Busy 486 error

[emansoori]

1. Brekeke Product Name and Version: 3.1.9.0 Standard

2. Java version: 6 update 10

3. OS type and the version: windows server 2008 R2

4. UA (phone), gateway or other hardware/software involved:
Portsip, PortGo softphone

5. Your problem:

When attempt to dial between two Sip video softphone I get a Busy 486 error. I have captured the SIP packets using Wireshark and I see that the ICMP is unreachable on destination address. Any idea if ICMP port should be open for successful communication?
I have the following ports open
udp 5060
tcp and udp 5000-5500
udp 10000-20000

Any help is greatly appreciated.

[sympology]

What is sending the 486 error? The called end point or Brekeke?

[james]

Are both video soft phones registered in the SIP Server??

[emansoori]

I believe the Brekeke is sending the busy 480 message . both endpoint are registered with SIP server.

Thank you

[james]

Check the [Session Logs] and [Error Logs] pages.

[emansoori]

Nothing in the session or error logs for the end points. one thing to mention is that I only have this issue with users that are connecting via Cisco VPN. users who are connecting directly to network have no issues.

Thanks

[james]

If the SIP Server sent 486, you can see its log at the [Error Logs] page.
If the UAS sent 486, you can see its log at the [Session Logs] page.

I suppose someone rejected a call before INVITE reached the SIP Server.

Can you capture packets with Wireshark or tcpdump?

[emansoori]

Here is the wireshark capture, the only thing I see here is the ICMP is being rejected.

Thanks for your help

No. Time Source Destination Protocol Length Info
1180 11.425141000 172.25.3.210 172.16.3.5 SIP 609 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 1180: 609 bytes on wire (4872 bits), 609 bytes captured (4872 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.210 (172.25.3.210), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7316 (7316), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
1181 11.427760000 172.16.3.5 172.25.3.210 SIP 531 Status: 200 OK (1 binding) |

Frame 1181: 531 bytes on wire (4248 bits), 531 bytes captured (4248 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.210 (172.25.3.210)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7316 (7316)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
1372 17.482160000 172.25.3.211 172.16.3.5 SIP 609 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 1372: 609 bytes on wire (4872 bits), 609 bytes captured (4872 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.211 (172.25.3.211), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7469 (7469), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
1373 17.484624000 172.16.3.5 172.25.3.211 SIP 531 Status: 200 OK (1 binding) |

Frame 1373: 531 bytes on wire (4248 bits), 531 bytes captured (4248 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.211 (172.25.3.211)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7469 (7469)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
1594 25.037570000 172.25.3.210 172.16.3.5 SIP/SDP 1066 Request: INVITE sip:Cathy@172.16.3.5 |

Frame 1594: 1066 bytes on wire (8528 bits), 1066 bytes captured (8528 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.210 (172.25.3.210), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7316 (7316), Dst Port: 5060 (5060)
Session Initiation Protocol (INVITE)

No. Time Source Destination Protocol Length Info
1595 25.037606000 172.25.3.210 172.16.3.5 SIP 295 Request: CANCEL sip:Cathy@172.16.3.5 |

Frame 1595: 295 bytes on wire (2360 bits), 295 bytes captured (2360 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.210 (172.25.3.210), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7316 (7316)
Session Initiation Protocol (CANCEL)

No. Time Source Destination Protocol Length Info
1596 25.037634000 172.16.3.5 172.25.3.210 ICMP 323 Destination unreachable (Port unreachable)

Frame 1596: 323 bytes on wire (2584 bits), 323 bytes captured (2584 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.210 (172.25.3.210)
Internet Control Message Protocol

No. Time Source Destination Protocol Length Info
1597 25.037703000 172.25.3.210 172.16.3.5 SIP 295 Request: CANCEL sip:Cathy@172.16.3.5 |

Frame 1597: 295 bytes on wire (2360 bits), 295 bytes captured (2360 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.210 (172.25.3.210), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7316 (7316)
Session Initiation Protocol (CANCEL)

No. Time Source Destination Protocol Length Info
1598 25.037943000 172.16.3.5 172.25.3.210 SIP 340 Status: 100 Trying |

