interface: eth0 (192.168.0.0/255.255.255.0)
filter: ip and ( host 192.168.0.23 )
####
T 192.168.0.23:4246 -> 192.168.0.22:5070 [AP]
  INVITE sip:ocs@csnocs.local SIP/2.0..ms-user-data: ms-publiccloud=false;ms-federation
  =false..Record-Route: <sip:officelcs.newstepcsne.local;transport=tcp;ms-role-rs-to;lr
  >;tag=058E61A44B2CB2C72BE3F6C09B465572..Via: SIP/2.0/TCP 192.168.0.23:4246;branch=z9h
  G4bK1A8C3788.F1C653C9;branched=FALSE..Max-Forwards: 69..Content-Length: 304..Via: SIP
  /2.0/TCP 172.0.0.105:1719;ms-received-port=1719;ms-received-cid=25E00..From: "222222"
  <sip:222222@newstepcsne.local>;tag=9c16cd17e7;epid=65ae8f3da8..To: <sip:ocs@csnocs.lo
  cal>..Call-ID: 41893c8352f04b12876aae9d17c305b0..CSeq: 1 INVITE..Contact: <sip:222222
  @newstepcsne.local;opaque=user:epid:wjP4c_zFS1GpEPdtUOEhqgAA;gruu>..User-Agent: UCCP/
  2.0.6362.0 OC/2.0.6362.0 (Microsoft Office Communicator)..Content-Disposition: signal
  ;handling=required..Supported: timer..Supported: ms-sender..Supported: ms-early-media
  ..ms-keep-alive: UAC;hop-hop=yes..Content-Type: application/csta+xml....<?xml version
  ="1.0"?>..<RequestSystemStatus xmlns="http://www.ecma-international.org/standards/ecm
  a-323/csta/ed3"><extensions><privateData><private><lcs:line xmlns:lcs="http://schemas
  .microsoft.com/Lcs/2005/04/RCCExtension">tel:4002</lcs:line></private></privateData><
  /extensions></RequestSystemStatus>..                                                 
##
T 192.168.0.22:5070 -> 192.168.0.23:4246 [AP]
  SIP/2.0 200 OK..Via: SIP/2.0/TCP 192.168.0.23:4246;branch=z9hG4bK1A8C3788.F1C653C9;br
  anched=FALSE..Via: SIP/2.0/TCP 172.0.0.105:1719;ms-received-port=1719;ms-received-cid
  =25E00..From: "222222"<sip:222222@newstepcsne.local>;tag=9c16cd17e7;epid=65ae8f3da8..
  To: <sip:ocs@csnocs.local>..Call-ID: 41893c8352f04b12876aae9d17c305b0..CSeq: 1 INVITE
  ..Record-Route: <sip:officelcs.newstepcsne.local;transport=tcp;ms-role-rs-to;lr>;tag=
  058E61A44B2CB2C72BE3F6C09B465572..Contact: <sip:ocs@192.168.0.22:5070;transport=tcp>.
  .Content-Disposition: signal;handling=required..Content-Type: application/csta+xml..C
  ontent-Length:  189....<?xml version="1.0"?>..<RequestSystemStatusResponse xmlns="htt
  p://www.ecma-international.org/standards/ecma-323/csta/ed3"><systemStatus>normal</sys
  temStatus></RequestSystemStatusResponse>..                                           
#
T 192.168.0.23:4246 -> 192.168.0.22:5070 [AP]
  ACK sip:ocs@192.168.0.22:5070;transport=tcp SIP/2.0..Via: SIP/2.0/TCP 192.168.0.23:42
  46;branch=z9hG4bKF31574C2.0C186805;branched=FALSE..Max-Forwards: 69..Via: SIP/2.0/TCP
   172.0.0.105:1719;ms-received-port=1719;ms-received-cid=25E00..From: <sip:222222@news
  tepcsne.local>;tag=9c16cd17e7;epid=65ae8f3da8..To: <sip:ocs@csnocs.local>..Call-ID: 4
  1893c8352f04b12876aae9d17c305b0..CSeq: 1 ACK..User-Agent: UCCP/2.0.6362.0 OC/2.0.6362
  .0 (Microsoft Office Communicator)..Content-Length: 0....                            
