[Serusers] RADIUS

Morris, Scott MorrisS at orau.gov
Wed Aug 4 20:50:53 UTC 2004


I have been away from this project for a while, but am back onto it now.  I
have SER 8.12 installed, with the RADIUS module.  SER comes up fine.  Below
you will find information on my configuration, including:
	- ser.cfg file
	- ngrep
	- ethereal capture

The ethereal and ngrep where two different sessions, but just minutes away
from each other.  Each time I just clicked on sign in.

I am using MS Messenger 7.26

Scott Morris
Enterprise Network Engineer
DOE - ORAU / ORISE
865-576-4672



SER.CFG
======================================
#
# $Id: ser.cfg,v 1.21.4.1 2003/11/10 15:35:15 andrei Exp $
#
# simple quick-start config script
#

# ----------- global configuration parameters ------------------------

#debug=3         # debug level (cmd line: -dddddddddd)
#fork=yes
#log_stderror=no	# (cmd line: -E)

/* Uncomment these lines to enter debugging mode 
debug=7
fork=no
log_stderror=yes
*/
debug=7
# fork=no
log_stderror=yes




check_via=no	# (cmd. line: -v)
dns=no           # (cmd. line: -r)
rev_dns=no      # (cmd. line: -R)
port=5060
children=4
fifo="/tmp/ser_fifo"
alias=orau.gov


# ------------------ module loading ----------------------------------

# Uncomment this if you want to use SQL database
#loadmodule "/usr/lib/ser/modules/mysql.so"

loadmodule "/usr/lib/ser/modules/sl.so"
loadmodule "/usr/lib/ser/modules/tm.so"
loadmodule "/usr/lib/ser/modules/rr.so"
loadmodule "/usr/lib/ser/modules/maxfwd.so"
loadmodule "/usr/lib/ser/modules/usrloc.so"
loadmodule "/usr/lib/ser/modules/registrar.so"

# Uncomment this if you want digest authentication
# mysql.so must be loaded !
#loadmodule "/usr/lib/ser/modules/auth.so"
#loadmodule "/usr/lib/ser/modules/auth_db.so"
loadmodule "/usr/lib/ser/modules/auth.so"

loadmodule "/usr/lib/ser/modules/auth_radius.so"
# ----------------- setting module-specific parameters ---------------

# -- usrloc params --

modparam("usrloc", "db_mode",   0)

# Uncomment this if you want to use SQL database 
# for persistent storage and comment the previous line #modparam("usrloc",
"db_mode", 2)

# -- auth params --
# Uncomment if you are using auth module
#
# modparam("auth_db", "calculate_ha1", yes)
#
# If you set "calculate_ha1" parameter to yes (which true in this config), 
# uncomment also the following parameter)
#
# modparam("auth_db", "password_column", "password")

# -- rr params --
# add value to ;lr param to make some broken UAs happy modparam("rr",
"enable_full_lr", 1)

# --auth_radius params
modparam("auth_radius", "radius_config",
"/etc/radiusclient/radiusclient.conf")
modparam("auth_radius", "service_type", 15)
# -------------------------  request routing logic -------------------

# main routing logic

route{

	# initial sanity checks -- messages with
	# max_forwards==0, or excessively long requests
	if (!mf_process_maxfwd_header("10")) {
		sl_send_reply("483","Too Many Hops");
		break;
	};
	if ( msg:len > max_len ) {
		sl_send_reply("513", "Message too big");
		break;
	};

	# we record-route all messages -- to make sure that
	# subsequent messages will go through our proxy; that's
	# particularly good if upstream and downstream entities
	# use different transport protocol
	record_route();	
	# loose-route processing
	if (loose_route()) {
		t_relay();
		break;
	};

	# if the request is for other domain use UsrLoc
	# (in case, it does not work, use the following command
	# with proper names and addresses in it)
	if (uri=="orau.gov") {

		if (method=="REGISTER") {

# Uncomment this if you want to use digest authentication
			if (!radius_www_authorize("orau.gov")) {
				www_challenge("orau.gov", "0");


				break;
			};




			save("location");
			break;
		};

		# native SIP destinations are handled using our USRLOC DB
		if (!lookup("location")) {
			sl_send_reply("404", "Not Found");
			break;
		};
	};
	# forward to current uri now; use stateful forwarding; that
	# works reliably even if we forward from TCP to UDP
	if (!t_relay()) {
		sl_reply_error();
	};

}
============================================================================
==



NGREP
======================================
interface: eth0 (10.0.0.0/255.255.0.0)
#

