[reSIProcate] Crash with TCP transport and malformed messages
Hi,
I am seeing the following crash (Windows XP Service Pack 2, Visual Studio
.NET 2003, server is SER 0.9, user agent is based on resip 0.9):
> reSIPAgent.dll!resip::AppDialogSet::getHandle() Line 21 + 0x3 C++
reSIPAgent.dll!resip::DialogUsage::getAppDialogSet() Line 38 + 0x18
C++
reSIPAgent.dll!ClientHandler::onUpdateActive(resip::Handle<resip::ClientSubscription>
handle={...}, const resip::SipMessage & notify={...}) Line 477 C++
reSIPAgent.dll!resip::ClientSubscription::dispatch(const
resip::SipMessage & msg={...}) Line 140 C++
reSIPAgent.dll!resip::Dialog::dispatch(const resip::SipMessage &
msg={...}) Line 426 C++
reSIPAgent.dll!resip::DialogSet::dispatch(const resip::SipMessage &
msg={...}) Line 645 C++
reSIPAgent.dll!resip::DialogUsageManager::processRequest(const
resip::SipMessage & request={...}) Line 1286 C++
reSIPAgent.dll!resip::DialogUsageManager::internalProcess(std::auto_ptr<resip::Message>
msg={...}) Line 909 C++
reSIPAgent.dll!resip::DialogUsageManager::process() Line 1044 + 0x49
C++
In ClientHandler::onUpdateActive, I have:
void ClientHandler::onUpdateActive(ClientSubscriptionHandle handle, const
SipMessage& notify)
{
ClientAppDialogSet *pSet = NULL;
>> AppDialogSetHandle hDialogSet = handle->getAppDialogSet();
In:
AppDialogSetHandle
DialogUsage::getAppDialogSet()
{
return mDialog.mDialogSet.mAppDialogSet->getHandle();
}
The mAppDialogSet member is NULL.
This happens a few minutes after the user agent REGISTERed with the TCP
transport. The crash occured with the last NOTIFY in the trace below. Also,
in the trace below, some SUBSCRIBE messages were malformed. I don't see the
problem when using UDP with the same server, the same sequence of presence
subscriptions, etc.
Has anyone seen this?
CG
========================================================================================
No. Time Source Destination Protocol
Info
23 2.545140 172.17.72.10 67.17.145.60 SIP
Request: REGISTER sip:chris2@xxxxxxxxxxxxxxxxxx
Frame 23 (612 bytes on wire, 612 bytes captured)
Ethernet II, Src: 00:11:43:6c:01:fe, Dst: 00:00:0c:07:ac:01
Internet Protocol, Src Addr: 172.17.72.10 (172.17.72.10), Dst Addr:
67.17.145.60 (67.17.145.60)
Transmission Control Protocol, Src Port: 1642 (1642), Dst Port: 5060
(5060), Seq: 1, Ack: 1, Len: 558
Session Initiation Protocol
Request-Line: REGISTER sip:chris2@xxxxxxxxxxxxxxxxxx SIP/2.0
Message Header
To: "Christian II"<sip:chris2@xxxxxxxxxxxxxxxxxx>
From: "Christian II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=81646d41
Via: SIP/2.0/TCP
172.17.72.10:5060;branch=z9hG4bK-d87543-e655a766f75fba35-1--d87543-;rport
Call-ID: cc7d7e0440473f67@TmV3QWdlTGFwdG9w
CSeq: 1 REGISTER
Contact: <sip:chris2@xxxxxxxxxxxx:5060;transport=TCP>
Expires: 60
Max-Forwards: 70
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, MESSAGE, SUBSCRIBE,
NOTIFY
User-Agent: Test.exe version 1.0.0.1
Allow-Events: presence
Content-Length: 0
No. Time Source Destination Protocol
Info
25 2.549349 67.17.145.60 172.17.72.10 SIP
Status: 401 Unauthorized (0 bindings)
Frame 25 (764 bytes on wire, 764 bytes captured)
Ethernet II, Src: 00:07:b3:cd:3b:00, Dst: 00:11:43:6c:01:fe
Internet Protocol, Src Addr: 67.17.145.60 (67.17.145.60), Dst Addr:
172.17.72.10 (172.17.72.10)
Transmission Control Protocol, Src Port: 5060 (5060), Dst Port: 1642
(1642), Seq: 1, Ack: 559, Len: 710
Session Initiation Protocol
Status-Line: SIP/2.0 401 Unauthorized
Message Header
To: "Christian
II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=b27e1a1d33761e85846fc98f5f3a7e58.3c38
From: "Christian II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=81646d41
Via: SIP/2.0/TCP
172.17.72.10:5060;branch=z9hG4bK-d87543-e655a766f75fba35-1--d87543-;rport=61443
Call-ID: cc7d7e0440473f67@TmV3QWdlTGFwdG9w
CSeq: 1 REGISTER
WWW-Authenticate: Digest realm="logitech.com",
nonce="434ea8c837241acdd6152f16bc50eea973959fff"
Server: Sip EXpress router (0.9.0 (sparc64/solaris))
Content-Length: 0
Warning: 392 10.210.10.93:5060 "Noisy feedback tells: pid=284
req_src_ip=67.17.144.2 req_src_port=61443
in_uri=sip:chris2@xxxxxxxxxxxxxxxxxx out_uri=sip:chris2@xxxxxxxxxxxxxxxxxx
via_cnt==1"
No. Time Source Destination Protocol
Info
28 2.686809 172.17.72.10 67.17.145.60 SIP
Request: REGISTER sip:xxxxx.xxxxxxxx.xxx
Frame 28 (779 bytes on wire, 779 bytes captured)
Ethernet II, Src: 00:11:43:6c:01:fe, Dst: 00:00:0c:07:ac:01
Internet Protocol, Src Addr: 172.17.72.10 (172.17.72.10), Dst Addr:
