Wifi Works, 3G doesn't

Status
Not open for further replies.
Hi everybody

In case you encounter SIP registration issues when using 3G, you can easily check if it's a 3CPhone problem or provider problem, by using a telnet application.

To do this
- go to the Android Market, type "telnet" in Search then download and install "Simple Telnet Client" (free app).
- once installed, open it and in Hostname field type the public IP of the PBX, and in port (where is 23) the PBX port - or, if using the embedded 3CX Tunnel, remote tunnel port - then click "Connect" button.
- If connection succeeds, it means the 3G provider is OK, and the problem is in 3CXPhone. If connection fails (but succeeded in WiFi) it means the PBX port is blocked by provider.

Hope it helps.
vali
 
Ok using the latest 3CXPhone posted that has built in tunnel support.

I can telnet into 3cxtunnel port on both wifi and att 3g.

I can connect the tunnel on both wifi and att 3g.

On wifi I can make and receive calls.

On 3g I get the amber status and cannot send a call.


Also on the same phone wifi and att 3g csipsimple works just fine so this points me to the 3cx softphone as the actual problem.

Any more suggestions?
 
The problem with 3G seems to be related to Android version 2.2. On other version it works.
Idea - try a 3CX tunnel with new 3CX phone version 1.3.1
 
the new 1.3.1 version using tunnel also doesn't work on 3g. the tunnel connects fine and the phone registers, but unable to make a call.
 
If applicable, try upgrading the fimware of the phone (newer Android version).
Most probably the problem with VoIP over 3G is not related to 3CX.

Regards
 
eagle2 said:
If applicable, try upgrading the fimware of the phone (newer Android version).
Most probably the problem with VoIP over 3G is not related to 3CX.

Regards

How can this not be related to 3cx if csipsimple works?
 
tsteffens said:
the new 1.3.1 version using tunnel also doesn't work on 3g. the tunnel connects fine and the phone registers, but unable to make a call.
Hi
Technically speaking, this is a good news - so, to make it clear: 3CXPhone is using tunnel, is registered, on display is shown "On Hook", but you are unable to make calls. In this case, if you're using the tunnel, it means you're registered to a 3CX Phone System - can you check the PBX log, or a wireshark capture there, to see what's happening? On the other hand, what it means "unable to make calls" - call is dropped imediately? No audio? You can receive incoming calls?
Thanks
vali
 
tsteffens said:
eagle2 said:
If applicable, try upgrading the fimware of the phone (newer Android version).
Most probably the problem with VoIP over 3G is not related to 3CX.

Regards

How can this not be related to 3cx if csipsimple works?

I mean on some versions of Android / phone model there is a built-in VoIP client, beside you can install 3cx softphone on virtual any Android phone. The problem is not related to registration to 3CX server, it could be any VoIP provider.

Some operators are intentionally blocking SIP on 3G, this also depend on firmware version of the phone / model and may change with another Android version (not been blocked any more). I had similar case with Samsung Galaxy S. The operator has preloaded firmware which was blocking SIP on 3G, which was overcome with next version of Android (also got rid of some operator menus).

Regards
 
Vali_3CX said:
tsteffens said:
the new 1.3.1 version using tunnel also doesn't work on 3g. the tunnel connects fine and the phone registers, but unable to make a call.
Hi
Technically speaking, this is a good news - so, to make it clear: 3CXPhone is using tunnel, is registered, on display is shown "On Hook", but you are unable to make calls. In this case, if you're using the tunnel, it means you're registered to a 3CX Phone System - can you check the PBX log, or a wireshark capture there, to see what's happening? On the other hand, what it means "unable to make calls" - call is dropped imediately? No audio? You can receive incoming calls?
Thanks
vali

When it works on wifi the tunnel connects registers and shows on hook. I can make an internal extension call and it goes through. When on 3G the tunnel connects it registers and says on hook. Then I dial my internal extension and I hit the green button and it does nothing. It is almost like the green send button on the softphone is disabled. I have never done a wireshark so I will try to get that as well.

Here is server logs from when it works:
Code:
08:00:04.628  [CM504002]: Ext.223: a contact is unregistered. Contact(s): []
07:59:49.892  [CM503003]: Call(280): Call to sip:[email protected] has failed; Cause: 487 Request Terminated; from IP:192.168.254.72:5062
07:59:49.595  [CM503008]: Call(280): Call is terminated
07:59:48.201  [CM505001]: Ext.222: Device info: Device Identified: [Man: Yealink;Mod: T28;Rev: General] Capabilities:[reinvite, no-replaces, unable-no-sdp, no-recvonly] UserAgent: [Yealink SIP-T28P 2.60.0.100] PBX contact: [sip:[email protected]:5060]
07:59:48.201  [CM503002]: Call(280): Alerting sip:[email protected]:5062
07:59:47.402  [CM503025]: Call(280): Calling Ext:Ext.222@[Dev:sip:[email protected]:5062]
07:59:47.324  [CM503004]: Call(280): Route 1: Ext:Ext.222@[Dev:sip:[email protected]:5062]
07:59:47.324  [CM503010]: Making route(s) to <sip:[email protected]:5060>
07:59:47.324  [CM505001]: Ext.223: Device info: Device Not Identified: User Agent not matched; Capabilities:[reinvite, replaces, able-no-sdp, recvonly] UserAgent: [3CXPhone for Android 1.3.1] PBX contact: [sip:[email protected]:5060]
07:59:47.308  [CM503001]: Call(280): Incoming call from Ext.223 to <sip:[email protected]:5060>
07:59:39.150  [CM504001]: Ext.223: new contact is registered. Contact(s): [sip:[email protected]:5060;ob/223]

Here are the logs from when it wont work:
Code:
08:03:34.582  [CM504001]: Ext.223: new contact is registered. Contact(s): [sip:[email protected]:5060;ob/223]
 
Is there a guide on how to properly capture wireshark for this forum to make sure we only give the info needed?
 
This is more or less a port restricted NAT issue. The issue will affect any kind of IP PBX, not only 3CX.
However such issues should not arise if tunnel connection is used.

If not able to change the SIP port of one of the phones (similar issues may arise with RTP ports) -- try not using STUN (or vice versa), see what is the address with which the phones register (in 'Phones' menu of 3cx server). Make sure 'ALLOWSOURCEASOUTBOUND' parameter is set to '1' in Custom parameters of 3cx server.

Also try to switch off/on SIP ALG is supported by remote router. A wireshark capture will be useful to debug.

Regards.
 
tsteffens said:
Is there a guide on how to properly capture wireshark for this forum to make sure we only give the info needed?

Normally apply a filter 'SIP or RTP' and use VoIP calls from menu to see graphics, traffic flow, port mapping, etc. in easy to interpret form.

Regards
 
here is a wireshark when it doesn't work.