U 10.0.1.13:3325 -> 10.0.2.1:5060
  REGISTER sip:orau.gov SIP/2.0..Via: SIP/2.0/UDP 10.0.1.13:15697..From:
<sip
  :morriss at orau.gov>;tag=e4a3e8dc-9a85-4297-9f6c-8139a998e242..To:
<sip:morri
  ss at orau.gov>..Call-ID:
88a81dfe-c805-4e8d-95e2-09dcf4845b8b at 10.0.1.13..CSeq
  : 1 REGISTER..Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE,
INFO
  , SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"..User-Agent: Windows
RTC/1.
  0..Expires: 1200..Event: registration..Allow-Events:
presence..Content-Leng
  th: 0....
#
U 10.0.1.13:3325 -> 10.0.2.1:5060
  REGISTER sip:orau.gov SIP/2.0..Via: SIP/2.0/UDP 10.0.1.13:15697..From:
<sip
  :morriss at orau.gov>;tag=e4a3e8dc-9a85-4297-9f6c-8139a998e242..To:
<sip:morri
  ss at orau.gov>..Call-ID:
88a81dfe-c805-4e8d-95e2-09dcf4845b8b at 10.0.1.13..CSeq
  : 1 REGISTER..Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE,
INFO
  , SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"..User-Agent: Windows
RTC/1.
  0..Expires: 1200..Event: registration..Allow-Events:
presence..Content-Leng
  th: 0....
#
U 10.0.1.13:3325 -> 10.0.2.1:5060
  REGISTER sip:orau.gov SIP/2.0..Via: SIP/2.0/UDP 10.0.1.13:15697..From:
<sip
  :morriss at orau.gov>;tag=e4a3e8dc-9a85-4297-9f6c-8139a998e242..To:
<sip:morri
  ss at orau.gov>..Call-ID:
88a81dfe-c805-4e8d-95e2-09dcf4845b8b at 10.0.1.13..CSeq
  : 1 REGISTER..Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE,
INFO
  , SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"..User-Agent: Windows
RTC/1.
  0..Expires: 1200..Event: registration..Allow-Events:
presence..Content-Leng
  th: 0....
#
U 10.0.1.13:3325 -> 10.0.2.1:5060
  REGISTER sip:orau.gov SIP/2.0..Via: SIP/2.0/UDP 10.0.1.13:15697..From:
<sip
  :morriss at orau.gov>;tag=e4a3e8dc-9a85-4297-9f6c-8139a998e242..To:
<sip:morri
  ss at orau.gov>..Call-ID:
88a81dfe-c805-4e8d-95e2-09dcf4845b8b at 10.0.1.13..CSeq
  : 1 REGISTER..Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE,
INFO
  , SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"..User-Agent: Windows
RTC/1.
  0..Expires: 1200..Event: registration..Allow-Events:
presence..Content-Leng
  th: 0....
#
U 10.0.1.13:3325 -> 10.0.2.1:5060
  REGISTER sip:orau.gov SIP/2.0..Via: SIP/2.0/UDP 10.0.1.13:15697..From:
<sip
  :morriss at orau.gov>;tag=e4a3e8dc-9a85-4297-9f6c-8139a998e242..To:
<sip:morri
  ss at orau.gov>..Call-ID:
88a81dfe-c805-4e8d-95e2-09dcf4845b8b at 10.0.1.13..CSeq
  : 1 REGISTER..Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE,
INFO
  , SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"..User-Agent: Windows
RTC/1.
  0..Expires: 1200..Event: registration..Allow-Events:
presence..Content-Leng
  th: 0....
#
U 10.0.2.241:16001 -> 10.0.255.255:16001
  ...L:.......DSAMessage..........ORBeline
2.0........ at ...:.......::.d.......
  .
#
U 10.0.1.13:3325 -> 10.0.2.1:5060
  REGISTER sip:orau.gov SIP/2.0..Via: SIP/2.0/UDP 10.0.1.13:15697..From:
<sip
  :morriss at orau.gov>;tag=e4a3e8dc-9a85-4297-9f6c-8139a998e242..To:
<sip:morri
  ss at orau.gov>..Call-ID:
88a81dfe-c805-4e8d-95e2-09dcf4845b8b at 10.0.1.13..CSeq
  : 1 REGISTER..Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE,
INFO
  , SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"..User-Agent: Windows
RTC/1.
  0..Expires: 1200..Event: registration..Allow-Events:
presence..Content-Leng
  th: 0....
#
U 10.0.1.13:3325 -> 10.0.2.1:5060
  REGISTER sip:orau.gov SIP/2.0..Via: SIP/2.0/UDP 10.0.1.13:15697..From:
<sip
  :morriss at orau.gov>;tag=e4a3e8dc-9a85-4297-9f6c-8139a998e242..To:
<sip:morri
  ss at orau.gov>..Call-ID:
88a81dfe-c805-4e8d-95e2-09dcf4845b8b at 10.0.1.13..CSeq
  : 1 REGISTER..Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE,
INFO
  , SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"..User-Agent: Windows
RTC/1.
  0..Expires: 1200..Event: registration..Allow-Events:
presence..Content-Leng
  th: 0....
#
T 143.101.10.0 -> 1.64.0.0 +1540 at 8:46
  ..........[..e... at ............................
#
U 10.0.1.13:3325 -> 10.0.2.1:5060
  REGISTER sip:orau.gov SIP/2.0..Via: SIP/2.0/UDP 10.0.1.13:15697..From:
<sip
  :morriss at orau.gov>;tag=e4a3e8dc-9a85-4297-9f6c-8139a998e242..To:
<sip:morri
  ss at orau.gov>..Call-ID:
88a81dfe-c805-4e8d-95e2-09dcf4845b8b at 10.0.1.13..CSeq
  : 1 REGISTER..Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE,
INFO
  , SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"..User-Agent: Windows
RTC/1.
  0..Expires: 1200..Event: registration..Allow-Events:
presence..Content-Leng
  th: 0....
#
U 10.0.1.13:3325 -> 10.0.2.1:5060
  REGISTER sip:orau.gov SIP/2.0..Via: SIP/2.0/UDP 10.0.1.13:15697..From:
<sip
  :morriss at orau.gov>;tag=e4a3e8dc-9a85-4297-9f6c-8139a998e242..To:
<sip:morri
  ss at orau.gov>..Call-ID:
88a81dfe-c805-4e8d-95e2-09dcf4845b8b at 10.0.1.13..CSeq
  : 1 REGISTER..Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE,
INFO
  , SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"..User-Agent: Windows
RTC/1.
  0..Expires: 1200..Event: registration..Allow-Events:
presence..Content-Leng
  th: 0....
#
T 126.26.10.0 -> 2.242.0.0 +1540 at 8:46
  ..........[=~..............2..................
#
T 48.240.10.0 -> 1.13.0.0 +1540 at 8:46
  ..........[.0.................................
#
U 10.0.1.13:3325 -> 10.0.2.1:5060
  REGISTER sip:orau.gov SIP/2.0..Via: SIP/2.0/UDP 10.0.1.13:15697..From:
<sip
  :morriss at orau.gov>;tag=e4a3e8dc-9a85-4297-9f6c-8139a998e242..To:
<sip:morri
  ss at orau.gov>..Call-ID:
88a81dfe-c805-4e8d-95e2-09dcf4845b8b at 10.0.1.13..CSeq
  : 1 REGISTER..Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE,
INFO
  , SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"..User-Agent: Windows
RTC/1.
  0..Expires: 1200..Event: registration..Allow-Events:
presence..Content-Leng
  th: 0....
#
U 10.0.2.252:3253 -> 10.0.255.255:2301
  ...0...@<...
#
U 10.0.1.13:3325 -> 10.0.2.1:5060
  REGISTER sip:orau.gov SIP/2.0..Via: SIP/2.0/UDP 10.0.1.13:15697..From:
<sip
  :morriss at orau.gov>;tag=e4a3e8dc-9a85-4297-9f6c-8139a998e242..To:
<sip:morri
  ss at orau.gov>..Call-ID:
88a81dfe-c805-4e8d-95e2-09dcf4845b8b at 10.0.1.13..CSeq
  : 1 REGISTER..Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE,
INFO
  , SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"..User-Agent: Windows
RTC/1.
  0..Expires: 1200..Event: registration..Allow-Events:
presence..Content-Leng
  th: 0....
#
T 138.61.10.0 -> 2.244.0.0 +1540 at 8:46
  ..........[..=........................[..=....
#
T 143.101.10.0 -> 1.64.0.0 +1540 at 8:46
  ..........[..e... at ............................
#
T 48.240.10.0 -> 1.13.0.0 +1540 at 8:46
  ..........[.0.................................
exit
100 received, 0 dropped
============================================================================
==






