486 Busy Here returned by Ondo for no apparent reason.

1. Brekeke Product Name and version:

OnDO Sip Server 2.1.6.6

2. Java version:

3. OS type and the version:

Windows XP Pro

4. UA (phone), gateway or other hardware/software involved:

5. Select your network pattern from http://www.brekeke-sip.com/bbs/network/ ... terns.html :

6. Your problem:

I have a wireshark capture that shows Ondo Trying then returning 486 for a known good registered number. Is there something broken since this 2.1.6.6 update?

Can you capture the packets and post here?

No. Time Source Destination Protocol Info
1 11:03:15.093 172.30.238.15 172.30.239.59 SIP Request: REGISTER sip:osc9117.ontariosystems.com:6060

Frame 1 (432 bytes on wire, 432 bytes captured)
Arrival Time: Mar 3, 2008 11:03:15.093944000
[Time delta from previous packet: 0.000000000 seconds]
[Time since reference or first frame: 0.000000000 seconds]
Frame Number: 1
Packet Length: 432 bytes
Capture Length: 432 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:sip]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0), Dst: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1)
Destination: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1)
Address: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0)
Address: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 172.30.238.15 (172.30.238.15), Dst: 172.30.239.59 (172.30.239.59)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 418
Identification: 0x1a02 (6658)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 127
Protocol: UDP (0x11)
Header checksum: 0xeac0 [correct]
[Good: True]
[Bad : False]
Source: 172.30.238.15 (172.30.238.15)
Destination: 172.30.239.59 (172.30.239.59)
User Datagram Protocol, Src Port: 6060 (6060), Dst Port: 6060 (6060)
Source port: 6060 (6060)
Destination port: 6060 (6060)
Length: 398
Checksum: 0xacf0 [correct]
Session Initiation Protocol
Request-Line: REGISTER sip:osc9117.ontariosystems.com:6060 SIP/2.0
Method: REGISTER
[Resent Packet: False]
Message Header
From: <sip:1096@172.30.238.15>;tag=b4e828-0-17ac-177795-667837ca-177795
SIP from address: sip:1096@172.30.238.15
SIP tag: b4e828-0-17ac-177795-667837ca-177795
To: <sip:1096@172.30.238.15>
SIP to address: sip:1096@172.30.238.15
Call-ID: 16ba9a0-0-17ac-177106-20e20ca4-177106
CSeq: 49 REGISTER
Via: SIP/2.0/UDP 172.30.238.15:6060;branch=z9hG4bK-177795-5bab1ec7-534e8c54
Max-Forwards: 70
Contact: <sip:1096@172.30.238.15>
Contact Binding: <sip:1096@172.30.238.15>
URI: <sip:1096@172.30.238.15>
SIP contact address: sip:1096@172.30.238.15
Expires: 3600
Content-Length: 0

No. Time Source Destination Protocol Info
2 11:03:15.094 172.30.239.59 172.30.238.15 SIP Status: 100 Trying (0 bindings)

Frame 2 (366 bytes on wire, 366 bytes captured)
Arrival Time: Mar 3, 2008 11:03:15.094282000
[Time delta from previous packet: 0.000338000 seconds]
[Time since reference or first frame: 0.000338000 seconds]
Frame Number: 2
Packet Length: 366 bytes
Capture Length: 366 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:sip]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1), Dst: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0)
Destination: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0)
Address: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1)
Address: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 172.30.239.59 (172.30.239.59), Dst: 172.30.238.15 (172.30.238.15)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x04 (DSCP 0x01: Unknown DSCP; ECN: 0x00)
0000 01.. = Differentiated Services Codepoint: Unknown (0x01)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 352
Identification: 0xf9f2 (63986)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: UDP (0x11)
Header checksum: 0x0a0e [correct]
[Good: True]
[Bad : False]
Source: 172.30.239.59 (172.30.239.59)
Destination: 172.30.238.15 (172.30.238.15)
User Datagram Protocol, Src Port: 6060 (6060), Dst Port: 6060 (6060)
Source port: 6060 (6060)
Destination port: 6060 (6060)
Length: 332
Checksum: 0xecd7 [correct]
Session Initiation Protocol
Status-Line: SIP/2.0 100 Trying
Status-Code: 100
[Resent Packet: False]
Message Header
Via: SIP/2.0/UDP 172.30.238.15:6060;branch=z9hG4bK-177795-5bab1ec7-534e8c54
From: <sip:1096@172.30.238.15>;tag=b4e828-0-17ac-177795-667837ca-177795
SIP from address: sip:1096@172.30.238.15
SIP tag: b4e828-0-17ac-177795-667837ca-177795
To: <sip:1096@172.30.238.15>
SIP to address: sip:1096@172.30.238.15
Call-ID: 16ba9a0-0-17ac-177106-20e20ca4-177106
CSeq: 49 REGISTER
Server: Brekeke SIP Server rev.239
Content-Length: 0

