 bytes captured)
    Arrival Time: Oct 24, 2010 20:17:09.354106000
    [Time delta from previous captured frame: 0.011754000 seconds]
    [Time delta from previous displayed frame: 0.011754000 seconds]
    [Time since reference or first frame: 283.675190000 seconds]
    Frame Number: 117
    Frame Length: 130 bytes
    Capture Length: 130 bytes
    [Frame is marked: True]
    [Protocols in frame: eth:ip:udp:stun]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c), Dst: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
    Destination: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        Address: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        Address: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 75.101.138.128 (75.101.138.128), Dst: 192.168.1.105 (192.168.1.105)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x80 (DSCP 0x20: Class Selector 4; ECN: 0x00)
        1000 00.. = Differentiated Services Codepoint: Class Selector 4 (0x20)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 116
    Identification: 0x5bdd (23517)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 52
    Protocol: UDP (0x11)
    Header checksum: 0x5225 [correct]
        [Good: True]
        [Bad : False]
    Source: 75.101.138.128 (75.101.138.128)
    Destination: 192.168.1.105 (192.168.1.105)
User Datagram Protocol, Src Port: stun (3478), Dst Port: 5068 (5068)
    Source port: stun (3478)
    Destination port: 5068 (5068)
    Length: 96
    Checksum: 0xa255 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Simple Traversal of UDP Through NAT
    [Request In: 116]
    [Time: 0.011754000 seconds]
    Message Type: Binding Response (0x0101)
    Message Length: 0x0044
    Message Transaction ID: 111258645A405E08C8FFBFF9F65D0FDE
    Attributes
        Attribute: MAPPED-ADDRESS
            Attribute Type: MAPPED-ADDRESS (0x0001)
            Attribute Length: 8
            Protocol Family: IPv4 (0x0001)
            Port: 5068
            IP: 72.209.xxx.xxx (72.209.xxx.xxx)
        Attribute: SOURCE-ADDRESS
            Attribute Type: SOURCE-ADDRESS (0x0004)
            Attribute Length: 8
            Protocol Family: IPv4 (0x0001)
            Port: 3478
            IP: 10.252.131.113 (10.252.131.113)
        Attribute: CHANGED-ADDRESS
            Attribute Type: CHANGED-ADDRESS (0x0005)
            Attribute Length: 8
            Protocol Family: IPv4 (0x0001)
            Port: 3479
            IP: 75.101.138.128 (75.101.138.128)
        Attribute: XOR_MAPPED_ADDRESS
            Attribute Type: XOR_MAPPED_ADDRESS (0x8020)
            Attribute Length: 8
            Protocol Family: IPv4 (0x0001)
            Port (XOR-d): 734
            [Port: 5068]
            IP (XOR-d): 89.195.156.183 (89.195.156.183)
            [IP: 72.209.xxx.xxx (72.209.xxx.xxx)]
        Attribute: SERVER
            Attribute Type: SERVER (0x8022)
            Attribute Length: 16
            Server version: Vovida.org 0.96

0000  00 17 c4 10 a4 48 00 1d 7e 2f bd 0c 08 00 45 80   .....H..~/....E.
0010  00 74 5b dd 40 00 34 11 52 25 4b 65 8a 80 c0 a8    t[   4 R%Ke    
0020  01 69 0d 96 13 cc 00 60 a2 55 01 01 00 44 11 12   .i.....`.U...D..
0030  58 64 5a 40 5e 08 c8 ff bf f9 f6 5d 0f de 00 01   XdZ ^      ]    
0040  00 08 00 01 13 cc 48 d1 xx xx 00 04 00 08 00 01   ......H.........
0050  0d 96 0a fc 83 71 00 05 00 08 00 01 0d 97 4b 65   .....q........Ke
0060  8a 80 80 20 00 08 00 01 02 de 59 c3 xx xx 80 22   ... ......Y...."
0070  00 10 56 6f 76 69 64 61 2e 6f 72 67 20 30 2e 39   ..Vovida.org 0.9
0080  36 00                                             6.