Ethereal
===========================================
No.     Time        Source                Destination           Protocol
Info
      1 0.000000    10.0.2.217            Broadcast             ARP      Who
has 10.0.1.1?  Tell 10.0.2.217

Frame 1 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: 00:50:8b:f1:d5:23, Dst: ff:ff:ff:ff:ff:ff
Address Resolution Protocol (request)

No.     Time        Source                Destination           Protocol
Info
      2 0.000019    10.0.2.217            Broadcast             ARP      Who
has 10.0.1.1?  Tell 10.0.2.217

Frame 2 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: 00:50:8b:f1:d5:23, Dst: ff:ff:ff:ff:ff:ff
Address Resolution Protocol (request)

No.     Time        Source                Destination           Protocol
Info
      3 1.501283    10.0.1.13             10.0.2.1              SIP
Request: REGISTER sip:orau.gov

Frame 3 (501 bytes on wire, 501 bytes captured)
Ethernet II, Src: 00:06:5b:81:30:f0, Dst: 00:06:5b:ef:8f:7e
Internet Protocol, Src Addr: 10.0.1.13 (10.0.1.13), Dst Addr: 10.0.2.1
(10.0.2.1)
User Datagram Protocol, Src Port: 3291 (3291), Dst Port: 5060 (5060)
Session Initiation Protocol
    Request-Line: REGISTER sip:orau.gov SIP/2.0
        Method: REGISTER
        Resent Packet: False
    Message Header
        Via: SIP/2.0/UDP 10.0.1.13:15697
        From:
<sip:morriss at orau.gov>;tag=b64bd88c-901c-4958-a5a1-1570600ece91
            SIP from address: sip:morriss at orau.gov
            SIP tag: b64bd88c-901c-4958-a5a1-1570600ece91
        To: <sip:morriss at orau.gov>
            SIP to address: sip:morriss at orau.gov
        Call-ID: 4d4f3706-5bfd-459e-af27-6a46d534d1ce at 10.0.1.13
        CSeq: 1 REGISTER
        Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO,
SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"
        User-Agent: Windows RTC/1.0
        Expires: 1200
        Event: registration
        Allow-Events: presence
        Content-Length: 0

No.     Time        Source                Destination           Protocol
Info
      4 2.005709    10.0.1.13             10.0.2.1              SIP
Request: REGISTER sip:orau.gov

Frame 4 (501 bytes on wire, 501 bytes captured)
Ethernet II, Src: 00:06:5b:81:30:f0, Dst: 00:06:5b:ef:8f:7e
Internet Protocol, Src Addr: 10.0.1.13 (10.0.1.13), Dst Addr: 10.0.2.1
(10.0.2.1)
User Datagram Protocol, Src Port: 3291 (3291), Dst Port: 5060 (5060)
Session Initiation Protocol
    Request-Line: REGISTER sip:orau.gov SIP/2.0
        Method: REGISTER
        Resent Packet: True
        Suspected resend of frame: 3
    Message Header
        Via: SIP/2.0/UDP 10.0.1.13:15697
        From:
<sip:morriss at orau.gov>;tag=b64bd88c-901c-4958-a5a1-1570600ece91
            SIP from address: sip:morriss at orau.gov
            SIP tag: b64bd88c-901c-4958-a5a1-1570600ece91
        To: <sip:morriss at orau.gov>
            SIP to address: sip:morriss at orau.gov
        Call-ID: 4d4f3706-5bfd-459e-af27-6a46d534d1ce at 10.0.1.13
        CSeq: 1 REGISTER
        Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO,
SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"
        User-Agent: Windows RTC/1.0
        Expires: 1200
        Event: registration
        Allow-Events: presence
        Content-Length: 0