67.17.145.60 (67.17.145.60)
Transmission Control Protocol, Src Port: 1642 (1642), Dst Port: 5060
(5060), Seq: 559, Ack: 711, Len: 725
Session Initiation Protocol
Request-Line: REGISTER sip:xxxxx.xxxxxxxx.xxx SIP/2.0
Message Header
To: "Christian II"<sip:chris2@xxxxxxxxxxxxxxxxxx>
From: "Christian II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=81646d41
Via: SIP/2.0/TCP
172.17.72.10:5060;branch=z9hG4bK-d87543-042ae45c99117726-1--d87543-;rport
Call-ID: cc7d7e0440473f67@TmV3QWdlTGFwdG9w
CSeq: 2 REGISTER
Contact: <sip:chris2@xxxxxxxxxxxx:5060;transport=TCP>
Expires: 60
Max-Forwards: 70
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, MESSAGE, SUBSCRIBE,
NOTIFY
User-Agent: Test.exe version 1.0.0.1
Authorization: Digest
username="chris2",realm="logitech.com",nonce="434ea8c837241acdd6152f16bc50eea973959fff",uri="sip:xxxxx.xxxxxxxx.xxx",response="1c9c7b121ac3c281848676ec2d565d1e",algorithm=MD5
Content-Length: 0
No. Time Source Destination Protocol
Info
30 2.693187 67.17.145.60 172.17.72.10 SIP
Status: 200 OK (1 bindings)
Frame 30 (709 bytes on wire, 709 bytes captured)
Ethernet II, Src: 00:07:b3:cd:3b:00, Dst: 00:11:43:6c:01:fe
Internet Protocol, Src Addr: 67.17.145.60 (67.17.145.60), Dst Addr:
172.17.72.10 (172.17.72.10)
Transmission Control Protocol, Src Port: 5060 (5060), Dst Port: 1642
(1642), Seq: 711, Ack: 1284, Len: 655
Session Initiation Protocol
Status-Line: SIP/2.0 200 OK
Message Header
To: "Christian
II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=b27e1a1d33761e85846fc98f5f3a7e58.ef3c
From: "Christian II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=81646d41
Via: SIP/2.0/TCP
172.17.72.10:5060;branch=z9hG4bK-d87543-042ae45c99117726-1--d87543-;rport=61443
Call-ID: cc7d7e0440473f67@TmV3QWdlTGFwdG9w
CSeq: 2 REGISTER
Contact: <sip:chris2@xxxxxxxxxxxx:5060;transport=TCP>;expires=60
Server: Sip EXpress router (0.9.0 (sparc64/solaris))
Content-Length: 0
Warning: 392 10.210.10.93:5060 "Noisy feedback tells: pid=284
req_src_ip=67.17.144.2 req_src_port=61443 in_uri=sip:xxxxx.xxxxxxxx.xxx
out_uri=sip:xxxxx.xxxxxxxx.xxx via_cnt==1"
No. Time Source Destination Protocol
Info
36 2.857129 172.17.72.10 67.17.145.60 SIP
Request: SUBSCRIBE sip:chris@xxxxxxxxxxxxxxxxxx
Frame 36 (552 bytes on wire, 552 bytes captured)
Ethernet II, Src: 00:11:43:6c:01:fe, Dst: 00:00:0c:07:ac:01
Internet Protocol, Src Addr: 172.17.72.10 (172.17.72.10), Dst Addr:
67.17.145.60 (67.17.145.60)
Transmission Control Protocol, Src Port: 1642 (1642), Dst Port: 5060
(5060), Seq: 1284, Ack: 1366, Len: 498
Session Initiation Protocol
Request-Line: SUBSCRIBE sip:chris@xxxxxxxxxxxxxxxxxx SIP/2.0
Message Header
To: <sip:chris@xxxxxxxxxxxxxxxxxx>
From: "Christian II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=5d62ef46
Via: SIP/2.0/TCP
172.17.72.10:5060;branch=z9hG4bK-d87543-c925f64ca863b712-1--d87543-;rport
Call-ID: 436ce65f892bf01a@TmV3QWdlTGFwdG9w
CSeq: 1 SUBSCRIBE
Contact: <sip:chris2@xxxxxxxxxxxx:5060;transport=TCP>
Expires: 120
Max-Forwards: 70
Accept: application/pidf+xml
User-Agent: Test.exe version 1.0.0.1
Event: presence
Content-Length: 0
No. Time Source Destination Protocol
Info
43 2.896044 172.17.72.10 67.17.145.60 SIP
Request: SUBSCRIBE sip:vijay@xxxxxxxxxxxxxxxxxx
Frame 43 (1314 bytes on wire, 1314 bytes captured)
Ethernet II, Src: 00:11:43:6c:01:fe, Dst: 00:00:0c:07:ac:01
Internet Protocol, Src Addr: 172.17.72.10 (172.17.72.10), Dst Addr:
67.17.145.60 (67.17.145.60)
Transmission Control Protocol, Src Port: 1642 (1642), Dst Port: 5060
(5060), Seq: 1782, Ack: 1366, Len: 1260
Session Initiation Protocol
Request-Line: SUBSCRIBE sip:vijay@xxxxxxxxxxxxxxxxxx SIP/2.0
Message Header
To: <sip:vijay@xxxxxxxxxxxxxxxxxx>
From: "Christian II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=cf3bd26f
Via: SIP/2.0/TCP
172.17.72.10:5060;branch=z9hG4bK-d87543-8925475bfb28447d-1--d87543-;rport
Call-ID: 681d197e4d6c2942@TmV3QWdlTGFwdG9w
CSeq: 1 SUBSCRIBE
Contact: <sip:chris2@xxxxxxxxxxxx:5060;transport=TCP>
Expires: 120
Max-Forwards: 70
Accept: application/pidf+xml
User-Agent: Test.exe version 1.0.0.1
Event: presence
Content-Length: 0
Message body
SUBSCRIBE sip:vijaytest@xxxxxxxxxxxxxxxxxxxxx SIP/2.0\r\n
To: <sip:vijaytest@xxxxxxxxxxxxxxxxxxxxx>\r\n
From: "Christian
II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=115bf11a\r\n
Via: SIP/2.0/TCP
172.17.72.10:5060;branch=z9hG4bK-d87543-c81767278907a337-1--d87543-;rport\r\n
Call-ID: eb0c764bb363d361@TmV3QWdlTGFwdG9w\r\n
CSeq: 1 SUBSCRIBE\r\n
Contact: <sip:chris2@xxxxxxxxxxxx:5060;transport=TCP>\r\n