No.     Time        Source                Destination           Protocol Info
    118 283.697992  192.168.1.105         192.168.10.1          DNS      Standard query SRV _sip._udp.ekiga.net

Frame 118 (79 bytes on wire, 79 bytes captured)
    Arrival Time: Oct 24, 2010 20:17:09.376908000
    [Time delta from previous captured frame: 0.022802000 seconds]
    [Time delta from previous displayed frame: 0.022802000 seconds]
    [Time since reference or first frame: 283.697992000 seconds]
    Frame Number: 118
    Frame Length: 79 bytes
    Capture Length: 79 bytes
    [Frame is marked: True]
    [Protocols in frame: eth:ip:udp:dns]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: QuantaMi_10:a4:48 (00:17:c4:10:a4:48), Dst: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
    Destination: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        Address: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        Address: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.105 (192.168.1.105), Dst: 192.168.10.1 (192.168.10.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 65
    Identification: 0xdd75 (56693)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xd07b [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.1.105 (192.168.1.105)
    Destination: 192.168.10.1 (192.168.10.1)
User Datagram Protocol, Src Port: 57902 (57902), Dst Port: domain (53)
    Source port: 57902 (57902)
    Destination port: domain (53)
    Length: 45
    Checksum: 0x263d [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Domain Name System (query)
    [Response In: 119]
    Transaction ID: 0x5a72
    Flags: 0x0100 (Standard query)
        0... .... .... .... = Response: Message is a query
        .000 0... .... .... = Opcode: Standard query (0)
        .... ..0. .... .... = Truncated: Message is not truncated
        .... ...1 .... .... = Recursion desired: Do query recursively
        .... .... .0.. .... = Z: reserved (0)
        .... .... ...0 .... = Non-authenticated data OK: Non-authenticated data is unacceptable
    Questions: 1
    Answer RRs: 0
    Authority RRs: 0
    Additional RRs: 0
    Queries
        _sip._udp.ekiga.net: type SRV, class IN
            Name: _sip._udp.ekiga.net
            Type: SRV (Service location)
            Class: IN (0x0001)

0000  00 1d 7e 2f bd 0c 00 17 c4 10 a4 48 08 00 45 00   ..~/.......H..E.
0010  00 41 dd 75 40 00 40 11 d0 7b c0 a8 01 69 c0 a8    A u  @..{...i..
0020  0a 01 e2 2e 00 35 00 2d 26 3d 5a 72 01 00 00 01   .....5.-&=Zr....
0030  00 00 00 00 00 00 04 5f 73 69 70 04 5f 75 64 70   ......._sip._udp
0040  05 65 6b 69 67 61 03 6e 65 74 00 00 21 00 01      .ekiga.net..!..

No.     Time        Source                Destination           Protocol Info
    119 283.701936  192.168.10.1          192.168.1.105         DNS      Standard query response, No such name

Frame 119 (128 bytes on wire, 128 bytes captured)
    Arrival Time: Oct 24, 2010 20:17:09.380852000
    [Time delta from previous captured frame: 0.003944000 seconds]
    [Time delta from previous displayed frame: 0.003944000 seconds]
    [Time since reference or first frame: 283.701936000 seconds]
    Frame Number: 119
    Frame Length: 128 bytes
    Capture Length: 128 bytes
    [Frame is marked: True]
    [Protocols in frame: eth:ip:udp:dns]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c), Dst: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
    Destination: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        Address: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        Address: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.1.105 (192.168.1.105)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 114
    Identification: 0xba18 (47640)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 63
    Protocol: UDP (0x11)
    Header checksum: 0x34a8 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.10.1 (192.168.10.1)
    Destination: 192.168.1.105 (192.168.1.105)
User Datagram Protocol, Src Port: domain (53), Dst Port: 57902 (57902)
    Source port: domain (53)
    Destination port: 57902 (57902)
    Length: 94
    Checksum: 0x3eed [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Domain Name System (response)
    [Request In: 118]
    [Time: 0.003944000 seconds]
    Transaction ID: 0x5a72
    Flags: 0x8183 (Standard query response, No such name)
        1... .... .... .... = Response: Message is a response
        .000 0... .... .... = Opcode: Standard query (0)
        .... .0.. .... .... = Authoritative: Server is not an authority for domain
        .... ..0. .... .... = Truncated: Message is not truncated
        .... ...1 .... .... = Recursion desired: Do query recursively
        .... .... 1... .... = Recursion available: Server can do recursive queries
        .... .... .0.. .... = Z: reserved (0)
        .... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server
        .... .... .... 0011 = Reply code: No such name (3)
    Questions: 1
    Answer RRs: 0
    Authority RRs: 1
    Additional RRs: 0
    Queries
        _sip._udp.ekiga.net: type SRV, class IN
            Name: _sip._udp.ekiga.net
            Type: SRV (Service location)
            Class: IN (0x0001)
    Authoritative nameservers
        ekiga.net: type SOA, class IN, mname dns.ovh.net
            Name: ekiga.net
            Type: SOA (Start of zone of authority)
            Class: IN (0x0001)
            Time to live: 3 hours
            Data length: 37
            Primary name server: dns.ovh.net
            Responsible authority's mailbox: tech.ovh.net
            Serial number: 2009102401
            Refresh interval: 1 day
            Retry interval: 1 hour
            Expiration limit: 41 days, 16 hours
            Minimum TTL: 1 day

