ох, пришлось конечно мне побегать...
Код:
15:52:25.656341 IP (tos 0x0, ttl 127, id 1266, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.16.104 > 192.168.18.253: ICMP echo request, id 1, seq 15195, length 40
15:52:25.656839 IP (tos 0x0, ttl 64, id 6865, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.18.253 > 192.168.16.104: ICMP echo reply, id 1, seq 15195, length 40
15:52:26.657453 IP (tos 0x0, ttl 127, id 1267, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.16.104 > 192.168.18.253: ICMP echo request, id 1, seq 15196, length 40
15:52:26.657953 IP (tos 0x0, ttl 64, id 6866, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.18.253 > 192.168.16.104: ICMP echo reply, id 1, seq 15196, length 40
15:52:26.802488 IP (tos 0x0, ttl 64, id 6867, offset 0, flags [none], proto: UDP (17), length: 113) 192.168.18.253.3850 > backup.rpharm.ru.syslog: SYSLOG, length: 85
Msg: JAN 01 01:49:00 192.168.18.253 ---:[Visual]:line=0[|syslog]
15:52:26.802862 IP (tos 0x0, ttl 127, id 12013, offset 0, flags [none], proto: ICMP (1), length: 141) backup.rpharm.ru > 192.168.18.253: ICMP backup.rpharm.ru udp port syslog unreachable, length 121
IP (tos 0x0, ttl 63, id 6867, offset 0, flags [none], proto: UDP (17), length: 113) 192.168.18.253.3850 > backup.rpharm.ru.syslog: SYSLOG, length: 85
15:52:27.003610 IP (tos 0x0, ttl 64, id 6868, offset 0, flags [none], proto: UDP (17), length: 456) 192.168.18.253.5070 > 192.168.1.100.5060: SIP, length: 428
15:52:27.093551 IP (tos 0x0, ttl 64, id 6869, offset 0, flags [none], proto: UDP (17), length: 456) 192.168.18.253.5080 > 192.168.1.100.5060: SIP, length: 428
15:52:27.183622 IP (tos 0x0, ttl 64, id 6870, offset 0, flags [none], proto: UDP (17), length: 456) 192.168.18.253.5090 > 192.168.1.100.5060: SIP, length: 428
\000J\000\000\000J\000\000\000\022\000\000#\254\232\242@\000!\221h\345\245\010\000E\000\000<\032\327\000\000@\001\2734\300\250\022\375\300\250\020h\000\000\031\376\000\001;]abcdefghijklmnopqrstuvwabcdefghi\032\323\000\000@\021\272\335\300\250\022\375\300\250\020~\017\012\002\002\000]\302\372<15>JAN 01 01:49:00 192.168.18.253 ---:[Visual]:line=0\000\000\012\212\336L.@\014\000`\000\000\000\233\000\000\000\022\000\000!\221h\345\245\000#\254\232\242@\010\000E\000\000\215.\355\000\000\177\001g\267\300\250\020~\300\250\022\375\003\003\2427\000\000\000\000E\000\000q\032\323\000\000?\021\273\335\300\250\022\375\300\250\020~\017\012\002\002\000]\302\372<15>JAN 01 01:49:00
15:52:27.658447 IP (tos 0x0, ttl 127, id 1268, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.16.104 > 192.168.18.253: ICMP echo request, id 1, seq 15197, length 40
15:52:27.658942 IP (tos 0x0, ttl 64, id 6871, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.18.253 > 192.168.16.104: ICMP echo reply, id 1, seq 15197, length 40
15:52:28.659431 IP (tos 0x0, ttl 127, id 1269, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.16.104 > 192.168.18.253: ICMP echo request, id 1, seq 15198, length 40
15:52:28.660179 IP (tos 0x0, ttl 64, id 6872, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.18.253 > 192.168.16.104: ICMP echo reply, id 1, seq 15198, length 40
15:52:29.661543 IP (tos 0x0, ttl 127, id 1270, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.16.104 > 192.168.18.253: ICMP echo request, id 1, seq 15199, length 40
15:52:29.662046 IP (tos 0x0, ttl 64, id 6873, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.18.253 > 192.168.16.104: ICMP echo reply, id 1, seq 15199, length 40
15:52:30.662531 IP (tos 0x0, ttl 127, id 1273, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.16.104 > 192.168.18.253: ICMP echo request, id 1, seq 15200, length 40
15:52:30.663030 IP (tos 0x0, ttl 64, id 6874, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.18.253 > 192.168.16.104: ICMP echo reply, id 1, seq 15200, length 40
15:52:31.003691 IP (tos 0x0, ttl 64, id 6875, offset 0, flags [none], proto: UDP (17), length: 456) 192.168.18.253.5070 > 192.168.1.100.5060: SIP, length: 428
15:52:31.093632 IP (tos 0x0, ttl 64, id 6876, offset 0, flags [none], proto: UDP (17), length: 456) 192.168.18.253.5080 > 192.168.1.100.5060: SIP, length: 428
15:52:31.183699 IP (tos 0x0, ttl 64, id 6877, offset 0, flags [none], proto: UDP (17), length: 456) 192.168.18.253.5090 > 192.168.1.100.5060: SIP, length: 428
15:52:31.508999 IP (tos 0x0, ttl 64, id 6878, offset 0, flags [none], proto: UDP (17), length: 455) 192.168.18.253.5070 > 192.168.1.100.5060: SIP, length: 427
From: <sip:1002@19\000<\017\212\336L{\343\007\000`\000\000\000\241\000\000\000\022\000\000#\254\232\242@\000!\221h\345\245\010\000E\000\000\223\032\337\000\000@\021\272\257\300\250\022\375\300\250\020~\017\013\002\002\000\177\225\273<15>JAN 01 01:49:05 192.168.18.253 ---:[SIPREG]:regist;_\017\212\336L\363\344\007\000`\000\000\000\275\000\000\000\022\000\000!\221h\345\245\000#\254\232\242@\010\000E\000\000\257.\367\000\000\177\001g\213\300\250\020~\300\250\022\375\003\003\242Y\000\000\000\000E\000\000\223\032\337\000\000?\021\273\257\300\250\022\375\300\250\020~\017\013\002\002\000\177\225\273<15>JAN 01 01:49:05 192.16a\224\017\212\336L\325\375\007\000`\000\000\000y\000\000\000\022\000\000#\254\232\242@\000!\221h\345\245\010\000E\000\000k\032\340\000\000@\021\272\326\300\250\022\375\300\250\020~\017\014\002\002\000W\026\333<15>JAN 01 01:49:05 192.168.18.253 ---:[SIPREG]:RVSIP_\000\000\017\212\336L\317\376\007\000`\000\000\000\225\000\000\000\022\000\000!\221h\345
15:52:31.516987 IP (tos 0x0, ttl 64, id 6879, offset 0, flags [none], proto: UDP (17), length: 147) 192.168.18.253.3851 > backup.rpharm.ru.syslog: SYSLOG, length: 119