No.     Time        Source                Destination           Protocol
Info
      5 3.003893    10.0.1.13             10.0.2.1              SIP
Request: REGISTER sip:orau.gov

Frame 5 (501 bytes on wire, 501 bytes captured)
Ethernet II, Src: 00:06:5b:81:30:f0, Dst: 00:06:5b:ef:8f:7e
Internet Protocol, Src Addr: 10.0.1.13 (10.0.1.13), Dst Addr: 10.0.2.1
(10.0.2.1)
User Datagram Protocol, Src Port: 3291 (3291), Dst Port: 5060 (5060)
Session Initiation Protocol
    Request-Line: REGISTER sip:orau.gov SIP/2.0
        Method: REGISTER
        Resent Packet: True
        Suspected resend of frame: 3
    Message Header
        Via: SIP/2.0/UDP 10.0.1.13:15697
        From:
<sip:morriss at orau.gov>;tag=b64bd88c-901c-4958-a5a1-1570600ece91
            SIP from address: sip:morriss at orau.gov
            SIP tag: b64bd88c-901c-4958-a5a1-1570600ece91
        To: <sip:morriss at orau.gov>
            SIP to address: sip:morriss at orau.gov
        Call-ID: 4d4f3706-5bfd-459e-af27-6a46d534d1ce at 10.0.1.13
        CSeq: 1 REGISTER
        Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO,
SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"
        User-Agent: Windows RTC/1.0
        Expires: 1200
        Event: registration
        Allow-Events: presence
        Content-Length: 0

No.     Time        Source                Destination           Protocol
Info
      6 3.392548    10.0.2.232            Broadcast             ARP      Who
has 10.5.10.6?  Tell 10.0.2.232

Frame 6 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: 00:b0:d0:b5:09:cc, Dst: ff:ff:ff:ff:ff:ff
Address Resolution Protocol (request)

No.     Time        Source                Destination           Protocol
Info
      7 4.944656    10.0.1.50             224.0.0.5             OSPF
Hello Packet

Frame 7 (86 bytes on wire, 86 bytes captured)
Ethernet II, Src: 00:06:52:db:50:09, Dst: 01:00:5e:00:00:05
Internet Protocol, Src Addr: 10.0.1.50 (10.0.1.50), Dst Addr: 224.0.0.5
(224.0.0.5)
Open Shortest Path First

No.     Time        Source                Destination           Protocol
Info
      8 5.006277    10.0.1.13             10.0.2.1              SIP
Request: REGISTER sip:orau.gov

Frame 8 (501 bytes on wire, 501 bytes captured)
Ethernet II, Src: 00:06:5b:81:30:f0, Dst: 00:06:5b:ef:8f:7e
Internet Protocol, Src Addr: 10.0.1.13 (10.0.1.13), Dst Addr: 10.0.2.1
(10.0.2.1)
User Datagram Protocol, Src Port: 3291 (3291), Dst Port: 5060 (5060)
Session Initiation Protocol
    Request-Line: REGISTER sip:orau.gov SIP/2.0
        Method: REGISTER
        Resent Packet: True
        Suspected resend of frame: 3
    Message Header
        Via: SIP/2.0/UDP 10.0.1.13:15697
        From:
<sip:morriss at orau.gov>;tag=b64bd88c-901c-4958-a5a1-1570600ece91
            SIP from address: sip:morriss at orau.gov
            SIP tag: b64bd88c-901c-4958-a5a1-1570600ece91
        To: <sip:morriss at orau.gov>
            SIP to address: sip:morriss at orau.gov
        Call-ID: 4d4f3706-5bfd-459e-af27-6a46d534d1ce at 10.0.1.13
        CSeq: 1 REGISTER
        Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO,
SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"
        User-Agent: Windows RTC/1.0
        Expires: 1200
        Event: registration
        Allow-Events: presence
        Content-Length: 0

No.     Time        Source                Destination           Protocol
Info
      9 6.879451    10.0.2.252            10.0.255.255          UDP
Source port: 3253  Destination port: 2301

Frame 9 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: 00:60:cf:21:7d:d7, Dst: ff:ff:ff:ff:ff:ff
Internet Protocol, Src Addr: 10.0.2.252 (10.0.2.252), Dst Addr: 10.0.255.255
(10.0.255.255)
User Datagram Protocol, Src Port: 3253 (3253), Dst Port: 2301 (2301)
Data (12 bytes)

0000  01 00 00 30 c2 0c 9d 40 3c 00 00 00               ...0...@<...

