Hello list! I created he following setup with gnugk-2.0.9 by compiling it manually from sources. I am using NetMeeting 3.0 to register with the Gatekeeper. I set up a mechanism using freeradius. All is working fine without a problem. I now want to change from 2.0.9 to 2.2.3. I installed it from portage ( I am using gentoo) and modified the configuration file accordingly. I am now having problems registering with the Gatekeeper and it show this on the debug output: 2005/09/16 09:56:50.855 6 yasocket.cxx(798) GkStatus waiting... 2005/09/16 09:56:51.857 6 yasocket.cxx(798) GkStatus waiting... 2005/09/16 09:56:52.859 6 yasocket.cxx(798) GkStatus waiting... 2005/09/16 09:56:53.861 6 yasocket.cxx(798) GkStatus waiting... 2005/09/16 09:56:54.833 5 yasocket.cxx(739) RasSrv 1 sockets selected from 3, total 3/0 2005/09/16 09:56:54.833 4 RasSrv.cxx(211) RAS Receiving on 0.0.0.0:1719(Bcast) 2005/09/16 09:56:54.833 2 RasSrv.cxx(173) RAS Read from 155.207.200.15:1225 2005/09/16 09:56:54.833 1 RasSrv.cxx(301) RAS Unknown broadcasted RAS message tag 3 2005/09/16 09:56:54.864 6 yasocket.cxx(798) GkStatus waiting... 2005/09/16 09:56:55.866 6 yasocket.cxx(798) GkStatus waiting... The gnugk machine is using a firewall but has port 1719 open for tcp and udp. I am attaching the ethereal capture (.pcap compatible), some text version of it and the log and configuration file Netmeeting reports a timeout from the gatekeeper after the 5th attept to join. Why is this happening? Has anyone seen this before? Any suggestions? -------------------------- Apostolos Karakoussis ------------------------------------------------- This mail sent through IMP: http://horde.org/imp/
Attachment:
output.pcap
Description: Binary data
[Gatekeeper::Main]
Fourtytwo=42
Name=OpenH323GK
TimeToLive=180
[RoutedMode]
GKRouted=0
H245Routed=0
CallSignalPort=1721
CallSignalHandlerNumber=1
RemoveH245AddressOnTunneling=0
AcceptNeighborsCalls=1
AcceptUnregisteredCalls=0
SupportNATedEndpoints=1
DropCallsByReleaseComplete=1
[Proxy]
[RasSrv::GWPrefixes]
[RasSrv::RRQFeatures]
[RasSrv::ARQFeatures]
ArjReasonRouteCallToSCN=0
ArjReasonRouteCallToGatekeeper=1
CallUnregisteredEndpoints=1
RemoveTrailingChar=;
RoundRobinGateways=1
[RoutingPolicy]
default=explicit,internal,neighbor
[RoutingPolicy::OnARQ]
[RasSrv::RRQAuth]
default=confirm
[GkStatus::Auth]
rule=regex
regex=^(155\.207\.112\.[0-9]+)|(127\.0\.0\.1)$
[RasSrv::RewriteE164]
[RasSrv::Neighbors]
auth=CiscoGK
[RasSrv::LRQFeatures]
[Neighbor::auth]
GatekeeperIdentifier=auth
Host=155.207.1.251
SendPrefixes=00,2
AcceptPrefixes=*
AcceptForwardedLRQ=1
[RasSrv::PermanentEndpoints]
[Gatekeeper::Auth]
RadAliasAuth=required;RRQ
default=allow
[RadAliasAuth]
Servers=127.0.0.1;155.207.1.32
LocalInterface=127.0.0.1;155.207.1.32
SharedSecret=XXXXXXXXXX
[CallTable]
[Gatekeeper::Acct]
RadAcct=optional;start,stop,on,off
FileAcct=sufficient;stop
default=accept
[NATedEndpoints]
[CTI::Agents]
RequestTimeout=10
[CTI::MakeCall]
EndpointAlias=InternalMakeCallEP
UseH450=1
Interface=*:1722
[FileAcct]
DetailFile=/var/log/gnugk/gnugk-cdr.log
Rotate=daily
RotateTime=23:00
[RadAcct]
------------------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------------------
2005/09/16 09:56:04.756 2 singleton.cxx(32) Create instance: Toolkit(1)
2005/09/16 09:56:04.756 5 Toolkit.cxx(769) GK Trying file name /tmp/gnugk.ini-3214 for temp config
2005/09/16 09:56:04.761 5 Toolkit.cxx(792) GK Trying file name /tmp/gnugk.ini-3312 for external config
2005/09/16 09:56:04.763 4 Toolkit.cxx(292) InterfaceTable:
155.207.1.32 <00-07-E9-05-61-FC> (eth0:jabber)
2005/09/16 09:56:04.764 2 Toolkit.cxx(262) Network=155.207.100.0/255.255.255.0, IP=0.0.0.0
2005/09/16 09:56:04.764 2 Toolkit.cxx(262) Network=155.207.1.0/255.255.255.0, IP=155.207.1.32
2005/09/16 09:56:04.764 2 Toolkit.cxx(262) Network=155.207.1.0/255.255.255.0, IP=155.207.1.32
2005/09/16 09:56:04.764 2 Toolkit.cxx(262) Network=155.207.0.0/255.255.255.0, IP=0.0.0.0
2005/09/16 09:56:04.764 2 Toolkit.cxx(262) Network=127.0.0.0/255.0.0.0, IP=0.0.0.0
2005/09/16 09:56:04.764 2 Toolkit.cxx(263) Default IP=155.207.1.32
2005/09/16 09:56:04.764 2 Toolkit.cxx(340) GK H.323 Proxy disabled
2005/09/16 09:56:04.764 2 Toolkit.cxx(525) GK Loaded per GW rewrite data:
2005/09/16 09:56:04.764 2 Toolkit.cxx(528) GK No per GW data loaded
2005/09/16 09:56:04.764 5 clirw.cxx(443) CLIRW 0 inbound rules loaded
2005/09/16 09:56:04.765 6 clirw.cxx(446) Inbound CLI rewrite rules:
2005/09/16 09:56:04.765 5 clirw.cxx(457) CLIRW 0 outbound rules loaded
2005/09/16 09:56:04.765 6 clirw.cxx(460) Outbound CLI rewrite rules:
2005/09/16 09:56:04.765 1 gk.cxx(506) OpenH323 Gatekeeper - The GNU Gatekeeper with ID 'OpenH323GK' started
Gatekeeper(GNU) Version(2.2.3) Ext(pthreads=1,radius=1,mysql=1,pgsql=0,large_fdset=0) Build(Sep 15 2005, 11:34:47) Sys(Linux i686 2.6.11.6-grse
c-vs1.9.5)
2005/09/16 09:56:04.766 2 singleton.cxx(32) Create instance: CallTable(2)
2005/09/16 09:56:04.766 2 gk.cxx(544) GK TimeToLive for Registrations: 180
2005/09/16 09:56:04.766 2 singleton.cxx(32) Create instance: RasSrv(3)
2005/09/16 09:56:04.766 2 RasSrv.cxx(716) GK Using Direct Signalling
2005/09/16 09:56:04.766 2 RasSrv.cxx(717) GK H.245 Routed Disabled
2005/09/16 09:56:04.766 2 singleton.cxx(32) Create instance: GkStatus(4)
2005/09/16 09:56:04.766 2 singleton.cxx(32) Create instance: Agent(5)
2005/09/16 09:56:04.766 5 job.cxx(352) JOB Worker threads: 1 total - 1 busy, 0 idle
2005/09/16 09:56:04.766 2 singleton.cxx(32) Create instance: RegistrationTable(6)
2005/09/16 09:56:04.767 5 job.cxx(352) JOB Worker threads: 2 total - 2 busy, 0 idle
2005/09/16 09:56:04.767 5 job.cxx(161) JOB Worker 3086691248 started
2005/09/16 09:56:04.767 5 job.cxx(180) JOB Starting Job GkStatus at Worker thread 3086691248
2005/09/16 09:56:04.767 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 09:56:04.767 5 job.cxx(161) JOB Worker 3086425008 started
2005/09/16 09:56:04.767 5 job.cxx(180) JOB Starting Job TCPSrv at Worker thread 3086425008
2005/09/16 09:56:04.767 6 yasocket.cxx(798) TCPSrv waiting...