No. Time Source Destination Protocol Info
3 11:03:15.096 172.30.239.59 172.30.238.15 SIP Status: 200 OK (1 bindings)

Frame 3 (451 bytes on wire, 451 bytes captured)
Arrival Time: Mar 3, 2008 11:03:15.096290000
[Time delta from previous packet: 0.002008000 seconds]
[Time since reference or first frame: 0.002346000 seconds]
Frame Number: 3
Packet Length: 451 bytes
Capture Length: 451 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:sip]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1), Dst: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0)
Destination: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0)
Address: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1)
Address: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 172.30.239.59 (172.30.239.59), Dst: 172.30.238.15 (172.30.238.15)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x04 (DSCP 0x01: Unknown DSCP; ECN: 0x00)
0000 01.. = Differentiated Services Codepoint: Unknown (0x01)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 437
Identification: 0xf9ff (63999)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: UDP (0x11)
Header checksum: 0x09ac [correct]
[Good: True]
[Bad : False]
Source: 172.30.239.59 (172.30.239.59)
Destination: 172.30.238.15 (172.30.238.15)
User Datagram Protocol, Src Port: 6060 (6060), Dst Port: 6060 (6060)
Source port: 6060 (6060)
Destination port: 6060 (6060)
Length: 417
Checksum: 0xf385 [correct]
Session Initiation Protocol
Status-Line: SIP/2.0 200 OK
Status-Code: 200
[Resent Packet: False]
Message Header
Via: SIP/2.0/UDP 172.30.238.15:6060;branch=z9hG4bK-177795-5bab1ec7-534e8c54
From: <sip:1096@172.30.238.15>;tag=b4e828-0-17ac-177795-667837ca-177795
SIP from address: sip:1096@172.30.238.15
SIP tag: b4e828-0-17ac-177795-667837ca-177795
To: <sip:1096@172.30.238.15>;tag=b55c9bf15s
SIP to address: sip:1096@172.30.238.15
SIP tag: b55c9bf15s
Call-ID: 16ba9a0-0-17ac-177106-20e20ca4-177106
CSeq: 49 REGISTER
Contact: <sip:1096@172.30.238.15:5060>;expires=3600;q=1.0
Contact Binding: <sip:1096@172.30.238.15:5060>;expires=3600;q=1.0
URI: <sip:1096@172.30.238.15:5060>
SIP contact address: sip:1096@172.30.238.15:5060
Server: Brekeke SIP Server rev.239
Expires: 3600
Content-Length: 0

No. Time Source Destination Protocol Info
4 11:03:23.388 172.30.239.59 172.30.238.15 SIP/SDP Request: INVITE sip:1096@172.30.238.15:5060, with session description