Code:
No.     Time        Source                Destination           Protocol Length Info
      1 0.000000    192.168.254.71        192.168.254.69        UDP      60     Source port: na-localise  Destination port: sip
      2 0.626689    192.168.254.70        192.168.254.69        SIP      483    Request: REGISTER sip:192.168.254.69:5060
      3 0.729796    Microsof_fe:c5:0a     Broadcast             ARP      42     Who has 192.168.254.70?  Tell 192.168.254.69
      4 0.730502    PattonEl_05:a8:75     Microsof_fe:c5:0a     ARP      60     192.168.254.70 is at 00:a0:ba:05:a8:75
      5 0.730520    192.168.254.69        192.168.254.70        SIP      485    Status: 407 Proxy Authentication Required    (0 bindings)
      6 0.755921    192.168.254.70        192.168.254.69        SIP      700    Request: REGISTER sip:192.168.254.69:5060
      7 0.857416    192.168.254.69        192.168.254.70        SIP      387    Status: 200 OK    (1 bindings)
      8 1.325816    192.168.254.70        192.168.254.69        SIP      483    Request: REGISTER sip:192.168.254.69:5060
      9 1.427912    192.168.254.69        192.168.254.70        SIP      485    Status: 407 Proxy Authentication Required    (0 bindings)
     10 1.453350    192.168.254.70        192.168.254.69        SIP      700    Request: REGISTER sip:192.168.254.69:5060
     11 1.555014    192.168.254.69        192.168.254.70        SIP      387    Status: 200 OK    (1 bindings)
     12 4.724250    Pegatron_77:37:1d     Broadcast             ARP      60     Who has 192.168.254.3?  Tell 192.168.254.9
     13 4.969586    fe80::80d7:82b9:6cc9:9809 ff02::1:2             DHCPv6   161    Solicit XID: 0x156793 CID: 00010001156ecf64e069953b7fab 
     14 5.086965    192.168.254.5         192.168.254.255       BROWSER  243    Host Announcement SERVER4, Workstation, Server, NT Workstation, NT Server, Backup Browser, DFS server
     15 5.365145    Pronet_c9:4d:71       Broadcast             ARP      60     Gratuitous ARP for 192.168.254.165 (Request)
     16 5.960335    fe80::80d7:82b9:6cc9:9809 ff02::1:2             DHCPv6   161    Solicit XID: 0x156793 CID: 00010001156ecf64e069953b7fab 
     17 7.954035    fe80::80d7:82b9:6cc9:9809 ff02::1:2             DHCPv6   161    Solicit XID: 0x156793 CID: 00010001156ecf64e069953b7fab 
     18 9.748717    192.168.254.72        192.168.254.69        UDP      60     Source port: na-localise  Destination port: sip
     19 10.378227   Pegatron_51:4c:ce     Broadcast             ARP      60     Who has 192.168.254.3?  Tell 192.168.254.7
     20 10.560594   192.168.254.69        192.168.254.255       BROWSER  243    Host Announcement PHONE, Workstation, Server, NT Workstation, Potential Browser
     21 11.954200   fe80::80d7:82b9:6cc9:9809 ff02::1:2             DHCPv6   161    Solicit XID: 0x156793 CID: 00010001156ecf64e069953b7fab 
     22 13.675498   fe80::2447:3338:4c45:5cc7 ff02::1:2             DHCPv6   148    Solicit XID: 0x950667 CID: 00010001154fd98600155dfe3605 
     23 14.661201   fe80::2447:3338:4c45:5cc7 ff02::1:2             DHCPv6   148    Solicit XID: 0x950667 CID: 00010001154fd98600155dfe3605 
     24 16.657721   fe80::2447:3338:4c45:5cc7 ff02::1:2             DHCPv6   148    Solicit XID: 0x950667 CID: 00010001154fd98600155dfe3605 
     25 19.495121   192.168.254.69        204.11.192.37         SIP      872    Request: REGISTER sip:callcentric.com:5060
     26 19.544057   204.11.192.37         192.168.254.69        SIP      438    Status: 200 Ok    (1 bindings)
     27 19.923704   fe80::80d7:82b9:6cc9:9809 ff02::1:2             DHCPv6   161    Solicit XID: 0x156793 CID: 00010001156ecf64e069953b7fab 
     28 20.642208   fe80::2447:3338:4c45:5cc7 ff02::1:2             DHCPv6   148    Solicit XID: 0x950667 CID: 00010001154fd98600155dfe3605 
     29 21.032423   192.168.254.5         192.168.254.255       BROWSER  243    Host Announcement SERVER4, Workstation, Server, NT Workstation, NT Server, Backup Browser, DFS server
     30 21.595180   Procurve_cd:3c:20     LLDP_Multicast        LLDP     109    Chassis Id = 00:1d:b3:cd:3c:20 Port Id = 16 TTL = 120 
     31 23.870027   32.145.10.147         192.168.254.69        TCP      74     56710 > us-cli [SYN] Seq=0 Win=5840 Len=0 MSS=1460 SACK_PERM=1 TSval=1210055745 TSecr=0 WS=64
     32 23.870136   192.168.254.69        32.145.10.147         TCP      78     us-cli > 56710 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 WS=1 TSval=0 TSecr=0 SACK_PERM=1
     33 23.870739   32.145.10.147         192.168.254.69        TCP      66     56710 > us-cli [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSval=1210055746 TSecr=0
     34 23.874980   192.168.254.69        32.145.10.147         TCP      70     us-cli > 56710 [PSH, ACK] Seq=1 Ack=1 Win=65535 Len=4 TSval=11934352 TSecr=1210055746
     35 23.875656   32.145.10.147         192.168.254.69        TCP      66     56710 > us-cli [ACK] Seq=1 Ack=5 Win=5888 Len=0 TSval=1210055751 TSecr=11934352
     36 23.875692   192.168.254.69        32.145.10.147         TCP      70     us-cli > 56710 [PSH, ACK] Seq=5 Ack=1 Win=65535 Len=4 TSval=11934352 TSecr=1210055751
     37 23.876166   32.145.10.147         192.168.254.69        TCP      66     56710 > us-cli [ACK] Seq=1 Ack=9 Win=5888 Len=0 TSval=1210055752 TSecr=11934352
     38 24.057656   32.145.10.147         192.168.254.69        TCP      70     56710 > us-cli [PSH, ACK] Seq=1 Ack=9 Win=5888 Len=4 TSval=1210055933 TSecr=11934352
     39 24.225396   192.168.254.69        32.145.10.147         TCP      66     us-cli > 56710 [ACK] Seq=9 Ack=5 Win=65531 Len=0 TSval=11934356 TSecr=1210055933
     40 24.238200   32.145.10.147         192.168.254.69        TCP      107    56710 > us-cli [PSH, ACK] Seq=5 Ack=9 Win=5888 Len=41 TSval=1210056113 TSecr=11934356
     41 24.239689   192.168.254.69        32.145.10.147         TCP      70     us-cli > 56710 [PSH, ACK] Seq=9 Ack=46 Win=65490 Len=4 TSval=11934356 TSecr=1210056113
     42 24.240107   32.145.10.147         192.168.254.69        TCP      66     56710 > us-cli [ACK] Seq=46 Ack=13 Win=5888 Len=0 TSval=1210056115 TSecr=11934356
     43 24.240144   192.168.254.69        32.145.10.147         TCP      93     us-cli > 56710 [PSH, ACK] Seq=13 Ack=46 Win=65490 Len=27 TSval=11934356 TSecr=1210056115
     44 24.241058   32.145.10.147         192.168.254.69        TCP      66     56710 > us-cli [ACK] Seq=46 Ack=40 Win=5888 Len=0 TSval=1210056116 TSecr=11934356
     45 25.057384   32.145.10.147         192.168.254.69        TCP      70     56710 > us-cli [PSH, ACK] Seq=46 Ack=40 Win=5888 Len=4 TSval=1210056933 TSecr=11934356
     46 25.233139   192.168.254.69        32.145.10.147         TCP      66     us-cli > 56710 [ACK] Seq=40 Ack=50 Win=65486 Len=0 TSval=11934366 TSecr=1210056933
     47 25.348993   32.145.10.147         192.168.254.69        SIP      639    Unknown request: LAPK5\002ÊýSip0REGISTER sip:192.168.254.69:5060
     48 25.461426   192.168.254.69        32.145.10.147         TCP      70     us-cli > 56710 [PSH, ACK] Seq=40 Ack=623 Win=64913 Len=4 TSval=11934368 TSecr=1210057224
     49 25.461775   32.145.10.147         192.168.254.69        TCP      66     56710 > us-cli [ACK] Seq=623 Ack=44 Win=5888 Len=0 TSval=1210057337 TSecr=11934368
     50 25.461823   192.168.254.69        32.145.10.147         TCP      692    us-cli > 56710 [PSH, ACK] Seq=44 Ack=623 Win=64913 Len=626 TSval=11934368 TSecr=1210057337
     51 25.462265   32.145.10.147         192.168.254.69        TCP      66     56710 > us-cli [ACK] Seq=623 Ack=670 Win=7104 Len=0 TSval=1210057338 TSecr=11934368
     52 25.757794   32.145.10.147         192.168.254.69        TCP      70     56710 > us-cli [PSH, ACK] Seq=623 Ack=670 Win=7104 Len=4 TSval=1210057633 TSecr=11934368
     53 25.805115   192.168.254.9         192.168.254.69        TCP      60     50086 > commplex-main [RST, ACK] Seq=1 Ack=1 Win=0 Len=0
     54 25.937215   192.168.254.69        32.145.10.147         TCP      66     us-cli > 56710 [ACK] Seq=670 Ack=627 Win=64909 Len=0 TSval=11934373 TSecr=1210057633
     55 26.024738   32.145.10.147         192.168.254.69        SIP      851    Unknown request: Sip0REGISTER sip:192.168.254.69:5060
     56 26.059052   192.168.254.69        32.145.10.147         TCP      70     us-cli > 56710 [PSH, ACK] Seq=670 Ack=1412 Win=64124 Len=4 TSval=11934374 TSecr=1210057904
     57 26.060343   32.145.10.147         192.168.254.69        TCP      66     56710 > us-cli [ACK] Seq=1412 Ack=674 Win=7104 Len=0 TSval=1210057939 TSecr=11934374
     58 26.060384   192.168.254.69        32.145.10.147         TCP      595    us-cli > 56710 [PSH, ACK] Seq=674 Ack=1412 Win=64124 Len=529 TSval=11934374 TSecr=1210057939
     59 26.061009   32.145.10.147         192.168.254.69        TCP      66     56710 > us-cli [ACK] Seq=1412 Ack=1203 Win=8384 Len=0 TSval=1210057940 TSecr=11934374
     60 26.193351   32.145.10.147         192.168.254.69        TCP      74     56710 > us-cli [PSH, ACK] Seq=1412 Ack=1203 Win=8384 Len=8 TSval=1210058072 TSecr=11934374
     61 26.277720   192.168.254.69        32.145.10.147         TCP      70     us-cli > 56710 [PSH, ACK] Seq=1203 Ack=1420 Win=64116 Len=4 TSval=11934376 TSecr=1210058072
     62 26.278399   32.145.10.147         192.168.254.69        TCP      66     56710 > us-cli [ACK] Seq=1420 Ack=1207 Win=8384 Len=0 TSval=1210058158 TSecr=11934376
     63 26.278438   192.168.254.69        32.145.10.147         SIP      713    Unknown request: Sip0NOTIFY sip:[email protected]:5060;ob
     64 26.279043   32.145.10.147         192.168.254.69        TCP      66     56710 > us-cli [ACK] Seq=1420 Ack=1854 Win=9664 Len=0 TSval=1210058158 TSecr=11934376
     65 26.553585   32.145.10.147         192.168.254.69        TCP      70     56710 > us-cli [PSH, ACK] Seq=1420 Ack=1854 Win=9664 Len=4 TSval=1210058432 TSecr=11934376
     66 26.733793   32.145.10.147         192.168.254.69        TCP      448    56710 > us-cli [PSH, ACK] Seq=1424 Ack=1854 Win=9664 Len=382 TSval=1210058613 TSecr=11934376
     67 26.733841   192.168.254.69        32.145.10.147         TCP      66     us-cli > 56710 [ACK] Seq=1854 Ack=1806 Win=65535 Len=0 TSval=11934380 TSecr=1210058432
     68 27.063282   32.145.10.147         192.168.254.69        TCP      70     56710 > us-cli [PSH, ACK] Seq=1806 Ack=1854 Win=9664 Len=4 TSval=1210058942 TSecr=11934380
     69 27.224395   32.145.10.147         192.168.254.69        TCP      70     56710 > us-cli [PSH, ACK] Seq=1810 Ack=1854 Win=9664 Len=4 TSval=1210059103 TSecr=11934380
     70 27.224470   192.168.254.69        32.145.10.147         TCP      66     us-cli > 56710 [ACK] Seq=1854 Ack=1814 Win=65527 Len=0 TSval=11934385 TSecr=1210058942
     71 28.052731   32.145.10.147         192.168.254.69        TCP      70     56710 > us-cli [PSH, ACK] Seq=1814 Ack=1854 Win=9664 Len=4 TSval=1210059943 TSecr=11934385
     72 28.212621   32.145.10.147         192.168.254.69        TCP      70     56710 > us-cli [PSH, ACK] Seq=1818 Ack=1854 Win=9664 Len=4 TSval=1210060102 TSecr=11934385