Frame 1598: 340 bytes on wire (2720 bits), 340 bytes captured (2720 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.210 (172.25.3.210)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7316 (7316)
Session Initiation Protocol (100)

No. Time Source Destination Protocol Length Info
1599 25.038214000 172.16.3.5 172.25.3.210 SIP 489 Status: 407 Proxy Authentication Required |

Frame 1599: 489 bytes on wire (3912 bits), 489 bytes captured (3912 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.210 (172.25.3.210)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7316 (7316)
Session Initiation Protocol (407)

No. Time Source Destination Protocol Length Info
1600 25.120029000 172.25.3.210 172.16.3.5 SIP 326 Request: ACK sip:Cathy@172.16.3.5 |

Frame 1600: 326 bytes on wire (2608 bits), 326 bytes captured (2608 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.210 (172.25.3.210), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7316 (7316), Dst Port: 5060 (5060)
Session Initiation Protocol (ACK)

No. Time Source Destination Protocol Length Info
1601 25.126512000 172.25.3.210 172.16.3.5 SIP 326 Request: ACK sip:Cathy@172.16.3.5 |

Frame 1601: 326 bytes on wire (2608 bits), 326 bytes captured (2608 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.210 (172.25.3.210), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7316 (7316), Dst Port: 5060 (5060)
Session Initiation Protocol (ACK)

No. Time Source Destination Protocol Length Info
1602 25.126857000 172.25.3.210 172.16.3.5 SIP 326 Request: ACK sip:Cathy@172.16.3.5 |

Frame 1602: 326 bytes on wire (2608 bits), 326 bytes captured (2608 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.210 (172.25.3.210), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7316 (7316), Dst Port: 5060 (5060)
Session Initiation Protocol (ACK)

No. Time Source Destination Protocol Length Info
2396 51.535708000 172.25.3.210 172.16.3.5 SIP 609 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 2396: 609 bytes on wire (4872 bits), 609 bytes captured (4872 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.210 (172.25.3.210), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7316 (7316), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
2397 51.537961000 172.16.3.5 172.25.3.210 SIP 531 Status: 200 OK (1 binding) |

Frame 2397: 531 bytes on wire (4248 bits), 531 bytes captured (4248 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.210 (172.25.3.210)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7316 (7316)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
2579 57.592716000 172.25.3.211 172.16.3.5 SIP 609 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 2579: 609 bytes on wire (4872 bits), 609 bytes captured (4872 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.211 (172.25.3.211), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7469 (7469), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
2580 57.594997000 172.16.3.5 172.25.3.211 SIP 531 Status: 200 OK (1 binding) |

Frame 2580: 531 bytes on wire (4248 bits), 531 bytes captured (4248 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.211 (172.25.3.211)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7469 (7469)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
4099 91.643023000 172.25.3.210 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 4099: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.210 (172.25.3.210), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7316 (7316), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
4100 91.645361000 172.16.3.5 172.25.3.210 SIP 532 Status: 200 OK (1 binding) |

Frame 4100: 532 bytes on wire (4256 bits), 532 bytes captured (4256 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.210 (172.25.3.210)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7316 (7316)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
4248 97.694181000 172.25.3.211 172.16.3.5 SIP 609 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 4248: 609 bytes on wire (4872 bits), 609 bytes captured (4872 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.211 (172.25.3.211), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7469 (7469), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
4249 97.696400000 172.16.3.5 172.25.3.211 SIP 531 Status: 200 OK (1 binding) |

Frame 4249: 531 bytes on wire (4248 bits), 531 bytes captured (4248 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.211 (172.25.3.211)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7469 (7469)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
5711 131.750558000 172.25.3.210 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 5711: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.210 (172.25.3.210), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7316 (7316), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
5712 131.753420000 172.16.3.5 172.25.3.210 SIP 531 Status: 200 OK (1 binding) |

Frame 5712: 531 bytes on wire (4248 bits), 531 bytes captured (4248 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.210 (172.25.3.210)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7316 (7316)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
5825 137.798327000 172.25.3.211 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 5825: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.211 (172.25.3.211), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7469 (7469), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
5826 137.801073000 172.16.3.5 172.25.3.211 SIP 532 Status: 200 OK (1 binding) |