2005/09/16 09:56:04.767 2 RasSrv.cxx(753) GK Home = 155.207.1.32
2005/09/16 09:56:04.768 1 RasSrv.cxx(504) Listening to 155.207.1.32:1719(U)
2005/09/16 09:56:04.768 5 yasocket.cxx(708) RasSrv Total sockets: 1
2005/09/16 09:56:04.771 1 RasSrv.cxx(504) Listening to 155.207.1.32:1718(Mcast)
2005/09/16 09:56:04.771 5 yasocket.cxx(708) RasSrv Total sockets: 2
2005/09/16 09:56:04.771 1 RasSrv.cxx(504) Listening to 155.207.1.32:7000
2005/09/16 09:56:04.771 5 yasocket.cxx(708) TCPSrv Total sockets: 1
2005/09/16 09:56:04.772 1 RasSrv.cxx(812) RAS Broadcast listener listening at 0.0.0.0:1719(Bcast)
2005/09/16 09:56:04.772 5 yasocket.cxx(708) RasSrv Total sockets: 3
2005/09/16 09:56:04.772 1 Neighbor.cxx(249) Set neighbor auth(155.207.1.251:1719) send=00,2 accept=*
2005/09/16 09:56:04.773 1 Neighbor.cxx(249) Set neighbor grnet(194.177.210.39:1719) of type CiscoGK
2005/09/16 09:56:04.773 1 gkauth.cxx(328) GKAUTH RadAliasAuth rule added to check RAS: RRQ, OTHER: NONE
2005/09/16 09:56:04.773 2 radproto.cxx(1914) RADIUS Specified local client address '127.0.0.1;155.207.1.32' is not bound to any loc
al interface
2005/09/16 09:56:04.773 4 radproto.cxx(1945) RADIUS Created instance of RADIUS client (local if: 0.0.0.0, default ports: 1812,1813)
for RADIUS servers group:
127.0.0.1 (auth port: 1812, acct port: 1813)
155.207.1.32 (auth port: 1812, acct port: 1813)
2005/09/16 09:56:04.773 1 gkauth.cxx(328) GKAUTH default rule added to check RAS: ARQ BRQ DRQ GRQ IRQ LRQ RRQ URQ, OTHER: SETUP
SETUPUNREG
2005/09/16 09:56:04.773 4 gkauth.cxx(885) GKAUTH H.235 security is not active or conflicting H.235 capabilities are active - GCF
will not select any particular capability
2005/09/16 09:56:04.773 1 gkacct.cxx(165) GKACCT Created module RadAcct with event mask 1B
2005/09/16 09:56:04.774 4 radproto.cxx(1945) RADIUS Created instance of RADIUS client (local if: 0.0.0.0, default ports: 1812,1813)
for RADIUS servers group:
2005/09/16 09:56:04.774 1 gkacct.cxx(165) GKACCT Created module FileAcct with event mask 2
2005/09/16 09:56:04.774 1 gkacct.cxx(868) GKACCT FileAcct could not open file required for plain text accounting "/var/log/gnugk
/gnugk-cdr.log" :No such file or directory
2005/09/16 09:56:04.774 5 gkacct.cxx(607) GKACCT FileAcct daily rotation enabled (first rotation sheduled at Fri, 16 Sep 2005 23
:00:00 +0300
2005/09/16 09:56:04.774 1 gkacct.cxx(165) GKACCT Created module default with event mask FFFFFFFF
2005/09/16 09:56:04.774 2 Routing.cxx(563) VQueue (CTI) Virtual queues disabled - no virtual queues configured
2005/09/16 09:56:04.774 2 singleton.cxx(32) Create instance: Routing::Analyzer(7)
2005/09/16 09:56:04.774 1 Routing.cxx(211) RoutingPolicy::OnARQ add policy explicit,internal,neighbor for prefix *
2005/09/16 09:56:04.775 1 Routing.cxx(211) RoutingPolicy::OnLRQ add policy explicit,internal,neighbor for prefix *
2005/09/16 09:56:04.775 1 Routing.cxx(211) RoutingPolicy::OnSetup add policy explicit,internal,neighbor for prefix *
2005/09/16 09:56:04.775 1 Routing.cxx(211) RoutingPolicy::OnFacility add policy explicit,internal,neighbor for prefix *
2005/09/16 09:56:04.776 3 gkacct.cxx(956) GKACCT RadAcct failed to log event 8
2005/09/16 09:56:04.776 3 gkacct.cxx(944) GKACCT default logged event 8
2005/09/16 09:56:04.776 2 gkacct.cxx(984) GKACCT Successfully logged event 8
2005/09/16 09:56:04.776 5 job.cxx(352) JOB Worker threads: 3 total - 3 busy, 0 idle
2005/09/16 09:56:04.776 5 job.cxx(161) JOB Worker 3084909488 started
2005/09/16 09:56:04.776 5 job.cxx(180) JOB Starting Job HouseKeeping at Worker thread 3084909488
2005/09/16 09:56:05.769 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 09:56:06.770 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 09:56:07.772 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 09:56:08.774 6 yasocket.cxx(798) GkStatus waiting...
