[Spce-user] Bad Auth on outbound via interconnect

Rob Watkin robwatkin at gmail.com
Fri Oct 26 11:08:09 EDT 2012


Hi Andreas,

Sorry but I just realised that I didn't post to the list so I'll do it
again.

This is the trace of the outbound. Inbound is working because I told it to
unauth_inbound_calls but I don't think thats a good long term solution.

Thanks
Rob

interface: any

filter: (ip or ip6) and ( port 5060 )

match: (^|CSeq:\s?\d*
)(INVITE|ACK|CANCEL|BYE|MESSAGE|REFER|PRACK|INFO|UPDATE)

#####

U 2012/10/26 09:33:16.827728 80.40.140.8:1024 <http://84.45.146.8:1024/> ->
90.100.150.37:5060 <http://95.138.181.37:5060/>

INVITE sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>SIP/2.0'

Via: SIP/2.0/UDP 10.1.1.198:5062;branch=z9hG4bK1316621861'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>>'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 1 INVITE'

Contact: <sip:01978807061 at 10.1.1.198:5062>'

Content-Type: application/sdp'

Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER,
SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE'

Max-Forwards: 70'

User-Agent: Yealink SIP-T26P 6.61.0.83'

Supported: replaces'

Allow-Events: talk,hold,conference,refer,check-sync'

Content-Length: 302'

'

v=0'

o=- 20010 20010 IN IP4 10.1.1.198'

s=SDP data'

c=IN IP4 10.1.1.198'

t=0 0'

m=audio 11800 RTP/AVP 0 8 18 9 101'

a=rtpmap:0 PCMU/8000'

a=rtpmap:8 PCMA/8000'

a=rtpmap:18 G729/8000'

a=fmtp:18 annexb=no'

a=rtpmap:9 G722/8000'

a=fmtp:101 0-15'

a=rtpmap:101 telephone-event/8000'

a=ptime:20'

a=sendrecv'


#

U 2012/10/26 09:33:16.828647 127.0.0.1:5060 -> 127.0.0.1:5062

INVITE sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>SIP/2.0'

Record-Route:
<sip:127.0.0.1;r2=on;lr=on;ftag=1178162900;nat=yes;ngcplb=yes>'

Record-Route:
<sip:90.100.150.37;r2=on;lr=on;ftag=1178162900;nat=yes;ngcplb=yes>'

Via: SIP/2.0/UDP
127.0.0.1;branch=z9hG4bKc417.0c1d0d91ea6cf045f898cbca261f2218.0'

Via: SIP/2.0/UDP 10.1.1.198:5062
;rport=1024;received=80.40.140.8;branch=z9hG4bK1316621861'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>>'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 1 INVITE'

Contact: <sip:01978807061 at 10.1.1.198:5062;alias=80.40.140.8~1024~1>'

Content-Type: application/sdp'

Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER,
SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE'

Max-Forwards: 69'

User-Agent: Yealink SIP-T26P 6.61.0.83'

Supported: replaces'

Allow-Events: talk,hold,conference,refer,check-sync'

Content-Length: 348'

P-NGCP-Src-Ip: 80.40.140.8'

P-NGCP-Src-Port: 1024'

P-NGCP-Src-Proto: udp'

P-NGCP-Src-Af: 4'

P-NGCP-Src-Nat: 1'

'

v=0'

o=- 20010 20010 IN IP4 10.1.1.198'

s=SDP data'

c=IN IP4 80.40.140.8'

t=0 0'

m=audio 11800 RTP/AVP 0 8 18 9 101'

a=rtpmap:0 PCMU/8000'

a=rtpmap:8 PCMA/8000'

a=rtpmap:18 G729/8000'

a=fmtp:18 annexb=no'

a=rtpmap:9 G722/8000'

a=fmtp:101 0-15'

a=rtpmap:101 telephone-event/8000'

a=ptime:20'

a=sendrecv'

a=direction:active'

a=oldmediaip:10.1.1.198'


#

U 2012/10/26 09:33:16.828801 127.0.0.1:5062 -> 127.0.0.1:5060

SIP/2.0 100 Trying'

Via: SIP/2.0/UDP
127.0.0.1;branch=z9hG4bKc417.0c1d0d91ea6cf045f898cbca261f2218.0;rport=5060'

Via: SIP/2.0/UDP 10.1.1.198:5062
;rport=1024;received=80.40.140.8;branch=z9hG4bK1316621861'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>>'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 1 INVITE'

Server: Sipwise NGCP Proxy 2.X'

Content-Length: 0'

'


#

U 2012/10/26 09:33:16.829133 90.100.150.37:5060 <http://95.138.181.37:5060/>->
80.40.140.8:1024 <http://84.45.146.8:1024/>

SIP/2.0 100 Trying'

Via: SIP/2.0/UDP 10.1.1.198:5062
;rport=1024;received=80.40.140.8;branch=z9hG4bK1316621861'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>>'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 1 INVITE'

Server: Sipwise NGCP Proxy 2.X'

Content-Length: 0'

'


#

U 2012/10/26 09:33:16.831184 127.0.0.1:5062 -> 127.0.0.1:5060

SIP/2.0 407 Proxy Authentication Required'

Via: SIP/2.0/UDP
127.0.0.1;branch=z9hG4bKc417.0c1d0d91ea6cf045f898cbca261f2218.0;rport=5060'

Via: SIP/2.0/UDP 10.1.1.198:5062
;rport=1024;received=80.40.140.8;branch=z9hG4bK1316621861'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>
>;tag=1d24a28a0bded6c40d31e6db8aab9ac6.762e'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 1 INVITE'

Proxy-Authenticate: Digest realm="90.100.150.37",
nonce="UIqgV1CKnyu9ssD2Aa1cV9jPvMTv2Wy3"'

Server: Sipwise NGCP Proxy 2.X'

Content-Length: 0'

'


#

U 2012/10/26 09:33:16.831357 90.100.150.37:5060 <http://95.138.181.37:5060/>->
80.40.140.8:1024 <http://84.45.146.8:1024/>

SIP/2.0 407 Proxy Authentication Required'

Via: SIP/2.0/UDP 10.1.1.198:5062
;rport=1024;received=80.40.140.8;branch=z9hG4bK1316621861'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>
>;tag=1d24a28a0bded6c40d31e6db8aab9ac6.762e'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 1 INVITE'

Proxy-Authenticate: Digest realm="90.100.150.37",
nonce="UIqgV1CKnyu9ssD2Aa1cV9jPvMTv2Wy3"'

Server: Sipwise NGCP Proxy 2.X'

Content-Length: 0'

'


#

U 2012/10/26 09:33:16.916183 80.40.140.8:1024 <http://84.45.146.8:1024/> ->
90.100.150.37:5060 <http://95.138.181.37:5060/>

ACK sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37> SIP/2.0'

Via: SIP/2.0/UDP 10.1.1.198:5062;branch=z9hG4bK1316621861'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>
>;tag=1d24a28a0bded6c40d31e6db8aab9ac6.762e'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 1 ACK'

Content-Length: 0'

'


#

U 2012/10/26 09:33:16.916923 127.0.0.1:5060 -> 127.0.0.1:5062

ACK sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37> SIP/2.0'

Max-Forwards: 10'

Record-Route:
<sip:127.0.0.1;r2=on;lr=on;ftag=1178162900;nat=yes;ngcplb=yes>'

Record-Route:
<sip:90.100.150.37;r2=on;lr=on;ftag=1178162900;nat=yes;ngcplb=yes>'

Via: SIP/2.0/UDP
127.0.0.1;branch=z9hG4bKc417.0c1d0d91ea6cf045f898cbca261f2218.0'

Via: SIP/2.0/UDP 10.1.1.198:5062
;rport=1024;received=80.40.140.8;branch=z9hG4bK1316621861'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>
>;tag=1d24a28a0bded6c40d31e6db8aab9ac6.762e'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 1 ACK'

Content-Length: 0'

P-NGCP-Src-Ip: 80.40.140.8'

P-NGCP-Src-Port: 1024'

P-NGCP-Src-Proto: udp'

P-NGCP-Src-Af: 4'

P-NGCP-Src-Nat: 1'

'


#

U 2012/10/26 09:33:17.010785 80.40.140.8:1024 <http://84.45.146.8:1024/> ->
90.100.150.37:5060 <http://95.138.181.37:5060/>

INVITE sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>SIP/2.0'

Via: SIP/2.0/UDP 10.1.1.198:5062;branch=z9hG4bK1387360016'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>>'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 2 INVITE'

Contact: <sip:01978807061 at 10.1.1.198:5062>'

Proxy-Authorization: Digest username="01978807061", realm="90.100.150.37",
nonce="UIqgV1CKnyu9ssD2Aa1cV9jPvMTv2Wy3",
uri="sip:02033708966 at 90.100.150.37<sip%3A02033708966 at 95.138.181.37>",
response="2d29fe16d70eeafb11daaa32fb21786a", algorithm=MD5'

Content-Type: application/sdp'

Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER,
SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE'

Max-Forwards: 70'

User-Agent: Yealink SIP-T26P 6.61.0.83'

Supported: replaces'

