[asterisk-users] Weird SIP stuff

James Cloos cloos at jhcloos.com
Thu Dec 4 17:03:00 CST 2014

>>>>> "EW" == Eric Wieling <EWieling at nyigc.com> writes:

EW> Basically, the traffic is coming from but the header is:

EW> f: <sip:+1347545xxx at;user=phone>;tag=4-45026-159e4a6-995949f-159e4a6

The From: header and the socket ip are often different.

Check for Via: headers.  Those show the path of the SIP.  In your
example, look for a Via which mentions

Note that the From does not necessary have to be a sip address reachable
from the outside.

James Cloos <cloos at jhcloos.com>         OpenPGP: 0x997A9F17ED7DAEA6

More information about the asterisk-users mailing list