##
T 192.168.0.23:4246 -> 192.168.0.22:5070 [AP]
  INFO sip:ocs@192.168.0.22:5070;transport=tcp SIP/2.0..Via: SIP/2.0/TCP 192.168.0.23:4
  246;branch=z9hG4bK00EB3268.C5EAF851;branched=FALSE..Max-Forwards: 69..Via: SIP/2.0/TC
  P 172.0.0.105:1719;ms-received-port=1719;ms-received-cid=25E00..From: <sip:222222@new
  stepcsne.local>;tag=9c16cd17e7;epid=65ae8f3da8..To: <sip:ocs@csnocs.local>..Call-ID: 
  41893c8352f04b12876aae9d17c305b0..CSeq: 2 INFO..User-Agent: UCCP/2.0.6362.0 OC/2.0.63
  62.0 (Microsoft Office Communicator)..Content-Disposition: signal;handling=required..
  Supported: timer..Content-Type: application/csta+xml..Content-Length: 296....<?xml ve
  rsion="1.0"?>..<GetCSTAFeatures xmlns="http://www.ecma-international.org/standards/ec
  ma-323/csta/ed3"><extensions><privateData><private><lcs:line xmlns:lcs="http://schema
  s.microsoft.com/Lcs/2005/04/RCCExtension">tel:4002</lcs:line></private></privateData>
  </extensions></GetCSTAFeatures>..                                                    
##
T 192.168.0.22:5070 -> 192.168.0.23:4246 [AP]
  SIP/2.0 200 OK..Via: SIP/2.0/TCP 192.168.0.23:4246;branch=z9hG4bK00EB3268.C5EAF851;br
  anched=FALSE..Via: SIP/2.0/TCP 172.0.0.105:1719;ms-received-port=1719;ms-received-cid
  =25E00..From: <sip:222222@newstepcsne.local>;tag=9c16cd17e7;epid=65ae8f3da8..To: <sip
  :ocs@csnocs.local>..Call-ID: 41893c8352f04b12876aae9d17c305b0..CSeq: 2 INFO..Contact:
   <sip:ocs@192.168.0.22:5070;transport=tcp>..Content-Disposition: signal;handling=requ
  ired..Content-Type: application/csta+xml..Content-Length:  878....<?xml version="1.0"
   encoding="UTF-8"?>..<GetCSTAFeaturesResponse xmlns="http://www.ecma-international.or
  g/standards/ecma-323/csta/ed3" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
  ..<supportedServices>..<systemStatServList>..<requestSystemStatus/>..</systemStatServ
  List>..<monitoringServList>..<monitorStart/>..<monitorStop/>..</monitoringServList>..
  <callControlServList>..<alternateCall/>..<answerCall/>..<clearConnection/>..<conferen
  ceCall/>..<consultationCall/>..<deflectCall/>..<dialDigits/>..<holdCall/>..<makeCall/
  >..<retrieveCall/>..<singleStepTransfer/>..</callControlServList>..</supportedService
  s>..<supportedEvents>..<callControlEvtsList>..<conferenced/>..<connectionCleared/>..<
  delivered/>..<diverted/>..<established/>..<failed/>..<held/>..<originated/>..<retriev
  ed/>..<transferred/>..</callControlEvtsList>..</supportedEvents>..</GetCSTAFeaturesRe
  sponse>..                                                                            
#
T 192.168.0.23:4246 -> 192.168.0.22:5070 [AP]
  INFO sip:ocs@192.168.0.22:5070;transport=tcp SIP/2.0..Via: SIP/2.0/TCP 192.168.0.23:4
  246;branch=z9hG4bK0DC0F10D.74B860A3;branched=FALSE..Max-Forwards: 69..Via: SIP/2.0/TC
  P 172.0.0.105:1719;ms-received-port=1719;ms-received-cid=25E00..From: <sip:222222@new
  stepcsne.local>;tag=9c16cd17e7;epid=65ae8f3da8..To: <sip:ocs@csnocs.local>..Call-ID: 
  41893c8352f04b12876aae9d17c305b0..CSeq: 3 INFO..User-Agent: UCCP/2.0.6362.0 OC/2.0.63
  62.0 (Microsoft Office Communicator)..Content-Disposition: signal;handling=required..