0000  00 17 c4 10 a4 48 00 1d 7e 2f bd 0c 08 00 45 00   .....H..~/....E.
0010  00 72 ba 18 00 00 3f 11 34 a8 c0 a8 0a 01 c0 a8   .r....?.4.......
0020  01 69 00 35 e2 2e 00 5e 3e ed 5a 72 81 83 00 01   .i.5...^>.Zr....
0030  00 00 00 01 00 00 04 5f 73 69 70 04 5f 75 64 70   ......._sip._udp
0040  05 65 6b 69 67 61 03 6e 65 74 00 00 21 00 01 c0   .ekiga.net..!...
0050  16 00 06 00 01 00 00 2a 30 00 25 03 64 6e 73 03   .......*0.%.dns.
0060  6f 76 68 c0 1c 04 74 65 63 68 c0 35 77 c0 78 41   ovh...tech.5w.xA
0070  00 01 51 80 00 00 0e 10 00 36 ee 80 00 01 51 80   ..Q......6....Q.

No.     Time        Source                Destination           Protocol Info
    120 283.702347  192.168.1.105         192.168.10.1          DNS      Standard query SRV _sip._udp.ekiga.net.gathman.org

Frame 120 (91 bytes on wire, 91 bytes captured)
    Arrival Time: Oct 24, 2010 20:17:09.381263000
    [Time delta from previous captured frame: 0.000411000 seconds]
    [Time delta from previous displayed frame: 0.000411000 seconds]
    [Time since reference or first frame: 283.702347000 seconds]
    Frame Number: 120
    Frame Length: 91 bytes
    Capture Length: 91 bytes
    [Frame is marked: True]
    [Protocols in frame: eth:ip:udp:dns]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: QuantaMi_10:a4:48 (00:17:c4:10:a4:48), Dst: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
    Destination: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        Address: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        Address: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.105 (192.168.1.105), Dst: 192.168.10.1 (192.168.10.1)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 77
    Identification: 0xdd76 (56694)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0xd06e [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.1.105 (192.168.1.105)
    Destination: 192.168.10.1 (192.168.10.1)
User Datagram Protocol, Src Port: 59748 (59748), Dst Port: domain (53)
    Source port: 59748 (59748)
    Destination port: domain (53)
    Length: 57
    Checksum: 0x7f51 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Domain Name System (query)
    [Response In: 121]
    Transaction ID: 0x5182
    Flags: 0x0100 (Standard query)
        0... .... .... .... = Response: Message is a query
        .000 0... .... .... = Opcode: Standard query (0)
        .... ..0. .... .... = Truncated: Message is not truncated
        .... ...1 .... .... = Recursion desired: Do query recursively
        .... .... .0.. .... = Z: reserved (0)
        .... .... ...0 .... = Non-authenticated data OK: Non-authenticated data is unacceptable
    Questions: 1
    Answer RRs: 0
    Authority RRs: 0
    Additional RRs: 0
    Queries
        _sip._udp.ekiga.net.gathman.org: type SRV, class IN
            Name: _sip._udp.ekiga.net.gathman.org
            Type: SRV (Service location)
            Class: IN (0x0001)