No.     Time        Source                Destination           Protocol
Info
     10 7.743941    10.0.1.2              224.0.0.5             OSPF
Hello Packet

Frame 10 (86 bytes on wire, 86 bytes captured)
Ethernet II, Src: 00:30:94:fa:83:e1, Dst: 01:00:5e:00:00:05
Internet Protocol, Src Addr: 10.0.1.2 (10.0.1.2), Dst Addr: 224.0.0.5
(224.0.0.5)
Open Shortest Path First

No.     Time        Source                Destination           Protocol
Info
     11 8.757128    10.0.1.1              224.0.0.5             OSPF
Hello Packet

Frame 11 (86 bytes on wire, 86 bytes captured)
Ethernet II, Src: 00:0b:fd:96:cf:ff, Dst: 01:00:5e:00:00:05
Internet Protocol, Src Addr: 10.0.1.1 (10.0.1.1), Dst Addr: 224.0.0.5
(224.0.0.5)
Open Shortest Path First

No.     Time        Source                Destination           Protocol
Info
     12 9.013059    10.0.1.13             10.0.2.1              SIP
Request: REGISTER sip:orau.gov

Frame 12 (501 bytes on wire, 501 bytes captured)
Ethernet II, Src: 00:06:5b:81:30:f0, Dst: 00:06:5b:ef:8f:7e
Internet Protocol, Src Addr: 10.0.1.13 (10.0.1.13), Dst Addr: 10.0.2.1
(10.0.2.1)
User Datagram Protocol, Src Port: 3291 (3291), Dst Port: 5060 (5060)
Session Initiation Protocol
    Request-Line: REGISTER sip:orau.gov SIP/2.0
        Method: REGISTER
        Resent Packet: True
        Suspected resend of frame: 3
    Message Header
        Via: SIP/2.0/UDP 10.0.1.13:15697
        From:
<sip:morriss at orau.gov>;tag=b64bd88c-901c-4958-a5a1-1570600ece91
            SIP from address: sip:morriss at orau.gov
            SIP tag: b64bd88c-901c-4958-a5a1-1570600ece91
        To: <sip:morriss at orau.gov>
            SIP to address: sip:morriss at orau.gov
        Call-ID: 4d4f3706-5bfd-459e-af27-6a46d534d1ce at 10.0.1.13
        CSeq: 1 REGISTER
        Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO,
SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"
        User-Agent: Windows RTC/1.0
        Expires: 1200
        Event: registration
        Allow-Events: presence
        Content-Length: 0

No.     Time        Source                Destination           Protocol
Info
     13 10.556674   10.0.2.250            Broadcast             ARP      Who
has 10.0.1.1?  Tell 10.0.2.250

Frame 13 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: 00:50:8b:e1:f1:83, Dst: ff:ff:ff:ff:ff:ff
Address Resolution Protocol (request)

No.     Time        Source                Destination           Protocol
Info
     14 11.376499   10.0.2.243            Broadcast             ARP      Who
has 10.0.1.2?  Tell 10.0.2.243

Frame 14 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: 00:50:8b:64:44:90, Dst: ff:ff:ff:ff:ff:ff
Address Resolution Protocol (request)

No.     Time        Source                Destination           Protocol
Info
     15 11.412855   10.0.2.243            10.0.255.255          NBNS
Name query NB IODINE.ORAU.NET<20>

Frame 15 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: 00:50:8b:64:44:90, Dst: ff:ff:ff:ff:ff:ff
Internet Protocol, Src Addr: 10.0.2.243 (10.0.2.243), Dst Addr: 10.0.255.255
(10.0.255.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns
(137)
NetBIOS Name Service
    Transaction ID: 0x9c3e
    Flags: 0x0110 (Name query)
    Questions: 1
    Answer RRs: 0
    Authority RRs: 0
    Additional RRs: 0
    Queries
        IODINE.ORAU.NET<20>: type NB, class inet
            Name: IODINE.ORAU.NET<20> (Server service)
            Type: NB
            Class: inet

No.     Time        Source                Destination           Protocol
Info
     16 11.915643   Hewlett-_68:e1:c1     CDP/VTP               CDP
Cisco Discovery Protocol

Frame 16 (142 bytes on wire, 142 bytes captured)
IEEE 802.3 Ethernet 
Logical-Link Control
Cisco Discovery Protocol

No.     Time        Source                Destination           Protocol
Info
     17 12.023576   10.0.1.2              224.0.0.5             OSPF     LS
Update

Frame 17 (146 bytes on wire, 146 bytes captured)
Ethernet II, Src: 00:30:94:fa:83:e1, Dst: 01:00:5e:00:00:05
Internet Protocol, Src Addr: 10.0.1.2 (10.0.1.2), Dst Addr: 224.0.0.5
(224.0.0.5)
Open Shortest Path First

No.     Time        Source                Destination           Protocol
Info
     18 12.162851   10.0.2.243            10.0.255.255          NBNS
Name query NB IODINE.ORAU.NET<20>

Frame 18 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: 00:50:8b:64:44:90, Dst: ff:ff:ff:ff:ff:ff
Internet Protocol, Src Addr: 10.0.2.243 (10.0.2.243), Dst Addr: 10.0.255.255
(10.0.255.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns
(137)
NetBIOS Name Service
    Transaction ID: 0x9c3e
    Flags: 0x0110 (Name query)
    Questions: 1
    Answer RRs: 0
    Authority RRs: 0
    Additional RRs: 0
    Queries
        IODINE.ORAU.NET<20>: type NB, class inet
            Name: IODINE.ORAU.NET<20> (Server service)
            Type: NB
            Class: inet

No.     Time        Source                Destination           Protocol
Info
     19 12.912809   10.0.2.243            10.0.255.255          NBNS
Name query NB IODINE.ORAU.NET<20>

Frame 19 (92 bytes on wire, 92 bytes captured)
Ethernet II, Src: 00:50:8b:64:44:90, Dst: ff:ff:ff:ff:ff:ff
Internet Protocol, Src Addr: 10.0.2.243 (10.0.2.243), Dst Addr: 10.0.255.255
(10.0.255.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns
(137)
NetBIOS Name Service
    Transaction ID: 0x9c3e
    Flags: 0x0110 (Name query)
    Questions: 1
    Answer RRs: 0
    Authority RRs: 0
    Additional RRs: 0
    Queries
        IODINE.ORAU.NET<20>: type NB, class inet
            Name: IODINE.ORAU.NET<20> (Server service)
            Type: NB
            Class: inet