     73 28.212685   192.168.254.69        32.145.10.147         TCP      66     us-cli > 56710 [ACK] Seq=1854 Ack=1822 Win=65519 Len=0 TSval=11934395 TSecr=1210059943
     74 28.454851   Pegatron_77:37:1d     Broadcast             ARP      60     Who has 192.168.254.4?  Tell 192.168.254.9
     75 28.455381   Microsof_fe:c5:08     Broadcast             ARP      42     Who has 192.168.254.9?  Tell 192.168.254.4
     76 28.617396   fe80::2447:3338:4c45:5cc7 ff02::1:2             DHCPv6   148    Solicit XID: 0x950667 CID: 00010001154fd98600155dfe3605 
     77 28.891914   192.168.254.69        32.145.10.147         TCP      70     us-cli > 56710 [PSH, ACK] Seq=1854 Ack=1822 Win=65519 Len=4 TSval=11934402 TSecr=1210059943
     78 28.892580   32.145.10.147         192.168.254.69        TCP      66     56710 > us-cli [ACK] Seq=1822 Ack=1858 Win=9664 Len=0 TSval=1210060783 TSecr=11934402
     79 28.892620   192.168.254.69        32.145.10.147         TCP      70     us-cli > 56710 [PSH, ACK] Seq=1858 Ack=1822 Win=65519 Len=4 TSval=11934402 TSecr=1210060783
     80 28.892991   32.145.10.147         192.168.254.69        TCP      66     56710 > us-cli [ACK] Seq=1822 Ack=1862 Win=9664 Len=0 TSval=1210060783 TSecr=11934402
     81 29.029252   fe80::b549:bd59:15dd:ffe6 ff02::1:2             DHCPv6   148    Solicit XID: 0x703fd5 CID: 000100011576c9d800155dfe3607 
     82 29.048569   32.145.10.147         192.168.254.69        TCP      70     56710 > us-cli [PSH, ACK] Seq=1822 Ack=1862 Win=9664 Len=4 TSval=1210060943 TSecr=11934402
     83 29.208501   32.145.10.147         192.168.254.69        TCP      70     56710 > us-cli [PSH, ACK] Seq=1826 Ack=1862 Win=9664 Len=4 TSval=1210061103 TSecr=11934402
     84 29.208560   192.168.254.69        32.145.10.147         TCP      66     us-cli > 56710 [ACK] Seq=1862 Ack=1830 Win=65511 Len=0 TSval=11934405 TSecr=1210060943
     85 29.668322   Microsof_fe:c5:08     Broadcast             ARP      42     Who has 192.168.254.1?  Tell 192.168.254.4
     86 30.044314   32.145.10.147         192.168.254.69        TCP      70     56710 > us-cli [PSH, ACK] Seq=1830 Ack=1862 Win=9664 Len=4 TSval=1210061943 TSecr=11934405
     87 30.064945   192.168.254.71        192.168.254.69        UDP      60     Source port: na-localise  Destination port: sip
     88 30.213701   32.145.10.147         192.168.254.69        TCP      70     56710 > us-cli [PSH, ACK] Seq=1834 Ack=1862 Win=9664 Len=4 TSval=1210062112 TSecr=11934405
     89 30.213757   192.168.254.69        32.145.10.147         TCP      66     us-cli > 56710 [ACK] Seq=1862 Ack=1838 Win=65503 Len=0 TSval=11934415 TSecr=1210061943
     90 31.043758   32.145.10.147         192.168.254.69        TCP      70     56710 > us-cli [PSH, ACK] Seq=1838 Ack=1862 Win=9664 Len=4 TSval=1210062942 TSecr=11934415
     91 31.149130   192.168.254.69        32.145.10.147         TCP      66     us-cli > 56710 [ACK] Seq=1862 Ack=1842 Win=65499 Len=0 TSval=11934425 TSecr=1210062942
     92 31.213738   32.145.10.147         192.168.254.69        TCP      70     56710 > us-cli [PSH, ACK] Seq=1842 Ack=1862 Win=9664 Len=4 TSval=1210063112 TSecr=11934425
     93 31.350294   192.168.254.69        32.145.10.147         TCP      66     us-cli > 56710 [ACK] Seq=1862 Ack=1846 Win=65495 Len=0 TSval=11934427 TSecr=1210063112
     94 32.044222   32.145.10.147         192.168.254.69        TCP      70     56710 > us-cli [PSH, ACK] Seq=1846 Ack=1862 Win=9664 Len=4 TSval=1210063943 TSecr=11934427
     95 32.154912   192.168.254.69        32.145.10.147         TCP      66     us-cli > 56710 [ACK] Seq=1862 Ack=1850 Win=65491 Len=0 TSval=11934435 TSecr=1210063943
     96 32.203787   32.145.10.147         192.168.254.69        TCP      70     56710 > us-cli [PSH, ACK] Seq=1850 Ack=1862 Win=9664 Len=4 TSval=1210064102 TSecr=11934435
     97 32.356061   192.168.254.69        32.145.10.147         TCP      66     us-cli > 56710 [ACK] Seq=1862 Ack=1854 Win=65487 Len=0 TSval=11934437 TSecr=1210064102
     98 33.053665   32.145.10.147         192.168.254.69        TCP      70     56710 > us-cli [PSH, ACK] Seq=1854 Ack=1862 Win=9664 Len=4 TSval=1210064952 TSecr=11934437
     99 33.160722   192.168.254.69        32.145.10.147         TCP      66     us-cli > 56710 [ACK] Seq=1862 Ack=1858 Win=65483 Len=0 TSval=11934445 TSecr=1210064952
    100 33.214151   32.145.10.147         192.168.254.69        TCP      70     56710 > us-cli [PSH, ACK] Seq=1858 Ack=1862 Win=9664 Len=4 TSval=1210065113 TSecr=11934445
    101 33.361834   192.168.254.69        32.145.10.147         TCP      66     us-cli > 56710 [ACK] Seq=1862 Ack=1862 Win=65479 Len=0 TSval=11934447 TSecr=1210065113
    102 33.902937   192.168.254.69        32.145.10.147         TCP      70     us-cli > 56710 [PSH, ACK] Seq=1862 Ack=1862 Win=65479 Len=4 TSval=11934452 TSecr=1210065113
    103 33.903332   32.145.10.147         192.168.254.69        TCP      66     56710 > us-cli [ACK] Seq=1862 Ack=1866 Win=9664 Len=0 TSval=1210065802 TSecr=11934452
    104 33.903376   192.168.254.69        32.145.10.147         TCP      70     us-cli > 56710 [PSH, ACK] Seq=1866 Ack=1862 Win=65479 Len=4 TSval=11934452 TSecr=1210065802
    105 33.903872   32.145.10.147         192.168.254.69        TCP      66     56710 > us-cli [ACK] Seq=1862 Ack=1870 Win=9664 Len=0 TSval=1210065803 TSecr=11934452
    106 34.053532   32.145.10.147         192.168.254.69        TCP      70     56710 > us-cli [PSH, ACK] Seq=1862 Ack=1870 Win=9664 Len=4 TSval=1210065952 TSecr=11934452
    107 34.168467   192.168.254.69        32.145.10.147         TCP      66     us-cli > 56710 [ACK] Seq=1870 Ack=1866 Win=65475 Len=0 TSval=11934455 TSecr=1210065952
    108 35.474196   32.145.10.147         192.168.254.69        TCP      70     56710 > us-cli [PSH, ACK] Seq=1866 Ack=1870 Win=9664 Len=4 TSval=1210067378 TSecr=11934455
    109 35.669676   192.168.254.69        32.145.10.147         TCP      66     us-cli > 56710 [ACK] Seq=1870 Ack=1870 Win=65471 Len=0 TSval=11934470 TSecr=1210067378
    110 35.879313   fe80::80d7:82b9:6cc9:9809 ff02::1:2             DHCPv6   161    Solicit XID: 0x156793 CID: 00010001156ecf64e069953b7fab 
    111 36.091538   32.145.10.147         192.168.254.69        TCP      74     56710 > us-cli [PSH, ACK] Seq=1870 Ack=1870 Win=9664 Len=8 TSval=1210068000 TSecr=11934470
    112 36.297575   192.168.254.69        32.145.10.147         TCP      66     us-cli > 56710 [ACK] Seq=1870 Ack=1878 Win=65463 Len=0 TSval=11934475 TSecr=1210068000
    113 36.579142   32.145.10.147         192.168.254.69        TCP      74     56710 > us-cli [PSH, ACK] Seq=1878 Ack=1870 Win=9664 Len=8 TSval=1210068487 TSecr=11934475
    114 36.686217   192.168.254.69        32.145.10.147         TCP      66     us-cli > 56710 [ACK] Seq=1870 Ack=1886 Win=65455 Len=0 TSval=11934480 TSecr=1210068487
    115 36.990684   192.168.254.5         192.168.254.255       BROWSER  243    Host Announcement SERVER4, Workstation, Server, NT Workstation, NT Server, Backup Browser, DFS server
    116 37.587998   32.145.10.147         192.168.254.69        SIP      761    Unknown request: ³\002LýSip0REGISTER sip:192.168.254.69:5060
    117 37.689376   192.168.254.69        32.145.10.147         TCP      66     us-cli > 56710 [ACK] Seq=1870 Ack=2581 Win=64760 Len=0 TSval=11934490 TSecr=1210069499
    118 37.694726   192.168.254.69        32.145.10.147         TCP      70     us-cli > 56710 [PSH, ACK] Seq=1870 Ack=2581 Win=64760 Len=4 TSval=11934490 TSecr=1210069499
    119 37.695277   32.145.10.147         192.168.254.69        TCP      66     56710 > us-cli [ACK] Seq=2581 Ack=1874 Win=9664 Len=0 TSval=1210069607 TSecr=11934490
    120 37.695318   192.168.254.69        32.145.10.147         TCP      692    us-cli > 56710 [PSH, ACK] Seq=1874 Ack=2581 Win=64760 Len=626 TSval=11934490 TSecr=1210069607
    121 37.695702   32.145.10.147         192.168.254.69        TCP      66     56710 > us-cli [ACK] Seq=2581 Ack=2500 Win=10944 Len=0 TSval=1210069607 TSecr=11934490
    122 37.768035   32.145.10.147         192.168.254.69        TCP      74     56710 > us-cli [PSH, ACK] Seq=2581 Ack=2500 Win=10944 Len=8 TSval=1210069680 TSecr=11934490
    123 37.888543   32.145.10.147         192.168.254.69        TCP      66     56710 > us-cli [FIN, ACK] Seq=2589 Ack=2500 Win=10944 Len=0 TSval=1210069800 TSecr=11934490
    124 37.888619   192.168.254.69        32.145.10.147         TCP      66     us-cli > 56710 [ACK] Seq=2500 Ack=2590 Win=64752 Len=0 TSval=11934491 TSecr=1210069680
    125 37.889046   32.145.10.147         192.168.254.69        TCP      66     56710 > us-cli [RST, ACK] Seq=2590 Ack=2500 Win=10944 Len=0 TSval=1210069801 TSecr=11934490
    126 37.910911   192.168.254.2         192.168.254.255       BROWSER  220    Request Announcement SERVER1
    127 37.931211   192.168.254.2         192.168.254.255       BROWSER  243    Local Master Announcement SERVER1, Workstation, Server, SQL Server, Domain Controller, Time Source, NT Workstation, Master Browser, DFS server
    128 38.373901   00000000.0000b4cc7185 00000000.ffffffffffff IPX SAP  113    General Response
    129 39.771077   192.168.254.72        192.168.254.69        UDP      60     Source port: na-localise  Destination port: sip
    130 43.815178   Pegatron_3b:7c:4f     Broadcast             ARP      60     Who has 192.168.254.2?  Tell 192.168.254.6
    131 43.817264   Microsof_fe:36:0a     Broadcast             ARP      60     Who has 192.168.254.1?  Tell 192.168.254.2
    132 43.921676   Microsof_fe:36:0a     Broadcast             ARP      60     Who has 192.168.254.6?  Tell 192.168.254.2
    133 44.394848   Pegatron_51:4c:ce     Broadcast             ARP      60     Who has 192.168.254.200?  Tell 192.168.254.7
    134 44.588784   fe80::2447:3338:4c45:5cc7 ff02::1:2             DHCPv6   148    Solicit XID: 0x950667 CID: 00010001154fd98600155dfe3605 
    135 46.000794   Microsof_fe:36:0a     Broadcast             ARP      60     Who has 192.168.254.9?  Tell 192.168.254.2
    136 46.001407   Pegatron_77:37:1d     Broadcast             ARP      60     Who has 192.168.254.2?  Tell 192.168.254.9
    137 47.179144   Pegatron_51:4c:ce     Broadcast             ARP      60     Who has 192.168.254.200?  Tell 192.168.254.7
    138 47.881318   Pegatron_51:4c:ce     Broadcast             ARP      60     Who has 192.168.254.200?  Tell 192.168.254.7
    139 48.386142   2001:0:4137:9e76:303c:2834:e74c:124f ff02::1               IPv6     82     IPv6 no next header
    140 48.388868   Dell_be:0f:97         Broadcast             ARP      60     Who has 192.168.254.55?  Tell 192.168.254.54
    141 48.389371   Dell_be:0f:79         Broadcast             ARP      42     Who has 192.168.254.54?  Tell 192.168.254.55
    142 48.389420   Dell_be:0f:97         Broadcast             ARP      60     Who has 192.168.254.1?  Tell 192.168.254.54
    143 48.879849   Pegatron_51:4c:ce     Broadcast             ARP      60     Who has 192.168.254.200?  Tell 192.168.254.7
    144 51.685340   Procurve_cd:3c:20     LLDP_Multicast        LLDP     109    Chassis Id = 00:1d:b3:cd:3c:20 Port Id = 16 TTL = 120 