Msg: JAN 01 01:49:05 192.168.18.253 ---:[SIPREG]:regist[|syslog]
15:52:31.517363 IP (tos 0x0, ttl 127, id 12023, offset 0, flags [none], proto: ICMP (1), length: 175) backup.rpharm.ru > 192.168.18.253: ICMP backup.rpharm.ru udp port syslog unreachable, length 155
IP (tos 0x0, ttl 63, id 6879, offset 0, flags [none], proto: UDP (17), length: 147) 192.168.18.253.3851 > backup.rpharm.ru.syslog: SYSLOG, length: 119
15:52:31.523733 IP (tos 0x0, ttl 64, id 6880, offset 0, flags [none], proto: UDP (17), length: 107) 192.168.18.253.3852 > backup.rpharm.ru.syslog: SYSLOG, length: 79
Msg: JAN 01 01:49:05 192.168.18.253 ---:[SIPREG]:RVSIP_[|syslog]
15:52:31.523983 IP (tos 0x0, ttl 127, id 12024, offset 0, flags [none], proto: ICMP (1), length: 135) backup.rpharm.ru > 192.168.18.253: ICMP backup.rpharm.ru udp port syslog unreachable, length 115
IP (tos 0x0, ttl 63, id 6880, offset 0, flags [none], proto: UDP (17), length: 107) 192.168.18.253.3852 > backup.rpharm.ru.syslog: SYSLOG, length: 79
15:52:31.528980 IP (tos 0x0, ttl 64, id 6881, offset 0, flags [none], proto: UDP (17), length: 152) 192.168.18.253.3853 > backup.rpharm.ru.syslog: SYSLOG, length: 124
Msg: JAN 01 01:49:05 192.168.18.253 ---:[SIPREG]:regist[|syslog]
15:52:31.529354 IP (tos 0x0, ttl 127, id 12025, offset 0, flags [none], proto: ICMP (1), length: 176) backup.rpharm.ru > 192.168.18.253: ICMP backup.rpharm.ru udp port syslog unreachable, length 156
IP (tos 0x0, ttl 63, id 6881, offset 0, flags [none], proto: UDP (17), length: 152) 192.168.18.253.3853 > backup.rpharm.ru.syslog: SYSLOG, length: 124
15:52:31.598811 IP (tos 0x0, ttl 64, id 6882, offset 0, flags [none], proto: UDP (17), length: 456) 192.168.18.253.5080 > 192.168.1.100.5060: SIP, length: 428
From: <sip:1003@19\000\000\017\212\336LID\011\000`\000\000\000\241\000\000\000\022\000\000#\254\232\242@\000!\221h\345\245\010\000E\000\000\223\032\343\000\000@\021\272\253\300\250\022\375\300\250\020~\017\016\002\002\000\177a\274<15>JAN 01 01:49:05 192.168.18.253 ---:[SIPREG]:regist\000\000\017\212\336L\277E\011\000`\000\000\000\275\000\000\000\022\000\000!\221h\345\245\000#\254\232\242@\010\000E\000\000\257.\372\000\000\177\001g\210\300\250\020~\300\250\022\375\003\003\242Y\000\000\000\000E\000\000\223\032\343\000\000?\021\273\253\300\250\022\375\300\250\020~\017\016\002\002\000\177a\274<15>JAN 01 01:49:05 192.16\000\000\017\212\336L\250]\011\000`\000\000\000y\000\000\000\022\000\000#\254\232\242@\000!\221h\345\245\010\000E\000\000k\032\344\000\000@\021\272\322\300\250\022\375\300\250\020~\017\017\002\002\000W\026\330<15>JAN 01 01:49:05 192.168.18.253 ---:[SIPREG]:RVSIP_\000\000\017\212\336L\243^\011\000`\000\000\000\225\000\000\000\022\000\000!\221h\345\245
15:52:31.607305 IP (tos 0x0, ttl 64, id 6883, offset 0, flags [none], proto: UDP (17), length: 147) 192.168.18.253.3854 > backup.rpharm.ru.syslog: SYSLOG, length: 119
Msg: JAN 01 01:49:05 192.168.18.253 ---:[SIPREG]:regist[|syslog]
15:52:31.607679 IP (tos 0x0, ttl 127, id 12026, offset 0, flags [none], proto: ICMP (1), length: 175) backup.rpharm.ru > 192.168.18.253: ICMP backup.rpharm.ru udp port syslog unreachable, length 155
IP (tos 0x0, ttl 63, id 6883, offset 0, flags [none], proto: UDP (17), length: 147) 192.168.18.253.3854 > backup.rpharm.ru.syslog: SYSLOG, length: 119
15:52:31.613800 IP (tos 0x0, ttl 64, id 6884, offset 0, flags [none], proto: UDP (17), length: 107) 192.168.18.253.3855 > backup.rpharm.ru.syslog: SYSLOG, length: 79
Msg: JAN 01 01:49:05 192.168.18.253 ---:[SIPREG]:RVSIP_[|syslog]
15:52:31.614051 IP (tos 0x0, ttl 127, id 12027, offset 0, flags [none], proto: ICMP (1), length: 135) backup.rpharm.ru > 192.168.18.253: ICMP backup.rpharm.ru udp port syslog unreachable, length 115
IP (tos 0x0, ttl 63, id 6884, offset 0, flags [none], proto: UDP (17), length: 107) 192.168.18.253.3855 > backup.rpharm.ru.syslog: SYSLOG, length: 79
15:52:31.618922 IP (tos 0x0, ttl 64, id 6885, offset 0, flags [none], proto: UDP (17), length: 152) 192.168.18.253.3856 > backup.rpharm.ru.syslog: SYSLOG, length: 124
Msg: JAN 01 01:49:05 192.168.18.253 ---:[SIPREG]:regist[|syslog]
15:52:31.619297 IP (tos 0x0, ttl 127, id 12028, offset 0, flags [none], proto: ICMP (1), length: 176) backup.rpharm.ru > 192.168.18.253: ICMP backup.rpharm.ru udp port syslog unreachable, length 156
IP (tos 0x0, ttl 63, id 6885, offset 0, flags [none], proto: UDP (17), length: 152) 192.168.18.253.3856 > backup.rpharm.ru.syslog: SYSLOG, length: 124
15:52:31.663644 IP (tos 0x0, ttl 127, id 1274, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.16.104 > 192.168.18.253: ICMP echo request, id 1, seq 15201, length 40
15:52:31.664894 IP (tos 0x0, ttl 64, id 6886, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.18.253 > 192.168.16.104: ICMP echo reply, id 1, seq 15201, length 40
15:52:31.689008 IP (tos 0x0, ttl 64, id 6887, offset 0, flags [none], proto: UDP (17), length: 456) 192.168.18.253.5090 > 192.168.1.100.5060: SIP, length: 428
From: <sip:1004@19\000\000\017\212\336L\222\246\012\000`\000\000\000\241\000\000\000\022\000\000#\254\232\242@\000!\221h\345\245\010\000E\000\000\223\032\350\000\000@\021\272\246\300\250\022\375\300\250\020~\017\021\002\002\000\177a\345<15>JAN 01 01:49:05 192.168.18.253 ---:[SIPREG]:regist\000\000\017\212\336L\004\250\012\000`\000\000\000\275\000\000\000\022\000\000!\221h\345\245\000#\254\232\242@\010\000E\000\000\257.\375\000\000\177\001g\205\300\250\020~\300\250\022\375\003\003\242Y\000\000\000\000E\000\000\223\032\350\000\000?\021\273\246\300\250\022\375\300\250\020~\017\021\002\002\000\177a\345<15>JAN 01 01:49:05 192.16\000\000\017\212\336LK\305\012\000`\000\000\000y\000\000\000\022\000\000#\254\232\242@\000!\221h\345\245\010\000E\000\000k\032\351\000\000@\021\272\315\300\250\022\375\300\250\020~\017\022\002\002\000W\026\325<15>JAN 01 01:49:05 192.168.18.253 ---:[SIPREG]:RVSIP_\000\000\017\212\336LE\306\012\000`\000\000\000\225\000\000\000\022\000\000!\221h\345\245