Allow-Events: talk,hold,conference,refer,check-sync'

Content-Length: 302'

'

v=0'

o=- 20010 20010 IN IP4 10.1.1.198'

s=SDP data'

c=IN IP4 10.1.1.198'

t=0 0'

m=audio 11800 RTP/AVP 0 8 18 9 101'

a=rtpmap:0 PCMU/8000'

a=rtpmap:8 PCMA/8000'

a=rtpmap:18 G729/8000'

a=fmtp:18 annexb=no'

a=rtpmap:9 G722/8000'

a=fmtp:101 0-15'

a=rtpmap:101 telephone-event/8000'

a=ptime:20'

a=sendrecv'


#

U 2012/10/26 09:33:17.015119 127.0.0.1:5060 -> 127.0.0.1:5062

INVITE sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>SIP/2.0'

Record-Route:
<sip:127.0.0.1;r2=on;lr=on;ftag=1178162900;nat=yes;ngcplb=yes>'

Record-Route:
<sip:90.100.150.37;r2=on;lr=on;ftag=1178162900;nat=yes;ngcplb=yes>'

Via: SIP/2.0/UDP
127.0.0.1;branch=z9hG4bK9417.4a7ba59f48f08d448e1488458b0527fa.0'

Via: SIP/2.0/UDP 10.1.1.198:5062
;rport=1024;received=80.40.140.8;branch=z9hG4bK1387360016'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>>'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 2 INVITE'

Contact: <sip:01978807061 at 10.1.1.198:5062;alias=80.40.140.8~1024~1>'

Proxy-Authorization: Digest username="01978807061", realm="90.100.150.37",
nonce="UIqgV1CKnyu9ssD2Aa1cV9jPvMTv2Wy3",
uri="sip:02033708966 at 90.100.150.37<sip%3A02033708966 at 95.138.181.37>",
response="2d29fe16d70eeafb11daaa32fb21786a", algorithm=MD5'

Content-Type: application/sdp'

Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER,
SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE'

Max-Forwards: 69'

User-Agent: Yealink SIP-T26P 6.61.0.83'

Supported: replaces'

Allow-Events: talk,hold,conference,refer,check-sync'

Content-Length: 348'

P-NGCP-Src-Ip: 80.40.140.8'

P-NGCP-Src-Port: 1024'

P-NGCP-Src-Proto: udp'

P-NGCP-Src-Af: 4'

P-NGCP-Src-Nat: 1'

'

v=0'

o=- 20010 20010 IN IP4 10.1.1.198'

s=SDP data'

c=IN IP4 80.40.140.8'

t=0 0'

m=audio 11800 RTP/AVP 0 8 18 9 101'

a=rtpmap:0 PCMU/8000'

a=rtpmap:8 PCMA/8000'

a=rtpmap:18 G729/8000'

a=fmtp:18 annexb=no'

a=rtpmap:9 G722/8000'

a=fmtp:101 0-15'

a=rtpmap:101 telephone-event/8000'

a=ptime:20'

a=sendrecv'

a=direction:active'

a=oldmediaip:10.1.1.198'


#

U 2012/10/26 09:33:17.015359 127.0.0.1:5062 -> 127.0.0.1:5060

SIP/2.0 100 Trying'

Via: SIP/2.0/UDP
127.0.0.1;branch=z9hG4bK9417.4a7ba59f48f08d448e1488458b0527fa.0;rport=5060'

Via: SIP/2.0/UDP 10.1.1.198:5062
;rport=1024;received=80.40.140.8;branch=z9hG4bK1387360016'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>>'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 2 INVITE'

Server: Sipwise NGCP Proxy 2.X'

Content-Length: 0'

'


#

U 2012/10/26 09:33:17.015774 90.100.150.37:5060 <http://95.138.181.37:5060/>->
80.40.140.8:1024 <http://84.45.146.8:1024/>

SIP/2.0 100 Trying'

Via: SIP/2.0/UDP 10.1.1.198:5062
;rport=1024;received=80.40.140.8;branch=z9hG4bK1387360016'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>>'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 2 INVITE'

Server: Sipwise NGCP Proxy 2.X'

Content-Length: 0'

'


#

U 2012/10/26 09:33:17.017464 127.0.0.1:5062 -> 127.0.0.1:5060

SIP/2.0 101 Connecting'

Via: SIP/2.0/UDP
127.0.0.1;branch=z9hG4bK9417.4a7ba59f48f08d448e1488458b0527fa.0;rport=5060'

Via: SIP/2.0/UDP 10.1.1.198:5062
;rport=1024;received=80.40.140.8;branch=z9hG4bK1387360016'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>>'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 2 INVITE'

P-NGCP-Authorization: 01978807061 at 90.100.150.37 <01978807061 at 95.138.181.37>'

P-NGCP-Authorized: 1'

P-Caller-UUID: a09620f4-6ffb-4f9d-840b-b015a99e8c73'

Server: Sipwise NGCP Proxy 2.X'

Content-Length: 0'

'


#

U 2012/10/26 09:33:17.025727 127.0.0.1:5080 -> 127.0.0.1:5060

INVITE sip:442033708966 at 222.111.188.200:5060;transport=udp SIP/2.0'

Via: SIP/2.0/UDP 127.0.0.1:5080;branch=z9hG4bKUV6Z~aIb;rport'

From: <sip:441978807061 at 90.100.150.37 <sip%3A441978807061 at 95.138.181.37>
>;tag=18AF9309-508A9F2D0000637F-C9A99700'

To: <sip:442033708966 at 222.111.188.200 <sip%3A442033708966 at 212.110.185.225>>'

CSeq: 10 INVITE'

Call-ID: 124282374 at 10.1.1.198_b2b-1'

Contact: <sip:127.0.0.1:5080>'

Route: <sip:127.0.0.1:5060;received='sip:222.111.188.200:5060
;transport=udp';lr>'

Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER,
SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE'

Supported: replaces'

P-Asserted-Identity:
<sip:441978807061 at 90.100.150.37<sip%3A441978807061 at 95.138.181.37>
>'

P-D-Uri: sip:127.0.0.1:5060;received='sip:222.111.188.200:5060
;transport=udp''

Content-Type: application/sdp'

Content-Length: 371'

'

v=0'

o=- 20010 20010 IN IP4 90.100.150.37'

s=SDP data'

c=IN IP4 90.100.150.37'

t=0 0'

m=audio 30420 RTP/AVP 0 8 18 9 101'

a=rtpmap:0 PCMU/8000'

a=rtpmap:8 PCMA/8000'

a=rtpmap:18 G729/8000'

a=fmtp:18 annexb=no'

a=rtpmap:9 G722/8000'

a=fmtp:101 0-15'

a=rtpmap:101 telephone-event/8000'

a=ptime:20'

a=sendrecv'

a=direction:active'

a=oldmediaip:10.1.1.198'

a=nortpproxy:yes'


#

U 2012/10/26 09:33:17.025996 90.100.150.37:5060 <http://95.138.181.37:5060/>->
222.111.188.200:5060 <http://212.110.185.225:5060/>

INVITE sip:442033708966 at 222.111.188.200:5060;transport=udp SIP/2.0'

Max-Forwards: 10'

Record-Route:
<sip:90.100.150.37;r2=on;lr=on;ftag=18AF9309-508A9F2D0000637F-C9A99700;ngcplb=yes>'

Record-Route:
<sip:127.0.0.1;r2=on;lr=on;ftag=18AF9309-508A9F2D0000637F-C9A99700;ngcplb=yes>'

Via: SIP/2.0/UDP
90.100.150.37;branch=z9hG4bKaeb7.17cfaa55d2b28c2c48d967e639d3214b.0'

Via: SIP/2.0/UDP 127.0.0.1:5080;branch=z9hG4bKUV6Z~aIb;rport=5080'

From: <sip:441978807061 at 90.100.150.37 <sip%3A441978807061 at 95.138.181.37>
>;tag=18AF9309-508A9F2D0000637F-C9A99700'

To: <sip:442033708966 at 222.111.188.200 <sip%3A442033708966 at 212.110.185.225>>'

CSeq: 10 INVITE'

Call-ID: 124282374 at 10.1.1.198_b2b-1'

Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER,
SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE'

Supported: replaces'

P-Asserted-Identity:
<sip:441978807061 at 90.100.150.37<sip%3A441978807061 at 95.138.181.37>
>'

Content-Type: application/sdp'

Content-Length: 371'

Contact: <sip:ngcp-lb at 90.100.150.37:5060<http://sip:ngcp-lb@95.138.181.37:5060/>
>'

'

v=0'

o=- 20010 20010 IN IP4 90.100.150.37'

s=SDP data'

c=IN IP4 90.100.150.37'

t=0 0'

m=audio 30420 RTP/AVP 0 8 18 9 101'

a=rtpmap:0 PCMU/8000'

a=rtpmap:8 PCMA/8000'

a=rtpmap:18 G729/8000'

a=fmtp:18 annexb=no'

a=rtpmap:9 G722/8000'

a=fmtp:101 0-15'

a=rtpmap:101 telephone-event/8000'

a=ptime:20'

a=sendrecv'

a=direction:active'

a=oldmediaip:10.1.1.198'

a=nortpproxy:yes'