Frame 5826: 532 bytes on wire (4256 bits), 532 bytes captured (4256 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.211 (172.25.3.211)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7469 (7469)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
6782 171.864515000 172.25.3.210 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 6782: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.210 (172.25.3.210), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7316 (7316), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
6783 171.866803000 172.16.3.5 172.25.3.210 SIP 532 Status: 200 OK (1 binding) |

Frame 6783: 532 bytes on wire (4256 bits), 532 bytes captured (4256 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.210 (172.25.3.210)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7316 (7316)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
6952 177.904606000 172.25.3.211 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 6952: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.211 (172.25.3.211), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7469 (7469), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
6953 177.906845000 172.16.3.5 172.25.3.211 SIP 532 Status: 200 OK (1 binding) |

Frame 6953: 532 bytes on wire (4256 bits), 532 bytes captured (4256 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.211 (172.25.3.211)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7469 (7469)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
8896 211.972240000 172.25.3.210 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 8896: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.210 (172.25.3.210), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7316 (7316), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
8897 211.974636000 172.16.3.5 172.25.3.210 SIP 532 Status: 200 OK (1 binding) |

Frame 8897: 532 bytes on wire (4256 bits), 532 bytes captured (4256 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.210 (172.25.3.210)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7316 (7316)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
9030 218.019962000 172.25.3.211 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 9030: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.211 (172.25.3.211), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7469 (7469), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
9031 218.022149000 172.16.3.5 172.25.3.211 SIP 532 Status: 200 OK (1 binding) |

Frame 9031: 532 bytes on wire (4256 bits), 532 bytes captured (4256 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.211 (172.25.3.211)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7469 (7469)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
10439 252.076647000 172.25.3.210 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 10439: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.210 (172.25.3.210), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7316 (7316), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
10440 252.078815000 172.16.3.5 172.25.3.210 SIP 532 Status: 200 OK (1 binding) |

Frame 10440: 532 bytes on wire (4256 bits), 532 bytes captured (4256 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.210 (172.25.3.210)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7316 (7316)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
10576 258.121436000 172.25.3.211 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 10576: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.211 (172.25.3.211), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7469 (7469), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
10577 258.124029000 172.16.3.5 172.25.3.211 SIP 532 Status: 200 OK (1 binding) |

Frame 10577: 532 bytes on wire (4256 bits), 532 bytes captured (4256 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.211 (172.25.3.211)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7469 (7469)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
11392 292.180866000 172.25.3.210 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 11392: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.210 (172.25.3.210), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7316 (7316), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
11393 292.183167000 172.16.3.5 172.25.3.210 SIP 532 Status: 200 OK (1 binding) |

Frame 11393: 532 bytes on wire (4256 bits), 532 bytes captured (4256 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.210 (172.25.3.210)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7316 (7316)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
11522 298.222765000 172.25.3.211 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 11522: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.211 (172.25.3.211), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7469 (7469), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
11523 298.225452000 172.16.3.5 172.25.3.211 SIP 532 Status: 200 OK (1 binding) |

Frame 11523: 532 bytes on wire (4256 bits), 532 bytes captured (4256 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.211 (172.25.3.211)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7469 (7469)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
12768 332.288500000 172.25.3.210 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 12768: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.210 (172.25.3.210), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7316 (7316), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
12769 332.291252000 172.16.3.5 172.25.3.210 SIP 532 Status: 200 OK (1 binding) |

Frame 12769: 532 bytes on wire (4256 bits), 532 bytes captured (4256 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.210 (172.25.3.210)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7316 (7316)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
12949 338.327035000 172.25.3.211 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 12949: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.211 (172.25.3.211), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7469 (7469), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
12950 338.329257000 172.16.3.5 172.25.3.211 SIP 532 Status: 200 OK (1 binding) |

Frame 12950: 532 bytes on wire (4256 bits), 532 bytes captured (4256 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.211 (172.25.3.211)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7469 (7469)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
14304 372.399603000 172.25.3.210 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 14304: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.210 (172.25.3.210), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7316 (7316), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
14305 372.401946000 172.16.3.5 172.25.3.210 SIP 532 Status: 200 OK (1 binding) |