0000  00 1d 7e 2f bd 0c 00 17 c4 10 a4 48 08 00 45 00   ..~/.......H..E.
0010  00 4d dd 76 40 00 40 11 d0 6e c0 a8 01 69 c0 a8    M v  @..n...i..
0020  0a 01 e9 64 00 35 00 39 7f 51 51 82 01 00 00 01   ...d.5.9.QQ.....
0030  00 00 00 00 00 00 04 5f 73 69 70 04 5f 75 64 70   ......._sip._udp
0040  05 65 6b 69 67 61 03 6e 65 74 07 67 61 74 68 6d   .ekiga.net.gathm
0050  61 6e 03 6f 72 67 00 00 21 00 01                  an.org..!..

No.     Time        Source                Destination           Protocol Info
    121 283.704682  192.168.10.1          192.168.1.105         DNS      Standard query response

Frame 121 (149 bytes on wire, 149 bytes captured)
    Arrival Time: Oct 24, 2010 20:17:09.383598000
    [Time delta from previous captured frame: 0.002335000 seconds]
    [Time delta from previous displayed frame: 0.002335000 seconds]
    [Time since reference or first frame: 283.704682000 seconds]
    Frame Number: 121
    Frame Length: 149 bytes
    Capture Length: 149 bytes
    [Frame is marked: True]
    [Protocols in frame: eth:ip:udp:dns]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c), Dst: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
    Destination: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        Address: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        Address: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.10.1 (192.168.10.1), Dst: 192.168.1.105 (192.168.1.105)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 135
    Identification: 0xba19 (47641)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 63
    Protocol: UDP (0x11)
    Header checksum: 0x3492 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.10.1 (192.168.10.1)
    Destination: 192.168.1.105 (192.168.1.105)
User Datagram Protocol, Src Port: domain (53), Dst Port: 59748 (59748)
    Source port: domain (53)
    Destination port: 59748 (59748)
    Length: 115
    Checksum: 0xeffb [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Domain Name System (response)
    [Request In: 120]
    [Time: 0.002335000 seconds]
    Transaction ID: 0x5182
    Flags: 0x8180 (Standard query response, No error)
        1... .... .... .... = Response: Message is a response
        .000 0... .... .... = Opcode: Standard query (0)
        .... .0.. .... .... = Authoritative: Server is not an authority for domain
        .... ..0. .... .... = Truncated: Message is not truncated
        .... ...1 .... .... = Recursion desired: Do query recursively
        .... .... 1... .... = Recursion available: Server can do recursive queries
        .... .... .0.. .... = Z: reserved (0)
        .... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server
        .... .... .... 0000 = Reply code: No error (0)
    Questions: 1
    Answer RRs: 0
    Authority RRs: 1
    Additional RRs: 0
    Queries
        _sip._udp.ekiga.net.gathman.org: type SRV, class IN
            Name: _sip._udp.ekiga.net.gathman.org
            Type: SRV (Service location)
            Class: IN (0x0001)
    Authoritative nameservers
        gathman.org: type SOA, class IN, mname ns1.bmsi.com
            Name: gathman.org
            Type: SOA (Start of zone of authority)
            Class: IN (0x0001)
            Time to live: 3 hours
            Data length: 46
            Primary name server: ns1.bmsi.com
            Responsible authority's mailbox: hostadmin.bmsi.com
            Serial number: 2007052605
            Refresh interval: 1 hour
            Retry interval: 15 minutes
            Expiration limit: 14 days
            Minimum TTL: 12 hours