15:52:31.698002 IP (tos 0x0, ttl 64, id 6888, offset 0, flags [none], proto: UDP (17), length: 147) 192.168.18.253.3857 > backup.rpharm.ru.syslog: SYSLOG, length: 119
Msg: JAN 01 01:49:05 192.168.18.253 ---:[SIPREG]:regist[|syslog]
15:52:31.698372 IP (tos 0x0, ttl 127, id 12029, offset 0, flags [none], proto: ICMP (1), length: 175) backup.rpharm.ru > 192.168.18.253: ICMP backup.rpharm.ru udp port syslog unreachable, length 155
IP (tos 0x0, ttl 63, id 6888, offset 0, flags [none], proto: UDP (17), length: 147) 192.168.18.253.3857 > backup.rpharm.ru.syslog: SYSLOG, length: 119
15:52:31.705867 IP (tos 0x0, ttl 64, id 6889, offset 0, flags [none], proto: UDP (17), length: 107) 192.168.18.253.3858 > backup.rpharm.ru.syslog: SYSLOG, length: 79
Msg: JAN 01 01:49:05 192.168.18.253 ---:[SIPREG]:RVSIP_[|syslog]
15:52:31.706117 IP (tos 0x0, ttl 127, id 12030, offset 0, flags [none], proto: ICMP (1), length: 135) backup.rpharm.ru > 192.168.18.253: ICMP backup.rpharm.ru udp port syslog unreachable, length 115
IP (tos 0x0, ttl 63, id 6889, offset 0, flags [none], proto: UDP (17), length: 107) 192.168.18.253.3858 > backup.rpharm.ru.syslog: SYSLOG, length: 79
15:52:31.712738 IP (tos 0x0, ttl 64, id 6890, offset 0, flags [none], proto: UDP (17), length: 152) 192.168.18.253.3859 > backup.rpharm.ru.syslog: SYSLOG, length: 124
Msg: JAN 01 01:49:05 192.168.18.253 ---:[SIPREG]:regist[|syslog]
15:52:31.713113 IP (tos 0x0, ttl 127, id 12031, offset 0, flags [none], proto: ICMP (1), length: 176) backup.rpharm.ru > 192.168.18.253: ICMP backup.rpharm.ru udp port syslog unreachable, length 156
IP (tos 0x0, ttl 63, id 6890, offset 0, flags [none], proto: UDP (17), length: 152) 192.168.18.253.3859 > backup.rpharm.ru.syslog: SYSLOG, length: 124
15:52:32.003931 IP (tos 0x0, ttl 64, id 6891, offset 0, flags [none], proto: UDP (17), length: 455) 192.168.18.253.5070 > 192.168.1.100.5060: SIP, length: 427
15:52:32.093746 IP (tos 0x0, ttl 64, id 6892, offset 0, flags [none], proto: UDP (17), length: 456) 192.168.18.253.5080 > 192.168.1.100.5060: SIP, length: 428
15:52:32.183813 IP (tos 0x0, ttl 64, id 6893, offset 0, flags [none], proto: UDP (17), length: 456) 192.168.18.253.5090 > 192.168.1.100.5060: SIP, length: 428
15:52:32.665638 IP (tos 0x0, ttl 127, id 1275, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.16.104 > 192.168.18.253: ICMP echo request, id 1, seq 15202, length 40
15:52:32.666132 IP (tos 0x0, ttl 64, id 6894, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.18.253 > 192.168.16.104: ICMP echo reply, id 1, seq 15202, length 40
15:52:33.003794 IP (tos 0x0, ttl 64, id 6895, offset 0, flags [none], proto: UDP (17), length: 455) 192.168.18.253.5070 > 192.168.1.100.5060: SIP, length: 427
15:52:33.093735 IP (tos 0x0, ttl 64, id 6896, offset 0, flags [none], proto: UDP (17), length: 456) 192.168.18.253.5080 > 192.168.1.100.5060: SIP, length: 428
From: <sip:1004@19\000\000?\021\273\326\300\250\022\375\300\250\020~\017\014\002\002\000W\026\333<15>JAN 01 01:49:05 192.16\000\000\017\212\336LT\022\010\000`\000\000\000\246\000\000\000\022\000\000#\254\232\242@\000!\221h\345\245\010\000E\000\000\230\032\341\000\000@\021\272\250\300\250\022\375\300\250\020~\017\015\002\002\000\204\246f<15>JAN 01 01:49:05 192.168.18.253 ---:[SIPREG]:regist\000\000\017\212\336L\312\023\010\000`\000\000\000\276\000\000\000\022\000\000!\221h\345\245\000#\254\232\242@\010\000E\000\000\260.\371\000\000\177\001g\210\300\250\020~\300\250\022\375\003\0034\315\000\000\000\000E\000\000\230\032\341\000\000?\021\273\250\300\250\022\375\300\250\020~\017\015\002\002\000\204\246f<15>
15:52:33.183677 IP (tos 0x0, ttl 64, id 6897, offset 0, flags [none], proto: UDP (17), length: 456) 192.168.18.253.5090 > 192.168.1.100.5060: SIP, length: 428
From: <sip:1004@19\000\000?\021\273\326\300\250\022\375\300\250\020~\017\014\002\002\000W\026\333<15>JAN 01 01:49:05 192.16\000\000\017\212\336LT\022\010\000`\000\000\000\246\000\000\000\022\000\000#\254\232\242@\000!\221h\345\245\010\000E\000\000\230\032\341\000\000@\021\272\250\300\250\022\375\300\250\020~\017\015\002\002\000\204\246f<15>JAN 01 01:49:05 192.168.18.253 ---:[SIPREG]:regist\000\000\017\212\336L\312\023\010\000`\000\000\000\276\000\000\000\022\000\000!\221h\345\245\000#\254\232\242@\010\000E\000\000\260.\371\000\000\177\001g\210\300\250\020~\300\250\022\375\003\0034\315\000\000\000\000E\000\000\230\032\341\000\000?\021\273\250\300\250\022\375\300\250\020~\017\015\002\002\000\204\246f<15>JAN 01 01:49:05 192.16\000\000\017\212\336L\033#\011\000`\000\000\000\326\001\000\000\022\000\000#\254\232\242@\000!\221h\345\245\010\000E\000\001\310\032\342\000\000@\021\310\221\300\250\022\375\300\250\001d\023\330\023\304\001\264.\036REGISTER sip:192.168.1.100 SIP/2
15:52:33.666623 IP (tos 0x0, ttl 127, id 1276, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.16.104 > 192.168.18.253: ICMP echo request, id 1, seq 15203, length 40
15:52:33.667120 IP (tos 0x0, ttl 64, id 6898, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.18.253 > 192.168.16.104: ICMP echo reply, id 1, seq 15203, length 40
15:52:34.667737 IP (tos 0x0, ttl 127, id 1277, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.16.104 > 192.168.18.253: ICMP echo request, id 1, seq 15204, length 40