......
2005/09/16 09:56:48.852 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 09:56:49.846 5 yasocket.cxx(739) RasSrv 1 sockets selected from 3, total 3/0
2005/09/16 09:56:49.846 4 RasSrv.cxx(211) RAS Receiving on 0.0.0.0:1719(Bcast)
2005/09/16 09:56:49.846 2 RasSrv.cxx(173) RAS Read from 155.207.200.15:1225
2005/09/16 09:56:49.847 1 RasSrv.cxx(301) RAS Unknown broadcasted RAS message tag 3
2005/09/16 09:56:49.854 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 09:56:50.855 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 09:56:51.857 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 09:56:52.859 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 09:56:53.861 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 09:56:54.833 5 yasocket.cxx(739) RasSrv 1 sockets selected from 3, total 3/0
2005/09/16 09:56:54.833 4 RasSrv.cxx(211) RAS Receiving on 0.0.0.0:1719(Bcast)
2005/09/16 09:56:54.833 2 RasSrv.cxx(173) RAS Read from 155.207.200.15:1225
2005/09/16 09:56:54.833 1 RasSrv.cxx(301) RAS Unknown broadcasted RAS message tag 3
2005/09/16 09:56:54.864 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 09:56:55.866 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 09:56:56.869 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 09:56:57.872 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 09:56:58.875 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 09:56:59.833 5 yasocket.cxx(739) RasSrv 1 sockets selected from 3, total 3/0
2005/09/16 09:56:59.833 4 RasSrv.cxx(211) RAS Receiving on 0.0.0.0:1719(Bcast)
2005/09/16 09:56:59.833 2 RasSrv.cxx(173) RAS Read from 155.207.200.15:1225
2005/09/16 09:56:59.833 1 RasSrv.cxx(301) RAS Unknown broadcasted RAS message tag 3
2005/09/16 09:56:59.877 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 09:57:00.878 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 09:57:01.880 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 09:57:02.882 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 09:57:03.884 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 09:57:04.833 5 yasocket.cxx(739) RasSrv 1 sockets selected from 3, total 3/0
2005/09/16 09:57:04.833 4 RasSrv.cxx(211) RAS Receiving on 0.0.0.0:1719(Bcast)
2005/09/16 09:57:04.833 2 RasSrv.cxx(173) RAS Read from 155.207.200.15:1225
2005/09/16 09:57:04.833 1 RasSrv.cxx(301) RAS Unknown broadcasted RAS message tag 3
2005/09/16 09:57:04.886 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 09:57:05.888 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 09:57:06.889 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 09:57:07.891 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 09:57:08.893 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 09:57:09.833 5 yasocket.cxx(739) RasSrv 1 sockets selected from 3, total 3/0
2005/09/16 09:57:09.833 4 RasSrv.cxx(211) RAS Receiving on 0.0.0.0:1719(Bcast)
2005/09/16 09:57:09.833 2 RasSrv.cxx(173) RAS Read from 155.207.200.15:1225
2005/09/16 09:57:09.833 1 RasSrv.cxx(301) RAS Unknown broadcasted RAS message tag 3
2005/09/16 09:57:09.895 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 09:57:10.897 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 09:57:11.898 6 yasocket.cxx(798) GkStatus waiting...
.....
2005/09/16 10:03:51.714 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 10:03:52.716 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 10:03:53.717 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 10:03:54.159 1 gk.cxx(263) GK Received signal 2
2005/09/16 10:03:54.160 1 RasSrv.cxx(681) GK Stopping RasServer...
2005/09/16 10:03:54.160 5 job.cxx(415) JOB Job HouseKeeping deleted
2005/09/16 10:03:54.160 5 job.cxx(404) JOB Worker threads: 3 total - 2 busy, 1 idle
2005/09/16 10:03:54.719 6 yasocket.cxx(798) GkStatus waiting...
2005/09/16 10:03:54.834 6 yasocket.cxx(838) TCPSrv Listener 155.207.1.32:7000 closed
2005/09/16 10:03:54.834 3 yasocket.cxx(533) TCPSrv Select read error: 10
2005/09/16 10:03:54.834 2 singleton.cxx(41) Delete instance: Routing::Analyzer(6 objects left)
2005/09/16 10:03:54.834 1 RasSrv.cxx(1128) GK RasServer stopped
2005/09/16 10:03:54.834 3 yasocket.cxx(814) TCP Delete listener 155.207.1.32:7000
2005/09/16 10:03:54.834 5 job.cxx(415) JOB Job TCPSrv deleted
2005/09/16 10:03:54.834 5 job.cxx(404) JOB Worker threads: 3 total - 1 busy, 2 idle
2005/09/16 10:03:54.834 3 gkacct.cxx(956) GKACCT RadAcct failed to log event 16
2005/09/16 10:03:54.834 3 gkacct.cxx(944) GKACCT default logged event 16
2005/09/16 10:03:54.834 2 gkacct.cxx(984) GKACCT Successfully logged event 16
2005/09/16 10:03:54.835 3 gk.cxx(79) GK Deleting global reference tables