  Supported: timer..Content-Type: application/csta+xml..Content-Length: 192....<?xml ve
  rsion="1.0"?>..<MonitorStart xmlns="http://www.ecma-international.org/standards/ecma-
  323/csta/ed3"><monitorObject><deviceObject>tel:4002</deviceObject></monitorObject></M
  onitorStart>..                                                                       
#
T 192.168.0.22:5070 -> 192.168.0.23:4246 [AP]
  SIP/2.0 200 OK..Via: SIP/2.0/TCP 192.168.0.23:4246;branch=z9hG4bK0DC0F10D.74B860A3;br
  anched=FALSE..Via: SIP/2.0/TCP 172.0.0.105:1719;ms-received-port=1719;ms-received-cid
  =25E00..From: <sip:222222@newstepcsne.local>;tag=9c16cd17e7;epid=65ae8f3da8..To: <sip
  :ocs@csnocs.local>..Call-ID: 41893c8352f04b12876aae9d17c305b0..CSeq: 3 INFO..Contact:
   <sip:ocs@192.168.0.22:5070;transport=TCP>..Content-Disposition: signal;handling=requ
  ired..Content-Type: application/csta+xml..Content-Length:  185....<?xml version="1.0"
  ?>..<MonitorStartResponse xmlns="http://www.ecma-international.org/standards/ecma-323
  /csta/ed3 ">..<monitorCrossRefID>1</monitorCrossRefID>..</MonitorStartResponse>..    
##
T 192.168.0.23:4246 -> 192.168.0.22:5070 [AP]
  INFO sip:ocs@192.168.0.22:5070;transport=tcp SIP/2.0..Via: SIP/2.0/TCP 192.168.0.23:4
  246;branch=z9hG4bK1A95B0B3.B9CA09EC;branched=FALSE..Max-Forwards: 69..Via: SIP/2.0/TC
  P 172.0.0.105:1719;ms-received-port=1719;ms-received-cid=25E00..From: <sip:222222@new
  stepcsne.local>;tag=9c16cd17e7;epid=65ae8f3da8..To: <sip:ocs@csnocs.local>..Call-ID: 
  41893c8352f04b12876aae9d17c305b0..CSeq: 4 INFO..User-Agent: UCCP/2.0.6362.0 OC/2.0.63
  62.0 (Microsoft Office Communicator)..Content-Disposition: signal;handling=required..
  Supported: timer..Content-Type: application/csta+xml..Content-Length: 280....<?xml ve
  rsion="1.0"?>..<MakeCall xmlns="http://www.ecma-international.org/standards/ecma-323/
  csta/ed3"><callingDevice>tel:4002</callingDevice><calledDirectoryNumber>tel:2224001;p
  hone-context=dialstring</calledDirectoryNumber><autoOriginate>doNotPrompt</autoOrigin
  ate></MakeCall>..                                                                    
#
T 192.168.0.22:5070 -> 192.168.0.23:4246 [AP]
  SIP/2.0 200 OK..Via: SIP/2.0/TCP 192.168.0.23:4246;branch=z9hG4bK1A95B0B3.B9CA09EC;br
  anched=FALSE..Via: SIP/2.0/TCP 172.0.0.105:1719;ms-received-port=1719;ms-received-cid
  =25E00..From: <sip:222222@newstepcsne.local>;tag=9c16cd17e7;epid=65ae8f3da8..To: <sip
  :ocs@csnocs.local>..Call-ID: 41893c8352f04b12876aae9d17c305b0..CSeq: 4 INFO..Contact:
   <sip:ocs@192.168.0.22:5070;transport=TCP>..Content-Disposition: signal;handling=requ
  ired..Content-Type: application/csta+xml..Content-Length:  197....<?xml version="1.0"
  ?>..<MakeCallResponse xmlns="http://www.ecma.ch/standards/ecma-323/csta/ed3"><calling
  Device><callID>888</callID><deviceID>tel:4002</deviceID></callingDevice></MakeCallRes