#

U 2012/10/26 09:33:17.036816
222.111.188.200:5060<http://212.110.185.225:5060/>->
90.100.150.37:5060 <http://95.138.181.37:5060/>

SIP/2.0 407 Proxy Authentication Required'

Via: SIP/2.0/UDP
90.100.150.37;branch=z9hG4bKaeb7.17cfaa55d2b28c2c48d967e639d3214b.0;received=90.100.150.37'

Via: SIP/2.0/UDP 127.0.0.1:5080;branch=z9hG4bKUV6Z~aIb;rport=5080'

From: <sip:441978807061 at 90.100.150.37 <sip%3A441978807061 at 95.138.181.37>
>;tag=18AF9309-508A9F2D0000637F-C9A99700'

To: <sip:442033708966 at 222.111.188.200 <sip%3A442033708966 at 212.110.185.225>
>;tag=as677b0635'

Call-ID: 124282374 at 10.1.1.198_b2b-1'

CSeq: 10 INVITE'

Server: Thirdlane'

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO,
PUBLISH'

Supported: replaces, timer'

Proxy-Authenticate: Digest algorithm=MD5, realm="asterisk",
nonce="4252ee88"'

Content-Length: 0'

'


#

U 2012/10/26 09:33:17.037213 127.0.0.1:5060 -> 127.0.0.1:5080

SIP/2.0 407 Proxy Authentication Required'

Via: SIP/2.0/UDP 127.0.0.1:5080;branch=z9hG4bKUV6Z~aIb;rport=5080'

From: <sip:441978807061 at 90.100.150.37 <sip%3A441978807061 at 95.138.181.37>
>;tag=18AF9309-508A9F2D0000637F-C9A99700'

To: <sip:442033708966 at 222.111.188.200 <sip%3A442033708966 at 212.110.185.225>
>;tag=as677b0635'

Call-ID: 124282374 at 10.1.1.198_b2b-1'

CSeq: 10 INVITE'

Server: Thirdlane'

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO,
PUBLISH'

Supported: replaces, timer'

Proxy-Authenticate: Digest algorithm=MD5, realm="asterisk",
nonce="4252ee88"'

Content-Length: 0'

P-NGCP-Src-Ip: 222.111.188.200'

P-NGCP-Src-Port: 5060'

P-NGCP-Src-Proto: udp'

P-NGCP-Src-Af: 4'

'


#

U 2012/10/26 09:33:17.037358 127.0.0.1:5080 -> 127.0.0.1:5060

ACK sip:442033708966 at 222.111.188.200:5060;transport=udp SIP/2.0'

Via: SIP/2.0/UDP 127.0.0.1:5080;branch=z9hG4bKUV6Z~aIb;rport'

Route: <sip:127.0.0.1:5060;received='sip:222.111.188.200:5060
;transport=udp';lr>'

From: <sip:441978807061 at 90.100.150.37 <sip%3A441978807061 at 95.138.181.37>
>;tag=18AF9309-508A9F2D0000637F-C9A99700'

To: <sip:442033708966 at 222.111.188.200 <sip%3A442033708966 at 212.110.185.225>
>;tag=as677b0635'

Call-ID: 124282374 at 10.1.1.198_b2b-1'

CSeq: 10 ACK'

'


#

U 2012/10/26 09:33:17.037691 90.100.150.37:5060 <http://95.138.181.37:5060/>->
222.111.188.200:5060 <http://212.110.185.225:5060/>

ACK sip:442033708966 at 222.111.188.200:5060;transport=udp SIP/2.0'

Max-Forwards: 10'

Record-Route:
<sip:90.100.150.37;r2=on;lr=on;ftag=18AF9309-508A9F2D0000637F-C9A99700;ngcplb=yes>'

Record-Route:
<sip:127.0.0.1;r2=on;lr=on;ftag=18AF9309-508A9F2D0000637F-C9A99700;ngcplb=yes>'

Via: SIP/2.0/UDP
90.100.150.37;branch=z9hG4bKaeb7.17cfaa55d2b28c2c48d967e639d3214b.0'

Via: SIP/2.0/UDP 127.0.0.1:5080;branch=z9hG4bKUV6Z~aIb;rport=5080'

From: <sip:441978807061 at 90.100.150.37 <sip%3A441978807061 at 95.138.181.37>
>;tag=18AF9309-508A9F2D0000637F-C9A99700'

To: <sip:442033708966 at 222.111.188.200 <sip%3A442033708966 at 212.110.185.225>
>;tag=as677b0635'

Call-ID: 124282374 at 10.1.1.198_b2b-1'

CSeq: 10 ACK'

'


#

U 2012/10/26 09:33:17.037831 127.0.0.1:5080 -> 127.0.0.1:5060

INVITE sip:442033708966 at 222.111.188.200:5060;transport=udp SIP/2.0'

Via: SIP/2.0/UDP 127.0.0.1:5080;branch=z9hG4bK6YK0xas7;rport'

From: <sip:441978807061 at 90.100.150.37 <sip%3A441978807061 at 95.138.181.37>
>;tag=18AF9309-508A9F2D0000637F-C9A99700'

To: <sip:442033708966 at 222.111.188.200 <sip%3A442033708966 at 212.110.185.225>>'

CSeq: 11 INVITE'

Call-ID: 124282374 at 10.1.1.198_b2b-1'

Contact: <sip:127.0.0.1:5080>'

Route: <sip:127.0.0.1:5060;received='sip:222.111.188.200:5060
;transport=udp';lr>'

Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER,
SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE'

Supported: replaces'

P-Asserted-Identity:
<sip:441978807061 at 90.100.150.37<sip%3A441978807061 at 95.138.181.37>
>'

P-D-Uri: sip:127.0.0.1:5060;received='sip:222.111.188.200:5060
;transport=udp''

Proxy-Authorization: Digest username="", realm="asterisk",
nonce="4252ee88", uri="sip:442033708966 at 222.111.188.200:5060;transport=udp",
response="57382fcb6b827159cacb45b2d21070d3", algorithm=MD5'

Content-Type: application/sdp'

Content-Length: 371'

'

v=0'

o=- 20010 20010 IN IP4 90.100.150.37'

s=SDP data'

c=IN IP4 90.100.150.37'

t=0 0'

m=audio 30420 RTP/AVP 0 8 18 9 101'

a=rtpmap:0 PCMU/8000'

a=rtpmap:8 PCMA/8000'

a=rtpmap:18 G729/8000'

a=fmtp:18 annexb=no'

a=rtpmap:9 G722/8000'

a=fmtp:101 0-15'

a=rtpmap:101 telephone-event/8000'

a=ptime:20'

a=sendrecv'

a=direction:active'

a=oldmediaip:10.1.1.198'

a=nortpproxy:yes'


#

U 2012/10/26 09:33:17.038108 90.100.150.37:5060 <http://95.138.181.37:5060/>->
222.111.188.200:5060 <http://212.110.185.225:5060/>

INVITE sip:442033708966 at 222.111.188.200:5060;transport=udp SIP/2.0'

Max-Forwards: 10'

Record-Route:
<sip:90.100.150.37;r2=on;lr=on;ftag=18AF9309-508A9F2D0000637F-C9A99700;ngcplb=yes>'

Record-Route:
<sip:127.0.0.1;r2=on;lr=on;ftag=18AF9309-508A9F2D0000637F-C9A99700;ngcplb=yes>'

Via: SIP/2.0/UDP
90.100.150.37;branch=z9hG4bKbeb7.99d4b2215a7ef2a7a250f68d249968d0.0'

Via: SIP/2.0/UDP 127.0.0.1:5080;branch=z9hG4bK6YK0xas7;rport=5080'

From: <sip:441978807061 at 90.100.150.37 <sip%3A441978807061 at 95.138.181.37>
>;tag=18AF9309-508A9F2D0000637F-C9A99700'

To: <sip:442033708966 at 222.111.188.200 <sip%3A442033708966 at 212.110.185.225>>'

CSeq: 11 INVITE'

Call-ID: 124282374 at 10.1.1.198_b2b-1'

Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER,
SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE'

Supported: replaces'

P-Asserted-Identity:
<sip:441978807061 at 90.100.150.37<sip%3A441978807061 at 95.138.181.37>
>'

Proxy-Authorization: Digest username="", realm="asterisk",
nonce="4252ee88", uri="sip:442033708966 at 222.111.188.200:5060;transport=udp",
response="57382fcb6b827159cacb45b2d21070d3", algorithm=MD5'

Content-Type: application/sdp'

Content-Length: 371'

Contact: <sip:ngcp-lb at 90.100.150.37:5060<http://sip:ngcp-lb@95.138.181.37:5060/>
>'

'

v=0'

o=- 20010 20010 IN IP4 90.100.150.37'

s=SDP data'

c=IN IP4 90.100.150.37'

t=0 0'

m=audio 30420 RTP/AVP 0 8 18 9 101'

a=rtpmap:0 PCMU/8000'

a=rtpmap:8 PCMA/8000'

a=rtpmap:18 G729/8000'

a=fmtp:18 annexb=no'

a=rtpmap:9 G722/8000'

a=fmtp:101 0-15'

a=rtpmap:101 telephone-event/8000'

a=ptime:20'

a=sendrecv'

a=direction:active'

a=oldmediaip:10.1.1.198'

a=nortpproxy:yes'