15:52:34.668233 IP (tos 0x0, ttl 64, id 6899, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.18.253 > 192.168.16.104: ICMP echo reply, id 1, seq 15204, length 40
15:52:35.004023 IP (tos 0x0, ttl 64, id 6900, offset 0, flags [none], proto: UDP (17), length: 455) 192.168.18.253.5070 > 192.168.1.100.5060: SIP, length: 427
15:52:35.093713 IP (tos 0x0, ttl 64, id 6901, offset 0, flags [none], proto: UDP (17), length: 456) 192.168.18.253.5080 > 192.168.1.100.5060: SIP, length: 428
From: <sip:1004@19\001\310\023\212\336L\324=\004\000<\000\000\000<\000\000\000\022\000\001\000^\000\000\002x\347\321\263~\223\010\000F\000\000 \012\272\000\000\001\002f\307\300\250\022\254\340\000\000\002\224\004\000\000\027\000\005\373\341\001\002\003\000\000\000\000\000\000\000\000\000\000\000\000\000\000\010\000E\000\000\230\032\341\000\000@\021\272\250\300\250\022\375\300\250\020~\017\015\002\002\000\204\246f<15>JAN 01 01:49:05 192.168.18.253 ---:[SIPREG]:regist\000\000\017\212\336L\312\023\010\000`\000\000\000\276\000\000\000\022\000\000!\221h\345\245\000#\254\232\242@\010\000E\000\000\260.\371\000\000\177\001g\210\300\250\020~\300\250\022\375\003\0034\315\000\000\000\000E\000\000\230\032\341\000\000?\021\273\250\300\250\022\375\300\250\020~\017\015\002\002\000\204\246f<15>
15:52:35.183908 IP (tos 0x0, ttl 64, id 6902, offset 0, flags [none], proto: UDP (17), length: 456) 192.168.18.253.5090 > 192.168.1.100.5060: SIP, length: 428
From: <sip:1004@19\001\310\023\212\336L\324=\004\000<\000\000\000<\000\000\000\022\000\001\000^\000\000\002x\347\321\263~\223\010\000F\000\000 \012\272\000\000\001\002f\307\300\250\022\254\340\000\000\002\224\004\000\000\027\000\005\373\341\001\002\003\000\000\000\000\000\000\000\000\000\000\000\000\000\000\010\000E\000\000\230\032\341\000\000@\021\272\250\300\250\022\375\300\250\020~\017\015\002\002\000\204\246f<15>JAN 01 01:49:05 192.168.18.253 ---:[SIPREG]:regist\000\000\017\212\336L\312\023\010\000`\000\000\000\276\000\000\000\022\000\000!\221h\345\245\000#\254\232\242@\010\000E\000\000\260.\371\000\000\177\001g\210\300\250\020~\300\250\022\375\003\0034\315\000\000\000\000E\000\000\230\032\341\000\000?\021\273\250\300\250\022\375\300\250\020~\017\015\002\002\000\204\246f<15>JAN 01 01:49:05 192.16\000\000\017\212\336L\033#\011\000`\000\000\000\326\001\000\000\022\000\000#\254\232\242@\000!\221h\345\245\010\000E\000\001\310\032\342\000\000@\021\310\221\300\250\022\375\300\250\001d\023\330\023\304\001\264.\036REGISTER sip:192.168.1.100 SIP/2
15:52:35.668726 IP (tos 0x0, ttl 127, id 1278, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.16.104 > 192.168.18.253: ICMP echo request, id 1, seq 15205, length 40
15:52:35.669971 IP (tos 0x0, ttl 64, id 6903, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.18.253 > 192.168.16.104: ICMP echo reply, id 1, seq 15205, length 40
15:52:36.482208 IP (tos 0x0, ttl 127, id 1672, offset 0, flags [none], proto: UDP (17), length: 738) 192.168.16.253.5060 > 192.168.18.253.5060: SIP, length: 710
INVITE sip:2009@192.168.18.253;user=phone SIP/2.0
From: <sip:192.168.18.253;user=\022\375\024\212\336Ld\336\007\000`\000\000\000w\000\000\000\022\000\000#\254\232\242@\000!\221h\345\245\010\000E\000\000i\032\371\000\000@\021\272\277\300\250\022\375\300\250\020~\017\024\002\002\000U\341\311<15>JAN 01 01:49:10 192.168.18.253 ---:[DLGIF]:line 0 \022\375\024\212\336L\340\336\007\000`\000\000\000\223\000\000\000\022\000\000!\221h\345\245\000#\254\232\242@\010\000E\000\000\205/\012\000\000\177\001g\242\300\250\020~\300\250\022\375\003\003\242/\000\000\000\000E\000\000i\032\371\000\000?\021\273\277\300\250\022\375\300\250\020~\017\024\002\002\000U\341\311<15>JAN 01 01:49:10 192.16\022\375\024\212\336L\316\366\007\000`\000\000\000\210\000\000\000\022\000\000#\254\232\242@\000!\221h\345\245\010\000E\000\000z\032\372\000\000@\021\272\255\300\250\022\375\300\250\020~\017\025\002\002\000fF\312<15>JAN 01 01:49:10 192.168.18.253 ---:--L0 INCOMING C\022\254\024\212\336L\276\370\007\000`\000\000\000\244\000\000\000\022\000\000!\221h\345\245\000#\254\232\242@\010\000E\000\000\226/\013\000\000\177\001g\220\300\250\020~\300\250\022\375\003\003\242@\000\000\000\000E\000\000z\032\372\000\000?\021\273\255\300\250\022\375\300\250\020~\017\025\002\002\000fF\312<15>JAN 01 01:49:10 192.16.1\024\212\336L\276\014\010\000`\000\000\000r\000\000\000\022\000\000#\254\232\242@\000!\221h\345\245\010\000E\000\000d\032\373\000\000@\021\272\302\300\250\022\375\300\250\020~\017\026\002\002\000P)\374<15>JAN 01 01:
15:52:36.508438 IP (tos 0x0, ttl 64, id 6904, offset 0, flags [none], proto: UDP (17), length: 445) 192.168.18.253.5060 > 192.168.16.253.5060: SIP, length: 417
From: <sip:192.168.18.253;user=\022\375\024\212\336Ld\336\007\000`\000\000\000w\000\000\000\022\000\000#\254\232\242@\000!\221h\345\245\010\000E\000\000i\032\371\000\000@\021\272\277\300\250\022\375\300\250\020~\017\024\002\002\000U\341\311<15>JAN 01 01:49:10 192.168.18.253 ---:[DLGIF]:line 0 \022\375\024\212\336L\340\336\007\000`\000\000\000\223\000\000\000\022\000\000!\221h\345\245\000#\254\232\242@\010\000E\000\000\205/\012\000\000\177\001g\242\300\250\020~\300\250\022\375\003\003\242/\000\000\000\000E\000\000i\032\371\000\000?\021\273\277\300\250\022\375\300\250\020~\017\024\002\002\000U\341\311<15>JAN 01 01:49:10 192.16\022\375\024\212\336L\316\366\007\000`\000\000\000\210\000\000\000\022\000\000#\254\232\242@\000!\221h\345\245\010\000E\000\000z\032\372\000\000@\021\272\255\300\250\022\375\300\250\020~\017\025\002\002\000fF\312<15>JAN 01 01:49:10 192.168.18.253 ---:--L0 INCOMING C\022\254\024\212\336L\276\370\007\000`\000\000\000\244