Frame 14305: 532 bytes on wire (4256 bits), 532 bytes captured (4256 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.210 (172.25.3.210)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7316 (7316)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
14443 378.432063000 172.25.3.211 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 14443: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.211 (172.25.3.211), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7469 (7469), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
14444 378.434394000 172.16.3.5 172.25.3.211 SIP 532 Status: 200 OK (1 binding) |

Frame 14444: 532 bytes on wire (4256 bits), 532 bytes captured (4256 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.211 (172.25.3.211)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7469 (7469)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
15256 412.506932000 172.25.3.210 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 15256: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.210 (172.25.3.210), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7316 (7316), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
15257 412.509234000 172.16.3.5 172.25.3.210 SIP 532 Status: 200 OK (1 binding) |

Frame 15257: 532 bytes on wire (4256 bits), 532 bytes captured (4256 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.210 (172.25.3.210)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7316 (7316)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
15401 418.535793000 172.25.3.211 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 15401: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.211 (172.25.3.211), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7469 (7469), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
15402 418.538004000 172.16.3.5 172.25.3.211 SIP 532 Status: 200 OK (1 binding) |

Frame 15402: 532 bytes on wire (4256 bits), 532 bytes captured (4256 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.211 (172.25.3.211)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7469 (7469)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
16724 452.611389000 172.25.3.210 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 16724: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.210 (172.25.3.210), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7316 (7316), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
16725 452.613743000 172.16.3.5 172.25.3.210 SIP 531 Status: 200 OK (1 binding) |

Frame 16725: 531 bytes on wire (4248 bits), 531 bytes captured (4248 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.210 (172.25.3.210)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7316 (7316)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
16886 458.639997000 172.25.3.211 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 16886: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.211 (172.25.3.211), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7469 (7469), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
16887 458.643352000 172.16.3.5 172.25.3.211 SIP 532 Status: 200 OK (1 binding) |

Frame 16887: 532 bytes on wire (4256 bits), 532 bytes captured (4256 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.211 (172.25.3.211)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7469 (7469)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
18256 492.720472000 172.25.3.210 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 18256: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.210 (172.25.3.210), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7316 (7316), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
18257 492.722779000 172.16.3.5 172.25.3.210 SIP 532 Status: 200 OK (1 binding) |

Frame 18257: 532 bytes on wire (4256 bits), 532 bytes captured (4256 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.210 (172.25.3.210)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7316 (7316)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
18426 498.744638000 172.25.3.211 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 18426: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.211 (172.25.3.211), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7469 (7469), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
18427 498.747294000 172.16.3.5 172.25.3.211 SIP 532 Status: 200 OK (1 binding) |

Frame 18427: 532 bytes on wire (4256 bits), 532 bytes captured (4256 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.211 (172.25.3.211)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7469 (7469)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
19853 532.826679000 172.25.3.210 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 19853: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.210 (172.25.3.210), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7316 (7316), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
19854 532.828963000 172.16.3.5 172.25.3.210 SIP 532 Status: 200 OK (1 binding) |

Frame 19854: 532 bytes on wire (4256 bits), 532 bytes captured (4256 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.210 (172.25.3.210)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7316 (7316)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
20123 538.858981000 172.25.3.211 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 20123: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.211 (172.25.3.211), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7469 (7469), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
20124 538.861561000 172.16.3.5 172.25.3.211 SIP 532 Status: 200 OK (1 binding) |

Frame 20124: 532 bytes on wire (4256 bits), 532 bytes captured (4256 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.211 (172.25.3.211)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7469 (7469)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
21952 572.937493000 172.25.3.210 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 21952: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.210 (172.25.3.210), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7316 (7316), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
21953 572.939667000 172.16.3.5 172.25.3.210 SIP 532 Status: 200 OK (1 binding) |

Frame 21953: 532 bytes on wire (4256 bits), 532 bytes captured (4256 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.210 (172.25.3.210)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7316 (7316)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
22210 578.962667000 172.25.3.211 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 22210: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.211 (172.25.3.211), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7469 (7469), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
22211 578.964818000 172.16.3.5 172.25.3.211 SIP 532 Status: 200 OK (1 binding) |