#

U 2012/10/26 09:33:17.047575
222.111.188.200:5060<http://212.110.185.225:5060/>->
90.100.150.37:5060 <http://95.138.181.37:5060/>

SIP/2.0 403 Forbidden (Bad auth)'

Via: SIP/2.0/UDP
90.100.150.37;branch=z9hG4bKbeb7.99d4b2215a7ef2a7a250f68d249968d0.0;received=90.100.150.37'

Via: SIP/2.0/UDP 127.0.0.1:5080;branch=z9hG4bK6YK0xas7;rport=5080'

From: <sip:441978807061 at 90.100.150.37 <sip%3A441978807061 at 95.138.181.37>
>;tag=18AF9309-508A9F2D0000637F-C9A99700'

To: <sip:442033708966 at 222.111.188.200 <sip%3A442033708966 at 212.110.185.225>
>;tag=as677b0635'

Call-ID: 124282374 at 10.1.1.198_b2b-1'

CSeq: 11 INVITE'

Server: Thirdlane'

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO,
PUBLISH'

Supported: replaces, timer'

Content-Length: 0'

'


#

U 2012/10/26 09:33:17.047720 127.0.0.1:5060 -> 127.0.0.1:5080

SIP/2.0 403 Forbidden (Bad auth)'

Via: SIP/2.0/UDP 127.0.0.1:5080;branch=z9hG4bK6YK0xas7;rport=5080'

From: <sip:441978807061 at 90.100.150.37 <sip%3A441978807061 at 95.138.181.37>
>;tag=18AF9309-508A9F2D0000637F-C9A99700'

To: <sip:442033708966 at 222.111.188.200 <sip%3A442033708966 at 212.110.185.225>
>;tag=as677b0635'

Call-ID: 124282374 at 10.1.1.198_b2b-1'

CSeq: 11 INVITE'

Server: Thirdlane'

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO,
PUBLISH'

Supported: replaces, timer'

Content-Length: 0'

P-NGCP-Src-Ip: 222.111.188.200'

P-NGCP-Src-Port: 5060'

P-NGCP-Src-Proto: udp'

P-NGCP-Src-Af: 4'

'


#

U 2012/10/26 09:33:17.047787 127.0.0.1:5080 -> 127.0.0.1:5060

ACK sip:442033708966 at 222.111.188.200:5060;transport=udp SIP/2.0'

Via: SIP/2.0/UDP 127.0.0.1:5080;branch=z9hG4bK6YK0xas7;rport'

Route: <sip:127.0.0.1:5060;received='sip:222.111.188.200:5060
;transport=udp';lr>'

From: <sip:441978807061 at 90.100.150.37 <sip%3A441978807061 at 95.138.181.37>
>;tag=18AF9309-508A9F2D0000637F-C9A99700'

To: <sip:442033708966 at 222.111.188.200 <sip%3A442033708966 at 212.110.185.225>
>;tag=as677b0635'

Call-ID: 124282374 at 10.1.1.198_b2b-1'

CSeq: 11 ACK'

'


#

U 2012/10/26 09:33:17.047984 90.100.150.37:5060 <http://95.138.181.37:5060/>->
222.111.188.200:5060 <http://212.110.185.225:5060/>

ACK sip:442033708966 at 222.111.188.200:5060;transport=udp SIP/2.0'

Max-Forwards: 10'

Record-Route:
<sip:90.100.150.37;r2=on;lr=on;ftag=18AF9309-508A9F2D0000637F-C9A99700;ngcplb=yes>'

Record-Route:
<sip:127.0.0.1;r2=on;lr=on;ftag=18AF9309-508A9F2D0000637F-C9A99700;ngcplb=yes>'

Via: SIP/2.0/UDP
90.100.150.37;branch=z9hG4bKbeb7.99d4b2215a7ef2a7a250f68d249968d0.0'

Via: SIP/2.0/UDP 127.0.0.1:5080;branch=z9hG4bK6YK0xas7;rport=5080'

From: <sip:441978807061 at 90.100.150.37 <sip%3A441978807061 at 95.138.181.37>
>;tag=18AF9309-508A9F2D0000637F-C9A99700'

To: <sip:442033708966 at 222.111.188.200 <sip%3A442033708966 at 212.110.185.225>
>;tag=as677b0635'

Call-ID: 124282374 at 10.1.1.198_b2b-1'

CSeq: 11 ACK'

'


#

U 2012/10/26 09:33:17.049123 127.0.0.1:5062 -> 127.0.0.1:5060

SIP/2.0 403 Forbidden (Bad auth)'

Record-Route: <sip:127.0.0.1:5062
;lr=on;ftag=1178162900;did=511.6f51;mpd=ii;rtpprx=yes;vsf=c2hMOVZAb3Z+dm1xUGlfHwpbTlRxY1omW0x4ZXVB>'

Record-Route:
<sip:127.0.0.1;r2=on;lr=on;ftag=1178162900;nat=yes;ngcplb=yes>'

Record-Route:
<sip:90.100.150.37;r2=on;lr=on;ftag=1178162900;nat=yes;ngcplb=yes>'

Via: SIP/2.0/UDP
127.0.0.1;rport=5060;branch=z9hG4bK9417.4a7ba59f48f08d448e1488458b0527fa.0'

Via: SIP/2.0/UDP 10.1.1.198:5062
;rport=1024;received=80.40.140.8;branch=z9hG4bK1387360016'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>
>;tag=313939CC-508A9F2D000062E1-C908F700'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 2 INVITE'

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO,
PUBLISH'

Supported: replaces, timer'

Content-Length: 0'

'


#

U 2012/10/26 09:33:17.049337 90.100.150.37:5060 <http://95.138.181.37:5060/>->
80.40.140.8:1024 <http://84.45.146.8:1024/>

SIP/2.0 403 Forbidden (Bad auth)'

Record-Route: <sip:127.0.0.1:5062
;lr=on;ftag=1178162900;did=511.6f51;mpd=ii;rtpprx=yes;vsf=c2hMOVZAb3Z+dm1xUGlfHwpbTlRxY1omW0x4ZXVB>'

Record-Route:
<sip:127.0.0.1;r2=on;lr=on;ftag=1178162900;nat=yes;ngcplb=yes>'

Record-Route:
<sip:90.100.150.37;r2=on;lr=on;ftag=1178162900;nat=yes;ngcplb=yes>'

Via: SIP/2.0/UDP 10.1.1.198:5062
;rport=1024;received=80.40.140.8;branch=z9hG4bK1387360016'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>
>;tag=313939CC-508A9F2D000062E1-C908F700'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 2 INVITE'

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO,
PUBLISH'

Supported: replaces, timer'

Content-Length: 0'

'


#

U 2012/10/26 09:33:17.100506 80.40.140.8:1024 <http://84.45.146.8:1024/> ->
90.100.150.37:5060 <http://95.138.181.37:5060/>

ACK sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37> SIP/2.0'

Via: SIP/2.0/UDP 10.1.1.198:5062;branch=z9hG4bK1387360016'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>
>;tag=313939CC-508A9F2D000062E1-C908F700'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 2 ACK'

Content-Length: 0'

'


#

U 2012/10/26 09:33:17.100857 127.0.0.1:5060 -> 127.0.0.1:5062

ACK sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37> SIP/2.0'

Max-Forwards: 10'

Record-Route:
<sip:127.0.0.1;r2=on;lr=on;ftag=1178162900;nat=yes;ngcplb=yes>'

Record-Route:
<sip:90.100.150.37;r2=on;lr=on;ftag=1178162900;nat=yes;ngcplb=yes>'

Via: SIP/2.0/UDP
127.0.0.1;branch=z9hG4bK9417.4a7ba59f48f08d448e1488458b0527fa.0'

Via: SIP/2.0/UDP 10.1.1.198:5062
;rport=1024;received=80.40.140.8;branch=z9hG4bK1387360016'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>
>;tag=313939CC-508A9F2D000062E1-C908F700'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 2 ACK'

Content-Length: 0'

P-NGCP-Src-Ip: 80.40.140.8'

P-NGCP-Src-Port: 1024'

P-NGCP-Src-Proto: udp'

P-NGCP-Src-Af: 4'

P-NGCP-Src-Nat: 1'

'


######exit

62 received, 0 droppedinterface: any

filter: (ip or ip6) and ( port 5060 )

match: (^|CSeq:\s?\d*
)(INVITE|ACK|CANCEL|BYE|MESSAGE|REFER|PRACK|INFO|UPDATE)

#####

U 2012/10/26 09:33:16.827728 80.40.140.8:1024 <http://84.45.146.8:1024/> ->
90.100.150.37:5060 <http://95.138.181.37:5060/>

INVITE sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>SIP/2.0'

Via: SIP/2.0/UDP 10.1.1.198:5062;branch=z9hG4bK1316621861'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>>'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 1 INVITE'

Contact: <sip:01978807061 at 10.1.1.198:5062>'