2005/09/16 10:03:54.835 5 job.cxx(247) JOB Destroying active Workers for the Agent
2005/09/16 10:03:54.835 5 job.cxx(276) JOB Worker threads to cleanup: 3 total - 1 busy, 2 idle
2005/09/16 10:03:54.835 5 job.cxx(235) JOB Waiting for Worker thread 3084909488 termination
2005/09/16 10:03:54.835 5 job.cxx(194) JOB Worker 3084909488 closed
2005/09/16 10:03:54.845 5 job.cxx(155) JOB Worker 3084909488 destroyed
2005/09/16 10:03:54.845 5 job.cxx(235) JOB Waiting for Worker thread 3086425008 termination
2005/09/16 10:03:54.845 5 job.cxx(194) JOB Worker 3086425008 closed
2005/09/16 10:03:54.855 5 job.cxx(155) JOB Worker 3086425008 destroyed
2005/09/16 10:03:54.855 5 job.cxx(235) JOB Waiting for Worker thread 3086691248 termination
2005/09/16 10:03:54.856 5 job.cxx(415) JOB Job GkStatus deleted
2005/09/16 10:03:54.856 2 singleton.cxx(41) Delete instance: GkStatus(5 objects left)
2005/09/16 10:03:54.856 5 job.cxx(194) JOB Worker 3086691248 closed
2005/09/16 10:03:54.866 5 job.cxx(155) JOB Worker 3086691248 destroyed
2005/09/16 10:03:54.866 5 job.cxx(282) JOB Agent and its Workers destroyed
2005/09/16 10:03:54.866 2 singleton.cxx(41) Delete instance: Agent(4 objects left)
2005/09/16 10:03:54.866 2 singleton.cxx(41) Delete instance: CallTable(3 objects left)
2005/09/16 10:03:54.866 2 singleton.cxx(41) Delete instance: RegistrationTable(2 objects left)
2005/09/16 10:03:54.866 1 gkauth.cxx(335) GKAUTH RadAliasAuth rule removed
2005/09/16 10:03:54.866 1 gkauth.cxx(335) GKAUTH default rule removed
2005/09/16 10:03:54.866 1 gkacct.cxx(170) GKACCT Destroyed module RadAcct
2005/09/16 10:03:54.866 1 gkacct.cxx(170) GKACCT Destroyed module FileAcct
2005/09/16 10:03:54.866 1 gkacct.cxx(170) GKACCT Destroyed module default
2005/09/16 10:03:54.866 1 Neighbor.cxx(171) NB Delete neighbor auth
2005/09/16 10:03:54.866 1 Neighbor.cxx(171) NB Delete neighbor grnet
2005/09/16 10:03:54.866 1 GkClient.cxx(330) GKC Delete GkClient
2005/09/16 10:03:54.866 1 RasSrv.cxx(206) RAS Delete listener 155.207.1.32:1719(U)
2005/09/16 10:03:54.866 1 RasSrv.cxx(206) RAS Delete listener 155.207.1.32:1718(Mcast)
2005/09/16 10:03:54.866 1 RasSrv.cxx(206) RAS Delete listener 0.0.0.0:1719(Bcast)
2005/09/16 10:03:54.866 5 job.cxx(415) JOB Job RasSrv deleted
2005/09/16 10:03:54.866 2 singleton.cxx(41) Delete instance: RasSrv(1 objects left)
2005/09/16 10:03:54.866 2 singleton.cxx(41) Delete instance: Toolkit(0 objects left)
2005/09/16 10:03:54.866 3 gk.cxx(86) GK delete ok
2005/09/16 10:03:54.866 1 gk.cxx(918) GK Logging closed
------------------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------------------
No. Time Source Destination Protocol Info
1 0.000000 155.207.200.15 155.207.0.31 DNS Standard query A myphone.auth.gr
Frame 1 (75 bytes on wire, 75 bytes captured)
Arrival Time: Sep 16, 2005 09:56:46.635238000
Time delta from previous packet: 0.000000000 seconds
Time since reference or first frame: 0.000000000 seconds
Frame Number: 1
Packet Length: 75 bytes
Capture Length: 75 bytes
Protocols in frame: eth:ip:udp:dns
Ethernet II, Src: Intel_fd:7f:13 (00:03:47:fd:7f:13), Dst: Cisco_b4:a5:c0 (00:0b:45:b4:a5:c0)
Destination: Cisco_b4:a5:c0 (00:0b:45:b4:a5:c0)
Source: Intel_fd:7f:13 (00:03:47:fd:7f:13)
Type: IP (0x0800)
Internet Protocol, Src: 155.207.200.15 (155.207.200.15), Dst: 155.207.0.31 (155.207.0.31)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 61
Identification: 0x067f (1663)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: UDP (0x11)
Header checksum: 0x3464 [correct]
Source: 155.207.200.15 (155.207.200.15)
Destination: 155.207.0.31 (155.207.0.31)
User Datagram Protocol, Src Port: 1224 (1224), Dst Port: domain (53)
Source port: 1224 (1224)
Destination port: domain (53)
Length: 41
Checksum: 0xf0c0 [correct]
Domain Name System (query)
Transaction ID: 0x6613
Flags: 0x0100 (Standard query)
0... .... .... .... = Response: Message is a query
.000 0... .... .... = Opcode: Standard query (0)
.... ..0. .... .... = Truncated: Message is not truncated
.... ...1 .... .... = Recursion desired: Do query recursively
.... .... .0.. .... = Z: reserved (0)
.... .... ...0 .... = Non-authenticated data OK: Non-authenticated data is unacceptable
Questions: 1
Answer RRs: 0
Authority RRs: 0
Additional RRs: 0
Queries
myphone.auth.gr: type A, class IN
Name: myphone.auth.gr
Type: A (Host address)
Class: IN (0x0001)
0000 00 0b 45 b4 a5 c0 00 03 47 fd 7f 13 08 00 45 00 ..E.....G.....E.
0010 00 3d 06 7f 00 00 80 11 34 64 9b cf c8 0f 9b cf .=......4d......
0020 00 1f 04 c8 00 35 00 29 f0 c0 66 13 01 00 00 01 .....5.)..f.....
0030 00 00 00 00 00 00 07 6d 79 70 68 6f 6e 65 04 61 .......myphone.a
0040 75 74 68 02 67 72 00 00 01 00 01 uth.gr.....