Frame 4 (963 bytes on wire, 963 bytes captured)
Arrival Time: Mar 3, 2008 11:03:23.388494000
[Time delta from previous packet: 8.292204000 seconds]
[Time since reference or first frame: 8.294550000 seconds]
Frame Number: 4
Packet Length: 963 bytes
Capture Length: 963 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:sip:sdp]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1), Dst: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0)
Destination: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0)
Address: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1)
Address: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 172.30.239.59 (172.30.239.59), Dst: 172.30.238.15 (172.30.238.15)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x04 (DSCP 0x01: Unknown DSCP; ECN: 0x00)
0000 01.. = Differentiated Services Codepoint: Unknown (0x01)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 949
Identification: 0xfa28 (64040)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: UDP (0x11)
Header checksum: 0x0783 [correct]
[Good: True]
[Bad : False]
Source: 172.30.239.59 (172.30.239.59)
Destination: 172.30.238.15 (172.30.238.15)
User Datagram Protocol, Src Port: 6060 (6060), Dst Port: 5060 (5060)
Source port: 6060 (6060)
Destination port: 5060 (5060)
Length: 929
Checksum: 0x8458 [correct]
Session Initiation Protocol
Request-Line: INVITE sip:1096@172.30.238.15:5060 SIP/2.0
Method: INVITE
[Resent Packet: False]
Message Header
Via: SIP/2.0/UDP 172.30.239.59:6060;rport;branch=z9hG4bK3561cecbef1-a75f03f8-29f51323
Via: SIP/2.0/UDP 127.0.0.1:49496;branch=z9hG4bK-d87543-827c416dd777df47-1--d87543-;rport=49496;received=172.30.239.59
Max-Forwards: 69
Contact: <sip:4040@172.30.239.59:6060>
Contact Binding: <sip:4040@172.30.239.59:6060>
URI: <sip:4040@172.30.239.59:6060>
SIP contact address: sip:4040@172.30.239.59:6060
To: "1096"<sip:1096@osc9117:6060>
SIP Display info: "1096"
SIP to address: sip:1096@osc9117:6060
From: "4040"<sip:4040@osc9117>;tag=a2482667
SIP Display info: "4040"
SIP from address: sip:4040@osc9117
SIP tag: a2482667
Call-ID: YjMzNWVjYzY3OWQwYmZjMWVjMTAwOGYwYTE1NWIxN2I.
CSeq: 1 INVITE
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO
User-Agent: X-Lite release 1011s stamp 41150
Record-Route: <sip:172.30.239.59:6060;lr>
Content-Type: application/sdp
Content-Length: 236
Message body
Session Description Protocol
Session Description Protocol Version (v): 0
Owner/Creator, Session Id (o): - 0 2 IN IP4 172.30.239.59
Owner Username: -
Session ID: 0
Session Version: 2
Owner Network Type: IN
Owner Address Type: IP4
Owner Address: 172.30.239.59
Session Name (s): CounterPath X-Lite 3.0
Connection Information (c): IN IP4 172.30.239.59
Connection Network Type: IN
Connection Address Type: IP4
Connection Address: 172.30.239.59
Time Description, active time (t): 0 0
Session Start Time: 0
Session Stop Time: 0
Media Description, name and address (m): audio 64782 RTP/AVP 0 101
Media Type: audio
Media Port: 64782
Media Proto: RTP/AVP
Media Format: ITU-T G.711 PCMU
Media Format: 101
Media Attribute (a): alt:1 1 : qsw72C1J IiN3fjMR 172.30.239.59 64782
Media Attribute Fieldname: alt
Media Attribute Value: 1 1 : qsw72C1J IiN3fjMR 172.30.239.59 64782
Media Attribute (a): fmtp:101 0-15
Media Attribute Fieldname: fmtp
Media Format: 101
Media format specific parameters: 0-15
Media Attribute (a): rtpmap:101 telephone-event/8000
Media Attribute Fieldname: rtpmap
Media Format: 101
MIME Type: telephone-event
MIME type: telephone-event
Media Attribute (a): sendrecv

No. Time Source Destination Protocol Info
5 11:03:23.389 172.30.238.15 172.30.239.59 SIP Status: 100 Trying

Frame 5 (463 bytes on wire, 463 bytes captured)
Arrival Time: Mar 3, 2008 11:03:23.389471000
[Time delta from previous packet: 0.000977000 seconds]
[Time since reference or first frame: 8.295527000 seconds]
Frame Number: 5
Packet Length: 463 bytes
Capture Length: 463 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:sip]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0), Dst: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1)
Destination: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1)
Address: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0)
Address: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 172.30.238.15 (172.30.238.15), Dst: 172.30.239.59 (172.30.239.59)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 449
Identification: 0x1b7b (7035)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 127
Protocol: UDP (0x11)
Header checksum: 0xe928 [correct]
[Good: True]
[Bad : False]
Source: 172.30.238.15 (172.30.238.15)
Destination: 172.30.239.59 (172.30.239.59)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 6060 (6060)
Source port: 5060 (5060)
Destination port: 6060 (6060)
Length: 429
Checksum: 0x5bca [correct]
Session Initiation Protocol
Status-Line: SIP/2.0 100 Trying
Status-Code: 100
[Resent Packet: False]
Message Header
Via: SIP/2.0/UDP 172.30.239.59:6060;branch=z9hG4bK3561cecbef1-a75f03f8-29f51323;rport
Via: SIP/2.0/UDP 127.0.0.1:49496;received=172.30.239.59;rport=49496;branch=z9hG4bK-d87543-827c416dd777df47-1--d87543-
From: "4040" <sip:4040@osc9117>;tag=a2482667
SIP Display info: "4040"
SIP from address: sip:4040@osc9117
SIP tag: a2482667
To: "1096" <sip:1096@osc9117:6060>;tag=ds-12db-e270545a
SIP Display info: "1096"
SIP to address: sip:1096@osc9117:6060
SIP tag: ds-12db-e270545a
Call-ID: YjMzNWVjYzY3OWQwYmZjMWVjMTAwOGYwYTE1NWIxN2I.
CSeq: 1 INVITE
Content-Length: 0