  ponse>..                                                                             
#
T 192.168.0.22:5070 -> 192.168.0.23:4246 [AP]
  INFO sip:222222@newstepcsne.local SIP/2.0..Via: SIP/2.0/tcp 192.168.0.22:5070..From: 
    <sip:ocs@csnocs.local>..To:  <sip:222222@newstepcsne.local>;tag=9c16cd17e7;epid=65a
  e8f3da8..Call-ID: 41893c8352f04b12876aae9d17c305b0..CSeq: 5 INFO..Contact: <sip:ocs@1
  92.168.0.22:5070;transport=TCP>..Content-Disposition: signal;handling=required..Max-F
  orwards: 70..Content-Type: application/csta+xml..Content-Length:  515....<?xml versio
  n="1.0"?>..<OriginatedEvent xmlns="http://www.ecma-international.org/standards/ecma-3
  23/csta/ed3"><monitorCrossRefID>1</monitorCrossRefID><originatedConnection><callID>88
  8</callID><deviceID>tel:4002</deviceID></originatedConnection><callingDevice><deviceI
  dentifier>tel:4002</deviceIdentifier></callingDevice><calledDevice><deviceIdentifier>
  tel:2224001;phone-context=dialstring</deviceIdentifier></calledDevice><localConnectio
  nInfo>connected</localConnectionInfo><cause>normal</cause></OriginatedEvent>..       
##
T 192.168.0.23:4246 -> 192.168.0.22:5070 [AP]
  SIP/2.0 200 OK..Via: SIP/2.0/tcp 192.168.0.22:5070;ms-received-port=5070;ms-received-
  cid=25F00..From: <sip:ocs@csnocs.local>..To: <sip:222222@newstepcsne.local>;tag=9c16c
  d17e7;epid=65ae8f3da8..Call-ID: 41893c8352f04b12876aae9d17c305b0..CSeq: 5 INFO..Conta
  ct: <sip:222222@newstepcsne.local;opaque=user:epid:wjP4c_zFS1GpEPdtUOEhqgAA;gruu>..Us
  er-Agent: UCCP/2.0.6362.0 OC/2.0.6362.0 (Microsoft Office Communicator)..Content-Leng
  th: 0....                                                                            
#
T 192.168.0.22:5070 -> 192.168.0.23:4246 [AP]
  INFO sip:222222@newstepcsne.local SIP/2.0..Via: SIP/2.0/tcp 192.168.0.22:5070..From: 
    <sip:ocs@csnocs.local>..To:  <sip:222222@newstepcsne.local>;tag=9c16cd17e7;epid=65a
  e8f3da8..Call-ID: 41893c8352f04b12876aae9d17c305b0..CSeq: 6 INFO..Contact: <sip:ocs@1
  92.168.0.22:5070;transport=TCP>..Content-Disposition: signal;handling=required..Max-F
  orwards: 70..Content-Type: application/csta+xml..Content-Length:  677....<?xml versio
  n="1.0" encoding="UTF-8"?>..<DeliveredEvent xmlns="http://www.ecma-international.org/
  standards/ecma-323/csta/ed3"><monitorCrossRefID>1</monitorCrossRefID><connection><cal
  lID>888</callID><deviceID>tel:4002</deviceID></connection><alertingDevice><deviceIden
  tifier>tel:4002</deviceIdentifier></alertingDevice><callingDevice><deviceIdentifier>t
  el:2224001;phone-context=dialstring</deviceIdentifier></callingDevice><calledDevice><
  deviceIdentifier>tel:2224001;phone-context=dialstring</deviceIdentifier></calledDevic
  e><lastRedirectionDevice> <notRequired/></lastRedirectionDevice><localConnectionInfo>
  alerting</localConnectionInfo><cause>normal</cause></DeliveredEvent>..               