15:52:36.515684 IP (tos 0x0, ttl 64, id 6905, offset 0, flags [none], proto: UDP (17), length: 105) 192.168.18.253.3860 > backup.rpharm.ru.syslog: SYSLOG, length: 77
Msg: JAN 01 01:49:10 192.168.18.253 ---:[DLGIF]:line 0 [|syslog]
15:52:36.515808 IP (tos 0x0, ttl 127, id 12042, offset 0, flags [none], proto: ICMP (1), length: 133) backup.rpharm.ru > 192.168.18.253: ICMP backup.rpharm.ru udp port syslog unreachable, length 113
IP (tos 0x0, ttl 63, id 6905, offset 0, flags [none], proto: UDP (17), length: 105) 192.168.18.253.3860 > backup.rpharm.ru.syslog: SYSLOG, length: 77
15:52:36.521934 IP (tos 0x0, ttl 64, id 6906, offset 0, flags [none], proto: UDP (17), length: 122) 192.168.18.253.3861 > backup.rpharm.ru.syslog: SYSLOG, length: 94
Msg: JAN 01 01:49:10 192.168.18.253 ---:--L0 INCOMING C[|syslog]
15:52:36.522430 IP (tos 0x0, ttl 127, id 12043, offset 0, flags [none], proto: ICMP (1), length: 150) backup.rpharm.ru > 192.168.18.253: ICMP backup.rpharm.ru udp port syslog unreachable, length 130
IP (tos 0x0, ttl 63, id 6906, offset 0, flags [none], proto: UDP (17), length: 122) 192.168.18.253.3861 > backup.rpharm.ru.syslog: SYSLOG, length: 94
15:52:36.527550 IP (tos 0x0, ttl 64, id 6907, offset 0, flags [none], proto: UDP (17), length: 100) 192.168.18.253.3862 > backup.rpharm.ru.syslog: SYSLOG, length: 72
Msg: JAN 01 01:49:10 192.168.18.253 ---:[DLGIF]:L0 try [|syslog]
15:52:36.527800 IP (tos 0x0, ttl 127, id 12044, offset 0, flags [none], proto: ICMP (1), length: 128) backup.rpharm.ru > 192.168.18.253: ICMP backup.rpharm.ru udp port syslog unreachable, length 108
IP (tos 0x0, ttl 63, id 6907, offset 0, flags [none], proto: UDP (17), length: 100) 192.168.18.253.3862 > backup.rpharm.ru.syslog: SYSLOG, length: 72
15:52:36.533547 IP (tos 0x0, ttl 64, id 6908, offset 0, flags [none], proto: UDP (17), length: 102) 192.168.18.253.3863 > backup.rpharm.ru.syslog: SYSLOG, length: 74
Msg: JAN 01 01:49:10 192.168.18.253 ---:[DLGCB]:L0 Get [|syslog]
15:52:36.533671 IP (tos 0x0, ttl 127, id 12045, offset 0, flags [none], proto: ICMP (1), length: 130) backup.rpharm.ru > 192.168.18.253: ICMP backup.rpharm.ru udp port syslog unreachable, length 110
IP (tos 0x0, ttl 63, id 6908, offset 0, flags [none], proto: UDP (17), length: 102) 192.168.18.253.3863 > backup.rpharm.ru.syslog: SYSLOG, length: 74
15:52:36.539043 IP (tos 0x0, ttl 64, id 6909, offset 0, flags [none], proto: UDP (17), length: 121) 192.168.18.253.3864 > backup.rpharm.ru.syslog: SYSLOG, length: 93
Msg: JAN 01 01:49:10 192.168.18.253 APP:Assign L0 C(0) [|syslog]
15:52:36.539418 IP (tos 0x0, ttl 127, id 12046, offset 0, flags [none], proto: ICMP (1), length: 149) backup.rpharm.ru > 192.168.18.253: ICMP backup.rpharm.ru udp port syslog unreachable, length 129
IP (tos 0x0, ttl 63, id 6909, offset 0, flags [none], proto: UDP (17), length: 121) 192.168.18.253.3864 > backup.rpharm.ru.syslog: SYSLOG, length: 93
15:52:36.546163 IP (tos 0x0, ttl 64, id 6910, offset 0, flags [none], proto: UDP (17), length: 100) 192.168.18.253.3865 > backup.rpharm.ru.syslog: SYSLOG, length: 72
Msg: JAN 01 01:49:10 192.168.18.253 ---:[DLGIF]:Call(0)[|syslog]
15:52:36.546289 IP (tos 0x0, ttl 127, id 12047, offset 0, flags [none], proto: ICMP (1), length: 128) backup.rpharm.ru > 192.168.18.253: ICMP backup.rpharm.ru udp port syslog unreachable, length 108
IP (tos 0x0, ttl 63, id 6910, offset 0, flags [none], proto: UDP (17), length: 100) 192.168.18.253.3865 > backup.rpharm.ru.syslog: SYSLOG, length: 72
15:52:36.550661 IP (tos 0x0, ttl 64, id 6911, offset 0, flags [none], proto: UDP (17), length: 80) 192.168.18.253.3866 > backup.rpharm.ru.syslog: [udp sum ok] SYSLOG, length: 52
Msg: JAN 01 01:49:10 192.168.18.253 SDP:VOCODER:[0,8]
15:52:36.550786 IP (tos 0x0, ttl 127, id 12048, offset 0, flags [none], proto: ICMP (1), length: 108) backup.rpharm.ru > 192.168.18.253: ICMP backup.rpharm.ru udp port syslog unreachable, length 88
IP (tos 0x0, ttl 63, id 6911, offset 0, flags [none], proto: UDP (17), length: 80) 192.168.18.253.3866 > backup.rpharm.ru.syslog: SYSLOG, length: 52
15:52:36.551785 IP (tos 0x0, ttl 127, id 1673, offset 0, flags [none], proto: UDP (17), length: 512) 192.168.16.253.5060 > 192.168.18.253.5060: SIP, length: 484
ACK sip:2009@192.168.18.253;user=phone SIP/2.0
Via: S\000\000\024\212\336L\343\200\010\000`\000\000\000|\000\000\000\022\000\000#\254\232\242@\000!\221h\345\245\010\000E\000\000n\033\000\000\000@\021\272\263\300\250\022\375\300\250\020~\017\033\002\002\000Z}\277<13>JAN 01 01:49:10 192.168.18.253 SDP:RIP=C0A810FD po\000\000\024\212\336L\326\202\010\000`\000\000\000\230\000\000\000\022\000\000!\221h\345\245\000#\254\232\242@\010\000E\000\000\212/\021\000\000\177\001g\226\300\250\020~\300\250\022\375\003\003\2424\000\000\000\000E\000\000n\033\000\000\000?\021\273\263\300\250\022\375\300\250\020~\017\033\002\002\000Z}\277<13>JAN 01 01:49:10 192.16\000\000\024\212\336L\271\233\010\000`\000\000\000\215\000\000\000\022\000\000#\254\232\242@\000!\221h\345\245\010\000E\000\000\177\033\001\000\000@\021\272\241\300\250\022\375\300\250\020~\017\034\002\002\000k\354\334<15>JAN 01 01:49:10 192.168.18.253 ---:--INCOMING call\000\000\024\212\336L/\235\010\000`\000\000\000\251\000\000\000\022\000\000!\221h\345\245\000#\254\232\242@\010\000E\000\000\233/\022\000\000\177\001g\204\300\250\020~\300\250\022\375\003\003\242E\000\000\000\000E\000\000\177\033\001\000\000?\021\273\241\300\250\022\375\300\250\020~