Frame 22211: 532 bytes on wire (4256 bits), 532 bytes captured (4256 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.211 (172.25.3.211)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7469 (7469)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
23715 613.045374000 172.25.3.210 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 23715: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.210 (172.25.3.210), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7316 (7316), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
23716 613.048261000 172.16.3.5 172.25.3.210 SIP 532 Status: 200 OK (1 binding) |

Frame 23716: 532 bytes on wire (4256 bits), 532 bytes captured (4256 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.210 (172.25.3.210)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7316 (7316)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
23936 619.064358000 172.25.3.211 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 23936: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.211 (172.25.3.211), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7469 (7469), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
23937 619.066720000 172.16.3.5 172.25.3.211 SIP 532 Status: 200 OK (1 binding) |

Frame 23937: 532 bytes on wire (4256 bits), 532 bytes captured (4256 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.211 (172.25.3.211)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7469 (7469)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
25209 653.149315000 172.25.3.210 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 25209: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.210 (172.25.3.210), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7316 (7316), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
25210 653.151555000 172.16.3.5 172.25.3.210 SIP 532 Status: 200 OK (1 binding) |

Frame 25210: 532 bytes on wire (4256 bits), 532 bytes captured (4256 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.210 (172.25.3.210)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7316 (7316)
Session Initiation Protocol (200)

No. Time Source Destination Protocol Length Info
25454 659.168506000 172.25.3.211 172.16.3.5 SIP 610 Request: REGISTER sip:172.16.3.5 (1 binding) |

Frame 25454: 610 bytes on wire (4880 bits), 610 bytes captured (4880 bits) on interface 0
Ethernet II, Src: Cisco_97:6c:80 (00:0a:f3:97:6c:80), Dst: Vmware_b6:71:09 (00:50:56:b6:71:09)
Internet Protocol Version 4, Src: 172.25.3.211 (172.25.3.211), Dst: 172.16.3.5 (172.16.3.5)
User Datagram Protocol, Src Port: 7469 (7469), Dst Port: 5060 (5060)
Session Initiation Protocol (REGISTER)

No. Time Source Destination Protocol Length Info
25455 659.170697000 172.16.3.5 172.25.3.211 SIP 532 Status: 200 OK (1 binding) |

Frame 25455: 532 bytes on wire (4256 bits), 532 bytes captured (4256 bits) on interface 0
Ethernet II, Src: Vmware_b6:71:09 (00:50:56:b6:71:09), Dst: All-HSRP-routers_c9 (00:00:0c:07:ac:c9)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.211 (172.25.3.211)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 7469 (7469)
Session Initiation Protocol (200)

[james]

emansoori, there is no "486" packet in the trace.
It seems the call was canceled by the caller.

Do you have the same issue even if you use another SIP client instead of PortGo?

[emansoori]

I have not tried that, I have used PortoGo on exact environment on at lease 20 other sites with Cisco VPN. I try to use another client and see I have the same issue.

Thanks

[james]

if you capture packets on the SIP client's PC, can you see "486" there?
If so, paste the "486" packet here.

[emansoori]

Hi James;

This is what I captured on client PC;
3 5.362156000 172.16.3.5 172.25.3.175 SIP 295 Status: 486 Busy |
4 5.362588000 172.16.3.5 172.25.3.175 SIP 295 Status: 486 Busy |
5 5.362852000 172.16.3.5 172.25.3.175 SIP 340 Status: 100 Trying |
6 5.363085000 172.16.3.5 172.25.3.175 SIP 489 Status: 407 Proxy Authentication Required |
14 19.019434000 172.16.3.5 172.25.3.175 SIP 531 Status: 200 OK (1 binding) |
15 25.478962000 172.16.3.5 172.25.3.175 SIP 295 Status: 486 Busy |
16 25.479971000 172.16.3.5 172.25.3.175 SIP 295 Status: 486 Busy |
17 25.480214000 172.16.3.5 172.25.3.175 SIP 340 Status: 100 Trying |
18 25.480769000 172.16.3.5 172.25.3.175 SIP 489 Status: 407 Proxy Authentication Required |

Thanks

[james]

Can you capture "486 Busy" packet image?

[emansoori]

Do you need the screen shot of "486 Busy" capture? I have it but I cannot post it to this site. please advise.