    145 52.327056   Microsof_fe:36:0a     Broadcast             ARP      60     Who has 192.168.254.7?  Tell 192.168.254.2
    146 52.327399   Pegatron_51:4c:ce     Broadcast             ARP      60     Who has 192.168.254.2?  Tell 192.168.254.7
    147 52.953258   192.168.254.5         192.168.254.255       BROWSER  243    Host Announcement SERVER4, Workstation, Server, NT Workstation, NT Server, Backup Browser, DFS server
    148 53.175239   Pegatron_51:4c:ce     Broadcast             ARP      60     Who has 192.168.254.200?  Tell 192.168.254.7
    149 53.877705   Pegatron_51:4c:ce     Broadcast             ARP      60     Who has 192.168.254.200?  Tell 192.168.254.7
    150 54.875445   Pegatron_51:4c:ce     Broadcast             ARP      60     Who has 192.168.254.200?  Tell 192.168.254.7
    151 57.731323   192.168.254.55        192.168.254.255       BROWSER  243    Host Announcement VM2, Workstation, Server, NT Workstation, NT Server
    152 60.055025   192.168.254.71        192.168.254.69        UDP      60     Source port: na-localise  Destination port: sip
    153 61.146016   fe80::30e8:3577:3ae2:2c5f ff02::1:3             LLMNR    86     Standard query A isatap
    154 61.146063   192.168.254.2         224.0.0.252           LLMNR    66     Standard query A isatap
    155 61.249882   fe80::30e8:3577:3ae2:2c5f ff02::1:3             LLMNR    86     Standard query A isatap
    156 61.249902   192.168.254.2         224.0.0.252           LLMNR    66     Standard query A isatap
    157 61.453588   192.168.254.2         192.168.254.255       NBNS     92     Name query NB ISATAP<00>
    158 62.216869   192.168.254.2         192.168.254.255       NBNS     92     Name query NB ISATAP<00>
    159 62.959464   192.168.254.2         192.168.254.255       NBNS     92     Name query NB ISATAP<00>
    160 64.342906   192.168.254.70        192.168.254.69        SIP      482    Request: REGISTER sip:192.168.254.69:5060
    161 64.445390   192.168.254.69        192.168.254.70        SIP      484    Status: 407 Proxy Authentication Required    (0 bindings)
    162 64.467106   192.168.254.70        192.168.254.69        SIP      699    Request: REGISTER sip:192.168.254.69:5060
    163 64.568433   192.168.254.69        192.168.254.70        SIP      386    Status: 200 OK    (1 bindings)
    164 66.530945   192.168.254.70        192.168.254.69        SIP      483    Request: REGISTER sip:192.168.254.69:5060
    165 66.634003   192.168.254.69        192.168.254.70        SIP      485    Status: 407 Proxy Authentication Required    (0 bindings)
    166 66.659554   192.168.254.70        192.168.254.69        SIP      700    Request: REGISTER sip:192.168.254.69:5060
    167 66.760785   192.168.254.69        192.168.254.70        SIP      387    Status: 200 OK    (1 bindings)
    168 67.773080   fe80::80d7:82b9:6cc9:9809 ff02::1:2             DHCPv6   161    Solicit XID: 0x156793 CID: 00010001156ecf64e069953b7fab 
    169 68.882132   192.168.254.5         192.168.254.255       BROWSER  243    Host Announcement SERVER4, Workstation, Server, NT Workstation, NT Server, Backup Browser, DFS server
    170 69.821185   192.168.254.72        192.168.254.69        UDP      60     Source port: na-localise  Destination port: sip
    171 76.444773   fe80::2447:3338:4c45:5cc7 ff02::1:2             DHCPv6   148    Solicit XID: 0x950667 CID: 00010001154fd98600155dfe3605 
    172 79.351179   192.168.254.69        204.11.192.37         SIP      872    Request: REGISTER sip:callcentric.com:5060
    173 79.399966   204.11.192.37         192.168.254.69        SIP      438    Status: 200 Ok    (1 bindings)
    174 81.650580   Procurve_cd:3c:20     LLDP_Multicast        LLDP     109    Chassis Id = 00:1d:b3:cd:3c:20 Port Id = 16 TTL = 120 
    175 84.341990   LannerEl_1b:bf:05     Microsof_fe:c5:0a     ARP      60     Who has 192.168.254.69?  Tell 192.168.254.1
    176 84.342019   Microsof_fe:c5:0a     LannerEl_1b:bf:05     ARP      42     192.168.254.69 is at 00:15:5d:fe:c5:0a
    177 84.738047   192.168.254.5         192.168.254.255       BROWSER  243    Host Announcement SERVER4, Workstation, Server, NT Workstation, NT Server, Backup Browser, DFS server
    178 84.846365   192.168.254.135       192.168.254.255       NBNS     92     Name query NB VAULT-DW<20>
    179 84.846404   Supermic_f9:97:66     Broadcast             ARP      60     Who has 192.168.254.135?  Tell 192.168.254.138
    180 85.530210   192.168.254.9         192.168.254.69        TCP      66     50088 > commplex-main [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=4 SACK_PERM=1
    181 85.530312   192.168.254.69        192.168.254.9         TCP      66     commplex-main > 50088 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 WS=1 SACK_PERM=1
    182 85.530658   192.168.254.9         192.168.254.69        TCP      60     50088 > commplex-main [ACK] Seq=1 Ack=1 Win=65700 Len=0
    183 85.530871   192.168.254.9         192.168.254.69        IPA      633    unknown 0x53 [Malformed Packet]
    184 85.530976   192.168.254.9         192.168.254.69        IPA      119    unknown 0x53 [Malformed Packet]
    185 85.531016   192.168.254.69        192.168.254.9         TCP      54     commplex-main > 50088 [ACK] Seq=1 Ack=645 Win=64891 Len=0
    186 85.552694   192.168.254.69        192.168.254.9         IPA      371    unknown 0x54 [Malformed Packet]
    187 85.752389   192.168.254.9         192.168.254.69        TCP      60     50088 > commplex-main [ACK] Seq=645 Ack=318 Win=65380 Len=0
    188 85.752449   192.168.254.69        192.168.254.9         IPA      254    unknown 0xbf [Malformed Packet]
    189 85.952509   192.168.254.9         192.168.254.69        TCP      60     50088 > commplex-main [ACK] Seq=645 Ack=518 Win=65180 Len=0
    190 89.962570   192.168.254.71        192.168.254.69        UDP      60     Source port: na-localise  Destination port: sip
    191 94.819556   192.168.254.138       192.168.254.255       BROWSER  243    Local Master Announcement VAULT-DW, Workstation, Server, NT Workstation, NT Server, Backup Browser, Master Browser, DFS server
    192 98.044992   00000000.0000b4cc7185 00000000.ffffffffffff IPX SAP  113    General Response
    193 99.675253   192.168.254.72        192.168.254.69        UDP      60     Source port: na-localise  Destination port: sip
    194 99.942107   Microsof_fe:c5:08     Broadcast             ARP      42     Who has 192.168.254.2?  Tell 192.168.254.4
    195 99.946965   Microsof_fe:36:0a     Broadcast             ARP      60     Who has 192.168.254.4?  Tell 192.168.254.2
    196 100.661704  192.168.254.5         192.168.254.255       BROWSER  243    Host Announcement SERVER4, Workstation, Server, NT Workstation, NT Server, Backup Browser, DFS server
    197 100.892814  fe80::6d47:6a2e:2b44:c57e ff02::1:2             DHCPv6   163    Solicit XID: 0x6e3843 CID: 0001000114dc89067071bcb13e51 
    198 101.885044  fe80::6d47:6a2e:2b44:c57e ff02::1:2             DHCPv6   163    Solicit XID: 0x6e3843 CID: 0001000114dc89067071bcb13e51 
    199 103.879970  fe80::6d47:6a2e:2b44:c57e ff02::1:2             DHCPv6   163    Solicit XID: 0x6e3843 CID: 0001000114dc89067071bcb13e51 
    200 104.198757  fe80::30e8:3577:3ae2:2c5f ff02::1:3             LLMNR    84     Standard query A wpad
    201 104.199102  192.168.254.2         224.0.0.252           LLMNR    64     Standard query A wpad
    202 104.305329  fe80::30e8:3577:3ae2:2c5f ff02::1:3             LLMNR    84     Standard query A wpad
    203 104.305347  192.168.254.2         224.0.0.252           LLMNR    64     Standard query A wpad
    204 104.509671  192.168.254.2         192.168.254.255       NBNS     92     Name query NB WPAD<00>
    205 105.241362  192.168.254.2         192.168.254.255       NBNS     92     Name query NB WPAD<00>
    206 105.989765  192.168.254.2         192.168.254.255       NBNS     92     Name query NB WPAD<00>
    207 107.865632  fe80::6d47:6a2e:2b44:c57e ff02::1:2             DHCPv6   163    Solicit XID: 0x6e3843 CID: 0001000114dc89067071bcb13e51 
    208 111.628767  Procurve_cd:3c:20     LLDP_Multicast        LLDP     109    Chassis Id = 00:1d:b3:cd:3c:20 Port Id = 16 TTL = 120 
    209 113.959966  Dell_be:0f:79         Broadcast             ARP      42     Who has 192.168.254.1?  Tell 192.168.254.55
    210 115.750716  192.168.254.135       192.168.254.255       BROWSER  243    Host Announcement VAULT-GTB, Workstation, Server, NT Workstation, NT Server, Backup Browser, DFS server
    211 115.834749  fe80::6d47:6a2e:2b44:c57e ff02::1:2             DHCPv6   163    Solicit XID: 0x6e3843 CID: 0001000114dc89067071bcb13e51 
    212 116.576320  192.168.254.5         192.168.254.255       BROWSER  243    Host Announcement SERVER4, Workstation, Server, NT Workstation, NT Server, Backup Browser, DFS server
    213 117.090967  192.168.254.54        192.168.254.255       BROWSER  243    Host Announcement VM1, Workstation, Server, NT Workstation, NT Server
    214 117.122490  fe80::a1f5:947:90b8:ed27 ff02::1:2             DHCPv6   145    Solicit XID: 0x1f85a4 CID: 00010001154d81e6001c23be0f97 
    215 118.128052  fe80::a1f5:947:90b8:ed27 ff02::1:2             DHCPv6   145    Solicit XID: 0x1f85a4 CID: 00010001154d81e6001c23be0f97 
    216 119.935353  192.168.254.71        192.168.254.69        UDP      60     Source port: na-localise  Destination port: sip
    217 120.127893  fe80::a1f5:947:90b8:ed27 ff02::1:2             DHCPv6   145    Solicit XID: 0x1f85a4 CID: 00010001154d81e6001c23be0f97 
    218 121.103128  Pegatron_3b:7c:4f     Broadcast             ARP      60     Who has 192.168.254.200?  Tell 192.168.254.6
    219 122.417552  Pegatron_3b:7c:4f     Broadcast             ARP      60     Who has 192.168.254.200?  Tell 192.168.254.6
    220 123.115687  Pegatron_3b:7c:4f     Broadcast             ARP      60     Who has 192.168.254.200?  Tell 192.168.254.6
    221 124.114004  Pegatron_3b:7c:4f     Broadcast             ARP      60     Who has 192.168.254.200?  Tell 192.168.254.6
    222 124.136966  fe80::a1f5:947:90b8:ed27 ff02::1:2             DHCPv6   145    Solicit XID: 0x1f85a4 CID: 00010001154d81e6001c23be0f97 
    223 125.424380  Pegatron_3b:7c:4f     Broadcast             ARP      60     Who has 192.168.254.200?  Tell 192.168.254.6
    224 125.633997  Microsof_fe:36:0a     Broadcast             ARP      60     Who has 192.168.254.5?  Tell 192.168.254.2
    225 126.110826  Pegatron_3b:7c:4f     Broadcast             ARP      60     Who has 192.168.254.200?  Tell 192.168.254.6
    226 127.105537  Pegatron_3b:7c:4f     Broadcast             ARP      60     Who has 192.168.254.200?  Tell 192.168.254.6
    227 129.712754  192.168.254.72        192.168.254.69        UDP      60     Source port: na-localise  Destination port: sip
    228 130.004602  Pegatron_3b:7c:4f     Broadcast             ARP      60     Who has 192.168.254.200?  Tell 192.168.254.6
    229 130.577642  Pegatron_3b:7c:4f     Broadcast             ARP      60     Who has 192.168.254.200?  Tell 192.168.254.6