Expires: 120\r\n
Max-Forwards: 70\r\n
Accept: application/pidf+xml\r\n
User-Agent: Test.exe version 1.0.0.1\r\n
Event: presence\r\n
Content-Length: 0\r\n
\r\n
SUBSCRIBE sip:studridge01@xxxxxxxxxxxxxxxxxx SIP/2.0\r\n
To: <sip:studridge01@xxxxxxxxxxxxxxxxxx>\r\n
From: "Christian
II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=de3cbd2c\r\n
Via: SIP/2.0/TCP
172.17.72.10:5060;branch=z9hG4bK-d87543-c5644e0ce5719832-1--d87543-;rpo
No. Time Source Destination Protocol
Info
44 2.896105 172.17.72.10 67.17.145.60 SIP
Continuation
Frame 44 (314 bytes on wire, 314 bytes captured)
Ethernet II, Src: 00:11:43:6c:01:fe, Dst: 00:00:0c:07:ac:01
Internet Protocol, Src Addr: 172.17.72.10 (172.17.72.10), Dst Addr:
67.17.145.60 (67.17.145.60)
Transmission Control Protocol, Src Port: 1642 (1642), Dst Port: 5060
(5060), Seq: 3042, Ack: 1366, Len: 260
Session Initiation Protocol
Continuation line: rt
Continuation data
No. Time Source Destination Protocol
Info
50 2.907202 172.17.72.10 67.17.145.60 SIP
Request: SUBSCRIBE sip:sqatest2@xxxxxxxxxxxxxxxxxxxxx
Frame 50 (564 bytes on wire, 564 bytes captured)
Ethernet II, Src: 00:11:43:6c:01:fe, Dst: 00:00:0c:07:ac:01
Internet Protocol, Src Addr: 172.17.72.10 (172.17.72.10), Dst Addr:
67.17.145.60 (67.17.145.60)
Transmission Control Protocol, Src Port: 1642 (1642), Dst Port: 5060
(5060), Seq: 3302, Ack: 1367, Len: 510
Session Initiation Protocol
Request-Line: SUBSCRIBE sip:sqatest2@xxxxxxxxxxxxxxxxxxxxx SIP/2.0
Message Header
To: <sip:sqatest2@xxxxxxxxxxxxxxxxxxxxx>
From: "Christian II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=f6044a75
Via: SIP/2.0/TCP
172.17.72.10:5060;branch=z9hG4bK-d87543-e914d86dc05be838-1--d87543-;rport
Call-ID: c05cfa7c17472e6f@TmV3QWdlTGFwdG9w
CSeq: 1 SUBSCRIBE
Contact: <sip:chris2@xxxxxxxxxxxx:5060;transport=TCP>
Expires: 120
Max-Forwards: 70
Accept: application/pidf+xml
User-Agent: Test.exe version 1.0.0.1
Event: presence
Content-Length: 0
No. Time Source Destination Protocol
Info
61 2.969584 172.17.72.10 67.17.145.60 SIP
Request: SUBSCRIBE sip:tchua@xxxxxxxxxxxxxxxxxxxxx
Frame 61 (558 bytes on wire, 558 bytes captured)
Ethernet II, Src: 00:11:43:6c:01:fe, Dst: 00:00:0c:07:ac:01
Internet Protocol, Src Addr: 172.17.72.10 (172.17.72.10), Dst Addr:
67.17.145.60 (67.17.145.60)
Transmission Control Protocol, Src Port: 1651 (1651), Dst Port: 5060
(5060), Seq: 1, Ack: 1, Len: 504
Session Initiation Protocol
Request-Line: SUBSCRIBE sip:tchua@xxxxxxxxxxxxxxxxxxxxx SIP/2.0
Message Header
To: <sip:tchua@xxxxxxxxxxxxxxxxxxxxx>
From: "Christian II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=4f4b3c44
Via: SIP/2.0/TCP
172.17.72.10:5060;branch=z9hG4bK-d87543-8a7e8821f52cee57-1--d87543-;rport
Call-ID: 2245656af863204e@TmV3QWdlTGFwdG9w
CSeq: 1 SUBSCRIBE
Contact: <sip:chris2@xxxxxxxxxxxx:5060;transport=TCP>
Expires: 120
Max-Forwards: 70
Accept: application/pidf+xml
User-Agent: Test.exe version 1.0.0.1
Event: presence
Content-Length: 0
No. Time Source Destination Protocol
Info
63 2.986581 67.17.145.60 172.17.72.10 SIP
Status: 478 Unresolvable destination (478/TM)
Frame 63 (681 bytes on wire, 681 bytes captured)
Ethernet II, Src: 00:07:b3:cd:3b:00, Dst: 00:11:43:6c:01:fe
Internet Protocol, Src Addr: 67.17.145.60 (67.17.145.60), Dst Addr:
172.17.72.10 (172.17.72.10)
Transmission Control Protocol, Src Port: 5060 (5060), Dst Port: 1651
(1651), Seq: 1, Ack: 505, Len: 627
Session Initiation Protocol
Status-Line: SIP/2.0 478 Unresolvable destination (478/TM)
Message Header
To:
<sip:tchua@xxxxxxxxxxxxxxxxxxxxx>;tag=a6a1c5f60faecf035a1ae5b6e96e979a-88c4
From: "Christian II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=4f4b3c44
Via: SIP/2.0/TCP
172.17.72.10:5060;branch=z9hG4bK-d87543-8a7e8821f52cee57-1--d87543-;rport=61453
Call-ID: 2245656af863204e@TmV3QWdlTGFwdG9w
CSeq: 1 SUBSCRIBE
Server: Sip EXpress router (0.9.0 (sparc64/solaris))
Content-Length: 0
Warning: 392 10.210.10.93:5060 "Noisy feedback tells: pid=283
req_src_ip=67.17.144.2 req_src_port=61453
in_uri=sip:tchua@xxxxxxxxxxxxxxxxxxxxx
out_uri=sip:tchua@xxxxxxxxxxxxxxxxxxxxx via_cnt==1"
No. Time Source Destination Protocol
Info
64 2.989513 172.17.72.10 67.17.145.60 SIP
Request: SUBSCRIBE sip:chris2@xxxxxxxxxxxxx
Frame 64 (544 bytes on wire, 544 bytes captured)
Ethernet II, Src: 00:11:43:6c:01:fe, Dst: 00:00:0c:07:ac:01
Internet Protocol, Src Addr: 172.17.72.10 (172.17.72.10), Dst Addr:
67.17.145.60 (67.17.145.60)
Transmission Control Protocol, Src Port: 1651 (1651), Dst Port: 5060