No. Time Source Destination Protocol Info
2 0.000379 155.207.0.31 155.207.200.15 DNS Standard query response CNAME jabber.ccf.auth.gr A 155.207.1.32
Frame 2 (302 bytes on wire, 302 bytes captured)
Arrival Time: Sep 16, 2005 09:56:46.635617000
Time delta from previous packet: 0.000379000 seconds
Time since reference or first frame: 0.000379000 seconds
Frame Number: 2
Packet Length: 302 bytes
Capture Length: 302 bytes
Protocols in frame: eth:ip:udp:dns
Ethernet II, Src: Cisco_b4:a5:c0 (00:0b:45:b4:a5:c0), Dst: Intel_fd:7f:13 (00:03:47:fd:7f:13)
Destination: Intel_fd:7f:13 (00:03:47:fd:7f:13)
Source: Cisco_b4:a5:c0 (00:0b:45:b4:a5:c0)
Type: IP (0x0800)
Internet Protocol, Src: 155.207.0.31 (155.207.0.31), Dst: 155.207.200.15 (155.207.200.15)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 288
Identification: 0xa848 (43080)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 63
Protocol: UDP (0x11)
Header checksum: 0x92b7 [correct]
Source: 155.207.0.31 (155.207.0.31)
Destination: 155.207.200.15 (155.207.200.15)
User Datagram Protocol, Src Port: domain (53), Dst Port: 1224 (1224)
Source port: domain (53)
Destination port: 1224 (1224)
Length: 268
Checksum: 0x2947 [correct]
Domain Name System (response)
Transaction ID: 0x6613
Flags: 0x8580 (Standard query response, No error)
1... .... .... .... = Response: Message is a response
.000 0... .... .... = Opcode: Standard query (0)
.... .1.. .... .... = Authoritative: Server is an authority for domain
.... ..0. .... .... = Truncated: Message is not truncated
.... ...1 .... .... = Recursion desired: Do query recursively
.... .... 1... .... = Recursion available: Server can do recursive queries
.... .... .0.. .... = Z: reserved (0)
.... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server
.... .... .... 0000 = Reply code: No error (0)
Questions: 1
Answer RRs: 2
Authority RRs: 5
Additional RRs: 5
Queries
myphone.auth.gr: type A, class IN
Name: myphone.auth.gr
Type: A (Host address)
Class: IN (0x0001)
Answers
myphone.auth.gr: type CNAME, class IN, cname jabber.ccf.auth.gr
Name: myphone.auth.gr
Type: CNAME (Canonical name for an alias)
Class: IN (0x0001)
Time to live: 4 days
Data length: 13
Primary name: jabber.ccf.auth.gr
jabber.ccf.auth.gr: type A, class IN, addr 155.207.1.32
Name: jabber.ccf.auth.gr
Type: A (Host address)
Class: IN (0x0001)
Time to live: 2 days
Data length: 4
Addr: 155.207.1.32
Authoritative nameservers
ccf.auth.gr: type NS, class IN, ns foo.grnet.gr
Name: ccf.auth.gr
Type: NS (Authoritative name server)
Class: IN (0x0001)
Time to live: 2 days
Data length: 12
Name server: foo.grnet.gr
ccf.auth.gr: type NS, class IN, ns nic.grnet.gr
Name: ccf.auth.gr
Type: NS (Authoritative name server)
Class: IN (0x0001)
Time to live: 2 days
Data length: 6
Name server: nic.grnet.gr
ccf.auth.gr: type NS, class IN, ns evia.ccf.auth.gr
Name: ccf.auth.gr
Type: NS (Authoritative name server)
Class: IN (0x0001)
Time to live: 2 days
Data length: 7
Name server: evia.ccf.auth.gr
ccf.auth.gr: type NS, class IN, ns thalia.ccf.auth.gr
Name: ccf.auth.gr
Type: NS (Authoritative name server)
Class: IN (0x0001)
Time to live: 2 days
Data length: 9
Name server: thalia.ccf.auth.gr
ccf.auth.gr: type NS, class IN, ns philippos.ccf.auth.gr
Name: ccf.auth.gr
Type: NS (Authoritative name server)
Class: IN (0x0001)
Time to live: 2 days
Data length: 12
Name server: philippos.ccf.auth.gr
Additional records
foo.grnet.gr: type A, class IN, addr 194.177.210.211
Name: foo.grnet.gr
Type: A (Host address)
Class: IN (0x0001)
Time to live: 34 minutes, 18 seconds
Data length: 4
Addr: 194.177.210.211
nic.grnet.gr: type A, class IN, addr 194.177.210.210
Name: nic.grnet.gr
Type: A (Host address)
Class: IN (0x0001)
Time to live: 10 minutes, 11 seconds
Data length: 4
Addr: 194.177.210.210
evia.ccf.auth.gr: type A, class IN, addr 155.207.1.3
Name: evia.ccf.auth.gr
Type: A (Host address)
Class: IN (0x0001)
Time to live: 2 days
Data length: 4
Addr: 155.207.1.3
thalia.ccf.auth.gr: type A, class IN, addr 155.207.112.3
Name: thalia.ccf.auth.gr
Type: A (Host address)
Class: IN (0x0001)
Time to live: 2 days
Data length: 4
Addr: 155.207.112.3
philippos.ccf.auth.gr: type A, class IN, addr 155.207.1.25
Name: philippos.ccf.auth.gr
Type: A (Host address)
Class: IN (0x0001)
Time to live: 2 days
Data length: 4
Addr: 155.207.1.25
0000 00 03 47 fd 7f 13 00 0b 45 b4 a5 c0 08 00 45 00 ..G.....E.....E.
0010 01 20 a8 48 40 00 3f 11 92 b7 9b cf 00 1f 9b cf . .H@.?.........
0020 c8 0f 00 35 04 c8 01 0c 29 47 66 13 85 80 00 01 ...5....)Gf.....
0030 00 02 00 05 00 05 07 6d 79 70 68 6f 6e 65 04 61 .......myphone.a
0040 75 74 68 02 67 72 00 00 01 00 01 c0 0c 00 05 00 uth.gr..........
0050 01 00 05 46 00 00 0d 06 6a 61 62 62 65 72 03 63 ...F....jabber.c
0060 63 66 c0 14 c0 2d 00 01 00 01 00 02 a3 00 00 04 cf...-..........
0070 9b cf 01 20 c0 34 00 02 00 01 00 02 a3 00 00 0c ... .4..........
0080 03 66 6f 6f 05 67 72 6e 65 74 c0 19 c0 34 00 02 .foo.grnet...4..
0090 00 01 00 02 a3 00 00 06 03 6e 69 63 c0 5a c0 34 .........nic.Z.4
00a0 00 02 00 01 00 02 a3 00 00 07 04 65 76 69 61 c0 ...........evia.
00b0 34 c0 34 00 02 00 01 00 02 a3 00 00 09 06 74 68 4.4...........th
00c0 61 6c 69 61 c0 34 c0 34 00 02 00 01 00 02 a3 00 alia.4.4........
00d0 00 0c 09 70 68 69 6c 69 70 70 6f 73 c0 34 c0 56 ...philippos.4.V
00e0 00 01 00 01 00 00 08 0a 00 04 c2 b1 d2 d3 c0 6e ...............n
00f0 00 01 00 01 00 00 02 63 00 04 c2 b1 d2 d2 c0 80 .......c........
0100 00 01 00 01 00 02 a3 00 00 04 9b cf 01 03 c0 93 ................
0110 00 01 00 01 00 02 a3 00 00 04 9b cf 70 03 c0 a8 ............p...
0120 00 01 00 01 00 02 a3 00 00 04 9b cf 01 19 ..............