#
T 192.168.0.23:4246 -> 192.168.0.22:5070 [AP]
  SIP/2.0 200 OK..Via: SIP/2.0/tcp 192.168.0.22:5070;ms-received-port=5070;ms-received-
  cid=25F00..From: <sip:ocs@csnocs.local>..To: <sip:222222@newstepcsne.local>;tag=9c16c
  d17e7;epid=65ae8f3da8..Call-ID: 41893c8352f04b12876aae9d17c305b0..CSeq: 6 INFO..Conta
  ct: <sip:222222@newstepcsne.local;opaque=user:epid:wjP4c_zFS1GpEPdtUOEhqgAA;gruu>..Us
  er-Agent: UCCP/2.0.6362.0 OC/2.0.6362.0 (Microsoft Office Communicator)..Content-Leng
  th: 0....                                                                            
#
T 192.168.0.22:5070 -> 192.168.0.23:4246 [AP]
  INFO sip:222222@newstepcsne.local SIP/2.0..Via: SIP/2.0/tcp 192.168.0.22:5070..From: 
    <sip:ocs@csnocs.local>..To:  <sip:222222@newstepcsne.local>;tag=9c16cd17e7;epid=65a
  e8f3da8..Call-ID: 41893c8352f04b12876aae9d17c305b0..CSeq: 7 INFO..Content-Disposition
  : signal;handling=required..Contact: <sip:ocs@192.168.0.22:5070;transport=tcp>..Max-F
  orwards: 70..Content-Type: application/csta+xml..Content-Length:  715....<?xml versio
  n="1.0" encoding="UTF-8"?>..<EstablishedEvent xmlns="http://www.ecma-international.or
  g/standards/ecma-323/csta/ed3">..<monitorCrossRefID>1</monitorCrossRefID>..<establish
  edConnection>..<callID>888</callID>..<deviceID>tel:4002</deviceID> </establishedConne
  ction><answeringDevice><deviceIdentifier>tel:2224001;phone-context=dialstring</device
  Identifier> </answeringDevice><callingDevice><deviceIdentifier>tel:4002</deviceIdenti
  fier></callingDevice><calledDevice><deviceIdentifier>tel:2224001;phone-context=dialst
  ring</deviceIdentifier></calledDevice><lastRedirectionDevice><notRequired/></lastRedi
  rectionDevice><localConnectionInfo>connected</localConnectionInfo><cause>normal</caus
  e></EstablishedEvent>..                                                              
#
T 192.168.0.23:4246 -> 192.168.0.22:5070 [AP]
  SIP/2.0 200 OK..Via: SIP/2.0/tcp 192.168.0.22:5070;ms-received-port=5070;ms-received-
  cid=25F00..From: <sip:ocs@csnocs.local>..To: <sip:222222@newstepcsne.local>;tag=9c16c
  d17e7;epid=65ae8f3da8..Call-ID: 41893c8352f04b12876aae9d17c305b0..CSeq: 7 INFO..Conta
  ct: <sip:222222@newstepcsne.local;opaque=user:epid:wjP4c_zFS1GpEPdtUOEhqgAA;gruu>..Us
  er-Agent: UCCP/2.0.6362.0 OC/2.0.6362.0 (Microsoft Office Communicator)..Content-Leng
  th: 0....                                                                            
##
U 192.168.0.23:138 -> 192.168.0.255:138
  .............. EPEGEGEJEDEFEMEDFDCACACACACACACA. EOEFFHFDFEEFFAEDFDEOEFCACACACABN..SM
  B%..............................!...................!.V.........2.\MAILSLOT\BROWSE...