    230 131.591681  Pegatron_3b:7c:4f     Broadcast             ARP      60     Who has 192.168.254.200?  Tell 192.168.254.6
    231 131.794386  fe80::6d47:6a2e:2b44:c57e ff02::1:2             DHCPv6   163    Solicit XID: 0x6e3843 CID: 0001000114dc89067071bcb13e51 
    232 132.113947  fe80::a1f5:947:90b8:ed27 ff02::1:2             DHCPv6   145    Solicit XID: 0x1f85a4 CID: 00010001154d81e6001c23be0f97 
    233 132.538150  192.168.254.5         192.168.254.255       BROWSER  243    Host Announcement SERVER4, Workstation, Server, NT Workstation, NT Server, Backup Browser, DFS server
    234 132.936814  fe80::30e8:3577:3ae2:2c5f ff02::1:2             DHCPv6   165    Solicit XID: 0x3db8ae CID: 000100011591670b00155dfe360a 
    235 133.916207  fe80::30e8:3577:3ae2:2c5f ff02::1:2             DHCPv6   165    Solicit XID: 0x3db8ae CID: 000100011591670b00155dfe360a 
    236 135.894508  fe80::30e8:3577:3ae2:2c5f ff02::1:2             DHCPv6   165    Solicit XID: 0x3db8ae CID: 000100011591670b00155dfe360a 
    237 137.860652  Pegatron_77:37:1d     Broadcast             ARP      60     Who has 192.168.254.3?  Tell 192.168.254.9
    238 139.205405  192.168.254.69        204.11.192.37         SIP      872    Request: REGISTER sip:callcentric.com:5060
    239 139.261586  204.11.192.37         192.168.254.69        SIP      438    Status: 200 Ok    (1 bindings)
    240 139.266686  192.168.254.69        96.9.132.83           CLASSIC-STUN 70     Message: Binding Request
    241 139.349772  96.9.132.83           192.168.254.69        CLASSIC-STUN 130    Message: Binding Response
    242 139.350317  192.168.254.69        216.93.246.14         CLASSIC-STUN 70     Message: Binding Request
    243 139.430301  216.93.246.14         192.168.254.69        CLASSIC-STUN 130    Message: Binding Response
    244 139.430750  192.168.254.69        178.238.134.190       CLASSIC-STUN 70     Message: Binding Request
    245 139.584348  178.238.134.190       192.168.254.69        CLASSIC-STUN 130    Message: Binding Response
    246 139.899483  fe80::30e8:3577:3ae2:2c5f ff02::1:2             DHCPv6   165    Solicit XID: 0x3db8ae CID: 000100011591670b00155dfe360a 
    247 141.666514  Procurve_cd:3c:20     LLDP_Multicast        LLDP     109    Chassis Id = 00:1d:b3:cd:3c:20 Port Id = 16 TTL = 120 
    248 144.241464  LannerEl_1b:bf:05     Microsof_fe:c5:0a     ARP      60     Who has 192.168.254.69?  Tell 192.168.254.1
    249 144.241493  Microsof_fe:c5:0a     LannerEl_1b:bf:05     ARP      42     192.168.254.69 is at 00:15:5d:fe:c5:0a
    250 145.379814  Pegatron_51:4c:ce     Broadcast             ARP      60     Who has 192.168.254.3?  Tell 192.168.254.7
    251 145.465349  192.168.254.9         192.168.254.69        TCP      60     50088 > commplex-main [RST, ACK] Seq=645 Ack=518 Win=0 Len=0
    252 147.840807  fe80::30e8:3577:3ae2:2c5f ff02::1:2             DHCPv6   165    Solicit XID: 0x3db8ae CID: 000100011591670b00155dfe360a 
    253 148.027233  fe80::a1f5:947:90b8:ed27 ff02::1:2             DHCPv6   145    Solicit XID: 0x1f85a4 CID: 00010001154d81e6001c23be0f97 
    254 148.357095  192.168.254.2         192.168.254.255       BROWSER  250    Domain/Workgroup Announcement DATACOMM, Domain Controller, NT Workstation, Domain Enum
    255 148.431267  192.168.254.5         192.168.254.255       BROWSER  243    Host Announcement SERVER4, Workstation, Server, NT Workstation, NT Server, Backup Browser, DFS server
    256 149.965665  192.168.254.71        192.168.254.69        UDP      60     Source port: na-localise  Destination port: sip
    257 150.705102  fe80::1836:5a1a:feef:17f5 ff02::1:2             DHCPv6   162    Solicit XID: 0x5f342a CID: 0001000114ddf4417071bcb13e60 
    258 151.704150  fe80::1836:5a1a:feef:17f5 ff02::1:2             DHCPv6   162    Solicit XID: 0x5f342a CID: 0001000114ddf4417071bcb13e60 
    259 153.704095  fe80::1836:5a1a:feef:17f5 ff02::1:2             DHCPv6   162    Solicit XID: 0x5f342a CID: 0001000114ddf4417071bcb13e60 
    260 155.147995  192.168.254.140       192.168.254.255       BROWSER  243    Host Announcement VAULT-SV, Workstation, Server, NT Workstation, NT Server, Backup Browser, DFS server
    261 157.706856  fe80::1836:5a1a:feef:17f5 ff02::1:2             DHCPv6   162    Solicit XID: 0x5f342a CID: 0001000114ddf4417071bcb13e60 
    262 157.765884  00000000.0000b4cc7185 00000000.ffffffffffff IPX SAP  113    General Response
    263 159.658802  192.168.254.72        192.168.254.69        UDP      60     Source port: na-localise  Destination port: sip
    264 163.660313  fe80::6d47:6a2e:2b44:c57e ff02::1:2             DHCPv6   163    Solicit XID: 0x6e3843 CID: 0001000114dc89067071bcb13e51 
    265 163.794815  fe80::30e8:3577:3ae2:2c5f ff02::1:2             DHCPv6   165    Solicit XID: 0x3db8ae CID: 000100011591670b00155dfe360a 
    266 164.308789  Microsof_fe:36:0a     Broadcast             ARP      60     Who has 192.168.254.6?  Tell 192.168.254.2
    267 164.308831  Pegatron_3b:7c:4f     Broadcast             ARP      60     Who has 192.168.254.2?  Tell 192.168.254.6
    268 164.387829  192.168.254.5         192.168.254.255       BROWSER  243    Host Announcement SERVER4, Workstation, Server, NT Workstation, NT Server, Backup Browser, DFS server
    269 165.411703  Microsof_fe:36:0a     Broadcast             ARP      60     Who has 192.168.254.9?  Tell 192.168.254.2
    270 165.412778  Pegatron_77:37:1d     Broadcast             ARP      60     Who has 192.168.254.2?  Tell 192.168.254.9
    271 165.684871  fe80::1836:5a1a:feef:17f5 ff02::1:2             DHCPv6   162    Solicit XID: 0x5f342a CID: 0001000114ddf4417071bcb13e60 
    272 170.946539  Pegatron_3b:7c:4f     Broadcast             ARP      60     Who has 192.168.254.94?  Tell 192.168.254.6
    273 171.705143  Procurve_cd:3c:20     LLDP_Multicast        LLDP     109    Chassis Id = 00:1d:b3:cd:3c:20 Port Id = 16 TTL = 120 
    274 171.730452  Microsof_fe:36:0a     Broadcast             ARP      60     Who has 192.168.254.7?  Tell 192.168.254.2
    275 171.731435  Pegatron_51:4c:ce     Broadcast             ARP      60     Who has 192.168.254.2?  Tell 192.168.254.7
    276 179.901981  fe80::a1f5:947:90b8:ed27 ff02::1:2             DHCPv6   145    Solicit XID: 0x1f85a4 CID: 00010001154d81e6001c23be0f97 
    277 179.943381  192.168.254.71        192.168.254.69        UDP      60     Source port: na-localise  Destination port: sip
    278 180.308237  192.168.254.5         192.168.254.255       BROWSER  243    Host Announcement SERVER4, Workstation, Server, NT Workstation, NT Server, Backup Browser, DFS server
    279 181.611308  fe80::1836:5a1a:feef:17f5 ff02::1:2             DHCPv6   162    Solicit XID: 0x5f342a CID: 0001000114ddf4417071bcb13e60 
    280 183.279252  Apple_5f:b1:97        Broadcast             XID      60     Basic Format; Type 1 LLC (Class I LLC); Window Size 0
    281 183.298185  0.0.0.0               255.255.255.255       DHCP     342    DHCP Request  - Transaction ID 0x89e5f9b9
    282 183.339975  fe80::ce08:e0ff:fe5f:b197 ff02::1:ff5f:b197     ICMPv6   86     Multicast Listener Report
    283 183.532091  ::                    ff02::1:ff5f:b197     ICMPv6   78     Neighbor Solicitation
    284 184.321964  Apple_5f:b1:97        Broadcast             ARP      60     Gratuitous ARP for 192.168.254.179 (Request)
    285 184.333361  Apple_5f:b1:97        Broadcast             ARP      60     Who has 192.168.254.1?  Tell 192.168.254.179
    286 184.359652  Apple_5f:b1:97        Broadcast             ARP      60     Who has 169.254.255.255?  Tell 192.168.254.179
    287 184.727573  Pronet_c9:4d:71       Broadcast             ARP      60     Gratuitous ARP for 192.168.254.165 (Request)
    288 184.872012  fe80::ce08:e0ff:fe5f:b197 ff02::2               ICMPv6   70     Router Solicitation
    289 184.874254  fe80::ce08:e0ff:fe5f:b197 ff02::2               ICMPv6   86     Multicast Listener Done
    290 184.887084  Apple_5f:b1:97        Broadcast             ARP      60     Who has 169.254.255.255?  Tell 192.168.254.179
    291 184.888603  fe80::ce08:e0ff:fe5f:b197 ff02::fb              ICMPv6   86     Multicast Listener Report
    292 184.888822  192.168.254.179       224.0.0.2             IGMP     60     V2 Leave Group 224.0.0.251
    293 184.893996  192.168.254.179       224.0.0.251           IGMP     60     V2 Membership Report / Join group 224.0.0.251
    294 184.900729  Apple_5f:b1:97        Broadcast             ARP      60     Who has 192.168.254.2?  Tell 192.168.254.179
    295 184.903810  Microsof_fe:36:0a     Broadcast             ARP      60     Who has 192.168.254.179?  Tell 192.168.254.2
    296 184.970902  192.168.254.179       224.0.0.251           MDNS     76     Standard query PTR _raop._tcp.local, "QU" question
    297 184.971976  fe80::ce08:e0ff:fe5f:b197 ff02::fb              MDNS     96     Standard query PTR _raop._tcp.local, "QU" question
    298 185.287334  Apple_5f:b1:97        Broadcast             ARP      60     Who has 169.254.255.255?  Tell 192.168.254.179
    299 185.386826  192.168.254.179       224.0.0.251           MDNS     129    Standard query ANY mikess-iPhone.local, "QU" question ANY mikess-iPhone.local, "QU" question
    300 185.388912  fe80::ce08:e0ff:fe5f:b197 ff02::fb              MDNS     149    Standard query ANY mikess-iPhone.local, "QU" question ANY mikess-iPhone.local, "QU" question
    301 185.637075  192.168.254.179       224.0.0.251           MDNS     129    Standard query ANY mikess-iPhone.local, "QM" question ANY mikess-iPhone.local, "QM" question
    302 185.642447  fe80::ce08:e0ff:fe5f:b197 ff02::fb              MDNS     149    Standard query ANY mikess-iPhone.local, "QM" question ANY mikess-iPhone.local, "QM" question
    303 185.685004  Apple_5f:b1:97        Broadcast             ARP      60     Who has 169.254.255.255?  Tell 192.168.254.179
    304 185.881954  192.168.254.179       224.0.0.251           MDNS     129    Standard query ANY mikess-iPhone.local, "QM" question ANY mikess-iPhone.local, "QM" question
    305 185.882880  fe80::ce08:e0ff:fe5f:b197 ff02::fb              MDNS     149    Standard query ANY mikess-iPhone.local, "QM" question ANY mikess-iPhone.local, "QM" question
    306 185.982315  192.168.254.179       224.0.0.251           MDNS     76     Standard query PTR _raop._tcp.local, "QM" question
    307 185.982705  fe80::ce08:e0ff:fe5f:b197 ff02::fb              MDNS     96     Standard query PTR _raop._tcp.local, "QM" question
    308 186.132130  192.168.254.179       224.0.0.251           MDNS     297    Standard query response PTR, cache flush mikess-iPhone.local PTR, cache flush mikess-iPhone.local AAAA, cache flush fe80::ce08:e0ff:fe5f:b197 A, cache flush 192.168.254.179
    309 186.132990  fe80::ce08:e0ff:fe5f:b197 ff02::fb              MDNS     317    Standard query response PTR, cache flush mikess-iPhone.local PTR, cache flush mikess-iPhone.local AAAA, cache flush fe80::ce08:e0ff:fe5f:b197 A, cache flush 192.168.254.179
    310 187.235513  192.168.254.179       224.0.0.251           MDNS     297    Standard query response PTR, cache flush mikess-iPhone.local PTR, cache flush mikess-iPhone.local AAAA, cache flush fe80::ce08:e0ff:fe5f:b197 A, cache flush 192.168.254.179