No. Time Source Destination Protocol Info
3 0.005408 155.207.200.15 155.207.1.32 H.225.0 RAS: registrationRequest
Frame 3 (156 bytes on wire, 156 bytes captured)
Arrival Time: Sep 16, 2005 09:56:46.640646000
Time delta from previous packet: 0.005029000 seconds
Time since reference or first frame: 0.005408000 seconds
Frame Number: 3
Packet Length: 156 bytes
Capture Length: 156 bytes
Protocols in frame: eth:ip:udp:h225
Ethernet II, Src: Intel_fd:7f:13 (00:03:47:fd:7f:13), Dst: Cisco_b4:a5:c0 (00:0b:45:b4:a5:c0)
Destination: Cisco_b4:a5:c0 (00:0b:45:b4:a5:c0)
Source: Intel_fd:7f:13 (00:03:47:fd:7f:13)
Type: IP (0x0800)
Internet Protocol, Src: 155.207.200.15 (155.207.200.15), Dst: 155.207.1.32 (155.207.1.32)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 142
Identification: 0x0680 (1664)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: UDP (0x11)
Header checksum: 0x3311 [correct]
Source: 155.207.200.15 (155.207.200.15)
Destination: 155.207.1.32 (155.207.1.32)
User Datagram Protocol, Src Port: 1225 (1225), Dst Port: 1719 (1719)
Source port: 1225 (1225)
Destination port: 1719 (1719)
Length: 122
Checksum: 0x6ab5 [correct]
H.225.0 RAS
RasMessage
RasMessage: registrationRequest (3)
registrationRequest
requestSeqNum: 1
protocolIdentifier: 0.0.8.2250.0.2 (itu-t(0) recommendation(0) h(8) h225-0(2250) version(0) 2)
0... .... discoveryComplete: False
callSignalAddress: 1 item
Item 0
TransportAddress
Item: ipAddress (0)
ipAddress
ip: 155.207.200.15 (155.207.200.15)
port: 1720
rasAddress: 1 item
Item 0
TransportAddress
Item: ipAddress (0)
ipAddress
ip: 155.207.200.15 (155.207.200.15)
port: 1225
terminalType
terminal
.0.. .... mc: False
..0. .... undefinedNode: False
terminalAlias: 2 items
Item 0
AliasAddress
Item: h323-ID (1)
h323-ID: dimitris@xxxxxxxxxxx
Item 1
AliasAddress
Item: dialedDigits (0)
dialedDigits: 5310996666
endpointVendor
vendor
t35CountryCode: United States (181)
t35Extension: 0
manufacturerCode: 21324
H.221 Manufacturer: Microsoft (0xb500534c)
productId: Microsoft\256 NetMeeting\256
versionId: 3.0
0000 00 0b 45 b4 a5 c0 00 03 47 fd 7f 13 08 00 45 00 ..E.....G.....E.
0010 00 8e 06 80 00 00 80 11 33 11 9b cf c8 0f 9b cf ........3.......
0020 01 20 04 c9 06 b7 00 7a 6a b5 0c 80 00 00 06 00 . .....zj.......
0030 08 91 4a 00 02 00 01 00 9b cf c8 0f 06 b8 01 00 ..J.............
0040 9b cf c8 0f 04 c9 02 00 02 40 13 00 64 00 69 00 .........@..d.i.
0050 6d 00 69 00 74 00 72 00 69 00 73 00 40 00 63 00 m.i.t.r.i.s.@.c.
0060 63 00 66 00 2e 00 61 00 75 00 74 00 68 00 2e 00 c.f...a.u.t.h...
0070 67 00 72 04 80 86 43 cc 99 99 60 b5 00 53 4c 16 g.r...C...`..SL.
0080 4d 69 63 72 6f 73 6f 66 74 ae 20 4e 65 74 4d 65 Microsoft. NetMe
0090 65 74 69 6e 67 ae 00 03 33 2e 30 00 eting...3.0.
No. Time Source Destination Protocol Info
4 4.992034 155.207.200.15 155.207.1.32 H.225.0 RAS: registrationRequest
Frame 4 (156 bytes on wire, 156 bytes captured)
Arrival Time: Sep 16, 2005 09:56:51.627272000
Time delta from previous packet: 4.986626000 seconds
Time since reference or first frame: 4.992034000 seconds
Frame Number: 4
Packet Length: 156 bytes
Capture Length: 156 bytes
Protocols in frame: eth:ip:udp:h225
Ethernet II, Src: Intel_fd:7f:13 (00:03:47:fd:7f:13), Dst: Cisco_b4:a5:c0 (00:0b:45:b4:a5:c0)
Destination: Cisco_b4:a5:c0 (00:0b:45:b4:a5:c0)
Source: Intel_fd:7f:13 (00:03:47:fd:7f:13)
Type: IP (0x0800)
Internet Protocol, Src: 155.207.200.15 (155.207.200.15), Dst: 155.207.1.32 (155.207.1.32)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 142
Identification: 0x0681 (1665)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: UDP (0x11)
Header checksum: 0x3310 [correct]
Source: 155.207.200.15 (155.207.200.15)
Destination: 155.207.1.32 (155.207.1.32)
User Datagram Protocol, Src Port: 1225 (1225), Dst Port: 1719 (1719)
Source port: 1225 (1225)
Destination port: 1719 (1719)
Length: 122
Checksum: 0x6ab5 [correct]
H.225.0 RAS
RasMessage
RasMessage: registrationRequest (3)
registrationRequest
requestSeqNum: 1
protocolIdentifier: 0.0.8.2250.0.2 (itu-t(0) recommendation(0) h(8) h225-0(2250) version(0) 2)
0... .... discoveryComplete: False
callSignalAddress: 1 item
Item 0
TransportAddress
Item: ipAddress (0)
ipAddress
ip: 155.207.200.15 (155.207.200.15)
port: 1720
rasAddress: 1 item
Item 0
TransportAddress
Item: ipAddress (0)
ipAddress
ip: 155.207.200.15 (155.207.200.15)
port: 1225
terminalType
terminal
.0.. .... mc: False
..0. .... undefinedNode: False
terminalAlias: 2 items
Item 0
AliasAddress
Item: h323-ID (1)
h323-ID: dimitris@xxxxxxxxxxx
Item 1
AliasAddress
Item: dialedDigits (0)
dialedDigits: 5310996666
endpointVendor
vendor
t35CountryCode: United States (181)
t35Extension: 0
manufacturerCode: 21324
H.221 Manufacturer: Microsoft (0xb500534c)
productId: Microsoft\256 NetMeeting\256
versionId: 3.0
0000 00 0b 45 b4 a5 c0 00 03 47 fd 7f 13 08 00 45 00 ..E.....G.....E.