Content-Type: application/sdp'

Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER,
SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE'

Max-Forwards: 70'

User-Agent: Yealink SIP-T26P 6.61.0.83'

Supported: replaces'

Allow-Events: talk,hold,conference,refer,check-sync'

Content-Length: 302'

'

v=0'

o=- 20010 20010 IN IP4 10.1.1.198'

s=SDP data'

c=IN IP4 10.1.1.198'

t=0 0'

m=audio 11800 RTP/AVP 0 8 18 9 101'

a=rtpmap:0 PCMU/8000'

a=rtpmap:8 PCMA/8000'

a=rtpmap:18 G729/8000'

a=fmtp:18 annexb=no'

a=rtpmap:9 G722/8000'

a=fmtp:101 0-15'

a=rtpmap:101 telephone-event/8000'

a=ptime:20'

a=sendrecv'


#

U 2012/10/26 09:33:16.828647 127.0.0.1:5060 -> 127.0.0.1:5062

INVITE sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>SIP/2.0'

Record-Route:
<sip:127.0.0.1;r2=on;lr=on;ftag=1178162900;nat=yes;ngcplb=yes>'

Record-Route:
<sip:90.100.150.37;r2=on;lr=on;ftag=1178162900;nat=yes;ngcplb=yes>'

Via: SIP/2.0/UDP
127.0.0.1;branch=z9hG4bKc417.0c1d0d91ea6cf045f898cbca261f2218.0'

Via: SIP/2.0/UDP 10.1.1.198:5062
;rport=1024;received=80.40.140.8;branch=z9hG4bK1316621861'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>>'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 1 INVITE'

Contact: <sip:01978807061 at 10.1.1.198:5062;alias=80.40.140.8~1024~1>'

Content-Type: application/sdp'

Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER,
SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE'

Max-Forwards: 69'

User-Agent: Yealink SIP-T26P 6.61.0.83'

Supported: replaces'

Allow-Events: talk,hold,conference,refer,check-sync'

Content-Length: 348'

P-NGCP-Src-Ip: 80.40.140.8'

P-NGCP-Src-Port: 1024'

P-NGCP-Src-Proto: udp'

P-NGCP-Src-Af: 4'

P-NGCP-Src-Nat: 1'

'

v=0'

o=- 20010 20010 IN IP4 10.1.1.198'

s=SDP data'

c=IN IP4 80.40.140.8'

t=0 0'

m=audio 11800 RTP/AVP 0 8 18 9 101'

a=rtpmap:0 PCMU/8000'

a=rtpmap:8 PCMA/8000'

a=rtpmap:18 G729/8000'

a=fmtp:18 annexb=no'

a=rtpmap:9 G722/8000'

a=fmtp:101 0-15'

a=rtpmap:101 telephone-event/8000'

a=ptime:20'

a=sendrecv'

a=direction:active'

a=oldmediaip:10.1.1.198'


#

U 2012/10/26 09:33:16.828801 127.0.0.1:5062 -> 127.0.0.1:5060

SIP/2.0 100 Trying'

Via: SIP/2.0/UDP
127.0.0.1;branch=z9hG4bKc417.0c1d0d91ea6cf045f898cbca261f2218.0;rport=5060'

Via: SIP/2.0/UDP 10.1.1.198:5062
;rport=1024;received=80.40.140.8;branch=z9hG4bK1316621861'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>>'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 1 INVITE'

Server: Sipwise NGCP Proxy 2.X'

Content-Length: 0'

'


#

U 2012/10/26 09:33:16.829133 90.100.150.37:5060 <http://95.138.181.37:5060/>->
80.40.140.8:1024 <http://84.45.146.8:1024/>

SIP/2.0 100 Trying'

Via: SIP/2.0/UDP 10.1.1.198:5062
;rport=1024;received=80.40.140.8;branch=z9hG4bK1316621861'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>>'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 1 INVITE'

Server: Sipwise NGCP Proxy 2.X'

Content-Length: 0'

'


#

U 2012/10/26 09:33:16.831184 127.0.0.1:5062 -> 127.0.0.1:5060

SIP/2.0 407 Proxy Authentication Required'

Via: SIP/2.0/UDP
127.0.0.1;branch=z9hG4bKc417.0c1d0d91ea6cf045f898cbca261f2218.0;rport=5060'

Via: SIP/2.0/UDP 10.1.1.198:5062
;rport=1024;received=80.40.140.8;branch=z9hG4bK1316621861'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>
>;tag=1d24a28a0bded6c40d31e6db8aab9ac6.762e'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 1 INVITE'

Proxy-Authenticate: Digest realm="90.100.150.37",
nonce="UIqgV1CKnyu9ssD2Aa1cV9jPvMTv2Wy3"'

Server: Sipwise NGCP Proxy 2.X'

Content-Length: 0'

'


#

U 2012/10/26 09:33:16.831357 90.100.150.37:5060 <http://95.138.181.37:5060/>->
80.40.140.8:1024 <http://84.45.146.8:1024/>

SIP/2.0 407 Proxy Authentication Required'

Via: SIP/2.0/UDP 10.1.1.198:5062
;rport=1024;received=80.40.140.8;branch=z9hG4bK1316621861'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>
>;tag=1d24a28a0bded6c40d31e6db8aab9ac6.762e'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 1 INVITE'

Proxy-Authenticate: Digest realm="90.100.150.37",
nonce="UIqgV1CKnyu9ssD2Aa1cV9jPvMTv2Wy3"'

Server: Sipwise NGCP Proxy 2.X'

Content-Length: 0'

'


#

U 2012/10/26 09:33:16.916183 80.40.140.8:1024 <http://84.45.146.8:1024/> ->
90.100.150.37:5060 <http://95.138.181.37:5060/>

ACK sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37> SIP/2.0'

Via: SIP/2.0/UDP 10.1.1.198:5062;branch=z9hG4bK1316621861'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>
>;tag=1d24a28a0bded6c40d31e6db8aab9ac6.762e'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 1 ACK'

Content-Length: 0'

'


#

U 2012/10/26 09:33:16.916923 127.0.0.1:5060 -> 127.0.0.1:5062

ACK sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37> SIP/2.0'

Max-Forwards: 10'

Record-Route:
<sip:127.0.0.1;r2=on;lr=on;ftag=1178162900;nat=yes;ngcplb=yes>'

Record-Route:
<sip:90.100.150.37;r2=on;lr=on;ftag=1178162900;nat=yes;ngcplb=yes>'

Via: SIP/2.0/UDP
127.0.0.1;branch=z9hG4bKc417.0c1d0d91ea6cf045f898cbca261f2218.0'

Via: SIP/2.0/UDP 10.1.1.198:5062
;rport=1024;received=80.40.140.8;branch=z9hG4bK1316621861'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>
>;tag=1d24a28a0bded6c40d31e6db8aab9ac6.762e'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 1 ACK'

Content-Length: 0'

P-NGCP-Src-Ip: 80.40.140.8'

P-NGCP-Src-Port: 1024'

P-NGCP-Src-Proto: udp'

P-NGCP-Src-Af: 4'

P-NGCP-Src-Nat: 1'

'


#

U 2012/10/26 09:33:17.010785 80.40.140.8:1024 <http://84.45.146.8:1024/> ->
90.100.150.37:5060 <http://95.138.181.37:5060/>

INVITE sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>SIP/2.0'

Via: SIP/2.0/UDP 10.1.1.198:5062;branch=z9hG4bK1387360016'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>>'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 2 INVITE'

Contact: <sip:01978807061 at 10.1.1.198:5062>'

Proxy-Authorization: Digest username="01978807061", realm="90.100.150.37",
nonce="UIqgV1CKnyu9ssD2Aa1cV9jPvMTv2Wy3",
uri="sip:02033708966 at 90.100.150.37<sip%3A02033708966 at 95.138.181.37>",
response="2d29fe16d70eeafb11daaa32fb21786a", algorithm=MD5'

Content-Type: application/sdp'

Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER,
SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE'

Max-Forwards: 70'

User-Agent: Yealink SIP-T26P 6.61.0.83'

Supported: replaces'

Allow-Events: talk,hold,conference,refer,check-sync'

Content-Length: 302'

'

v=0'

o=- 20010 20010 IN IP4 10.1.1.198'

s=SDP data'

c=IN IP4 10.1.1.198'

t=0 0'

m=audio 11800 RTP/AVP 0 8 18 9 101'

a=rtpmap:0 PCMU/8000'

a=rtpmap:8 PCMA/8000'

a=rtpmap:18 G729/8000'

a=fmtp:18 annexb=no'

a=rtpmap:9 G722/8000'

a=fmtp:101 0-15'

a=rtpmap:101 telephone-event/8000'

a=ptime:20'

a=sendrecv'


#

U 2012/10/26 09:33:17.015119 127.0.0.1:5060 -> 127.0.0.1:5062

INVITE sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>SIP/2.0'

Record-Route:
<sip:127.0.0.1;r2=on;lr=on;ftag=1178162900;nat=yes;ngcplb=yes>'

Record-Route:
<sip:90.100.150.37;r2=on;lr=on;ftag=1178162900;nat=yes;ngcplb=yes>'