(5060), Seq: 505, Ack: 628, Len: 490
Session Initiation Protocol
Request-Line: SUBSCRIBE sip:chris2@xxxxxxxxxxxxx SIP/2.0
Message Header
To: <sip:chris2@xxxxxxxxxxxxx>
From: "Christian II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=7a7dba16
Via: SIP/2.0/TCP
172.17.72.10:5060;branch=z9hG4bK-d87543-237d6f4d5a4d9e46-1--d87543-;rport
Call-ID: db4056791937a916@TmV3QWdlTGFwdG9w
CSeq: 1 SUBSCRIBE
Contact: <sip:chris2@xxxxxxxxxxxx:5060;transport=TCP>
Expires: 120
Max-Forwards: 70
Accept: application/pidf+xml
User-Agent: Test.exe version 1.0.0.1
Event: presence
Content-Length: 0
No. Time Source Destination Protocol
Info
70 3.074942 67.17.145.60 172.17.72.10 SIP
Request: NOTIFY sip:chris2@xxxxxxxxxxxx:5060;transport=TCP
Frame 70 (995 bytes on wire, 995 bytes captured)
Ethernet II, Src: 00:07:b3:cd:3b:00, Dst: 00:11:43:6c:01:fe
Internet Protocol, Src Addr: 67.17.145.60 (67.17.145.60), Dst Addr:
172.17.72.10 (172.17.72.10)
Transmission Control Protocol, Src Port: 32820 (32820), Dst Port: 5060
(5060), Seq: 1, Ack: 1, Len: 941
Session Initiation Protocol
Request-Line: NOTIFY sip:chris2@xxxxxxxxxxxx:5060;transport=TCP SIP/2.0
Message Header
Record-Route: <sip:67.17.145.60;transport=tcp;ftag=a3730955;lr=on>
To: "Christian II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=803d0514
From: <sip:chris@xxxxxxxxxxxxx:5060;transport=TCP>;tag=a3730955
Via: SIP/2.0/TCP 67.17.145.60;branch=z9hG4bKc19a.38f6.0;i=c7
Via: SIP/2.0/TCP
172.17.72.108:5060;branch=z9hG4bK-d87543-6372860feb325015-1--d87543-;rport=61406
Call-ID: b855bb296838a43f@TmV3QWdlTGFwdG9w
CSeq: 2 NOTIFY
Contact: <sip:chris@xxxxxxxxxxxxx:5060;transport=TCP>
Max-Forwards: 16
Content-Type: application/pidf+xml
User-Agent: Test.exe version 1.0.0.1
Subscription-State: active;expires=3415
Event: presence
Content-Length: 236
Message body
<?xml version="1.0" encoding="UTF-8"?>\r\n
<presence xmlns="urn:ietf:params:xml:ns:pidf"\r\n
entity="sip:chris@xxxxxxxxxxxxxxxxxx">\r\n
<tuple id="9b6yhF2Gk37o4" >\r\n
<status><basic>open</basic></status>\r\n
</tuple>\r\n
</presence>\r\n
No. Time Source Destination Protocol
Info
73 3.166549 67.17.145.60 172.17.72.10 SIP
Request: SUBSCRIBE sip:chris2@xxxxxxxxxxxx:5060;transport=TCP
Frame 73 (700 bytes on wire, 700 bytes captured)
Ethernet II, Src: 00:07:b3:cd:3b:00, Dst: 00:11:43:6c:01:fe
Internet Protocol, Src Addr: 67.17.145.60 (67.17.145.60), Dst Addr:
172.17.72.10 (172.17.72.10)
Transmission Control Protocol, Src Port: 32820 (32820), Dst Port: 5060
(5060), Seq: 942, Ack: 1, Len: 646
Session Initiation Protocol
Request-Line: SUBSCRIBE sip:chris2@xxxxxxxxxxxx:5060;transport=TCP
SIP/2.0
Message Header
Record-Route: <sip:67.17.145.60;transport=tcp;ftag=a75a2a4c;lr=on>
To: <sip:chris2@xxxxxxxxxxxxxxxxxx>
From: "Chris"<sip:chris@xxxxxxxxxxxxxxxxxx>;tag=a75a2a4c
Via: SIP/2.0/TCP 67.17.145.60;branch=z9hG4bK0cbb.fd24.0;i=c7
Via: SIP/2.0/TCP
172.17.72.108:5060;branch=z9hG4bK-d87543-7511021a1f11671c-1--d87543-;rport=61406
Call-ID: 98452d4f5616940a@xxxxxxxxxxxxxxxxxxxx
CSeq: 1 SUBSCRIBE
Contact: <sip:chris@xxxxxxxxxxxxx:5060;transport=TCP>
Expires: 120
Max-Forwards: 16
Accept: application/pidf+xml
User-Agent: Test.exe version 1.0.0.1
Event: presence
Content-Length: 0
No. Time Source Destination Protocol
Info
75 3.258615 172.17.72.10 67.17.145.60 SIP
Status: 481 Call/Transaction Does Not Exist
Frame 75 (491 bytes on wire, 491 bytes captured)
Ethernet II, Src: 00:11:43:6c:01:fe, Dst: 00:00:0c:07:ac:01
Internet Protocol, Src Addr: 172.17.72.10 (172.17.72.10), Dst Addr:
67.17.145.60 (67.17.145.60)
Transmission Control Protocol, Src Port: 5060 (5060), Dst Port: 32820
(32820), Seq: 1, Ack: 1588, Len: 437
Session Initiation Protocol
Status-Line: SIP/2.0 481 Call/Transaction Does Not Exist
Message Header
To: "Christian II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=803d0514
From: <sip:chris@xxxxxxxxxxxxx:5060;transport=TCP>;tag=a3730955
Via: SIP/2.0/TCP 67.17.145.60;branch=z9hG4bKc19a.38f6.0;i=c7
Via: SIP/2.0/TCP
172.17.72.108:5060;branch=z9hG4bK-d87543-6372860feb325015-1--d87543-;rport=61406
Call-ID: b855bb296838a43f@TmV3QWdlTGFwdG9w
CSeq: 2 NOTIFY
Accept-Language: en
Content-Length: 0
No. Time Source Destination Protocol
Info
79 3.296775 172.17.72.10 67.17.145.60 SIP
Status: 202 Accepted
Frame 79 (608 bytes on wire, 608 bytes captured)
Ethernet II, Src: 00:11:43:6c:01:fe, Dst: 00:00:0c:07:ac:01
Internet Protocol, Src Addr: 172.17.72.10 (172.17.72.10), Dst Addr:
67.17.145.60 (67.17.145.60)