0000  00 17 c4 10 a4 48 00 1d 7e 2f bd 0c 08 00 45 00   .....H..~/....E.
0010  00 87 ba 19 00 00 3f 11 34 92 c0 a8 0a 01 c0 a8   ......?.4.......
0020  01 69 00 35 e9 64 00 73 ef fb 51 82 81 80 00 01   .i.5.d.s..Q.....
0030  00 00 00 01 00 00 04 5f 73 69 70 04 5f 75 64 70   ......._sip._udp
0040  05 65 6b 69 67 61 03 6e 65 74 07 67 61 74 68 6d   .ekiga.net.gathm
0050  61 6e 03 6f 72 67 00 00 21 00 01 c0 20 00 06 00   an.org..!... ...
0060  01 00 00 2a 30 00 2e 03 6e 73 31 04 62 6d 73 69   ...*0...ns1.bmsi
0070  03 63 6f 6d 00 09 68 6f 73 74 61 64 6d 69 6e c0   .com..hostadmin.
0080  41 77 a1 31 3d 00 00 0e 10 00 00 03 84 00 12 75   Aw.1=..........u
0090  00 00 00 a8 c0                                    .....

No.     Time        Source                Destination           Protocol Info
    122 283.710300  192.168.1.105         86.64.162.35          SIP      Request: REGISTER sip:ekiga.net

Frame 122 (605 bytes on wire, 605 bytes captured)
    Arrival Time: Oct 24, 2010 20:17:09.389216000
    [Time delta from previous captured frame: 0.005618000 seconds]
    [Time delta from previous displayed frame: 0.005618000 seconds]
    [Time since reference or first frame: 283.710300000 seconds]
    Frame Number: 122
    Frame Length: 605 bytes
    Capture Length: 605 bytes
    [Frame is marked: True]
    [Protocols in frame: eth:ip:udp:sip]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: QuantaMi_10:a4:48 (00:17:c4:10:a4:48), Dst: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
    Destination: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        Address: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        Address: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.1.105 (192.168.1.105), Dst: 86.64.162.35 (86.64.162.35)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 591
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: UDP (0x11)
    Header checksum: 0x7e29 [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.1.105 (192.168.1.105)
    Destination: 86.64.162.35 (86.64.162.35)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
    Source port: sip (5060)
    Destination port: sip (5060)
    Length: 571
    Checksum: 0xae45 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Session Initiation Protocol
    Request-Line: REGISTER sip:ekiga.net SIP/2.0
        Method: REGISTER
        Request-URI: sip:ekiga.net
            Request-URI Host Part: ekiga.net
        [Resent Packet: False]
    Message Header
        CSeq: 8 REGISTER
            Sequence Number: 8
            Method: REGISTER
        Via: SIP/2.0/UDP 72.209.xxx.xxx:5060;branch=z9hG4bKf83e1be0-3ade-df11-9109-0017c410a448;rport
            Transport: UDP
            Sent-by Address: 72.209.xxx.xxx
            Sent-by port: 5060
            Branch: z9hG4bKf83e1be0-3ade-df11-9109-0017c410a448
            RPort: rport
        User-Agent: Ekiga/3.2.7
        From: <sip:SDGathman ekiga net>;tag=2ebd02e0-3ade-df11-9109-0017c410a448
            SIP from address: sip:SDGathman ekiga net
                SIP from address User Part: SDGathman
                SIP from address Host Part: ekiga.net
            SIP tag: 2ebd02e0-3ade-df11-9109-0017c410a448
        Call-ID: a06902e0-3ade-df11-9109-0017c410a448 xo-10-a4-48 localdomain
        To: <sip:SDGathman ekiga net>
            SIP to address: sip:SDGathman ekiga net
                SIP to address User Part: SDGathman
                SIP to address Host Part: ekiga.net
        Contact: <sip:SDGathman 72 209 xxx xxx>;q=1, <sip:SDGathman 192 168 1 105>;q=0.500
            Contact Binding: <sip:SDGathman 72 209 xxx xxx>;q=1
                URI: <sip:SDGathman 72 209 xxx xxx>
                    SIP contact address: sip:SDGathman 72 209 xxx xxx
            Contact Binding: <sip:SDGathman 192 168 1 105>;q=0.500
                URI: <sip:SDGathman 192 168 1 105>
                    SIP contact address: sip:SDGathman 192 168 1 105
        Allow: INVITE,ACK,OPTIONS,BYE,CANCEL,SUBSCRIBE,NOTIFY,REFER,MESSAGE,INFO,PING
        Expires: 3600
        Content-Length: 0
        Max-Forwards: 70