  ....OFFICELCS.h.............U..                                                      
#
T 192.168.0.23:4246 -> 192.168.0.22:5070 [AP]
  INFO sip:ocs@192.168.0.22:5070;transport=tcp SIP/2.0..Via: SIP/2.0/TCP 192.168.0.23:4
  246;branch=z9hG4bK276A6F59.E8FC13C1;branched=FALSE..Max-Forwards: 69..Via: SIP/2.0/TC
  P 172.0.0.105:1719;ms-received-port=1719;ms-received-cid=25E00..From: <sip:222222@new
  stepcsne.local>;tag=9c16cd17e7;epid=65ae8f3da8..To: <sip:ocs@csnocs.local>..Call-ID: 
  41893c8352f04b12876aae9d17c305b0..CSeq: 5 INFO..User-Agent: UCCP/2.0.6362.0 OC/2.0.63
  62.0 (Microsoft Office Communicator)..Content-Disposition: signal;handling=required..
  Supported: timer..Content-Type: application/csta+xml..Content-Length: 226....<?xml ve
  rsion="1.0"?>..<ClearConnection xmlns="http://www.ecma-international.org/standards/ec
  ma-323/csta/ed3"><connectionToBeCleared><callID>888</callID><deviceID>tel:4002</devic
  eID></connectionToBeCleared></ClearConnection>..                                     
##
T 192.168.0.23:4246 -> 192.168.0.22:5070 [AP]
  INFO sip:ocs@192.168.0.22:5070;transport=tcp SIP/2.0..Via: SIP/2.0/TCP 192.168.0.23:4
  246;branch=z9hG4bK343F2EFF.4EADBDA7;branched=FALSE..Max-Forwards: 69..Via: SIP/2.0/TC
  P 172.0.0.105:1719;ms-received-port=1719;ms-received-cid=25E00..From: <sip:222222@new
  stepcsne.local>;tag=9c16cd17e7;epid=65ae8f3da8..To: <sip:ocs@csnocs.local>..Call-ID: 
  41893c8352f04b12876aae9d17c305b0..CSeq: 6 INFO..User-Agent: UCCP/2.0.6362.0 OC/2.0.63
  62.0 (Microsoft Office Communicator)..Content-Disposition: signal;handling=required..
  Supported: timer..Content-Type: application/csta+xml..Content-Length: 162....<?xml ve
  rsion="1.0"?>..<MonitorStop xmlns="http://www.ecma-international.org/standards/ecma-3
  23/csta/ed3"><monitorCrossRefID>1</monitorCrossRefID></MonitorStop>..                
##
T 192.168.0.23:4246 -> 192.168.0.22:5070 [AP]
  BYE sip:ocs@192.168.0.22:5070;transport=tcp SIP/2.0..Via: SIP/2.0/TCP 192.168.0.23:42
  46;branch=z9hG4bK4114EDA4.9AAEF7F4;branched=FALSE..Max-Forwards: 69..Via: SIP/2.0/TCP
   172.0.0.105:1719;ms-received-port=1719;ms-received-cid=25E00..From: <sip:222222@news
  tepcsne.local>;tag=9c16cd17e7;epid=65ae8f3da8..To: <sip:ocs@csnocs.local>..Call-ID: 4
  1893c8352f04b12876aae9d17c305b0..CSeq: 7 BYE..User-Agent: UCCP/2.0.6362.0 OC/2.0.6362
  .0 (Microsoft Office Communicator)..Content-Length: 0....                            
##
T 192.168.0.22:5070 -> 192.168.0.23:4246 [AP]
  SIP/2.0 200 OK..Via: SIP/2.0/TCP 192.168.0.23:4246;branch=z9hG4bK4114EDA4.9AAEF7F4;br
  anched=FALSE..Via: SIP/2.0/TCP 172.0.0.105:1719;ms-received-port=1719;ms-received-cid
  =25E00..From: <sip:222222@newstepcsne.local>;tag=9c16cd17e7;epid=65ae8f3da8..To: <sip
  :ocs@csnocs.local>..Call-ID: 41893c8352f04b12876aae9d17c305b0..CSeq: 7 BYE..Contact: 
  <sip:192.168.0.22:5070;transport=TCP>..Content-Length: 0....                         
#exit
33 received, 0 dropped