Transmission Control Protocol, Src Port: 5060 (5060), Dst Port: 32820
(32820), Seq: 438, Ack: 1588, Len: 554
Session Initiation Protocol
Status-Line: SIP/2.0 202 Accepted
Message Header
To: <sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=237a4025
From: "Chris"<sip:chris@xxxxxxxxxxxxxxxxxx>;tag=a75a2a4c
Via: SIP/2.0/TCP 67.17.145.60;branch=z9hG4bK0cbb.fd24.0;i=c7
Via: SIP/2.0/TCP
172.17.72.108:5060;branch=z9hG4bK-d87543-7511021a1f11671c-1--d87543-;rport=61406
Call-ID: 98452d4f5616940a@xxxxxxxxxxxxxxxxxxxx
CSeq: 1 SUBSCRIBE
Record-Route: <sip:67.17.145.60;transport=tcp;ftag=a75a2a4c;lr=on>
Contact: <sip:chris2@xxxxxxxxxxxx:5060;transport=TCP>
Expires: 120
User-Agent: Test.exe version 1.0.0.1
Content-Length: 0
No. Time Source Destination Protocol
Info
81 3.317686 172.17.72.10 67.17.145.60 SIP
Request: NOTIFY sip:chris@xxxxxxxxxxxxx:5060;transport=TCP
Frame 81 (899 bytes on wire, 899 bytes captured)
Ethernet II, Src: 00:11:43:6c:01:fe, Dst: 00:00:0c:07:ac:01
Internet Protocol, Src Addr: 172.17.72.10 (172.17.72.10), Dst Addr:
67.17.145.60 (67.17.145.60)
Transmission Control Protocol, Src Port: 1651 (1651), Dst Port: 5060
(5060), Seq: 995, Ack: 628, Len: 845
Session Initiation Protocol
Request-Line: NOTIFY sip:chris@xxxxxxxxxxxxx:5060;transport=TCP SIP/2.0
Message Header
To: "Chris"<sip:chris@xxxxxxxxxxxxxxxxxx>;tag=a75a2a4c
From: <sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=237a4025
Via: SIP/2.0/TCP
172.17.72.10:5060;branch=z9hG4bK-d87543-131c1f734b313351-1--d87543-;rport
Call-ID: 98452d4f5616940a@xxxxxxxxxxxxxxxxxxxx
CSeq: 2 NOTIFY
Route: <sip:67.17.145.60;transport=tcp;lr;ftag=a75a2a4c>
Contact: <sip:chris2@xxxxxxxxxxxx:5060;transport=TCP>
Max-Forwards: 70
Content-Type: application/pidf+xml
User-Agent: Test.exe version 1.0.0.1
Subscription-State: active;expires=120
Event: presence
Content-Length: 237
Message body
<?xml version="1.0" encoding="UTF-8"?>\r\n
<presence xmlns="urn:ietf:params:xml:ns:pidf"\r\n
entity="sip:chris2@xxxxxxxxxxxxxxxxxx">\r\n
<tuple id="9b6yhF2Gk37o4" >\r\n
<status><basic>open</basic></status>\r\n
</tuple>\r\n
</presence>\r\n
No. Time Source Destination Protocol
Info
84 3.412435 172.17.72.10 67.17.145.60 SIP
Request: SUBSCRIBE sip:chris@xxxxxxxxxxxxxxxxxx
Frame 84 (552 bytes on wire, 552 bytes captured)
Ethernet II, Src: 00:11:43:6c:01:fe, Dst: 00:00:0c:07:ac:01
Internet Protocol, Src Addr: 172.17.72.10 (172.17.72.10), Dst Addr:
67.17.145.60 (67.17.145.60)
Transmission Control Protocol, Src Port: 1651 (1651), Dst Port: 5060
(5060), Seq: 1840, Ack: 628, Len: 498
Session Initiation Protocol
Request-Line: SUBSCRIBE sip:chris@xxxxxxxxxxxxxxxxxx SIP/2.0
Message Header
To: <sip:chris@xxxxxxxxxxxxxxxxxx>
From: "Christian II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=6c1c4a24
Via: SIP/2.0/TCP
172.17.72.10:5060;branch=z9hG4bK-d87543-ae0c6e578b16a663-1--d87543-;rport
Call-ID: 7a74dc5fa57a8532@TmV3QWdlTGFwdG9w
CSeq: 1 SUBSCRIBE
Contact: <sip:chris2@xxxxxxxxxxxx:5060;transport=TCP>
Expires: 120
Max-Forwards: 70
Accept: application/pidf+xml
User-Agent: Test.exe version 1.0.0.1
Event: presence
Content-Length: 0
No. Time Source Destination Protocol
Info
87 3.535966 67.17.145.60 172.17.72.10 SIP
Status: 200 OK
Frame 87 (522 bytes on wire, 522 bytes captured)
Ethernet II, Src: 00:07:b3:cd:3b:00, Dst: 00:11:43:6c:01:fe
Internet Protocol, Src Addr: 67.17.145.60 (67.17.145.60), Dst Addr:
172.17.72.10 (172.17.72.10)
Transmission Control Protocol, Src Port: 5060 (5060), Dst Port: 1651
(1651), Seq: 628, Ack: 2338, Len: 468
Session Initiation Protocol
Status-Line: SIP/2.0 200 OK
Message Header
To: "Chris"<sip:chris@xxxxxxxxxxxxxxxxxx>;tag=a75a2a4c
From: <sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=237a4025
Via: SIP/2.0/TCP
172.17.72.10:5060;branch=z9hG4bK-d87543-131c1f734b313351-1--d87543-;rport=61453
Call-ID: 98452d4f5616940a@xxxxxxxxxxxxxxxxxxxx
CSeq: 2 NOTIFY
Record-Route: <sip:67.17.145.60;transport=tcp;ftag=237a4025;lr=on>
Contact: <sip:chris@xxxxxxxxxxxxx:5060;transport=TCP>
User-Agent: Test.exe version 1.0.0.1
Content-Length: 0
No. Time Source Destination Protocol
Info
88 3.615823 67.17.145.60 172.17.72.10 SIP
Request: NOTIFY sip:chris2@xxxxxxxxxxxx:5060;transport=TCP
Frame 88 (979 bytes on wire, 979 bytes captured)
Ethernet II, Src: 00:07:b3:cd:3b:00, Dst: 00:11:43:6c:01:fe
Internet Protocol, Src Addr: 67.17.145.60 (67.17.145.60), Dst Addr:
172.17.72.10 (172.17.72.10)
Transmission Control Protocol, Src Port: 32820 (32820), Dst Port: 5060
(5060), Seq: 1588, Ack: 992, Len: 925