No.     Time        Source                Destination           Protocol
Info
     20 13.017827   10.0.1.13             10.0.2.1              SIP
Request: REGISTER sip:orau.gov

Frame 20 (501 bytes on wire, 501 bytes captured)
Ethernet II, Src: 00:06:5b:81:30:f0, Dst: 00:06:5b:ef:8f:7e
Internet Protocol, Src Addr: 10.0.1.13 (10.0.1.13), Dst Addr: 10.0.2.1
(10.0.2.1)
User Datagram Protocol, Src Port: 3291 (3291), Dst Port: 5060 (5060)
Session Initiation Protocol
    Request-Line: REGISTER sip:orau.gov SIP/2.0
        Method: REGISTER
        Resent Packet: True
        Suspected resend of frame: 3
    Message Header
        Via: SIP/2.0/UDP 10.0.1.13:15697
        From:
<sip:morriss at orau.gov>;tag=b64bd88c-901c-4958-a5a1-1570600ece91
            SIP from address: sip:morriss at orau.gov
            SIP tag: b64bd88c-901c-4958-a5a1-1570600ece91
        To: <sip:morriss at orau.gov>
            SIP to address: sip:morriss at orau.gov
        Call-ID: 4d4f3706-5bfd-459e-af27-6a46d534d1ce at 10.0.1.13
        CSeq: 1 REGISTER
        Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO,
SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"
        User-Agent: Windows RTC/1.0
        Expires: 1200
        Event: registration
        Allow-Events: presence
        Content-Length: 0

No.     Time        Source                Destination           Protocol
Info
     21 14.522423   10.0.1.50             224.0.0.6             OSPF     LS
Acknowledge

Frame 21 (78 bytes on wire, 78 bytes captured)
Ethernet II, Src: 00:06:52:db:50:09, Dst: 01:00:5e:00:00:06
Internet Protocol, Src Addr: 10.0.1.50 (10.0.1.50), Dst Addr: 224.0.0.6
(224.0.0.6)
Open Shortest Path First

No.     Time        Source                Destination           Protocol
Info
     22 14.524020   10.0.1.1              224.0.0.5             OSPF     LS
Acknowledge

Frame 22 (78 bytes on wire, 78 bytes captured)
Ethernet II, Src: 00:0b:fd:96:cf:ff, Dst: 01:00:5e:00:00:05
Internet Protocol, Src Addr: 10.0.1.1 (10.0.1.1), Dst Addr: 224.0.0.5
(224.0.0.5)
Open Shortest Path First

No.     Time        Source                Destination           Protocol
Info
     23 14.966627   10.0.1.50             224.0.0.5             OSPF
Hello Packet

Frame 23 (86 bytes on wire, 86 bytes captured)
Ethernet II, Src: 00:06:52:db:50:09, Dst: 01:00:5e:00:00:05
Internet Protocol, Src Addr: 10.0.1.50 (10.0.1.50), Dst Addr: 224.0.0.5
(224.0.0.5)
Open Shortest Path First

No.     Time        Source                Destination           Protocol
Info
     24 17.024611   10.0.1.13             10.0.2.1              SIP
Request: REGISTER sip:orau.gov

Frame 24 (501 bytes on wire, 501 bytes captured)
Ethernet II, Src: 00:06:5b:81:30:f0, Dst: 00:06:5b:ef:8f:7e
Internet Protocol, Src Addr: 10.0.1.13 (10.0.1.13), Dst Addr: 10.0.2.1
(10.0.2.1)
User Datagram Protocol, Src Port: 3291 (3291), Dst Port: 5060 (5060)
Session Initiation Protocol
    Request-Line: REGISTER sip:orau.gov SIP/2.0
        Method: REGISTER
        Resent Packet: True
        Suspected resend of frame: 3
    Message Header
        Via: SIP/2.0/UDP 10.0.1.13:15697
        From:
<sip:morriss at orau.gov>;tag=b64bd88c-901c-4958-a5a1-1570600ece91
            SIP from address: sip:morriss at orau.gov
            SIP tag: b64bd88c-901c-4958-a5a1-1570600ece91
        To: <sip:morriss at orau.gov>
            SIP to address: sip:morriss at orau.gov
        Call-ID: 4d4f3706-5bfd-459e-af27-6a46d534d1ce at 10.0.1.13
        CSeq: 1 REGISTER
        Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO,
SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"
        User-Agent: Windows RTC/1.0
        Expires: 1200
        Event: registration
        Allow-Events: presence
        Content-Length: 0

No.     Time        Source                Destination           Protocol
Info
     25 17.747378   10.0.1.2              224.0.0.5             OSPF
Hello Packet

Frame 25 (86 bytes on wire, 86 bytes captured)
Ethernet II, Src: 00:30:94:fa:83:e1, Dst: 01:00:5e:00:00:05
Internet Protocol, Src Addr: 10.0.1.2 (10.0.1.2), Dst Addr: 224.0.0.5
(224.0.0.5)
Open Shortest Path First

No.     Time        Source                Destination           Protocol
Info
     26 18.755187   10.0.1.1              224.0.0.5             OSPF
Hello Packet