No. Time Source Destination Protocol Info
6 11:03:23.389 172.30.238.15 172.30.239.59 SIP Status: 486 Busy Here

Frame 6 (506 bytes on wire, 506 bytes captured)
Arrival Time: Mar 3, 2008 11:03:23.389504000
[Time delta from previous packet: 0.000033000 seconds]
[Time since reference or first frame: 8.295560000 seconds]
Frame Number: 6
Packet Length: 506 bytes
Capture Length: 506 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:sip]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0), Dst: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1)
Destination: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1)
Address: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0)
Address: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 172.30.238.15 (172.30.238.15), Dst: 172.30.239.59 (172.30.239.59)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 492
Identification: 0x1b7c (7036)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 127
Protocol: UDP (0x11)
Header checksum: 0xe8fc [correct]
[Good: True]
[Bad : False]
Source: 172.30.238.15 (172.30.238.15)
Destination: 172.30.239.59 (172.30.239.59)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 6060 (6060)
Source port: 5060 (5060)
Destination port: 6060 (6060)
Length: 472
Checksum: 0x0509 [correct]
Session Initiation Protocol
Status-Line: SIP/2.0 486 Busy Here
Status-Code: 486
[Resent Packet: False]
Message Header
Via: SIP/2.0/UDP 172.30.239.59:6060;branch=z9hG4bK3561cecbef1-a75f03f8-29f51323;rport
Via: SIP/2.0/UDP 127.0.0.1:49496;received=172.30.239.59;rport=49496;branch=z9hG4bK-d87543-827c416dd777df47-1--d87543-
From: "4040" <sip:4040@osc9117>;tag=a2482667
SIP Display info: "4040"
SIP from address: sip:4040@osc9117
SIP tag: a2482667
To: "1096" <sip:1096@osc9117:6060>;tag=ds-12db-e270545a
SIP Display info: "1096"
SIP to address: sip:1096@osc9117:6060
SIP tag: ds-12db-e270545a
Call-ID: YjMzNWVjYzY3OWQwYmZjMWVjMTAwOGYwYTE1NWIxN2I.
CSeq: 1 INVITE
Content-Length: 0
Contact: <sip:1096@172.30.238.15:5060>
Contact Binding: <sip:1096@172.30.238.15:5060>
URI: <sip:1096@172.30.238.15:5060>
SIP contact address: sip:1096@172.30.238.15:5060

No. Time Source Destination Protocol Info
7 11:03:23.397 172.30.239.59 172.30.238.15 SIP Request: ACK sip:1096@172.30.238.15:5060