0000  00 1d 7e 2f bd 0c 00 17 c4 10 a4 48 08 00 45 00   ..~/.......H..E.
0010  02 4f 00 00 40 00 40 11 7e 29 c0 a8 01 69 56 40    O    @.~)...iV@
0020  a2 23 13 c4 13 c4 02 3b ae 45 52 45 47 49 53 54   .#.....;.EREGIST
0030  45 52 20 73 69 70 3a 65 6b 69 67 61 2e 6e 65 74   ER sip:ekiga.net
0040  20 53 49 50 2f 32 2e 30 0d 0a 43 53 65 71 3a 20    SIP/2.0..CSeq: 
0050  38 20 52 45 47 49 53 54 45 52 0d 0a 56 69 61 3a   8 REGISTER..Via:
0060  20 53 49 50 2f 32 2e 30 2f 55 44 50 20 37 32 2e    SIP/2.0/UDP 72.
0070  32 30 39 2e xx xx xx 2e xx xx xx 3a 35 30 36 30   209.xxx.xxx:5060
0080  3b 62 72 61 6e 63 68 3d 7a 39 68 47 34 62 4b 66   ;branch=z9hG4bKf
0090  38 33 65 31 62 65 30 2d 33 61 64 65 2d 64 66 31   83e1be0-3ade-df1
00a0  31 2d 39 31 30 39 2d 30 30 31 37 63 34 31 30 61   1-9109-0017c410a
00b0  34 34 38 3b 72 70 6f 72 74 0d 0a 55 73 65 72 2d   448;rport..User-
00c0  41 67 65 6e 74 3a 20 45 6b 69 67 61 2f 33 2e 32   Agent: Ekiga/3.2
00d0  2e 37 0d 0a 46 72 6f 6d 3a 20 3c 73 69 70 3a 53   .7..From: <sip:S
00e0  44 47 61 74 68 6d 61 6e 40 65 6b 69 67 61 2e 6e   DGathman ekiga n
00f0  65 74 3e 3b 74 61 67 3d 32 65 62 64 30 32 65 30   et>;tag=2ebd02e0
0100  2d 33 61 64 65 2d 64 66 31 31 2d 39 31 30 39 2d   -3ade-df11-9109-
0110  30 30 31 37 63 34 31 30 61 34 34 38 0d 0a 43 61   0017c410a448..Ca
0120  6c 6c 2d 49 44 3a 20 61 30 36 39 30 32 65 30 2d   ll-ID: a06902e0-
0130  33 61 64 65 2d 64 66 31 31 2d 39 31 30 39 2d 30   3ade-df11-9109-0
0140  30 31 37 63 34 31 30 61 34 34 38 40 78 6f 2d 31   017c410a448 xo-1
0150  30 2d 61 34 2d 34 38 2e 6c 6f 63 61 6c 64 6f 6d   0-a4-48.localdom
0160  61 69 6e 0d 0a 54 6f 3a 20 3c 73 69 70 3a 53 44   ain..To: <sip:SD
0170  47 61 74 68 6d 61 6e 40 65 6b 69 67 61 2e 6e 65   Gathman ekiga ne
0180  74 3e 0d 0a 43 6f 6e 74 61 63 74 3a 20 3c 73 69   t>..Contact: <si
0190  70 3a 53 44 47 61 74 68 6d 61 6e 40 37 32 2e 32   p:SDGathman 72 2
01a0  30 39 2e xx xx xx 2e xx xx xx 3e 3b 71 3d 31 2c   09.xxx.xxx>;q=1,
01b0  20 3c 73 69 70 3a 53 44 47 61 74 68 6d 61 6e 40    <sip:SDGathman@
01c0  31 39 32 2e 31 36 38 2e 31 2e 31 30 35 3e 3b 71   192.168.1.105>;q
01d0  3d 30 2e 35 30 30 0d 0a 41 6c 6c 6f 77 3a 20 49   =0.500..Allow: I
01e0  4e 56 49 54 45 2c 41 43 4b 2c 4f 50 54 49 4f 4e   NVITE,ACK,OPTION
01f0  53 2c 42 59 45 2c 43 41 4e 43 45 4c 2c 53 55 42   S,BYE,CANCEL,SUB
0200  53 43 52 49 42 45 2c 4e 4f 54 49 46 59 2c 52 45   SCRIBE,NOTIFY,RE
0210  46 45 52 2c 4d 45 53 53 41 47 45 2c 49 4e 46 4f   FER,MESSAGE,INFO
0220  2c 50 49 4e 47 0d 0a 45 78 70 69 72 65 73 3a 20   ,PING..Expires: 
0230  33 36 30 30 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65   3600..Content-Le
0240  6e 67 74 68 3a 20 30 0d 0a 4d 61 78 2d 46 6f 72   ngth: 0..Max-For
0250  77 61 72 64 73 3a 20 37 30 0d 0a 0d 0a            wards: 70....

