[asterisk-users] Weird SIP stuff
cloos at jhcloos.com
Thu Dec 4 17:03:00 CST 2014
>>>>> "EW" == Eric Wieling <EWieling at nyigc.com> writes:
EW> Basically, the traffic is coming from 188.8.131.52 but the header is:
EW> f: <sip:+1347545xxx at 184.108.40.206:5060;user=phone>;tag=4-45026-159e4a6-995949f-159e4a6
The From: header and the socket ip are often different.
Check for Via: headers. Those show the path of the SIP. In your
example, look for a Via which mentions 220.127.116.11.
Note that the From does not necessary have to be a sip address reachable
from the outside.
James Cloos <cloos at jhcloos.com> OpenPGP: 0x997A9F17ED7DAEA6
More information about the asterisk-users