Via: SIP/2.0/UDP
127.0.0.1;branch=z9hG4bK9417.4a7ba59f48f08d448e1488458b0527fa.0'

Via: SIP/2.0/UDP 10.1.1.198:5062
;rport=1024;received=80.40.140.8;branch=z9hG4bK1387360016'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>>'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 2 INVITE'

Contact: <sip:01978807061 at 10.1.1.198:5062;alias=80.40.140.8~1024~1>'

Proxy-Authorization: Digest username="01978807061", realm="90.100.150.37",
nonce="UIqgV1CKnyu9ssD2Aa1cV9jPvMTv2Wy3",
uri="sip:02033708966 at 90.100.150.37<sip%3A02033708966 at 95.138.181.37>",
response="2d29fe16d70eeafb11daaa32fb21786a", algorithm=MD5'

Content-Type: application/sdp'

Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER,
SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE'

Max-Forwards: 69'

User-Agent: Yealink SIP-T26P 6.61.0.83'

Supported: replaces'

Allow-Events: talk,hold,conference,refer,check-sync'

Content-Length: 348'

P-NGCP-Src-Ip: 80.40.140.8'

P-NGCP-Src-Port: 1024'

P-NGCP-Src-Proto: udp'

P-NGCP-Src-Af: 4'

P-NGCP-Src-Nat: 1'

'

v=0'

o=- 20010 20010 IN IP4 10.1.1.198'

s=SDP data'

c=IN IP4 80.40.140.8'

t=0 0'

m=audio 11800 RTP/AVP 0 8 18 9 101'

a=rtpmap:0 PCMU/8000'

a=rtpmap:8 PCMA/8000'

a=rtpmap:18 G729/8000'

a=fmtp:18 annexb=no'

a=rtpmap:9 G722/8000'

a=fmtp:101 0-15'

a=rtpmap:101 telephone-event/8000'

a=ptime:20'

a=sendrecv'

a=direction:active'

a=oldmediaip:10.1.1.198'


#

U 2012/10/26 09:33:17.015359 127.0.0.1:5062 -> 127.0.0.1:5060

SIP/2.0 100 Trying'

Via: SIP/2.0/UDP
127.0.0.1;branch=z9hG4bK9417.4a7ba59f48f08d448e1488458b0527fa.0;rport=5060'

Via: SIP/2.0/UDP 10.1.1.198:5062
;rport=1024;received=80.40.140.8;branch=z9hG4bK1387360016'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>>'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 2 INVITE'

Server: Sipwise NGCP Proxy 2.X'

Content-Length: 0'

'


#

U 2012/10/26 09:33:17.015774 90.100.150.37:5060 <http://95.138.181.37:5060/>->
80.40.140.8:1024 <http://84.45.146.8:1024/>

SIP/2.0 100 Trying'

Via: SIP/2.0/UDP 10.1.1.198:5062
;rport=1024;received=80.40.140.8;branch=z9hG4bK1387360016'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>>'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 2 INVITE'

Server: Sipwise NGCP Proxy 2.X'

Content-Length: 0'

'


#

U 2012/10/26 09:33:17.017464 127.0.0.1:5062 -> 127.0.0.1:5060

SIP/2.0 101 Connecting'

Via: SIP/2.0/UDP
127.0.0.1;branch=z9hG4bK9417.4a7ba59f48f08d448e1488458b0527fa.0;rport=5060'

Via: SIP/2.0/UDP 10.1.1.198:5062
;rport=1024;received=80.40.140.8;branch=z9hG4bK1387360016'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>>'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 2 INVITE'

P-NGCP-Authorization: 01978807061 at 90.100.150.37 <01978807061 at 95.138.181.37>'

P-NGCP-Authorized: 1'

P-Caller-UUID: a09620f4-6ffb-4f9d-840b-b015a99e8c73'

Server: Sipwise NGCP Proxy 2.X'

Content-Length: 0'

'


#

U 2012/10/26 09:33:17.025727 127.0.0.1:5080 -> 127.0.0.1:5060

INVITE sip:442033708966 at 222.111.188.200:5060;transport=udp SIP/2.0'

Via: SIP/2.0/UDP 127.0.0.1:5080;branch=z9hG4bKUV6Z~aIb;rport'

From: <sip:441978807061 at 90.100.150.37 <sip%3A441978807061 at 95.138.181.37>
>;tag=18AF9309-508A9F2D0000637F-C9A99700'

To: <sip:442033708966 at 222.111.188.200 <sip%3A442033708966 at 212.110.185.225>>'

CSeq: 10 INVITE'

Call-ID: 124282374 at 10.1.1.198_b2b-1'

Contact: <sip:127.0.0.1:5080>'

Route: <sip:127.0.0.1:5060;received='sip:222.111.188.200:5060
;transport=udp';lr>'

Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER,
SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE'

Supported: replaces'

P-Asserted-Identity:
<sip:441978807061 at 90.100.150.37<sip%3A441978807061 at 95.138.181.37>
>'

P-D-Uri: sip:127.0.0.1:5060;received='sip:222.111.188.200:5060
;transport=udp''

Content-Type: application/sdp'

Content-Length: 371'

'

v=0'

o=- 20010 20010 IN IP4 90.100.150.37'

s=SDP data'

c=IN IP4 90.100.150.37'

t=0 0'

m=audio 30420 RTP/AVP 0 8 18 9 101'

a=rtpmap:0 PCMU/8000'

a=rtpmap:8 PCMA/8000'

a=rtpmap:18 G729/8000'

a=fmtp:18 annexb=no'

a=rtpmap:9 G722/8000'

a=fmtp:101 0-15'

a=rtpmap:101 telephone-event/8000'

a=ptime:20'

a=sendrecv'

a=direction:active'

a=oldmediaip:10.1.1.198'

a=nortpproxy:yes'


#

U 2012/10/26 09:33:17.025996 90.100.150.37:5060 <http://95.138.181.37:5060/>->
222.111.188.200:5060 <http://212.110.185.225:5060/>

INVITE sip:442033708966 at 222.111.188.200:5060;transport=udp SIP/2.0'

Max-Forwards: 10'

Record-Route:
<sip:90.100.150.37;r2=on;lr=on;ftag=18AF9309-508A9F2D0000637F-C9A99700;ngcplb=yes>'

Record-Route:
<sip:127.0.0.1;r2=on;lr=on;ftag=18AF9309-508A9F2D0000637F-C9A99700;ngcplb=yes>'

Via: SIP/2.0/UDP
90.100.150.37;branch=z9hG4bKaeb7.17cfaa55d2b28c2c48d967e639d3214b.0'

Via: SIP/2.0/UDP 127.0.0.1:5080;branch=z9hG4bKUV6Z~aIb;rport=5080'

From: <sip:441978807061 at 90.100.150.37 <sip%3A441978807061 at 95.138.181.37>
>;tag=18AF9309-508A9F2D0000637F-C9A99700'

To: <sip:442033708966 at 222.111.188.200 <sip%3A442033708966 at 212.110.185.225>>'

CSeq: 10 INVITE'

Call-ID: 124282374 at 10.1.1.198_b2b-1'

Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER,
SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE'

Supported: replaces'

P-Asserted-Identity:
<sip:441978807061 at 90.100.150.37<sip%3A441978807061 at 95.138.181.37>
>'

Content-Type: application/sdp'

Content-Length: 371'

Contact: <sip:ngcp-lb at 90.100.150.37:5060<http://sip:ngcp-lb@95.138.181.37:5060/>
>'

'

v=0'

o=- 20010 20010 IN IP4 90.100.150.37'

s=SDP data'

c=IN IP4 90.100.150.37'

t=0 0'

m=audio 30420 RTP/AVP 0 8 18 9 101'

a=rtpmap:0 PCMU/8000'

a=rtpmap:8 PCMA/8000'

a=rtpmap:18 G729/8000'

a=fmtp:18 annexb=no'

a=rtpmap:9 G722/8000'

a=fmtp:101 0-15'

a=rtpmap:101 telephone-event/8000'

a=ptime:20'

a=sendrecv'

a=direction:active'

a=oldmediaip:10.1.1.198'

a=nortpproxy:yes'


#

U 2012/10/26 09:33:17.036816
222.111.188.200:5060<http://212.110.185.225:5060/>->
90.100.150.37:5060 <http://95.138.181.37:5060/>

SIP/2.0 407 Proxy Authentication Required'

Via: SIP/2.0/UDP
90.100.150.37;branch=z9hG4bKaeb7.17cfaa55d2b28c2c48d967e639d3214b.0;received=90.100.150.37'

Via: SIP/2.0/UDP 127.0.0.1:5080;branch=z9hG4bKUV6Z~aIb;rport=5080'

From: <sip:441978807061 at 90.100.150.37 <sip%3A441978807061 at 95.138.181.37>
>;tag=18AF9309-508A9F2D0000637F-C9A99700'

To: <sip:442033708966 at 222.111.188.200 <sip%3A442033708966 at 212.110.185.225>
>;tag=as677b0635'

Call-ID: 124282374 at 10.1.1.198_b2b-1'

CSeq: 10 INVITE'

Server: Thirdlane'