Frame 26 (86 bytes on wire, 86 bytes captured)
Ethernet II, Src: 00:0b:fd:96:cf:ff, Dst: 01:00:5e:00:00:05
Internet Protocol, Src Addr: 10.0.1.1 (10.0.1.1), Dst Addr: 224.0.0.5
(224.0.0.5)
Open Shortest Path First

No.     Time        Source                Destination           Protocol
Info
     27 20.705560   10.0.2.217            Broadcast             ARP      Who
has 10.0.2.223?  Tell 10.0.2.217

Frame 27 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: 00:50:8b:f1:d5:23, Dst: ff:ff:ff:ff:ff:ff
Address Resolution Protocol (request)

No.     Time        Source                Destination           Protocol
Info
     28 21.030388   10.0.1.13             10.0.2.1              SIP
Request: REGISTER sip:orau.gov

Frame 28 (501 bytes on wire, 501 bytes captured)
Ethernet II, Src: 00:06:5b:81:30:f0, Dst: 00:06:5b:ef:8f:7e
Internet Protocol, Src Addr: 10.0.1.13 (10.0.1.13), Dst Addr: 10.0.2.1
(10.0.2.1)
User Datagram Protocol, Src Port: 3291 (3291), Dst Port: 5060 (5060)
Session Initiation Protocol
    Request-Line: REGISTER sip:orau.gov SIP/2.0
        Method: REGISTER
        Resent Packet: True
        Suspected resend of frame: 3
    Message Header
        Via: SIP/2.0/UDP 10.0.1.13:15697
        From:
<sip:morriss at orau.gov>;tag=b64bd88c-901c-4958-a5a1-1570600ece91
            SIP from address: sip:morriss at orau.gov
            SIP tag: b64bd88c-901c-4958-a5a1-1570600ece91
        To: <sip:morriss at orau.gov>
            SIP to address: sip:morriss at orau.gov
        Call-ID: 4d4f3706-5bfd-459e-af27-6a46d534d1ce at 10.0.1.13
        CSeq: 1 REGISTER
        Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO,
SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"
        User-Agent: Windows RTC/1.0
        Expires: 1200
        Event: registration
        Allow-Events: presence
        Content-Length: 0

No.     Time        Source                Destination           Protocol
Info
     29 22.987519   10.0.2.252            Broadcast             ARP      Who
has 10.0.1.50?  Tell 10.0.2.252

Frame 29 (60 bytes on wire, 60 bytes captured)
Ethernet II, Src: 00:60:cf:21:7d:d7, Dst: ff:ff:ff:ff:ff:ff
Address Resolution Protocol (request)

No.     Time        Source                Destination           Protocol
Info
     30 24.964522   10.0.1.50             224.0.0.5             OSPF
Hello Packet

Frame 30 (86 bytes on wire, 86 bytes captured)
Ethernet II, Src: 00:06:52:db:50:09, Dst: 01:00:5e:00:00:05
Internet Protocol, Src Addr: 10.0.1.50 (10.0.1.50), Dst Addr: 224.0.0.5
(224.0.0.5)
Open Shortest Path First

No.     Time        Source                Destination           Protocol
Info
     31 25.036175   10.0.1.13             10.0.2.1              SIP
Request: REGISTER sip:orau.gov

Frame 31 (501 bytes on wire, 501 bytes captured)
Ethernet II, Src: 00:06:5b:81:30:f0, Dst: 00:06:5b:ef:8f:7e
Internet Protocol, Src Addr: 10.0.1.13 (10.0.1.13), Dst Addr: 10.0.2.1
(10.0.2.1)
User Datagram Protocol, Src Port: 3291 (3291), Dst Port: 5060 (5060)
Session Initiation Protocol
    Request-Line: REGISTER sip:orau.gov SIP/2.0
        Method: REGISTER
        Resent Packet: True
        Suspected resend of frame: 3
    Message Header
        Via: SIP/2.0/UDP 10.0.1.13:15697
        From:
<sip:morriss at orau.gov>;tag=b64bd88c-901c-4958-a5a1-1570600ece91
            SIP from address: sip:morriss at orau.gov
            SIP tag: b64bd88c-901c-4958-a5a1-1570600ece91
        To: <sip:morriss at orau.gov>
            SIP to address: sip:morriss at orau.gov
        Call-ID: 4d4f3706-5bfd-459e-af27-6a46d534d1ce at 10.0.1.13
        CSeq: 1 REGISTER
        Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO,
SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"
        User-Agent: Windows RTC/1.0
        Expires: 1200
        Event: registration
        Allow-Events: presence
        Content-Length: 0

No.     Time        Source                Destination           Protocol
Info
     32 27.745516   10.0.1.2              224.0.0.5             OSPF
Hello Packet

Frame 32 (86 bytes on wire, 86 bytes captured)
Ethernet II, Src: 00:30:94:fa:83:e1, Dst: 01:00:5e:00:00:05
Internet Protocol, Src Addr: 10.0.1.2 (10.0.1.2), Dst Addr: 224.0.0.5
(224.0.0.5)
Open Shortest Path First

No.     Time        Source                Destination           Protocol
Info
     33 28.753300   10.0.1.1              224.0.0.5             OSPF
Hello Packet

Frame 33 (86 bytes on wire, 86 bytes captured)
Ethernet II, Src: 00:0b:fd:96:cf:ff, Dst: 01:00:5e:00:00:05
Internet Protocol, Src Addr: 10.0.1.1 (10.0.1.1), Dst Addr: 224.0.0.5
(224.0.0.5)
Open Shortest Path First

No.     Time        Source                Destination           Protocol
Info
     34 29.038943   10.0.1.13             10.0.2.1              SIP
Request: REGISTER sip:orau.gov