Thanks

[james]

Depends on capturing tools, you can copy a packet content to the clipboard.

If you can not paste the packet, let you find "Server:" header from the "486 Busy" packet.

[emansoori]

Here you go!

Thanks

No. Time Source Destination Protocol Length Info
41 37.212346000 172.16.3.5 172.25.3.190 SIP 295 Status: 486 Busy |

Frame 41: 295 bytes on wire (2360 bits), 295 bytes captured (2360 bits) on interface 1
Interface id: 1 (\Device\NPF_{31071339-9941-4061-B4A9-66C55ECBC2DF})
Encapsulation type: Ethernet (1)
Arrival Time: Oct 13, 2014 11:05:43.627648000 Pacific Daylight Time
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1413223543.627648000 seconds
[Time delta from previous captured frame: 0.000489000 seconds]
[Time delta from previous displayed frame: 0.000214000 seconds]
[Time since reference or first frame: 37.212346000 seconds]
Frame Number: 41
Frame Length: 295 bytes (2360 bits)
Capture Length: 295 bytes (2360 bits)
[Frame is marked: True]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:ip:udp:sip]
[Number of per-protocol-data: 1]
[Session Initiation Protocol, key 6]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: Cimsys_33:44:55 (00:11:22:33:44:55), Dst: Cisco_3c:7a:00 (00:05:9a:3c:7a:00)
Destination: Cisco_3c:7a:00 (00:05:9a:3c:7a:00)
Address: Cisco_3c:7a:00 (00:05:9a:3c:7a:00)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Source: Cimsys_33:44:55 (00:11:22:33:44:55)
Address: Cimsys_33:44:55 (00:11:22:33:44:55)
.... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
.... ...0 .... .... .... .... = IG bit: Individual address (unicast)
Type: IP (0x0800)
Internet Protocol Version 4, Src: 172.16.3.5 (172.16.3.5), Dst: 172.25.3.190 (172.25.3.190)
Version: 4
Header Length: 20 bytes
Differentiated Services Field: 0x10 (DSCP 0x04: Unknown DSCP; ECN: 0x00: Not-ECT (Not ECN-Capable Transport))
Total Length: 281
Identification: 0x0000 (0)
Flags: 0x02 (Don't Fragment)
Fragment offset: 0
Time to live: 255
Protocol: UDP (17)
Header checksum: 0x1bd7 [validation disabled]
Source: 172.16.3.5 (172.16.3.5)
Destination: 172.25.3.190 (172.25.3.190)
[Source GeoIP: Unknown]
[Destination GeoIP: Unknown]
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 6300 (6300)
Source Port: 5060 (5060)
Destination Port: 6300 (6300)
Length: 261
Checksum: 0x0000 (none)
[Good Checksum: False]
[Bad Checksum: False]
[Stream index: 3]
Session Initiation Protocol (486)
Status-Line: SIP/2.0 486 Busy
Status-Code: 486
[Resent Packet: True]
[Suspected resend of frame: 39]
Message Header
Content-Length: 0
Via: SIP/2.0/UDP 172.25.3.190:6300;branch=z9hG4bK-524287-1---3f649b7b576da91f;rport
To: <sip:Cathy@172.16.3.5>
From: "Eddie"<sip:Eddie@172.16.3.5>;tag=5e491203
Call-ID: E7Xf8dqpoT0Y518pNljV4Q..
CSeq: 1 INVITE

[james]

If the Brekeke SIP Server returns "486", it has "Server:" header field with "Brekeke SIP Server".
But the above "486 Busy" packet doesn't have "Server:" header.

Also, there is no value with "rport" in the Via header.
If the Brekeke SIP Server returns a SIP response, the "rport" indicates a remote port number.


so.. it seems someone rejects your INVITE packet before the packet reaches Brekeke SIP Server.

I suppose there is a SBC or SIP-ALG running on the VPN which is not configured correctly.

[emansoori]

I have the customer get Cisco involved and reconfigure the VPN device. I let you know if we can get it working after the VPN is reconfigured.

Thanks so much for your help!

[james]

If you use TLS as SIP's transport between the SIP UA and the SIP Sevrer, a middle device can not wiretap SIP packets so a call will not be interrupted .