15:52:36.557283 IP (tos 0x0, ttl 64, id 6912, offset 0, flags [none], proto: UDP (17), length: 110) 192.168.18.253.3867 > backup.rpharm.ru.syslog: SYSLOG, length: 82
Msg: JAN 01 01:49:10 192.168.18.253 SDP:RIP=C0A810FD po[|syslog]
15:52:36.557782 IP (tos 0x0, ttl 127, id 12049, offset 0, flags [none], proto: ICMP (1), length: 138) backup.rpharm.ru > 192.168.18.253: ICMP backup.rpharm.ru udp port syslog unreachable, length 118
IP (tos 0x0, ttl 63, id 6912, offset 0, flags [none], proto: UDP (17), length: 110) 192.168.18.253.3867 > backup.rpharm.ru.syslog: SYSLOG, length: 82
15:52:36.564153 IP (tos 0x0, ttl 64, id 6913, offset 0, flags [none], proto: UDP (17), length: 127) 192.168.18.253.3868 > backup.rpharm.ru.syslog: SYSLOG, length: 99
Msg: JAN 01 01:49:10 192.168.18.253 ---:--INCOMING call[|syslog]
15:52:36.564527 IP (tos 0x0, ttl 127, id 12050, offset 0, flags [none], proto: ICMP (1), length: 155) backup.rpharm.ru > 192.168.18.253: ICMP backup.rpharm.ru udp port syslog unreachable, length 135
IP (tos 0x0, ttl 63, id 6913, offset 0, flags [none], proto: UDP (17), length: 127) 192.168.18.253.3868 > backup.rpharm.ru.syslog: SYSLOG, length: 99
15:52:36.580642 IP (tos 0x0, ttl 64, id 6914, offset 0, flags [none], proto: UDP (17), length: 82) 192.168.18.253.3869 > backup.rpharm.ru.syslog: [udp sum ok] SYSLOG, length: 54
Msg: JAN 01 01:49:10 192.168.18.253 ---:eReason is :1.\012
15:52:36.580767 IP (tos 0x0, ttl 127, id 12051, offset 0, flags [none], proto: ICMP (1), length: 110) backup.rpharm.ru > 192.168.18.253: ICMP backup.rpharm.ru udp port syslog unreachable, length 90
IP (tos 0x0, ttl 63, id 6914, offset 0, flags [none], proto: UDP (17), length: 82) 192.168.18.253.3869 > backup.rpharm.ru.syslog: SYSLOG, length: 54
15:52:36.586263 IP (tos 0x0, ttl 64, id 6915, offset 0, flags [none], proto: UDP (17), length: 105) 192.168.18.253.3870 > backup.rpharm.ru.syslog: SYSLOG, length: 77
Msg: JAN 01 01:49:10 192.168.18.253 ---:[DLGIF]:No call[|syslog]
15:52:36.586513 IP (tos 0x0, ttl 127, id 12052, offset 0, flags [none], proto: ICMP (1), length: 133) backup.rpharm.ru > 192.168.18.253: ICMP backup.rpharm.ru udp port syslog unreachable, length 113
IP (tos 0x0, ttl 63, id 6915, offset 0, flags [none], proto: UDP (17), length: 105) 192.168.18.253.3870 > backup.rpharm.ru.syslog: SYSLOG, length: 77
15:52:36.592135 IP (tos 0x0, ttl 64, id 6916, offset 0, flags [none], proto: UDP (17), length: 111) 192.168.18.253.3871 > backup.rpharm.ru.syslog: SYSLOG, length: 83
Msg: JAN 01 01:49:10 192.168.18.253 ---:[SUBJECT]:Try t[|syslog]
15:52:36.592510 IP (tos 0x0, ttl 127, id 12053, offset 0, flags [none], proto: ICMP (1), length: 139) backup.rpharm.ru > 192.168.18.253: ICMP backup.rpharm.ru udp port syslog unreachable, length 119
IP (tos 0x0, ttl 63, id 6916, offset 0, flags [none], proto: UDP (17), length: 111) 192.168.18.253.3871 > backup.rpharm.ru.syslog: SYSLOG, length: 83
15:52:36.598006 IP (tos 0x0, ttl 64, id 6917, offset 0, flags [none], proto: UDP (17), length: 117) 192.168.18.253.3872 > backup.rpharm.ru.syslog: SYSLOG, length: 89
Msg: JAN 01 01:49:10 192.168.18.253 ---:***Error:[SUBJE[|syslog]
15:52:36.598380 IP (tos 0x0, ttl 127, id 12054, offset 0, flags [none], proto: ICMP (1), length: 145) backup.rpharm.ru > 192.168.18.253: ICMP backup.rpharm.ru udp port syslog unreachable, length 125
IP (tos 0x0, ttl 63, id 6917, offset 0, flags [none], proto: UDP (17), length: 117) 192.168.18.253.3872 > backup.rpharm.ru.syslog: SYSLOG, length: 89
15:52:36.604127 IP (tos 0x0, ttl 64, id 6918, offset 0, flags [none], proto: UDP (17), length: 99) 192.168.18.253.3873 > backup.rpharm.ru.syslog: SYSLOG, length: 71
Msg: JAN 01 01:49:10 192.168.18.253 DIALOG:Fail to get [|syslog]
15:52:36.604377 IP (tos 0x0, ttl 127, id 12055, offset 0, flags [none], proto: ICMP (1), length: 127) backup.rpharm.ru > 192.168.18.253: ICMP backup.rpharm.ru udp port syslog unreachable, length 107
IP (tos 0x0, ttl 63, id 6918, offset 0, flags [none], proto: UDP (17), length: 99) 192.168.18.253.3873 > backup.rpharm.ru.syslog: SYSLOG, length: 71
15:52:36.611122 IP (tos 0x0, ttl 64, id 6919, offset 0, flags [none], proto: UDP (17), length: 131) 192.168.18.253.3874 > backup.rpharm.ru.syslog: SYSLOG, length: 103
Msg: JAN 01 01:49:10 192.168.18.253 ---:--INCOMING call[|syslog]
15:52:36.611497 IP (tos 0x0, ttl 127, id 12056, offset 0, flags [none], proto: ICMP (1), length: 159) backup.rpharm.ru > 192.168.18.253: ICMP backup.rpharm.ru udp port syslog unreachable, length 139
IP (tos 0x0, ttl 63, id 6919, offset 0, flags [none], proto: UDP (17), length: 131) 192.168.18.253.3874 > backup.rpharm.ru.syslog: SYSLOG, length: 103
15:52:36.616619 IP (tos 0x0, ttl 64, id 6920, offset 0, flags [none], proto: UDP (17), length: 104) 192.168.18.253.3875 > backup.rpharm.ru.syslog: SYSLOG, length: 76
Msg: JAN 01 01:49:10 192.168.18.253 ---:[DLGIF]:DISCONN[|syslog]
15:52:36.616869 IP (tos 0x0, ttl 127, id 12057, offset 0, flags [none], proto: ICMP (1), length: 132) backup.rpharm.ru > 192.168.18.253: ICMP backup.rpharm.ru udp port syslog unreachable, length 112
IP (tos 0x0, ttl 63, id 6920, offset 0, flags [none], proto: UDP (17), length: 104) 192.168.18.253.3875 > backup.rpharm.ru.syslog: SYSLOG, length: 76
15:52:36.623739 IP (tos 0x0, ttl 64, id 6921, offset 0, flags [none], proto: UDP (17), length: 124) 192.168.18.253.3876 > backup.rpharm.ru.syslog: SYSLOG, length: 96
Msg: JAN 01 01:49:10 192.168.18.253 LINE:L0(C0):Ignore [|syslog]
15:52:36.624240 IP (tos 0x0, ttl 127, id 12058, offset 0, flags [none], proto: ICMP (1), length: 152) backup.rpharm.ru > 192.168.18.253: ICMP backup.rpharm.ru udp port syslog unreachable, length 132