Frame 34 (501 bytes on wire, 501 bytes captured)
Ethernet II, Src: 00:06:5b:81:30:f0, Dst: 00:06:5b:ef:8f:7e
Internet Protocol, Src Addr: 10.0.1.13 (10.0.1.13), Dst Addr: 10.0.2.1
(10.0.2.1)
User Datagram Protocol, Src Port: 3291 (3291), Dst Port: 5060 (5060)
Session Initiation Protocol
    Request-Line: REGISTER sip:orau.gov SIP/2.0
        Method: REGISTER
        Resent Packet: True
        Suspected resend of frame: 3
    Message Header
        Via: SIP/2.0/UDP 10.0.1.13:15697
        From:
<sip:morriss at orau.gov>;tag=b64bd88c-901c-4958-a5a1-1570600ece91
            SIP from address: sip:morriss at orau.gov
            SIP tag: b64bd88c-901c-4958-a5a1-1570600ece91
        To: <sip:morriss at orau.gov>
            SIP to address: sip:morriss at orau.gov
        Call-ID: 4d4f3706-5bfd-459e-af27-6a46d534d1ce at 10.0.1.13
        CSeq: 1 REGISTER
        Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO,
SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"
        User-Agent: Windows RTC/1.0
        Expires: 1200
        Event: registration
        Allow-Events: presence
        Content-Length: 0

No.     Time        Source                Destination           Protocol
Info
     35 33.044770   10.0.1.13             10.0.2.1              SIP
Request: REGISTER sip:orau.gov

Frame 35 (501 bytes on wire, 501 bytes captured)
Ethernet II, Src: 00:06:5b:81:30:f0, Dst: 00:06:5b:ef:8f:7e
Internet Protocol, Src Addr: 10.0.1.13 (10.0.1.13), Dst Addr: 10.0.2.1
(10.0.2.1)
User Datagram Protocol, Src Port: 3291 (3291), Dst Port: 5060 (5060)
Session Initiation Protocol
    Request-Line: REGISTER sip:orau.gov SIP/2.0
        Method: REGISTER
        Resent Packet: True
        Suspected resend of frame: 3
    Message Header
        Via: SIP/2.0/UDP 10.0.1.13:15697
        From:
<sip:morriss at orau.gov>;tag=b64bd88c-901c-4958-a5a1-1570600ece91
            SIP from address: sip:morriss at orau.gov
            SIP tag: b64bd88c-901c-4958-a5a1-1570600ece91
        To: <sip:morriss at orau.gov>
            SIP to address: sip:morriss at orau.gov
        Call-ID: 4d4f3706-5bfd-459e-af27-6a46d534d1ce at 10.0.1.13
        CSeq: 1 REGISTER
        Contact: <sip:10.0.1.13:15697>;methods="INVITE, MESSAGE, INFO,
SUBSCRIBE, OPTIONS, BYE, CANCEL, NOTIFY, ACK"
        User-Agent: Windows RTC/1.0
        Expires: 1200
        Event: registration
        Allow-Events: presence
        Content-Length: 0

No.     Time        Source                Destination           Protocol
Info
     36 34.962535   10.0.1.50             224.0.0.5             OSPF
Hello Packet

Frame 36 (86 bytes on wire, 86 bytes captured)
Ethernet II, Src: 00:06:52:db:50:09, Dst: 01:00:5e:00:00:05
Internet Protocol, Src Addr: 10.0.1.50 (10.0.1.50), Dst Addr: 224.0.0.5
(224.0.0.5)
Open Shortest Path First

No.     Time        Source                Destination           Protocol
Info
     37 37.467951   Hewlett-_68:e1:80     09:00:09:00:00:67     HPEXT    U,
func=UI; DSAP HP Extended LLC Individual, SSAP HP Extended LLC Command;
HPEXT; DXSAP 0623, SXSAP 0623

Frame 37 (91 bytes on wire, 91 bytes captured)
IEEE 802.3 Ethernet 
Logical-Link Control
HP Extended Local-Link Control
Data (67 bytes)

0000  03 01 01 0a 20 48 50 20 34 30 30 30 4d 00 02 08   .... HP 4000M...
0010  43 2e 30 39 2e 31 36 00 03 0a 4d 43 43 2d 34 30   C.09.16...MCC-40
0020  30 30 4d 00 05 04 0a 00 01 81 07 01 00 08 02 00   00M.............
0030  3c 09 02 01 01 0a 04 00 00 00 92 0e 06 00 10 83   <...............
0040  68 e1 80                                          h..

No.     Time        Source                Destination           Protocol
Info
     38 37.742795   10.0.1.2              224.0.0.5             OSPF
Hello Packet

Frame 38 (86 bytes on wire, 86 bytes captured)
Ethernet II, Src: 00:30:94:fa:83:e1, Dst: 01:00:5e:00:00:05
Internet Protocol, Src Addr: 10.0.1.2 (10.0.1.2), Dst Addr: 224.0.0.5
(224.0.0.5)
Open Shortest Path First

No.     Time        Source                Destination           Protocol
Info
     39 38.751386   10.0.1.1              224.0.0.5             OSPF
Hello Packet

Frame 39 (86 bytes on wire, 86 bytes captured)
Ethernet II, Src: 00:0b:fd:96:cf:ff, Dst: 01:00:5e:00:00:05
Internet Protocol, Src Addr: 10.0.1.1 (10.0.1.1), Dst Addr: 224.0.0.5
(224.0.0.5)
Open Shortest Path First




More information about the Serusers mailing list