No.     Time        Source                Destination           Protocol Info
    123 283.805316  86.64.162.35          192.168.1.105         SIP      Status: 606 Not Acceptable    (0 bindings)

Frame 123 (494 bytes on wire, 494 bytes captured)
    Arrival Time: Oct 24, 2010 20:17:09.484232000
    [Time delta from previous captured frame: 0.095016000 seconds]
    [Time delta from previous displayed frame: 0.095016000 seconds]
    [Time since reference or first frame: 283.805316000 seconds]
    Frame Number: 123
    Frame Length: 494 bytes
    Capture Length: 494 bytes
    [Frame is marked: True]
    [Protocols in frame: eth:ip:udp:sip]
    [Coloring Rule Name: UDP]
    [Coloring Rule String: udp]
Ethernet II, Src: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c), Dst: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
    Destination: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        Address: QuantaMi_10:a4:48 (00:17:c4:10:a4:48)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Source: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        Address: Cisco-Li_2f:bd:0c (00:1d:7e:2f:bd:0c)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 86.64.162.35 (86.64.162.35), Dst: 192.168.1.105 (192.168.1.105)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x80 (DSCP 0x20: Class Selector 4; ECN: 0x00)
        1000 00.. = Differentiated Services Codepoint: Class Selector 4 (0x20)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 480
    Identification: 0x0000 (0)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 54
    Protocol: UDP (0x11)
    Header checksum: 0x8818 [correct]
        [Good: True]
        [Bad : False]
    Source: 86.64.162.35 (86.64.162.35)
    Destination: 192.168.1.105 (192.168.1.105)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
    Source port: sip (5060)
    Destination port: sip (5060)
    Length: 460
    Checksum: 0x45c1 [validation disabled]
        [Good Checksum: False]
        [Bad Checksum: False]
Session Initiation Protocol
    Status-Line: SIP/2.0 606 Not Acceptable
        Status-Code: 606
        [Resent Packet: False]
        [Request Frame: 122]
        [Response Time (ms): 95]
    Message Header
        CSeq: 8 REGISTER
            Sequence Number: 8
            Method: REGISTER
        Via: SIP/2.0/UDP 192.168.10.6:5060;branch=z9hG4bKf83e1be0-3ade-df11-9109-0017c410a448;rport=5060;received=72.209.xxx.xxx
            Transport: UDP
            Sent-by Address: 192.168.10.6
            Sent-by port: 5060
            Branch: z9hG4bKf83e1be0-3ade-df11-9109-0017c410a448
            RPort: 5060
            Received: 72.209.xxx.xxx
        From: <sip:SDGathman ekiga net>;tag=2ebd02e0-3ade-df11-9109-0017c410a448
            SIP from address: sip:SDGathman ekiga net
                SIP from address User Part: SDGathman
                SIP from address Host Part: ekiga.net
            SIP tag: 2ebd02e0-3ade-df11-9109-0017c410a448
        Call-ID: a06902e0-3ade-df11-9109-0017c410a448 xo-10-a4-48 localdomain
        To: <sip:SDGathman ekiga net>;tag=c64e1f832a41ec1c1f4e5673ac5b80f6.ead5
            SIP to address: sip:SDGathman ekiga net
                SIP to address User Part: SDGathman
                SIP to address Host Part: ekiga.net
            SIP tag: c64e1f832a41ec1c1f4e5673ac5b80f6.ead5
        Server: Kamailio (1.5.3-notls (i386/linux))
        Content-Length: 0