Session Initiation Protocol
Request-Line: NOTIFY sip:chris2@xxxxxxxxxxxx:5060;transport=TCP SIP/2.0
Message Header
Record-Route: <sip:67.17.145.60;transport=tcp;ftag=a051c653;lr=on>
To: "Christian II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=5d62ef46
From: <sip:chris@xxxxxxxxxxxxxxxxxx>;tag=a051c653
Via: SIP/2.0/TCP 67.17.145.60;branch=z9hG4bK46b7.fa2.0;i=c7
Via: SIP/2.0/TCP
172.17.72.108:5060;branch=z9hG4bK-d87543-9823253e9d21de3e-1--d87543-;rport=61406
Call-ID: 436ce65f892bf01a@TmV3QWdlTGFwdG9w
CSeq: 2 NOTIFY
Contact: <sip:chris@xxxxxxxxxxxxx:5060;transport=TCP>
Max-Forwards: 16
Content-Type: application/pidf+xml
User-Agent: Test.exe version 1.0.0.1
Subscription-State: active;expires=119
Event: presence
Content-Length: 236
Message body
<?xml version="1.0" encoding="UTF-8"?>\r\n
<presence xmlns="urn:ietf:params:xml:ns:pidf"\r\n
entity="sip:chris@xxxxxxxxxxxxxxxxxx">\r\n
<tuple id="9b6yhF2Gk37o4" >\r\n
<status><basic>open</basic></status>\r\n
</tuple>\r\n
</presence>\r\n
No. Time Source Destination Protocol
Info
89 3.635823 67.17.145.60 172.17.72.10 SIP
Status: 202 Accepted
Frame 89 (548 bytes on wire, 548 bytes captured)
Ethernet II, Src: 00:07:b3:cd:3b:00, Dst: 00:11:43:6c:01:fe
Internet Protocol, Src Addr: 67.17.145.60 (67.17.145.60), Dst Addr:
172.17.72.10 (172.17.72.10)
Transmission Control Protocol, Src Port: 5060 (5060), Dst Port: 1651
(1651), Seq: 1096, Ack: 2338, Len: 494
Session Initiation Protocol
Status-Line: SIP/2.0 202 Accepted
Message Header
To: <sip:chris@xxxxxxxxxxxxxxxxxx>;tag=b104695c
From: "Christian II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=6c1c4a24
Via: SIP/2.0/TCP
172.17.72.10:5060;branch=z9hG4bK-d87543-ae0c6e578b16a663-1--d87543-;rport=61453
Call-ID: 7a74dc5fa57a8532@TmV3QWdlTGFwdG9w
CSeq: 1 SUBSCRIBE
Record-Route: <sip:67.17.145.60;transport=tcp;ftag=6c1c4a24;lr=on>
Contact: <sip:chris@xxxxxxxxxxxxx:5060;transport=TCP>
Expires: 120
User-Agent: Test.exe version 1.0.0.1
Content-Length: 0
No. Time Source Destination Protocol
Info
93 3.763946 172.17.72.10 67.17.145.60 SIP
Status: 200 OK
Frame 93 (587 bytes on wire, 587 bytes captured)
Ethernet II, Src: 00:11:43:6c:01:fe, Dst: 00:00:0c:07:ac:01
Internet Protocol, Src Addr: 172.17.72.10 (172.17.72.10), Dst Addr:
67.17.145.60 (67.17.145.60)
Transmission Control Protocol, Src Port: 5060 (5060), Dst Port: 32820
(32820), Seq: 992, Ack: 2513, Len: 533
Session Initiation Protocol
Status-Line: SIP/2.0 200 OK
Message Header
To: "Christian II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=5d62ef46
From: <sip:chris@xxxxxxxxxxxxxxxxxx>;tag=a051c653
Via: SIP/2.0/TCP 67.17.145.60;branch=z9hG4bK46b7.fa2.0;i=c7
Via: SIP/2.0/TCP
172.17.72.108:5060;branch=z9hG4bK-d87543-9823253e9d21de3e-1--d87543-;rport=61406
Call-ID: 436ce65f892bf01a@TmV3QWdlTGFwdG9w
CSeq: 2 NOTIFY
Record-Route: <sip:67.17.145.60;transport=tcp;ftag=a051c653;lr=on>
Contact: <sip:chris2@xxxxxxxxxxxx:5060;transport=TCP>
User-Agent: Test.exe version 1.0.0.1
Content-Length: 0
No. Time Source Destination Protocol
Info
249 32.805354 67.17.145.60 172.17.72.10 SIP
Status: 408 Request Timeout
Frame 249 (642 bytes on wire, 642 bytes captured)
Ethernet II, Src: 00:07:b3:cd:3b:00, Dst: 00:11:43:6c:01:fe
Internet Protocol, Src Addr: 67.17.145.60 (67.17.145.60), Dst Addr:
172.17.72.10 (172.17.72.10)
Transmission Control Protocol, Src Port: 5060 (5060), Dst Port: 1651
(1651), Seq: 1590, Ack: 2338, Len: 588
Session Initiation Protocol
Status-Line: SIP/2.0 408 Request Timeout
Message Header
To:
<sip:chris2@xxxxxxxxxxxxx>;tag=a6a1c5f60faecf035a1ae5b6e96e979a-ad0c
From: "Christian II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=7a7dba16
Via: SIP/2.0/TCP
172.17.72.10:5060;branch=z9hG4bK-d87543-237d6f4d5a4d9e46-1--d87543-;rport=61453
Call-ID: db4056791937a916@TmV3QWdlTGFwdG9w
CSeq: 1 SUBSCRIBE
Server: Sip EXpress router (0.9.0 (sparc64/solaris))
Content-Length: 0
Warning: 392 10.210.10.93:5060 "Noisy feedback tells: pid=282
req_src_ip=67.17.144.2 req_src_port=61453 in_uri=sip:chris2@xxxxxxxxxxxxx
out_uri=sip:chris2@xxxxxxxxxxxxx via_cnt==0"
No. Time Source Destination Protocol
Info
254 32.834678 172.17.72.10 67.17.145.60 SIP
Continuation
Frame 254 (58 bytes on wire, 58 bytes captured)
Ethernet II, Src: 00:11:43:6c:01:fe, Dst: 00:00:0c:07:ac:01
Internet Protocol, Src Addr: 172.17.72.10 (172.17.72.10), Dst Addr:
67.17.145.60 (67.17.145.60)
Transmission Control Protocol, Src Port: 1654 (1654), Dst Port: 5060
(5060), Seq: 1, Ack: 1, Len: 4
Session Initiation Protocol
Continuation line:
Continuation data
No. Time Source Destination Protocol
Info
259 32.880596 172.17.72.10 67.17.145.60 SIP
Request: SUBSCRIBE sip:
Frame 259 (545 bytes on wire, 545 bytes captured)
Ethernet II, Src: 00:11:43:6c:01:fe, Dst: 00:00:0c:07:ac:01
Internet Protocol, Src Addr: 172.17.72.10 (172.17.72.10), Dst Addr:
67.17.145.60 (67.17.145.60)
Transmission Control Protocol, Src Port: 1654 (1654), Dst Port: 5060
(5060), Seq: 5, Ack: 1, Len: 491
Session Initiation Protocol
Request-Line: SUBSCRIBE sip: SIP/2.0
Message Header
To: <sip:>
From: "Christian II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=973bba64
Via: SIP/2.0/TCP
172.17.72.10:5060;branch=z9hG4bK-d87543-d279233bd4192d0d-1--d87543-;rport
Call-ID: 20749e247302882b@TmV3QWdlTGFwdG9w
CSeq: 1 SUBSCRIBE
Contact: <sip:chris2@xxxxxxxxxxxx:5060;transport=TCP>
Expires: 3600
Max-Forwards: 70
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, MESSAGE, SUBSCRIBE,
NOTIFY
User-Agent: Test.exe version 1.0.0.1
Event: presence
Content-Length: 0
No. Time Source Destination Protocol
Info
261 32.887357 67.17.145.60 172.17.72.10 SIP
Status: 479 Regretfully, we were not able to process the URI (479/SL)
Frame 261 (624 bytes on wire, 624 bytes captured)
Ethernet II, Src: 00:07:b3:cd:3b:00, Dst: 00:11:43:6c:01:fe
Internet Protocol, Src Addr: 67.17.145.60 (67.17.145.60), Dst Addr:
172.17.72.10 (172.17.72.10)
Transmission Control Protocol, Src Port: 5060 (5060), Dst Port: 1654
(1654), Seq: 1, Ack: 496, Len: 570
Session Initiation Protocol
Status-Line: SIP/2.0 479 Regretfully, we were not able to process the
URI (479/SL)
Message Header
To: <sip:>;tag=b27e1a1d33761e85846fc98f5f3a7e58.31b7
From: "Christian II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=973bba64
Via: SIP/2.0/TCP
172.17.72.10:5060;branch=z9hG4bK-d87543-d279233bd4192d0d-1--d87543-;rport=61462
Call-ID: 20749e247302882b@TmV3QWdlTGFwdG9w
CSeq: 1 SUBSCRIBE
Server: Sip EXpress router (0.9.0 (sparc64/solaris))
Content-Length: 0
Warning: 392 10.210.10.93:5060 "Noisy feedback tells: pid=284
req_src_ip=67.17.144.2 req_src_port=61462 in_uri=sip: out_uri=sip:
via_cnt==1"
No. Time Source Destination Protocol
Info
269 33.359124 172.17.72.10 67.17.145.60 SIP
Continuation
Frame 269 (58 bytes on wire, 58 bytes captured)
Ethernet II, Src: 00:11:43:6c:01:fe, Dst: 00:00:0c:07:ac:01
Internet Protocol, Src Addr: 172.17.72.10 (172.17.72.10), Dst Addr:
67.17.145.60 (67.17.145.60)
Transmission Control Protocol, Src Port: 5060 (5060), Dst Port: 32820
(32820), Seq: 1525, Ack: 2513, Len: 4
Session Initiation Protocol
Continuation line:
Continuation data
No. Time Source Destination Protocol
Info
273 33.811278 172.17.72.10 67.17.145.60 SIP
Continuation
Frame 273 (58 bytes on wire, 58 bytes captured)
Ethernet II, Src: 00:11:43:6c:01:fe, Dst: 00:00:0c:07:ac:01
Internet Protocol, Src Addr: 172.17.72.10 (172.17.72.10), Dst Addr:
67.17.145.60 (67.17.145.60)
Transmission Control Protocol, Src Port: 5060 (5060), Dst Port: 32820
(32820), Seq: 1529, Ack: 2513, Len: 4
Session Initiation Protocol
Continuation line:
Continuation data
No. Time Source Destination Protocol
Info
289 35.023180 172.17.72.10 67.17.145.60 SIP
Request: SUBSCRIBE sip:chris@xxxxxxxxxxxxx:5060;transport=TCP
Frame 289 (621 bytes on wire, 621 bytes captured)
Ethernet II, Src: 00:11:43:6c:01:fe, Dst: 00:00:0c:07:ac:01
Internet Protocol, Src Addr: 172.17.72.10 (172.17.72.10), Dst Addr:
67.17.145.60 (67.17.145.60)
Transmission Control Protocol, Src Port: 1654 (1654), Dst Port: 5060
(5060), Seq: 496, Ack: 571, Len: 567
Session Initiation Protocol
Request-Line: SUBSCRIBE sip:chris@xxxxxxxxxxxxx:5060;transport=TCP
SIP/2.0
Message Header
To: <sip:chris@xxxxxxxxxxxxx:5060;transport=TCP>
From: "Christian II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=3b242420
Via: SIP/2.0/TCP
172.17.72.10:5060;branch=z9hG4bK-d87543-993f032131228317-1--d87543-;rport
Call-ID: ea4fec585754ee63@TmV3QWdlTGFwdG9w
CSeq: 1 SUBSCRIBE
Contact: <sip:chris2@xxxxxxxxxxxx:5060;transport=TCP>
Expires: 3600
Max-Forwards: 70
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, MESSAGE, SUBSCRIBE,
NOTIFY
User-Agent: Test.exe version 1.0.0.1
Event: presence
Content-Length: 0
No. Time Source Destination Protocol
Info
290 35.087760 172.17.72.10 67.17.145.60 SIP
Request: SUBSCRIBE sip:
Frame 290 (1314 bytes on wire, 1314 bytes captured)
Ethernet II, Src: 00:11:43:6c:01:fe, Dst: 00:00:0c:07:ac:01
Internet Protocol, Src Addr: 172.17.72.10 (172.17.72.10), Dst Addr:
67.17.145.60 (67.17.145.60)