    311 187.240379  fe80::ce08:e0ff:fe5f:b197 ff02::fb              MDNS     317    Standard query response PTR, cache flush mikess-iPhone.local PTR, cache flush mikess-iPhone.local AAAA, cache flush fe80::ce08:e0ff:fe5f:b197 A, cache flush 192.168.254.179
    312 187.462672  fe80::ce08:e0ff:fe5f:b197 ff02::1:ff5f:b197     ICMPv6   86     Multicast Listener Report
    313 188.983560  192.168.254.179       224.0.0.251           MDNS     76     Standard query PTR _raop._tcp.local, "QM" question
    314 188.986842  fe80::ce08:e0ff:fe5f:b197 ff02::fb              MDNS     96     Standard query PTR _raop._tcp.local, "QM" question
    315 189.219137  192.168.254.179       224.0.0.251           MDNS     297    Standard query response PTR, cache flush mikess-iPhone.local PTR, cache flush mikess-iPhone.local AAAA, cache flush fe80::ce08:e0ff:fe5f:b197 A, cache flush 192.168.254.179
    316 189.220682  fe80::ce08:e0ff:fe5f:b197 ff02::fb              MDNS     317    Standard query response PTR, cache flush mikess-iPhone.local PTR, cache flush mikess-iPhone.local AAAA, cache flush fe80::ce08:e0ff:fe5f:b197 A, cache flush 192.168.254.179
    317 189.399498  fe80::ce08:e0ff:fe5f:b197 ff02::2               ICMPv6   70     Router Solicitation
    318 189.647922  192.168.254.72        192.168.254.69        UDP      60     Source port: na-localise  Destination port: sip
    319 189.655408  fe80::ce08:e0ff:fe5f:b197 ff02::fb              ICMPv6   86     Multicast Listener Report
    320 193.217639  192.168.254.179       224.0.0.251           MDNS     297    Standard query response PTR, cache flush mikess-iPhone.local PTR, cache flush mikess-iPhone.local AAAA, cache flush fe80::ce08:e0ff:fe5f:b197 A, cache flush 192.168.254.179
    321 193.218123  fe80::ce08:e0ff:fe5f:b197 ff02::fb              MDNS     317    Standard query response PTR, cache flush mikess-iPhone.local PTR, cache flush mikess-iPhone.local AAAA, cache flush fe80::ce08:e0ff:fe5f:b197 A, cache flush 192.168.254.179
    322 193.578627  fe80::ce08:e0ff:fe5f:b197 ff02::2               ICMPv6   70     Router Solicitation
    323 194.578316  192.168.254.179       224.0.0.251           IGMP     60     V2 Membership Report / Join group 224.0.0.251
    324 195.657137  fe80::30e8:3577:3ae2:2c5f ff02::1:2             DHCPv6   165    Solicit XID: 0x3db8ae CID: 000100011591670b00155dfe360a 
    325 196.241160  192.168.254.5         192.168.254.255       BROWSER  243    Host Announcement SERVER4, Workstation, Server, NT Workstation, NT Server, Backup Browser, DFS server
    326 197.786353  192.168.254.56        192.168.254.255       BROWSER  243    Host Announcement BACKUP, Workstation, Server, NT Workstation, Potential Browser
    327 197.957896  192.168.254.179       224.0.0.251           MDNS     76     Standard query PTR _raop._tcp.local, "QM" question
    328 197.959276  fe80::ce08:e0ff:fe5f:b197 ff02::fb              MDNS     96     Standard query PTR _raop._tcp.local, "QM" question
    329 198.830638  Pegatron_3b:7c:4f     Broadcast             ARP      60     Who has 192.168.254.98?  Tell 192.168.254.6
    330 199.144335  192.168.254.69        192.168.254.2         DNS      75     Standard query A callcentric.com
    331 199.241594  Microsof_fe:36:0a     Broadcast             ARP      60     Who has 192.168.254.69?  Tell 192.168.254.2
    332 199.241623  Microsof_fe:c5:0a     Microsof_fe:36:0a     ARP      42     192.168.254.69 is at 00:15:5d:fe:c5:0a
    333 199.242663  192.168.254.2         192.168.254.69        DNS      219    Standard query response A 204.11.192.22 A 204.11.192.23 A 204.11.192.31 A 204.11.192.34 A 204.11.192.35 A 204.11.192.36 A 204.11.192.37 A 204.11.192.38 A 204.11.192.39
    334 199.244814  192.168.254.69        204.11.192.22         SIP      872    Request: REGISTER sip:callcentric.com:5060
    335 199.311098  204.11.192.22         192.168.254.69        SIP      547    Status: 407 Proxy Authentication Required    (0 bindings)
    336 199.413665  192.168.254.69        204.11.192.22         SIP      872    Request: REGISTER sip:callcentric.com:5060
    337 199.491468  204.11.192.22         192.168.254.69        SIP      438    Status: 200 Ok    (1 bindings)
    338 199.496534  204.11.192.22         192.168.254.69        SIP      692    Request: NOTIFY sip:[email protected]:5060;rinstance=d385a1c2f3e06c51
    339 199.697255  Pegatron_77:37:1d     Microsof_fe:c5:0a     ARP      60     Who has 192.168.254.69?  Tell 192.168.254.9
    340 199.697279  Microsof_fe:c5:0a     Pegatron_77:37:1d     ARP      42     192.168.254.69 is at 00:15:5d:fe:c5:0a
    341 201.179341  192.168.254.179       224.0.0.251           MDNS     297    Standard query response PTR, cache flush mikess-iPhone.local PTR, cache flush mikess-iPhone.local AAAA, cache flush fe80::ce08:e0ff:fe5f:b197 A, cache flush 192.168.254.179
    342 201.180357  fe80::ce08:e0ff:fe5f:b197 ff02::fb              MDNS     317    Standard query response PTR, cache flush mikess-iPhone.local PTR, cache flush mikess-iPhone.local AAAA, cache flush fe80::ce08:e0ff:fe5f:b197 A, cache flush 192.168.254.179
    343 201.730015  Procurve_cd:3c:20     LLDP_Multicast        LLDP     109    Chassis Id = 00:1d:b3:cd:3c:20 Port Id = 16 TTL = 120 
    344 203.002641  192.168.254.69        204.11.192.22         SIP      361    Status: 100 Trying
    345 204.284914  LannerEl_1b:bf:05     Microsof_fe:c5:0a     ARP      60     Who has 192.168.254.69?  Tell 192.168.254.1
    346 204.284942  Microsof_fe:c5:0a     LannerEl_1b:bf:05     ARP      42     192.168.254.69 is at 00:15:5d:fe:c5:0a
    347 205.199882  192.168.254.9         192.168.254.69        TCP      66     50095 > commplex-main [SYN] Seq=0 Win=8192 Len=0 MSS=1460 WS=4 SACK_PERM=1
    348 205.199974  192.168.254.69        192.168.254.9         TCP      66     commplex-main > 50095 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 WS=1 SACK_PERM=1
    349 205.200259  192.168.254.9         192.168.254.69        TCP      60     50095 > commplex-main [ACK] Seq=1 Ack=1 Win=65700 Len=0
    350 205.200381  192.168.254.9         192.168.254.69        IPA      633    unknown 0x53 [Malformed Packet]
    351 205.200436  192.168.254.9         192.168.254.69        IPA      119    unknown 0x53 [Malformed Packet]
    352 205.200473  192.168.254.69        192.168.254.9         TCP      54     commplex-main > 50095 [ACK] Seq=1 Ack=645 Win=64891 Len=0
    353 205.222550  192.168.254.69        192.168.254.9         IPA      371    unknown 0x54 [Malformed Packet]
    354 205.414708  192.168.254.9         192.168.254.69        TCP      60     50095 > commplex-main [ACK] Seq=645 Ack=318 Win=65380 Len=0
    355 205.414776  192.168.254.69        192.168.254.9         IPA      254    unknown 0xbf [Malformed Packet]
    356 205.614761  192.168.254.9         192.168.254.69        TCP      60     50095 > commplex-main [ACK] Seq=645 Ack=518 Win=65180 Len=0
    357 206.596370  Pegatron_3b:7c:4f     Broadcast             ARP      60     Who has 192.168.254.3?  Tell 192.168.254.6
    358 209.869515  192.168.254.71        192.168.254.69        UDP      60     Source port: na-localise  Destination port: sip
    359 211.795228  192.168.254.179       224.0.0.251           MDNS     297    Standard query response PTR, cache flush mikess-iPhone.local PTR, cache flush mikess-iPhone.local AAAA, cache flush fe80::ce08:e0ff:fe5f:b197 A, cache flush 192.168.254.179
    360 211.801434  fe80::ce08:e0ff:fe5f:b197 ff02::fb              MDNS     317    Standard query response PTR, cache flush mikess-iPhone.local PTR, cache flush mikess-iPhone.local AAAA, cache flush fe80::ce08:e0ff:fe5f:b197 A, cache flush 192.168.254.179
    361 212.152251  192.168.254.5         192.168.254.255       BROWSER  243    Host Announcement SERVER4, Workstation, Server, NT Workstation, NT Server, Backup Browser, DFS server
    362 213.474041  fe80::1836:5a1a:feef:17f5 ff02::1:2             DHCPv6   162    Solicit XID: 0x5f342a CID: 0001000114ddf4417071bcb13e60 
    363 214.294122  Microsof_fe:c5:08     Broadcast             ARP      42     Who has 192.168.254.6?  Tell 192.168.254.4
    364 215.510667  Pegatron_77:37:1d     Broadcast             ARP      60     Who has 192.168.254.4?  Tell 192.168.254.9
    365 215.511590  Microsof_fe:c5:08     Broadcast             ARP      42     Who has 192.168.254.9?  Tell 192.168.254.4
    366 217.488053  00000000.0000b4cc7185 00000000.ffffffffffff IPX SAP  113    General Response
    367 219.598460  192.168.254.72        192.168.254.69        UDP      60     Source port: na-localise  Destination port: sip
    368 224.557540  Pegatron_77:37:1d     Broadcast             ARP      60     Who has 192.168.254.200?  Tell 192.168.254.9
    369 224.558430  fe80::8105:edd7:9695:a6ae ff02::1:2             DHCPv6   145    Solicit XID: 0xe2df45 CID: 00010001154cd377001c23be0f79 
    370 224.866184  192.168.254.179       224.0.0.251           MDNS     76     Standard query PTR _raop._tcp.local, "QM" question
    371 224.867576  fe80::ce08:e0ff:fe5f:b197 ff02::fb              MDNS     96     Standard query PTR _raop._tcp.local, "QM" question
    372 225.556751  fe80::8105:edd7:9695:a6ae ff02::1:2             DHCPv6   145    Solicit XID: 0xe2df45 CID: 00010001154cd377001c23be0f79 
    373 226.906373  192.168.254.140       192.168.254.255       NBNS     92     Name query NB VAULT-DW<20>
    374 226.906417  Supermic_f9:97:66     Broadcast             ARP      60     Who has 192.168.254.140?  Tell 192.168.254.138
    375 227.223300  Pegatron_77:37:1d     Broadcast             ARP      60     Who has 192.168.254.200?  Tell 192.168.254.9
    376 227.551223  fe80::8105:edd7:9695:a6ae ff02::1:2             DHCPv6   145    Solicit XID: 0xe2df45 CID: 00010001154cd377001c23be0f79 
    377 228.026624  Pegatron_77:37:1d     Broadcast             ARP      60     Who has 192.168.254.200?  Tell 192.168.254.9
    378 228.058934  192.168.254.5         192.168.254.255       BROWSER  243    Host Announcement SERVER4, Workstation, Server, NT Workstation, NT Server, Backup Browser, DFS server
    379 229.011389  Pegatron_77:37:1d     Broadcast             ARP      60     Who has 192.168.254.200?  Tell 192.168.254.9
    380 231.524289  fe80::8105:edd7:9695:a6ae ff02::1:2             DHCPv6   145    Solicit XID: 0xe2df45 CID: 00010001154cd377001c23be0f79 
    381 231.695899  Procurve_cd:3c:20     LLDP_Multicast        LLDP     109    Chassis Id = 00:1d:b3:cd:3c:20 Port Id = 16 TTL = 120 
    382 233.171328  Pegatron_77:37:1d     Broadcast             ARP      60     Who has 192.168.254.200?  Tell 192.168.254.9
    383 233.983170  Pegatron_77:37:1d     Broadcast             ARP      60     Who has 192.168.254.200?  Tell 192.168.254.9
    384 234.322599  Pegatron_77:37:1d     Broadcast             ARP      60     Who has 192.168.254.3?  Tell 192.168.254.9
    385 234.974515  Pegatron_77:37:1d     Broadcast             ARP      60     Who has 192.168.254.200?  Tell 192.168.254.9
 