0010 00 8e 06 81 00 00 80 11 33 10 9b cf c8 0f 9b cf ........3.......
0020 01 20 04 c9 06 b7 00 7a 6a b5 0c 80 00 00 06 00 . .....zj.......
0030 08 91 4a 00 02 00 01 00 9b cf c8 0f 06 b8 01 00 ..J.............
0040 9b cf c8 0f 04 c9 02 00 02 40 13 00 64 00 69 00 .........@..d.i.
0050 6d 00 69 00 74 00 72 00 69 00 73 00 40 00 63 00 m.i.t.r.i.s.@.c.
0060 63 00 66 00 2e 00 61 00 75 00 74 00 68 00 2e 00 c.f...a.u.t.h...
0070 67 00 72 04 80 86 43 cc 99 99 60 b5 00 53 4c 16 g.r...C...`..SL.
0080 4d 69 63 72 6f 73 6f 66 74 ae 20 4e 65 74 4d 65 Microsoft. NetMe
0090 65 74 69 6e 67 ae 00 03 33 2e 30 00 eting...3.0.
No. Time Source Destination Protocol Info
5 9.992032 155.207.200.15 155.207.1.32 H.225.0 RAS: registrationRequest
Frame 5 (156 bytes on wire, 156 bytes captured)
Arrival Time: Sep 16, 2005 09:56:56.627270000
Time delta from previous packet: 4.999998000 seconds
Time since reference or first frame: 9.992032000 seconds
Frame Number: 5
Packet Length: 156 bytes
Capture Length: 156 bytes
Protocols in frame: eth:ip:udp:h225
Ethernet II, Src: Intel_fd:7f:13 (00:03:47:fd:7f:13), Dst: Cisco_b4:a5:c0 (00:0b:45:b4:a5:c0)
Destination: Cisco_b4:a5:c0 (00:0b:45:b4:a5:c0)
Source: Intel_fd:7f:13 (00:03:47:fd:7f:13)
Type: IP (0x0800)
Internet Protocol, Src: 155.207.200.15 (155.207.200.15), Dst: 155.207.1.32 (155.207.1.32)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 142
Identification: 0x0682 (1666)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: UDP (0x11)
Header checksum: 0x330f [correct]
Source: 155.207.200.15 (155.207.200.15)
Destination: 155.207.1.32 (155.207.1.32)
User Datagram Protocol, Src Port: 1225 (1225), Dst Port: 1719 (1719)
Source port: 1225 (1225)
Destination port: 1719 (1719)
Length: 122
Checksum: 0x6ab5 [correct]
H.225.0 RAS
RasMessage
RasMessage: registrationRequest (3)
registrationRequest
requestSeqNum: 1
protocolIdentifier: 0.0.8.2250.0.2 (itu-t(0) recommendation(0) h(8) h225-0(2250) version(0) 2)
0... .... discoveryComplete: False
callSignalAddress: 1 item
Item 0
TransportAddress
Item: ipAddress (0)
ipAddress
ip: 155.207.200.15 (155.207.200.15)
port: 1720
rasAddress: 1 item
Item 0
TransportAddress
Item: ipAddress (0)
ipAddress
ip: 155.207.200.15 (155.207.200.15)
port: 1225
terminalType
terminal
.0.. .... mc: False
..0. .... undefinedNode: False
terminalAlias: 2 items
Item 0
AliasAddress
Item: h323-ID (1)
h323-ID: dimitris@xxxxxxxxxxx
Item 1
AliasAddress
Item: dialedDigits (0)
dialedDigits: 5310996666
endpointVendor
vendor
t35CountryCode: United States (181)
t35Extension: 0
manufacturerCode: 21324
H.221 Manufacturer: Microsoft (0xb500534c)
productId: Microsoft\256 NetMeeting\256
versionId: 3.0
0000 00 0b 45 b4 a5 c0 00 03 47 fd 7f 13 08 00 45 00 ..E.....G.....E.
0010 00 8e 06 82 00 00 80 11 33 0f 9b cf c8 0f 9b cf ........3.......
0020 01 20 04 c9 06 b7 00 7a 6a b5 0c 80 00 00 06 00 . .....zj.......
0030 08 91 4a 00 02 00 01 00 9b cf c8 0f 06 b8 01 00 ..J.............
0040 9b cf c8 0f 04 c9 02 00 02 40 13 00 64 00 69 00 .........@..d.i.
0050 6d 00 69 00 74 00 72 00 69 00 73 00 40 00 63 00 m.i.t.r.i.s.@.c.
0060 63 00 66 00 2e 00 61 00 75 00 74 00 68 00 2e 00 c.f...a.u.t.h...
0070 67 00 72 04 80 86 43 cc 99 99 60 b5 00 53 4c 16 g.r...C...`..SL.
0080 4d 69 63 72 6f 73 6f 66 74 ae 20 4e 65 74 4d 65 Microsoft. NetMe
0090 65 74 69 6e 67 ae 00 03 33 2e 30 00 eting...3.0.