IP (tos 0x0, ttl 63, id 6921, offset 0, flags [none], proto: UDP (17), length: 124) 192.168.18.253.3876 > backup.rpharm.ru.syslog: SYSLOG, length: 96
15:52:36.628986 IP (tos 0x0, ttl 64, id 6922, offset 0, flags [none], proto: UDP (17), length: 129) 192.168.18.253.3877 > backup.rpharm.ru.syslog: SYSLOG, length: 101
Msg: JAN 01 01:49:10 192.168.18.253 ---:--INCOMING call[|syslog]
15:52:36.629486 IP (tos 0x0, ttl 127, id 12059, offset 0, flags [none], proto: ICMP (1), length: 157) backup.rpharm.ru > 192.168.18.253: ICMP backup.rpharm.ru udp port syslog unreachable, length 137
IP (tos 0x0, ttl 63, id 6922, offset 0, flags [none], proto: UDP (17), length: 129) 192.168.18.253.3877 > backup.rpharm.ru.syslog: SYSLOG, length: 101
15:52:36.670835 IP (tos 0x0, ttl 127, id 1279, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.16.104 > 192.168.18.253: ICMP echo request, id 1, seq 15206, length 40
15:52:36.671334 IP (tos 0x0, ttl 64, id 6923, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.18.253 > 192.168.16.104: ICMP echo reply, id 1, seq 15206, length 40
15:52:37.672828 IP (tos 0x0, ttl 127, id 1281, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.16.104 > 192.168.18.253: ICMP echo request, id 1, seq 15207, length 40
15:52:37.673322 IP (tos 0x0, ttl 64, id 6924, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.18.253 > 192.168.16.104: ICMP echo reply, id 1, seq 15207, length 40
15:52:38.673814 IP (tos 0x0, ttl 127, id 1282, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.16.104 > 192.168.18.253: ICMP echo request, id 1, seq 15208, length 40
15:52:38.674935 IP (tos 0x0, ttl 64, id 6925, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.18.253 > 192.168.16.104: ICMP echo reply, id 1, seq 15208, length 40
15:52:39.003853 IP (tos 0x0, ttl 64, id 6926, offset 0, flags [none], proto: UDP (17), length: 455) 192.168.18.253.5070 > 192.168.1.100.5060: SIP, length: 427
15:52:39.093794 IP (tos 0x0, ttl 64, id 6927, offset 0, flags [none], proto: UDP (17), length: 456) 192.168.18.253.5080 > 192.168.1.100.5060: SIP, length: 428
From: <sip:1004@19\010\000E\000\000\226/\013\000\000\177\001g\220\300\250\020~\300\250\022\375\003\003\242@\000\000\000\000E\000\000z\032\372\000\000?\021\273\255\300\250\022\375\300\250\020~\017\025\002\002\000fF\312<15>JAN 01 01:49:10 192.16.1\024\212\336L\276\014\010\000`\000\000\000r\000\000\000\022\000\000#\254\232\242@\000!\221h\345\245\010\000E\000\000d\032\373\000\000@\021\272\302\300\250\022\375\300\250\020~\017\026\002\002\000P)\374<15>JAN 01 01:49:10 192.168.18.253 ---:[DLGIF]:L0 try \000\000\024\212\336L\270\015\010\000`\000\000\000\216\000\000\000\022\000\000!\221h\345\245\000#\254\232\242@\010\000E\000\000\200/\014\000\000\177\001g\245\300\250\020~\300\250\022\375\003\003\242*
15:52:39.183861 IP (tos 0x0, ttl 64, id 6928, offset 0, flags [none], proto: UDP (17), length: 456) 192.168.18.253.5090 > 192.168.1.100.5060: SIP, length: 428
From: <sip:1004@19\010\000E\000\000\226/\013\000\000\177\001g\220\300\250\020~\300\250\022\375\003\003\242@\000\000\000\000E\000\000z\032\372\000\000?\021\273\255\300\250\022\375\300\250\020~\017\025\002\002\000fF\312<15>JAN 01 01:49:10 192.16.1\024\212\336L\276\014\010\000`\000\000\000r\000\000\000\022\000\000#\254\232\242@\000!\221h\345\245\010\000E\000\000d\032\373\000\000@\021\272\302\300\250\022\375\300\250\020~\017\026\002\002\000P)\374<15>JAN 01 01:49:10 192.168.18.253 ---:[DLGIF]:L0 try \000\000\024\212\336L\270\015\010\000`\000\000\000\216\000\000\000\022\000\000!\221h\345\245\000#\254\232\242@\010\000E\000\000\200/\014\000\000\177\001g\245\300\250\020~\300\250\022\375\003\003\242*\000\000\000\000E\000\000d\032\373\000\000?\021\273\302\300\250\022\375\300\250\020~\017\026\002\002\000P)\374<15>JAN 01 01:49:10 192.16\000\000\024\212\336L+$\010\000`\000\000\000t\000\000\000\022\000\000#\254\232\242@\000!\221h\345\245\010\000E\000\000f\032\374\000\000@\021\272\277\300\250\022\375\300\250\020~\017\027\002\002
15:52:39.675927 IP (tos 0x0, ttl 127, id 1283, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.16.104 > 192.168.18.253: ICMP echo request, id 1, seq 15209, length 40
15:52:39.676423 IP (tos 0x0, ttl 64, id 6929, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.18.253 > 192.168.16.104: ICMP echo reply, id 1, seq 15209, length 40
15:52:40.676915 IP (tos 0x0, ttl 127, id 1284, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.16.104 > 192.168.18.253: ICMP echo request, id 1, seq 15210, length 40
15:52:40.677412 IP (tos 0x0, ttl 64, id 6930, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.18.253 > 192.168.16.104: ICMP echo reply, id 1, seq 15210, length 40
15:52:41.678027 IP (tos 0x0, ttl 127, id 1285, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.16.104 > 192.168.18.253: ICMP echo request, id 1, seq 15211, length 40
15:52:41.678525 IP (tos 0x0, ttl 64, id 6931, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.18.253 > 192.168.16.104: ICMP echo reply, id 1, seq 15211, length 40
15:52:42.679143 IP (tos 0x0, ttl 127, id 1286, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.16.104 > 192.168.18.253: ICMP echo request, id 1, seq 15212, length 40
15:52:42.680388 IP (tos 0x0, ttl 64, id 6932, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.18.253 > 192.168.16.104: ICMP echo reply, id 1, seq 15212, length 40
15:52:43.003934 IP (tos 0x0, ttl 64, id 6933, offset 0, flags [none], proto: UDP (17), length: 455) 192.168.18.253.5070 > 192.168.1.100.5060: SIP, length: 427