Transmission Control Protocol, Src Port: 1654 (1654), Dst Port: 5060
(5060), Seq: 1063, Ack: 571, Len: 1260
Session Initiation Protocol
Request-Line: SUBSCRIBE sip: SIP/2.0
Message Header
To: <sip:>
From: "Christian II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=a239297b
Via: SIP/2.0/TCP
172.17.72.10:5060;branch=z9hG4bK-d87543-98484003d14a855f-1--d87543-;rport
Call-ID: 7546817a357b946c@TmV3QWdlTGFwdG9w
CSeq: 1 SUBSCRIBE
Contact: <sip:chris2@xxxxxxxxxxxx:5060;transport=TCP>
Expires: 3600
Max-Forwards: 70
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, MESSAGE, SUBSCRIBE,
NOTIFY
User-Agent: Test.exe version 1.0.0.1
Event: presence
Content-Length: 0
Message body
SUBSCRIBE sip: SIP/2.0\r\n
To: <sip:>\r\n
From: "Christian
II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=05371e2b\r\n
Via: SIP/2.0/TCP
172.17.72.10:5060;branch=z9hG4bK-d87543-353cf12a9a57bd6f-1--d87543-;rport\r\n
Call-ID: 8c06ad40cf3a9d0b@TmV3QWdlTGFwdG9w\r\n
CSeq: 1 SUBSCRIBE\r\n
Contact: <sip:chris2@xxxxxxxxxxxx:5060;transport=TCP>\r\n
Expires: 3600\r\n
Max-Forwards: 70\r\n
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, MESSAGE, SUBSCRIBE,
NOTIFY\r\n
User-Agent: Test.exe version 1.0.0.1\r\n
Event: presence\r\n
Content-Length: 0\r\n
\r\n
SUBSCRIBE sip: SIP/2.0\r\n
To: <sip:>\r\n
From: "Christian
II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=30495c79\r\n
Via: SIP/2.0/TCP
172.17.72.10:5060;branch=z9hG4bK-d87543-54105620f72c9942-1--d87543-;rport\r\n
Call-ID: 0c3a9d52c9784e6d@TmV3QWdlTGFwdG9w\r\n
CSeq: 1 SUBSCRIBE\r\n
Contact: <sip:chris2@
No. Time Source Destination Protocol
Info
291 35.087805 172.17.72.10 67.17.145.60 SIP
Continuation
Frame 291 (267 bytes on wire, 267 bytes captured)
Ethernet II, Src: 00:11:43:6c:01:fe, Dst: 00:00:0c:07:ac:01
Internet Protocol, Src Addr: 172.17.72.10 (172.17.72.10), Dst Addr:
67.17.145.60 (67.17.145.60)
Transmission Control Protocol, Src Port: 1654 (1654), Dst Port: 5060
(5060), Seq: 2323, Ack: 571, Len: 213
Session Initiation Protocol
Continuation line: 172.17.72.10:5060;transport=TCP>
Continuation data
No. Time Source Destination Protocol
Info
295 35.108146 172.17.72.10 67.17.145.60 SIP
Request: SUBSCRIBE sip:
Frame 295 (545 bytes on wire, 545 bytes captured)
Ethernet II, Src: 00:11:43:6c:01:fe, Dst: 00:00:0c:07:ac:01
Internet Protocol, Src Addr: 172.17.72.10 (172.17.72.10), Dst Addr:
67.17.145.60 (67.17.145.60)
Transmission Control Protocol, Src Port: 1654 (1654), Dst Port: 5060
(5060), Seq: 2536, Ack: 572, Len: 491
Session Initiation Protocol
Request-Line: SUBSCRIBE sip: SIP/2.0
Message Header
To: <sip:>
From: "Christian II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=d82d4713
Via: SIP/2.0/TCP
172.17.72.10:5060;branch=z9hG4bK-d87543-777f530fee300236-1--d87543-;rport
Call-ID: 3e2e892db23df722@TmV3QWdlTGFwdG9w
CSeq: 1 SUBSCRIBE
Contact: <sip:chris2@xxxxxxxxxxxx:5060;transport=TCP>
Expires: 3600
Max-Forwards: 70
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, MESSAGE, SUBSCRIBE,
NOTIFY
User-Agent: Test.exe version 1.0.0.1
Event: presence
Content-Length: 0
No. Time Source Destination Protocol
Info
299 35.241683 67.17.145.60 172.17.72.10 SIP
Request: NOTIFY sip:chris2@xxxxxxxxxxxx:5060;transport=TCP
Frame 299 (979 bytes on wire, 979 bytes captured)
Ethernet II, Src: 00:07:b3:cd:3b:00, Dst: 00:11:43:6c:01:fe
Internet Protocol, Src Addr: 67.17.145.60 (67.17.145.60), Dst Addr:
172.17.72.10 (172.17.72.10)
Transmission Control Protocol, Src Port: 32820 (32820), Dst Port: 5060
(5060), Seq: 2513, Ack: 1533, Len: 925
Session Initiation Protocol
Request-Line: NOTIFY sip:chris2@xxxxxxxxxxxx:5060;transport=TCP SIP/2.0
Message Header
Record-Route: <sip:67.17.145.60;transport=tcp;ftag=a051c653;lr=on>
To: "Christian II"<sip:chris2@xxxxxxxxxxxxxxxxxx>;tag=5d62ef46
From: <sip:chris@xxxxxxxxxxxxxxxxxx>;tag=a051c653
Via: SIP/2.0/TCP 67.17.145.60;branch=z9hG4bK56b7.3982.0;i=28
Via: SIP/2.0/TCP
172.17.72.108:5060;branch=z9hG4bK-d87543-12242f651b044276-1--d87543-;rport=62230
Call-ID: 436ce65f892bf01a@TmV3QWdlTGFwdG9w
CSeq: 3 NOTIFY
Contact: <sip:chris@xxxxxxxxxxxxx:5060;transport=TCP>
Max-Forwards: 16
Content-Type: application/pidf+xml
User-Agent: Test.exe version 1.0.0.1
Subscription-State: active;expires=88
Event: presence
Content-Length: 236
Message body
<?xml version="1.0" encoding="UTF-8"?>\r\n
<presence xmlns="urn:ietf:params:xml:ns:pidf"\r\n
entity="sip:chris@xxxxxxxxxxxxxxxxxx">\r\n
<tuple id="9b6yhF2Gk37o4" >\r\n
<status><basic>open</basic></status>\r\n
</tuple>\r\n
</presence>\r\n