No. Time Source Destination Protocol Info
6 14.992013 155.207.200.15 155.207.1.32 H.225.0 RAS: registrationRequest
Frame 6 (156 bytes on wire, 156 bytes captured)
Arrival Time: Sep 16, 2005 09:57:01.627251000
Time delta from previous packet: 4.999981000 seconds
Time since reference or first frame: 14.992013000 seconds
Frame Number: 6
Packet Length: 156 bytes
Capture Length: 156 bytes
Protocols in frame: eth:ip:udp:h225
Ethernet II, Src: Intel_fd:7f:13 (00:03:47:fd:7f:13), Dst: Cisco_b4:a5:c0 (00:0b:45:b4:a5:c0)
Destination: Cisco_b4:a5:c0 (00:0b:45:b4:a5:c0)
Source: Intel_fd:7f:13 (00:03:47:fd:7f:13)
Type: IP (0x0800)
Internet Protocol, Src: 155.207.200.15 (155.207.200.15), Dst: 155.207.1.32 (155.207.1.32)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 142
Identification: 0x0683 (1667)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: UDP (0x11)
Header checksum: 0x330e [correct]
Source: 155.207.200.15 (155.207.200.15)
Destination: 155.207.1.32 (155.207.1.32)
User Datagram Protocol, Src Port: 1225 (1225), Dst Port: 1719 (1719)
Source port: 1225 (1225)
Destination port: 1719 (1719)
Length: 122
Checksum: 0x6ab5 [correct]
H.225.0 RAS
RasMessage
RasMessage: registrationRequest (3)
registrationRequest
requestSeqNum: 1
protocolIdentifier: 0.0.8.2250.0.2 (itu-t(0) recommendation(0) h(8) h225-0(2250) version(0) 2)
0... .... discoveryComplete: False
callSignalAddress: 1 item
Item 0
TransportAddress
Item: ipAddress (0)
ipAddress
ip: 155.207.200.15 (155.207.200.15)
port: 1720
rasAddress: 1 item
Item 0
TransportAddress
Item: ipAddress (0)
ipAddress
ip: 155.207.200.15 (155.207.200.15)
port: 1225
terminalType
terminal
.0.. .... mc: False
..0. .... undefinedNode: False
terminalAlias: 2 items
Item 0
AliasAddress
Item: h323-ID (1)
h323-ID: dimitris@xxxxxxxxxxx
Item 1
AliasAddress
Item: dialedDigits (0)
dialedDigits: 5310996666
endpointVendor
vendor
t35CountryCode: United States (181)
t35Extension: 0
manufacturerCode: 21324
H.221 Manufacturer: Microsoft (0xb500534c)
productId: Microsoft\256 NetMeeting\256
versionId: 3.0
0000 00 0b 45 b4 a5 c0 00 03 47 fd 7f 13 08 00 45 00 ..E.....G.....E.
0010 00 8e 06 83 00 00 80 11 33 0e 9b cf c8 0f 9b cf ........3.......
0020 01 20 04 c9 06 b7 00 7a 6a b5 0c 80 00 00 06 00 . .....zj.......
0030 08 91 4a 00 02 00 01 00 9b cf c8 0f 06 b8 01 00 ..J.............
0040 9b cf c8 0f 04 c9 02 00 02 40 13 00 64 00 69 00 .........@..d.i.
0050 6d 00 69 00 74 00 72 00 69 00 73 00 40 00 63 00 m.i.t.r.i.s.@.c.
0060 63 00 66 00 2e 00 61 00 75 00 74 00 68 00 2e 00 c.f...a.u.t.h...
0070 67 00 72 04 80 86 43 cc 99 99 60 b5 00 53 4c 16 g.r...C...`..SL.
0080 4d 69 63 72 6f 73 6f 66 74 ae 20 4e 65 74 4d 65 Microsoft. NetMe
0090 65 74 69 6e 67 ae 00 03 33 2e 30 00 eting...3.0.
No. Time Source Destination Protocol Info
7 19.991992 155.207.200.15 155.207.1.32 H.225.0 RAS: registrationRequest
Frame 7 (156 bytes on wire, 156 bytes captured)
Arrival Time: Sep 16, 2005 09:57:06.627230000
Time delta from previous packet: 4.999979000 seconds
Time since reference or first frame: 19.991992000 seconds
Frame Number: 7
Packet Length: 156 bytes
Capture Length: 156 bytes
Protocols in frame: eth:ip:udp:h225
Ethernet II, Src: Intel_fd:7f:13 (00:03:47:fd:7f:13), Dst: Cisco_b4:a5:c0 (00:0b:45:b4:a5:c0)
Destination: Cisco_b4:a5:c0 (00:0b:45:b4:a5:c0)
Source: Intel_fd:7f:13 (00:03:47:fd:7f:13)
Type: IP (0x0800)
Internet Protocol, Src: 155.207.200.15 (155.207.200.15), Dst: 155.207.1.32 (155.207.1.32)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 142
Identification: 0x0684 (1668)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: UDP (0x11)
Header checksum: 0x330d [correct]
Source: 155.207.200.15 (155.207.200.15)
Destination: 155.207.1.32 (155.207.1.32)
User Datagram Protocol, Src Port: 1225 (1225), Dst Port: 1719 (1719)
Source port: 1225 (1225)
Destination port: 1719 (1719)
Length: 122
Checksum: 0x6ab5 [correct]
H.225.0 RAS
RasMessage
RasMessage: registrationRequest (3)
registrationRequest
requestSeqNum: 1
protocolIdentifier: 0.0.8.2250.0.2 (itu-t(0) recommendation(0) h(8) h225-0(2250) version(0) 2)
0... .... discoveryComplete: False
callSignalAddress: 1 item
Item 0
TransportAddress
Item: ipAddress (0)
ipAddress
ip: 155.207.200.15 (155.207.200.15)
port: 1720
rasAddress: 1 item
Item 0
TransportAddress
Item: ipAddress (0)
ipAddress
ip: 155.207.200.15 (155.207.200.15)
port: 1225
terminalType
terminal
.0.. .... mc: False
..0. .... undefinedNode: False
terminalAlias: 2 items
Item 0
AliasAddress
Item: h323-ID (1)
h323-ID: dimitris@xxxxxxxxxxx
Item 1
AliasAddress
Item: dialedDigits (0)
dialedDigits: 5310996666
endpointVendor
vendor
t35CountryCode: United States (181)
t35Extension: 0
manufacturerCode: 21324
H.221 Manufacturer: Microsoft (0xb500534c)
productId: Microsoft\256 NetMeeting\256
versionId: 3.0
0000 00 0b 45 b4 a5 c0 00 03 47 fd 7f 13 08 00 45 00 ..E.....G.....E.
0010 00 8e 06 84 00 00 80 11 33 0d 9b cf c8 0f 9b cf ........3.......
0020 01 20 04 c9 06 b7 00 7a 6a b5 0c 80 00 00 06 00 . .....zj.......
0030 08 91 4a 00 02 00 01 00 9b cf c8 0f 06 b8 01 00 ..J.............
0040 9b cf c8 0f 04 c9 02 00 02 40 13 00 64 00 69 00 .........@..d.i.
0050 6d 00 69 00 74 00 72 00 69 00 73 00 40 00 63 00 m.i.t.r.i.s.@.c.
0060 63 00 66 00 2e 00 61 00 75 00 74 00 68 00 2e 00 c.f...a.u.t.h...
0070 67 00 72 04 80 86 43 cc 99 99 60 b5 00 53 4c 16 g.r...C...`..SL.
0080 4d 69 63 72 6f 73 6f 66 74 ae 20 4e 65 74 4d 65 Microsoft. NetMe
0090 65 74 69 6e 67 ae 00 03 33 2e 30 00 eting...3.0.
------------------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------------------