15:52:43.094000 IP (tos 0x0, ttl 64, id 6934, offset 0, flags [none], proto: UDP (17), length: 456) 192.168.18.253.5080 > 192.168.1.100.5060: SIP, length: 428
15:52:43.183944 IP (tos 0x0, ttl 64, id 6935, offset 0, flags [none], proto: UDP (17), length: 456) 192.168.18.253.5090 > 192.168.1.100.5060: SIP, length: 428
From: <sip:1004@19\010\000E\000\000\226/\013\000\000\177\001g\220\300\250\020~\300\250\022\375\003\003\242@\000\000\000\000E\000\000z\032\372\000\000?\021\273\255\300\250\022\375\300\250\020~\017\025\002\002\000fF\312<15>JAN 01 01:49:10 192.16.1\024\212\336L\276\014\010\000`\000\000\000r\000\000\000\022\000\000#\254\232\242@\000!\221h\345\245\010\000E\000\000d\032\373\000\000@\021\272\302\300\250\022\375\300\250\020~\017\026\002\002\000P)\374<15>JAN 01 01:49:10 192.168.18.253 ---:[DLGIF]:L0 try \000\000\024\212\336L\270\015\010\000`\000\000\000\216\000\000\000\022\000\000!\221h\345\245\000#\254\232\242@\010\000E\000\000\200/\014\000\000\177\001g\245\300\250\020~\300\250\022\375\003\003\242*\000\000\000\000E\000\000d\032\373\000\000?\021\273\302\300\250\022\375\300\250\020~\017\026\002\002\000P)\374<15>
15:52:43.681130 IP (tos 0x0, ttl 127, id 1287, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.16.104 > 192.168.18.253: ICMP echo request, id 1, seq 15213, length 40
15:52:43.681751 IP (tos 0x0, ttl 64, id 6936, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.18.253 > 192.168.16.104: ICMP echo reply, id 1, seq 15213, length 40
15:52:44.682117 IP (tos 0x0, ttl 127, id 1288, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.16.104 > 192.168.18.253: ICMP echo request, id 1, seq 15214, length 40
15:52:44.682739 IP (tos 0x0, ttl 64, id 6937, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.18.253 > 192.168.16.104: ICMP echo reply, id 1, seq 15214, length 40
15:52:45.683233 IP (tos 0x0, ttl 127, id 1289, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.16.104 > 192.168.18.253: ICMP echo request, id 1, seq 15215, length 40
15:52:45.683728 IP (tos 0x0, ttl 64, id 6938, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.18.253 > 192.168.16.104: ICMP echo reply, id 1, seq 15215, length 40
15:52:46.443874 IP (tos 0x0, ttl 64, id 6939, offset 0, flags [none], proto: UDP (17), length: 76) 192.168.18.253.3878 > ntp.ntu.edu.tw.ntp: [udp sum ok] NTPv3, length 48
15:52:46.684217 IP (tos 0x0, ttl 127, id 1290, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.16.104 > 192.168.18.253: ICMP echo request, id 1, seq 15216, length 40
15:52:46.685465 IP (tos 0x0, ttl 64, id 6940, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.18.253 > 192.168.16.104: ICMP echo reply, id 1, seq 15216, length 40
15:52:47.004267 IP (tos 0x0, ttl 64, id 6941, offset 0, flags [none], proto: UDP (17), length: 455) 192.168.18.253.5070 > 192.168.1.100.5060: SIP, length: 427
15:52:47.093957 IP (tos 0x0, ttl 64, id 6942, offset 0, flags [none], proto: UDP (17), length: 456) 192.168.18.253.5080 > 192.168.1.100.5060: SIP, length: 428
From: <sip:1004@19\000\000E\000\000z\032\372\000\000?\021\273\255\300\250\022\375\300\250\020~\017\025\002\002\000fF\312<15>JAN 01 01:49:10 192.16.1\024\212\336L\276\014\010\000`\000\000\000r\000\000\000\022\000\000#\254\232\242@\000!\221h\345\245\010\000E\000\000d\032\373\000\000@\021\272\302\300\250\022\375\300\250\020~\017\026\002\002\000P)\374<15>JAN 01 01:49:10 192.168.18.253 ---:[DLGIF]:L0 try \000\000\024\212\336L\270\015\010\000`\000\000\000\216\000\000\000\022\000\000!\221h\345\245\000#\254\232\242@\010\000E\000\000\200/\014\000\000\177\001g\245\300\250\020~\300\250\022\375\003\003\242*\000\000\000\000E\000\000d\032\373\000\000?\021\273\302\300\250\022\375\300\250\020~\017\026\002\002
15:52:47.184150 IP (tos 0x0, ttl 64, id 6943, offset 0, flags [none], proto: UDP (17), length: 456) 192.168.18.253.5090 > 192.168.1.100.5060: SIP, length: 428
From: <sip:1004@19\000\000E\000\000z\032\372\000\000?\021\273\255\300\250\022\375\300\250\020~\017\025\002\002\000fF\312<15>JAN 01 01:49:10 192.16.1\024\212\336L\276\014\010\000`\000\000\000r\000\000\000\022\000\000#\254\232\242@\000!\221h\345\245\010\000E\000\000d\032\373\000\000@\021\272\302\300\250\022\375\300\250\020~\017\026\002\002\000P)\374<15>JAN 01 01:49:10 192.168.18.253 ---:[DLGIF]:L0 try \000\000\024\212\336L\270\015\010\000`\000\000\000\216\000\000\000\022\000\000!\221h\345\245\000#\254\232\242@\010\000E\000\000\200/\014\000\000\177\001g\245\300\250\020~\300\250\022\375\003\003\242*\000\000\000\000E\000\000d\032\373\000\000?\021\273\302\300\250\022\375\300\250\020~\017\026\002\002\000P)\374<15>JAN 01 01:49:10 192.16\000\000\024\212\336L+$\010\000`\000\000\000t\000\000\000\022\000\000#\254\232\242@\000!\221h\345\245\010\000E\000\000f\032\374\000\000@\021\272\277\300\250\022\375\300\250\020~\017\027\002\002\000R\300a<15>JAN 01 01:49:10 192.
15:52:47.686207 IP (tos 0x0, ttl 127, id 1291, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.16.104 > 192.168.18.253: ICMP echo request, id 1, seq 15217, length 40
15:52:47.686704 IP (tos 0x0, ttl 64, id 6944, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.18.253 > 192.168.16.104: ICMP echo reply, id 1, seq 15217, length 40
15:52:48.687325 IP (tos 0x0, ttl 127, id 1292, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.16.104 > 192.168.18.253: ICMP echo request, id 1, seq 15218, length 40
15:52:48.687817 IP (tos 0x0, ttl 64, id 6945, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.18.253 > 192.168.16.104: ICMP echo reply, id 1, seq 15218, length 40
15:52:49.688307 IP (tos 0x0, ttl 127, id 1293, offset 0, flags [none], proto: ICMP (1), length: 60) 192.168.16.104 > 192.168.1