[SIPForum-discussion] Is it SIP ?

[Herve Jourdain]

Hi,

 

Forgot to post the list again, I guess… :-(

 

So basically it appears it’s as I previously suggested!

 

In packet 145, you have a first valid SIP message (an OPTIONS request), then
at the end of the data section, after some garbage, you have the beginning
of another SIP message, “SIP/2.0 “, which should be the beginning of a
response… and the end of the response is in packet 147 (packet 146 is from
the peer…), it’s “481 Call Leg/Transaction Does Not Exist”…

Packets 150-152 is the same: first and beginning of second OPTIONS requests
in packet150, and continuation of second OPTIONS request in packet 152.

 

The packets coming from the peer in TCP (packets 146 and 151) seem to have
been truncated by the wireshark capture process, they only display 60 bytes,
so it’s difficult to know what they were carrying…

 

1417 doesn’t seem to be a SIP message or the continuation of a SIP message.

1416 could be, but is also truncated by the capture.

1426 is also truncated by the capture.

 

1508: there is a valid and complete SIP message somewhere in the flow.

 

1175: there is 1 full OPTIONS request in the flow, and the beginning of
another OPTIONS request.

1177: it contains the end of the previous OPTIONS request started in 1175.

 

I hope this helps.

 

Regards,

 

Herve

 

 

  _____  

From: 雨 陈 [mailto:chen.yu26 at yahoo.com.cn] 
Sent: vendredi 4 janvier 2008 14:40
To: group SIP; Jourdain Herve
Subject: RE: Is it SIP ?

 

Hi all,

attached is the wireshark trace about the particular SIP.

 

 If U like, U can find out these would-be SIPs at Msg NO.147,  NO.152,
NO1508,  NO.1175 and NO.1177.Are they SIP ? Supposed they are SIPs
transmitted by TCP, why not the From and To URI is "sips:" ?

 

I will very appreciated if U can discuss or solve the problem.

 

Happy every day!

Nora

 

P.S.:the source I got the packages is not PSTN, rather the soft switch in
Guangdong.

  

  _____  

 
<http://cn.mail.yahoo.com/gc/index.html?entry=5&souce=mail_mailletter_taglin
e> 雅虎邮箱传递新年祝福，个性贺卡送亲朋！ 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://sipforum.org/pipermail/discussion/attachments/20080104/c3298fbb/attachment-0014.html>