0000  00 17 c4 10 a4 48 00 1d 7e 2f bd 0c 08 00 45 80   .....H..~/....E.
0010  01 e0 00 00 40 00 36 11 88 18 56 40 a2 23 c0 a8         6   V@.#..
0020  01 69 13 c4 13 c4 01 cc 45 c1 53 49 50 2f 32 2e   .i......E.SIP/2.
0030  30 20 36 30 36 20 4e 6f 74 20 41 63 63 65 70 74   0 606 Not Accept
0040  61 62 6c 65 0d 0a 43 53 65 71 3a 20 38 20 52 45   able..CSeq: 8 RE
0050  47 49 53 54 45 52 0d 0a 56 69 61 3a 20 53 49 50   GISTER..Via: SIP
0060  2f 32 2e 30 2f 55 44 50 20 31 39 32 2e 31 36 38   /2.0/UDP 192.168
0070  2e 31 30 2e 36 3a 35 30 36 30 3b 62 72 61 6e 63   .10.6:5060;branc
0080  68 3d 7a 39 68 47 34 62 4b 66 38 33 65 31 62 65   h=z9hG4bKf83e1be
0090  30 2d 33 61 64 65 2d 64 66 31 31 2d 39 31 30 39   0-3ade-df11-9109
00a0  2d 30 30 31 37 63 34 31 30 61 34 34 38 3b 72 70   -0017c410a448;rp
00b0  6f 72 74 3d 35 30 36 30 3b 72 65 63 65 69 76 65   ort=5060;receive
00c0  64 3d 37 32 2e 32 30 39 2e xx xx xx 2e xx xx xx   d=72.209.xxx.xxx
00d0  0d 0a 46 72 6f 6d 3a 20 3c 73 69 70 3a 53 44 47   ..From: <sip:SDG
00e0  61 74 68 6d 61 6e 40 65 6b 69 67 61 2e 6e 65 74   athman ekiga net
00f0  3e 3b 74 61 67 3d 32 65 62 64 30 32 65 30 2d 33   >;tag=2ebd02e0-3
0100  61 64 65 2d 64 66 31 31 2d 39 31 30 39 2d 30 30   ade-df11-9109-00
0110  31 37 63 34 31 30 61 34 34 38 0d 0a 43 61 6c 6c   17c410a448..Call
0120  2d 49 44 3a 20 61 30 36 39 30 32 65 30 2d 33 61   -ID: a06902e0-3a
0130  64 65 2d 64 66 31 31 2d 39 31 30 39 2d 30 30 31   de-df11-9109-001
0140  37 63 34 31 30 61 34 34 38 40 78 6f 2d 31 30 2d   7c410a448 xo-10-
0150  61 34 2d 34 38 2e 6c 6f 63 61 6c 64 6f 6d 61 69   a4-48.localdomai
0160  6e 0d 0a 54 6f 3a 20 3c 73 69 70 3a 53 44 47 61   n..To: <sip:SDGa
0170  74 68 6d 61 6e 40 65 6b 69 67 61 2e 6e 65 74 3e   thman ekiga net>
0180  3b 74 61 67 3d 63 36 34 65 31 66 38 33 32 61 34   ;tag=c64e1f832a4
0190  31 65 63 31 63 31 66 34 65 35 36 37 33 61 63 35   1ec1c1f4e5673ac5
01a0  62 38 30 66 36 2e 65 61 64 35 0d 0a 53 65 72 76   b80f6.ead5..Serv
01b0  65 72 3a 20 4b 61 6d 61 69 6c 69 6f 20 28 31 2e   er: Kamailio (1.
01c0  35 2e 33 2d 6e 6f 74 6c 73 20 28 69 33 38 36 2f   5.3-notls (i386/
01d0  6c 69 6e 75 78 29 29 0d 0a 43 6f 6e 74 65 6e 74   linux))..Content
01e0  2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a         -Length: 0....


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]