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO,
PUBLISH'

Supported: replaces, timer'

Proxy-Authenticate: Digest algorithm=MD5, realm="asterisk",
nonce="4252ee88"'

Content-Length: 0'

'


#

U 2012/10/26 09:33:17.037213 127.0.0.1:5060 -> 127.0.0.1:5080

SIP/2.0 407 Proxy Authentication Required'

Via: SIP/2.0/UDP 127.0.0.1:5080;branch=z9hG4bKUV6Z~aIb;rport=5080'

From: <sip:441978807061 at 90.100.150.37 <sip%3A441978807061 at 95.138.181.37>
>;tag=18AF9309-508A9F2D0000637F-C9A99700'

To: <sip:442033708966 at 222.111.188.200 <sip%3A442033708966 at 212.110.185.225>
>;tag=as677b0635'

Call-ID: 124282374 at 10.1.1.198_b2b-1'

CSeq: 10 INVITE'

Server: Thirdlane'

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO,
PUBLISH'

Supported: replaces, timer'

Proxy-Authenticate: Digest algorithm=MD5, realm="asterisk",
nonce="4252ee88"'

Content-Length: 0'

P-NGCP-Src-Ip: 222.111.188.200'

P-NGCP-Src-Port: 5060'

P-NGCP-Src-Proto: udp'

P-NGCP-Src-Af: 4'

'


#

U 2012/10/26 09:33:17.037358 127.0.0.1:5080 -> 127.0.0.1:5060

ACK sip:442033708966 at 222.111.188.200:5060;transport=udp SIP/2.0'

Via: SIP/2.0/UDP 127.0.0.1:5080;branch=z9hG4bKUV6Z~aIb;rport'

Route: <sip:127.0.0.1:5060;received='sip:222.111.188.200:5060
;transport=udp';lr>'

From: <sip:441978807061 at 90.100.150.37 <sip%3A441978807061 at 95.138.181.37>
>;tag=18AF9309-508A9F2D0000637F-C9A99700'

To: <sip:442033708966 at 222.111.188.200 <sip%3A442033708966 at 212.110.185.225>
>;tag=as677b0635'

Call-ID: 124282374 at 10.1.1.198_b2b-1'

CSeq: 10 ACK'

'


#

U 2012/10/26 09:33:17.037691 90.100.150.37:5060 <http://95.138.181.37:5060/>->
222.111.188.200:5060 <http://212.110.185.225:5060/>

ACK sip:442033708966 at 222.111.188.200:5060;transport=udp SIP/2.0'

Max-Forwards: 10'

Record-Route:
<sip:90.100.150.37;r2=on;lr=on;ftag=18AF9309-508A9F2D0000637F-C9A99700;ngcplb=yes>'

Record-Route:
<sip:127.0.0.1;r2=on;lr=on;ftag=18AF9309-508A9F2D0000637F-C9A99700;ngcplb=yes>'

Via: SIP/2.0/UDP
90.100.150.37;branch=z9hG4bKaeb7.17cfaa55d2b28c2c48d967e639d3214b.0'

Via: SIP/2.0/UDP 127.0.0.1:5080;branch=z9hG4bKUV6Z~aIb;rport=5080'

From: <sip:441978807061 at 90.100.150.37 <sip%3A441978807061 at 95.138.181.37>
>;tag=18AF9309-508A9F2D0000637F-C9A99700'

To: <sip:442033708966 at 222.111.188.200 <sip%3A442033708966 at 212.110.185.225>
>;tag=as677b0635'

Call-ID: 124282374 at 10.1.1.198_b2b-1'

CSeq: 10 ACK'

'


#

U 2012/10/26 09:33:17.037831 127.0.0.1:5080 -> 127.0.0.1:5060

INVITE sip:442033708966 at 222.111.188.200:5060;transport=udp SIP/2.0'

Via: SIP/2.0/UDP 127.0.0.1:5080;branch=z9hG4bK6YK0xas7;rport'

From: <sip:441978807061 at 90.100.150.37 <sip%3A441978807061 at 95.138.181.37>
>;tag=18AF9309-508A9F2D0000637F-C9A99700'

To: <sip:442033708966 at 222.111.188.200 <sip%3A442033708966 at 212.110.185.225>>'

CSeq: 11 INVITE'

Call-ID: 124282374 at 10.1.1.198_b2b-1'

Contact: <sip:127.0.0.1:5080>'

Route: <sip:127.0.0.1:5060;received='sip:222.111.188.200:5060
;transport=udp';lr>'

Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER,
SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE'

Supported: replaces'

P-Asserted-Identity:
<sip:441978807061 at 90.100.150.37<sip%3A441978807061 at 95.138.181.37>
>'

P-D-Uri: sip:127.0.0.1:5060;received='sip:222.111.188.200:5060
;transport=udp''

Proxy-Authorization: Digest username="", realm="asterisk",
nonce="4252ee88", uri="sip:442033708966 at 222.111.188.200:5060;transport=udp",
response="57382fcb6b827159cacb45b2d21070d3", algorithm=MD5'

Content-Type: application/sdp'

Content-Length: 371'

'

v=0'

o=- 20010 20010 IN IP4 90.100.150.37'

s=SDP data'

c=IN IP4 90.100.150.37'

t=0 0'

m=audio 30420 RTP/AVP 0 8 18 9 101'

a=rtpmap:0 PCMU/8000'

a=rtpmap:8 PCMA/8000'

a=rtpmap:18 G729/8000'

a=fmtp:18 annexb=no'

a=rtpmap:9 G722/8000'

a=fmtp:101 0-15'

a=rtpmap:101 telephone-event/8000'

a=ptime:20'

a=sendrecv'

a=direction:active'

a=oldmediaip:10.1.1.198'

a=nortpproxy:yes'


#

U 2012/10/26 09:33:17.038108 90.100.150.37:5060 <http://95.138.181.37:5060/>->
222.111.188.200:5060 <http://212.110.185.225:5060/>

INVITE sip:442033708966 at 222.111.188.200:5060;transport=udp SIP/2.0'

Max-Forwards: 10'

Record-Route:
<sip:90.100.150.37;r2=on;lr=on;ftag=18AF9309-508A9F2D0000637F-C9A99700;ngcplb=yes>'

Record-Route:
<sip:127.0.0.1;r2=on;lr=on;ftag=18AF9309-508A9F2D0000637F-C9A99700;ngcplb=yes>'

Via: SIP/2.0/UDP
90.100.150.37;branch=z9hG4bKbeb7.99d4b2215a7ef2a7a250f68d249968d0.0'

Via: SIP/2.0/UDP 127.0.0.1:5080;branch=z9hG4bK6YK0xas7;rport=5080'

From: <sip:441978807061 at 90.100.150.37 <sip%3A441978807061 at 95.138.181.37>
>;tag=18AF9309-508A9F2D0000637F-C9A99700'

To: <sip:442033708966 at 222.111.188.200 <sip%3A442033708966 at 212.110.185.225>>'

CSeq: 11 INVITE'

Call-ID: 124282374 at 10.1.1.198_b2b-1'

Allow: INVITE, INFO, PRACK, ACK, BYE, CANCEL, OPTIONS, NOTIFY, REGISTER,
SUBSCRIBE, REFER, PUBLISH, UPDATE, MESSAGE'

Supported: replaces'

P-Asserted-Identity:
<sip:441978807061 at 90.100.150.37<sip%3A441978807061 at 95.138.181.37>
>'

Proxy-Authorization: Digest username="", realm="asterisk",
nonce="4252ee88", uri="sip:442033708966 at 222.111.188.200:5060;transport=udp",
response="57382fcb6b827159cacb45b2d21070d3", algorithm=MD5'

Content-Type: application/sdp'

Content-Length: 371'

Contact: <sip:ngcp-lb at 90.100.150.37:5060<http://sip:ngcp-lb@95.138.181.37:5060/>
>'

'

v=0'

o=- 20010 20010 IN IP4 90.100.150.37'

s=SDP data'

c=IN IP4 90.100.150.37'

t=0 0'

m=audio 30420 RTP/AVP 0 8 18 9 101'

a=rtpmap:0 PCMU/8000'

a=rtpmap:8 PCMA/8000'

a=rtpmap:18 G729/8000'

a=fmtp:18 annexb=no'

a=rtpmap:9 G722/8000'

a=fmtp:101 0-15'

a=rtpmap:101 telephone-event/8000'

a=ptime:20'

a=sendrecv'

a=direction:active'

a=oldmediaip:10.1.1.198'

a=nortpproxy:yes'


#

U 2012/10/26 09:33:17.047575
222.111.188.200:5060<http://212.110.185.225:5060/>->
90.100.150.37:5060 <http://95.138.181.37:5060/>

SIP/2.0 403 Forbidden (Bad auth)'

Via: SIP/2.0/UDP
90.100.150.37;branch=z9hG4bKbeb7.99d4b2215a7ef2a7a250f68d249968d0.0;received=90.100.150.37'

Via: SIP/2.0/UDP 127.0.0.1:5080;branch=z9hG4bK6YK0xas7;rport=5080'