Hi,

Can you save a capture file (.pcap) with filter 'SIP or RTP' and attach it.
Also be so kind to send the 3CX server address (public and internal) and the address the phones have (local IP) and their extension numbers (in order to interpret the log). If the log contains any sensitive information, please hide it.

Also I need a brief scheme of your setup - I suppose you have a router with static public IP, the 3cx is behind NAT. You have configured correctly the router and firewall checker passes successfully.

Regarding your remote phones (i.e. Android ones), are they behind a router, if so, what is there public and internal address.
Is STUN involved, are you using tunnel, have you tested the setup with 3CX softphone on a Windows PC. What is address:port with which the phones register to 3CX server (from 'Phones' menu).

Regards
 
While gathering my other information here is what the firewall checker shows. Not sure if exit code 2 is ok or not.

Code:
3CX Firewall Checker, v1.0. Copyright (C) 3CX Ltd. All rights reserved.

<12:49:01>: Phase 1, checking servers connection, please wait...
<12:49:01>: Stun Checker service is reachable. Phase 1 check passed.
<12:49:01>: Phase 2a,  Check Port Forwarding to UDP SIP port, please wait...
<12:49:02>: UDP SIP Port is set to 5060. Response received WITH TRANSLATION 1024::5060. Phase 2a check passed with WARNINGS. Some functionality will be LIMITED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/

<12:49:02>: Phase 2b. Check Port Forwarding to TCP SIP port, please wait...
<12:49:02>: TCP SIP Port is set to 5060. Response received WITH TRANSLATION 1024::5060. Phase 2b check passed with WARNINGS. Some functionality will be LIMITED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/

<12:49:02>: Phase 3. Check Port Forwarding to TCP Tunnel port, please wait...
<12:49:02>: TCP TUNNEL Port is set to 8082. Response received correctly with no translation. Phase 3 check passed.

<12:49:02>: Phase 4. Check Port Forwarding to RTP external port range, please wait...
<12:49:06>: UDP RTP Port 9000. Response received correctly with no translation. Phase 4-01 check passed.
<12:49:06>: UDP RTP Port 9001. Response received correctly with no translation. Phase 4-02 check passed.
<12:49:06>: UDP RTP Port 9002. Response received correctly with no translation. Phase 4-03 check passed.
<12:49:06>: UDP RTP Port 9003. Response received correctly with no translation. Phase 4-04 check passed.
<12:49:06>: UDP RTP Port 9004. Response received correctly with no translation. Phase 4-05 check passed.
<12:49:06>: UDP RTP Port 9005. Response received correctly with no translation. Phase 4-06 check passed.
<12:49:06>: UDP RTP Port 9006. Response received correctly with no translation. Phase 4-07 check passed.
<12:49:06>: UDP RTP Port 9007. Response received correctly with no translation. Phase 4-08 check passed.
<12:49:06>: UDP RTP Port 9008. Response received correctly with no translation. Phase 4-09 check passed.
<12:49:06>: UDP RTP Port 9009. Response received correctly with no translation. Phase 4-10 check passed.
<12:49:06>: UDP RTP Port 9010. Response received correctly with no translation. Phase 4-11 check passed.
<12:49:06>: UDP RTP Port 9011. Response received correctly with no translation. Phase 4-12 check passed.
<12:49:06>: UDP RTP Port 9012. Response received correctly with no translation. Phase 4-13 check passed.
<12:49:06>: UDP RTP Port 9013. Response received correctly with no translation. Phase 4-14 check passed.
<12:49:06>: UDP RTP Port 9014. Response received correctly with no translation. Phase 4-15 check passed.
<12:49:06>: UDP RTP Port 9015. Response received correctly with no translation. Phase 4-16 check passed.
<12:49:06>: UDP RTP Port 9016. Response received correctly with no translation. Phase 4-17 check passed.
<12:49:06>: UDP RTP Port 9017. Response received correctly with no translation. Phase 4-18 check passed.
<12:49:06>: UDP RTP Port 9018. Response received correctly with no translation. Phase 4-19 check passed.
<12:49:06>: UDP RTP Port 9019. Response received correctly with no translation. Phase 4-20 check passed.
<12:49:06>: UDP RTP Port 9020. Response received correctly with no translation. Phase 4-21 check passed.
<12:49:06>: UDP RTP Port 9021. Response received correctly with no translation. Phase 4-22 check passed.
<12:49:06>: UDP RTP Port 9022. Response received correctly with no translation. Phase 4-23 check passed.
<12:49:06>: UDP RTP Port 9023. Response received correctly with no translation. Phase 4-24 check passed.
<12:49:06>: UDP RTP Port 9024. Response received correctly with no translation. Phase 4-25 check passed.
<12:49:06>: UDP RTP Port 9025. Response received correctly with no translation. Phase 4-26 check passed.
<12:49:06>: UDP RTP Port 9026. Response received correctly with no translation. Phase 4-27 check passed.
<12:49:06>: UDP RTP Port 9027. Response received correctly with no translation. Phase 4-28 check passed.
<12:49:06>: UDP RTP Port 9028. Response received correctly with no translation. Phase 4-29 check passed.
<12:49:06>: UDP RTP Port 9029. Response received correctly with no translation. Phase 4-30 check passed.
<12:49:06>: UDP RTP Port 9030. Response received correctly with no translation. Phase 4-31 check passed.
<12:49:06>: UDP RTP Port 9031. Response received correctly with no translation. Phase 4-32 check passed.
<12:49:06>: UDP RTP Port 9032. Response received correctly with no translation. Phase 4-33 check passed.
<12:49:06>: UDP RTP Port 9033. Response received correctly with no translation. Phase 4-34 check passed.
<12:49:06>: UDP RTP Port 9034. Response received correctly with no translation. Phase 4-35 check passed.
<12:49:06>: UDP RTP Port 9035. Response received correctly with no translation. Phase 4-36 check passed.
<12:49:06>: UDP RTP Port 9036. Response received correctly with no translation. Phase 4-37 check passed.
<12:49:06>: UDP RTP Port 9037. Response received correctly with no translation. Phase 4-38 check passed.
<12:49:06>: UDP RTP Port 9038. Response received correctly with no translation. Phase 4-39 check passed.
<12:49:06>: UDP RTP Port 9039. Response received correctly with no translation. Phase 4-40 check passed.
<12:49:06>: UDP RTP Port 9040. Response received correctly with no translation. Phase 4-41 check passed.
<12:49:06>: UDP RTP Port 9041. Response received correctly with no translation. Phase 4-42 check passed.
<12:49:06>: UDP RTP Port 9042. Response received correctly with no translation. Phase 4-43 check passed.
<12:49:06>: UDP RTP Port 9043. Response received correctly with no translation. Phase 4-44 check passed.
<12:49:06>: UDP RTP Port 9044. Response received correctly with no translation. Phase 4-45 check passed.
<12:49:06>: UDP RTP Port 9045. Response received correctly with no translation. Phase 4-46 check passed.
<12:49:06>: UDP RTP Port 9046. Response received correctly with no translation. Phase 4-47 check passed.
<12:49:06>: UDP RTP Port 9047. Response received correctly with no translation. Phase 4-48 check passed.
<12:49:06>: UDP RTP Port 9048. Response received correctly with no translation. Phase 4-49 check passed.
<12:49:06>: UDP RTP Port 9049. Response received correctly with no translation. Phase 4-50 check passed.