From: <sip:441978807061 at 90.100.150.37 <sip%3A441978807061 at 95.138.181.37>
>;tag=18AF9309-508A9F2D0000637F-C9A99700'

To: <sip:442033708966 at 222.111.188.200 <sip%3A442033708966 at 212.110.185.225>
>;tag=as677b0635'

Call-ID: 124282374 at 10.1.1.198_b2b-1'

CSeq: 11 INVITE'

Server: Thirdlane'

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO,
PUBLISH'

Supported: replaces, timer'

Content-Length: 0'

'


#

U 2012/10/26 09:33:17.047720 127.0.0.1:5060 -> 127.0.0.1:5080

SIP/2.0 403 Forbidden (Bad auth)'

Via: SIP/2.0/UDP 127.0.0.1:5080;branch=z9hG4bK6YK0xas7;rport=5080'

From: <sip:441978807061 at 90.100.150.37 <sip%3A441978807061 at 95.138.181.37>
>;tag=18AF9309-508A9F2D0000637F-C9A99700'

To: <sip:442033708966 at 222.111.188.200 <sip%3A442033708966 at 212.110.185.225>
>;tag=as677b0635'

Call-ID: 124282374 at 10.1.1.198_b2b-1'

CSeq: 11 INVITE'

Server: Thirdlane'

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO,
PUBLISH'

Supported: replaces, timer'

Content-Length: 0'

P-NGCP-Src-Ip: 222.111.188.200'

P-NGCP-Src-Port: 5060'

P-NGCP-Src-Proto: udp'

P-NGCP-Src-Af: 4'

'


#

U 2012/10/26 09:33:17.047787 127.0.0.1:5080 -> 127.0.0.1:5060

ACK sip:442033708966 at 222.111.188.200:5060;transport=udp SIP/2.0'

Via: SIP/2.0/UDP 127.0.0.1:5080;branch=z9hG4bK6YK0xas7;rport'

Route: <sip:127.0.0.1:5060;received='sip:222.111.188.200:5060
;transport=udp';lr>'

From: <sip:441978807061 at 90.100.150.37 <sip%3A441978807061 at 95.138.181.37>
>;tag=18AF9309-508A9F2D0000637F-C9A99700'

To: <sip:442033708966 at 222.111.188.200 <sip%3A442033708966 at 212.110.185.225>
>;tag=as677b0635'

Call-ID: 124282374 at 10.1.1.198_b2b-1'

CSeq: 11 ACK'

'


#

U 2012/10/26 09:33:17.047984 90.100.150.37:5060 <http://95.138.181.37:5060/>->
222.111.188.200:5060 <http://212.110.185.225:5060/>

ACK sip:442033708966 at 222.111.188.200:5060;transport=udp SIP/2.0'

Max-Forwards: 10'

Record-Route:
<sip:90.100.150.37;r2=on;lr=on;ftag=18AF9309-508A9F2D0000637F-C9A99700;ngcplb=yes>'

Record-Route:
<sip:127.0.0.1;r2=on;lr=on;ftag=18AF9309-508A9F2D0000637F-C9A99700;ngcplb=yes>'

Via: SIP/2.0/UDP
90.100.150.37;branch=z9hG4bKbeb7.99d4b2215a7ef2a7a250f68d249968d0.0'

Via: SIP/2.0/UDP 127.0.0.1:5080;branch=z9hG4bK6YK0xas7;rport=5080'

From: <sip:441978807061 at 90.100.150.37 <sip%3A441978807061 at 95.138.181.37>
>;tag=18AF9309-508A9F2D0000637F-C9A99700'

To: <sip:442033708966 at 222.111.188.200 <sip%3A442033708966 at 212.110.185.225>
>;tag=as677b0635'

Call-ID: 124282374 at 10.1.1.198_b2b-1'

CSeq: 11 ACK'

'


#

U 2012/10/26 09:33:17.049123 127.0.0.1:5062 -> 127.0.0.1:5060

SIP/2.0 403 Forbidden (Bad auth)'

Record-Route: <sip:127.0.0.1:5062
;lr=on;ftag=1178162900;did=511.6f51;mpd=ii;rtpprx=yes;vsf=c2hMOVZAb3Z+dm1xUGlfHwpbTlRxY1omW0x4ZXVB>'

Record-Route:
<sip:127.0.0.1;r2=on;lr=on;ftag=1178162900;nat=yes;ngcplb=yes>'

Record-Route:
<sip:90.100.150.37;r2=on;lr=on;ftag=1178162900;nat=yes;ngcplb=yes>'

Via: SIP/2.0/UDP
127.0.0.1;rport=5060;branch=z9hG4bK9417.4a7ba59f48f08d448e1488458b0527fa.0'

Via: SIP/2.0/UDP 10.1.1.198:5062
;rport=1024;received=80.40.140.8;branch=z9hG4bK1387360016'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>
>;tag=313939CC-508A9F2D000062E1-C908F700'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 2 INVITE'

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO,
PUBLISH'

Supported: replaces, timer'

Content-Length: 0'

'


#

U 2012/10/26 09:33:17.049337 90.100.150.37:5060 <http://95.138.181.37:5060/>->
80.40.140.8:1024 <http://84.45.146.8:1024/>

SIP/2.0 403 Forbidden (Bad auth)'

Record-Route: <sip:127.0.0.1:5062
;lr=on;ftag=1178162900;did=511.6f51;mpd=ii;rtpprx=yes;vsf=c2hMOVZAb3Z+dm1xUGlfHwpbTlRxY1omW0x4ZXVB>'

Record-Route:
<sip:127.0.0.1;r2=on;lr=on;ftag=1178162900;nat=yes;ngcplb=yes>'

Record-Route:
<sip:90.100.150.37;r2=on;lr=on;ftag=1178162900;nat=yes;ngcplb=yes>'

Via: SIP/2.0/UDP 10.1.1.198:5062
;rport=1024;received=80.40.140.8;branch=z9hG4bK1387360016'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>
>;tag=313939CC-508A9F2D000062E1-C908F700'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 2 INVITE'

Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO,
PUBLISH'

Supported: replaces, timer'

Content-Length: 0'

'


#

U 2012/10/26 09:33:17.100506 80.40.140.8:1024 <http://84.45.146.8:1024/> ->
90.100.150.37:5060 <http://95.138.181.37:5060/>

ACK sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37> SIP/2.0'

Via: SIP/2.0/UDP 10.1.1.198:5062;branch=z9hG4bK1387360016'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>
>;tag=313939CC-508A9F2D000062E1-C908F700'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 2 ACK'

Content-Length: 0'

'


#

U 2012/10/26 09:33:17.100857 127.0.0.1:5060 -> 127.0.0.1:5062

ACK sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37> SIP/2.0'

Max-Forwards: 10'

Record-Route:
<sip:127.0.0.1;r2=on;lr=on;ftag=1178162900;nat=yes;ngcplb=yes>'

Record-Route:
<sip:90.100.150.37;r2=on;lr=on;ftag=1178162900;nat=yes;ngcplb=yes>'

Via: SIP/2.0/UDP
127.0.0.1;branch=z9hG4bK9417.4a7ba59f48f08d448e1488458b0527fa.0'

Via: SIP/2.0/UDP 10.1.1.198:5062
;rport=1024;received=80.40.140.8;branch=z9hG4bK1387360016'

From: "01978807061"
<sip:01978807061 at 90.100.150.37<sip%3A01978807061 at 95.138.181.37>
>;tag=1178162900'

To: <sip:02033708966 at 90.100.150.37 <sip%3A02033708966 at 95.138.181.37>
>;tag=313939CC-508A9F2D000062E1-C908F700'

Call-ID: 124282374 at 10.1.1.198'

CSeq: 2 ACK'

Content-Length: 0'

P-NGCP-Src-Ip: 80.40.140.8'

P-NGCP-Src-Port: 1024'

P-NGCP-Src-Proto: udp'

P-NGCP-Src-Af: 4'

P-NGCP-Src-Nat: 1'

'


######exit

62 received, 0 dropped

On 26 October 2012 13:56, Andreas Granig <agranig at sipwise.com> wrote:

> Hi Rob,
>
> On 10/26/2012 09:54 AM, Rob Watkin wrote:
> > I have a test interconnect (SIP peer) which authorises on IP address
> > only. I am able to receive inbound calls through the interconnect but
> > outbound fails with "Forbidden (Bad Auth)".
> >
> > I have tried tailing /var/log/ngcp/kamailio-proxy.log but there is som
> > much in there I'm not sure where to start. I suspect that I may need to
> > but some re-writing rules in place. Could some-one give me some pointers
> > as to where I might begin diagnosing this problem.
>
> Best thing is to do an "ngrep-sip b" on the machine to collect a SIP
> trace of such a call, and post it here. What would also help to know is
> some basic information what your interconnect partner told you how calls
> are authenticated (IP, some special From/P-Asserted-Identity format
> and/or something else), so we can compare it to what you actually send.
>
> Andreas
>
>
> _______________________________________________
> Spce-user mailing list
> Spce-user at lists.sipwise.com
> http://lists.sipwise.com/listinfo/spce-user
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/attachments/20121026/986a107d/attachment-0001.html>


More information about the Spce-user mailing list