Application exit code is 2
 
OK 3cx server is 192.168.254.69 behind NAT whos public ip is 24.179.237.176.

the android phone is connected 3g so no NAT involved and it's IP is 32.145.10.147.

the extension the android is connecting as is 223.

attached is the wireshark file.
 

Attachments

tsteffens said:
While gathering my other information here is what the firewall checker shows. Not sure if exit code 2 is ok or not.

Code:
3CX Firewall Checker, v1.0. Copyright (C) 3CX Ltd. All rights reserved.

<12:49:01>: Phase 1, checking servers connection, please wait...
<12:49:01>: Stun Checker service is reachable. Phase 1 check passed.
<12:49:01>: Phase 2a,  Check Port Forwarding to UDP SIP port, please wait...
<12:49:02>: UDP SIP Port is set to 5060. Response received WITH TRANSLATION 1024::5060. Phase 2a check passed with WARNINGS. Some functionality will be LIMITED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/

<12:49:02>: Phase 2b. Check Port Forwarding to TCP SIP port, please wait...
<12:49:02>: TCP SIP Port is set to 5060. Response received WITH TRANSLATION 1024::5060. Phase 2b check passed with WARNINGS. Some functionality will be LIMITED. For more information, please visit http://www.3cx.com/blog/docs/firewall-checker/

<12:49:02>: Phase 3. Check Port Forwarding to TCP Tunnel port, please wait...
<12:49:02>: TCP TUNNEL Port is set to 8082. Response received correctly with no translation. Phase 3 check passed.

<12:49:02>: Phase 4. Check Port Forwarding to RTP external port range, please wait...
<12:49:06>: UDP RTP Port 9000. Response received correctly with no translation. Phase 4-01 check passed.
<12:49:06>: UDP RTP Port 9001. Response received correctly with no translation. Phase 4-02 check passed.
<12:49:06>: UDP RTP Port 9002. Response received correctly with no translation. Phase 4-03 check passed.
<12:49:06>: UDP RTP Port 9003. Response received correctly with no translation. Phase 4-04 check passed.
<12:49:06>: UDP RTP Port 9004. Response received correctly with no translation. Phase 4-05 check passed.
<12:49:06>: UDP RTP Port 9005. Response received correctly with no translation. Phase 4-06 check passed.
<12:49:06>: UDP RTP Port 9006. Response received correctly with no translation. Phase 4-07 check passed.
<12:49:06>: UDP RTP Port 9007. Response received correctly with no translation. Phase 4-08 check passed.
<12:49:06>: UDP RTP Port 9008. Response received correctly with no translation. Phase 4-09 check passed.
<12:49:06>: UDP RTP Port 9009. Response received correctly with no translation. Phase 4-10 check passed.
<12:49:06>: UDP RTP Port 9010. Response received correctly with no translation. Phase 4-11 check passed.
<12:49:06>: UDP RTP Port 9011. Response received correctly with no translation. Phase 4-12 check passed.
<12:49:06>: UDP RTP Port 9012. Response received correctly with no translation. Phase 4-13 check passed.
<12:49:06>: UDP RTP Port 9013. Response received correctly with no translation. Phase 4-14 check passed.
<12:49:06>: UDP RTP Port 9014. Response received correctly with no translation. Phase 4-15 check passed.
<12:49:06>: UDP RTP Port 9015. Response received correctly with no translation. Phase 4-16 check passed.
<12:49:06>: UDP RTP Port 9016. Response received correctly with no translation. Phase 4-17 check passed.
<12:49:06>: UDP RTP Port 9017. Response received correctly with no translation. Phase 4-18 check passed.
<12:49:06>: UDP RTP Port 9018. Response received correctly with no translation. Phase 4-19 check passed.
<12:49:06>: UDP RTP Port 9019. Response received correctly with no translation. Phase 4-20 check passed.
<12:49:06>: UDP RTP Port 9020. Response received correctly with no translation. Phase 4-21 check passed.
<12:49:06>: UDP RTP Port 9021. Response received correctly with no translation. Phase 4-22 check passed.
<12:49:06>: UDP RTP Port 9022. Response received correctly with no translation. Phase 4-23 check passed.
<12:49:06>: UDP RTP Port 9023. Response received correctly with no translation. Phase 4-24 check passed.
<12:49:06>: UDP RTP Port 9024. Response received correctly with no translation. Phase 4-25 check passed.
<12:49:06>: UDP RTP Port 9025. Response received correctly with no translation. Phase 4-26 check passed.
<12:49:06>: UDP RTP Port 9026. Response received correctly with no translation. Phase 4-27 check passed.
<12:49:06>: UDP RTP Port 9027. Response received correctly with no translation. Phase 4-28 check passed.
<12:49:06>: UDP RTP Port 9028. Response received correctly with no translation. Phase 4-29 check passed.
<12:49:06>: UDP RTP Port 9029. Response received correctly with no translation. Phase 4-30 check passed.
<12:49:06>: UDP RTP Port 9030. Response received correctly with no translation. Phase 4-31 check passed.
<12:49:06>: UDP RTP Port 9031. Response received correctly with no translation. Phase 4-32 check passed.
<12:49:06>: UDP RTP Port 9032. Response received correctly with no translation. Phase 4-33 check passed.
<12:49:06>: UDP RTP Port 9033. Response received correctly with no translation. Phase 4-34 check passed.
<12:49:06>: UDP RTP Port 9034. Response received correctly with no translation. Phase 4-35 check passed.
<12:49:06>: UDP RTP Port 9035. Response received correctly with no translation. Phase 4-36 check passed.
<12:49:06>: UDP RTP Port 9036. Response received correctly with no translation. Phase 4-37 check passed.
<12:49:06>: UDP RTP Port 9037. Response received correctly with no translation. Phase 4-38 check passed.
<12:49:06>: UDP RTP Port 9038. Response received correctly with no translation. Phase 4-39 check passed.
<12:49:06>: UDP RTP Port 9039. Response received correctly with no translation. Phase 4-40 check passed.
<12:49:06>: UDP RTP Port 9040. Response received correctly with no translation. Phase 4-41 check passed.
<12:49:06>: UDP RTP Port 9041. Response received correctly with no translation. Phase 4-42 check passed.
<12:49:06>: UDP RTP Port 9042. Response received correctly with no translation. Phase 4-43 check passed.
<12:49:06>: UDP RTP Port 9043. Response received correctly with no translation. Phase 4-44 check passed.
<12:49:06>: UDP RTP Port 9044. Response received correctly with no translation. Phase 4-45 check passed.
<12:49:06>: UDP RTP Port 9045. Response received correctly with no translation. Phase 4-46 check passed.
<12:49:06>: UDP RTP Port 9046. Response received correctly with no translation. Phase 4-47 check passed.
<12:49:06>: UDP RTP Port 9047. Response received correctly with no translation. Phase 4-48 check passed.
<12:49:06>: UDP RTP Port 9048. Response received correctly with no translation. Phase 4-49 check passed.
<12:49:06>: UDP RTP Port 9049. Response received correctly with no translation. Phase 4-50 check passed.


Application exit code is 2

This could be a problem and reason why second phone doesn't register. Try to fix it.
Regards
 
tsteffens said:
OK 3cx server is 192.168.254.69 behind NAT whos public ip is 24.179.237.176.

the android phone is connected 3g so no NAT involved and it's IP is 32.145.10.147.

the extension the android is connecting as is 223.

attached is the wireshark file.

So the problem is with port 8082 - there are 2 unsuccessful attempts for registration to 3CX and one successful to CallCentric.
See the screenshot below.

I suppose you have a SIP ALG (SIP NAT) active in your router, which is creating the problem. Try disabling it.
Regards
 

Attachments

  • new-1.jpg
    new-1.jpg
    133.9 KB · Views: 3,646
Hi
I'm curious about record 75 in the attached pcap:

Code:
SIP/2.0 200 Ok
v: SIP/2.0/UDP 192.168.254.69:5060;branch=z9hG4bK-d8754z-92287d0ca4165814-1---d8754z-;rport=5060
f: "2189277019" <sip:[email protected]:5060>;tag=da50ee79
t: "2189277019" <sip:[email protected]:5060>
i: NmI1N2M5ZmY5ZmE1MjIxNjgzNmY4OWIxNWI1MDY4ZjE.
CSeq: 4 REGISTER
m: <sip:[email protected]:5060;rinstance=95c0caf40f1255c9>;expires=62
l: 0

To be honest, I never saw this until now :roll:
 
Hi Vali,

what you mean by this - what is strange?
"2189277019" should be a public caller-ID

Regards,
Orlin.
 
Status
Not open for further replies.

Members Online Now

Forum statistics

Threads
111,832
Messages
589,280
Members
164,662
Latest member
DejanMDS