Frame 7 (523 bytes on wire, 523 bytes captured)
Arrival Time: Mar 3, 2008 11:03:23.397281000
[Time delta from previous packet: 0.007777000 seconds]
[Time since reference or first frame: 8.303337000 seconds]
Frame Number: 7
Packet Length: 523 bytes
Capture Length: 523 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:sip]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1), Dst: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0)
Destination: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0)
Address: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1)
Address: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 172.30.239.59 (172.30.239.59), Dst: 172.30.238.15 (172.30.238.15)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x04 (DSCP 0x01: Unknown DSCP; ECN: 0x00)
0000 01.. = Differentiated Services Codepoint: Unknown (0x01)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 509
Identification: 0xfa2b (64043)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: UDP (0x11)
Header checksum: 0x0938 [correct]
[Good: True]
[Bad : False]
Source: 172.30.239.59 (172.30.239.59)
Destination: 172.30.238.15 (172.30.238.15)
User Datagram Protocol, Src Port: 6060 (6060), Dst Port: 5060 (5060)
Source port: 6060 (6060)
Destination port: 5060 (5060)
Length: 489
Checksum: 0xcd4d [correct]
Session Initiation Protocol
Request-Line: ACK sip:1096@172.30.238.15:5060 SIP/2.0
Method: ACK
[Resent Packet: False]
Message Header
Via: SIP/2.0/UDP 172.30.239.59:6060;rport;branch=z9hG4bK3561cecbef1-a75f03f8-29f51323
Via: SIP/2.0/UDP 127.0.0.1:49496;branch=z9hG4bK-d87543-827c416dd777df47-1--d87543-;rport=49496;received=172.30.239.59
To: "1096" <sip:1096@osc9117:6060>;tag=ds-12db-e270545a
SIP Display info: "1096"
SIP to address: sip:1096@osc9117:6060
SIP tag: ds-12db-e270545a
From: "4040"<sip:4040@osc9117>;tag=a2482667
SIP Display info: "4040"
SIP from address: sip:4040@osc9117
SIP tag: a2482667
Call-ID: YjMzNWVjYzY3OWQwYmZjMWVjMTAwOGYwYTE1NWIxN2I.
CSeq: 1 ACK
Record-Route: <sip:172.30.239.59:6060;lr>
Content-Length: 0

No. Time Source Destination Protocol Info
8 11:03:27.715 172.30.238.15 172.30.239.59 SIP Request: REGISTER sip:osc9117.ontariosystems.com:6060

Frame 8 (429 bytes on wire, 429 bytes captured)
Arrival Time: Mar 3, 2008 11:03:27.715711000
[Time delta from previous packet: 4.318430000 seconds]
[Time since reference or first frame: 12.621767000 seconds]
Frame Number: 8
Packet Length: 429 bytes
Capture Length: 429 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:sip]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0), Dst: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1)
Destination: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1)
Address: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0)
Address: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 172.30.238.15 (172.30.238.15), Dst: 172.30.239.59 (172.30.239.59)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 415
Identification: 0x1baa (7082)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 127
Protocol: UDP (0x11)
Header checksum: 0xe91b [correct]
[Good: True]
[Bad : False]
Source: 172.30.238.15 (172.30.238.15)
Destination: 172.30.239.59 (172.30.239.59)
User Datagram Protocol, Src Port: 6060 (6060), Dst Port: 6060 (6060)
Source port: 6060 (6060)
Destination port: 6060 (6060)
Length: 395
Checksum: 0x4e59 [correct]
Session Initiation Protocol
Request-Line: REGISTER sip:osc9117.ontariosystems.com:6060 SIP/2.0
Method: REGISTER
[Resent Packet: False]
Message Header
From: <sip:1096@172.30.238.15>;tag=b4e9a0-0-17ac-1777a1-3b060aba-1777a1
SIP from address: sip:1096@172.30.238.15
SIP tag: b4e9a0-0-17ac-1777a1-3b060aba-1777a1
To: <sip:1096@172.30.238.15>
SIP to address: sip:1096@172.30.238.15
Call-ID: 16ba9a0-0-17ac-177106-20e20ca4-177106
CSeq: 50 REGISTER
Via: SIP/2.0/UDP 172.30.238.15:6060;branch=z9hG4bK-1777a1-5bab5016-4079a3bb
Max-Forwards: 70
Contact: <sip:1096@172.30.238.15>
Contact Binding: <sip:1096@172.30.238.15>
URI: <sip:1096@172.30.238.15>
SIP contact address: sip:1096@172.30.238.15
Expires: 0
Content-Length: 0

No. Time Source Destination Protocol Info
9 11:03:27.716 172.30.239.59 172.30.238.15 SIP Status: 100 Trying (0 bindings)

Frame 9 (366 bytes on wire, 366 bytes captured)
Arrival Time: Mar 3, 2008 11:03:27.716428000
[Time delta from previous packet: 0.000717000 seconds]
[Time since reference or first frame: 12.622484000 seconds]
Frame Number: 9
Packet Length: 366 bytes
Capture Length: 366 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:sip]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1), Dst: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0)
Destination: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0)
Address: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1)
Address: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 172.30.239.59 (172.30.239.59), Dst: 172.30.238.15 (172.30.238.15)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x04 (DSCP 0x01: Unknown DSCP; ECN: 0x00)
0000 01.. = Differentiated Services Codepoint: Unknown (0x01)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 352
Identification: 0xfa3e (64062)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: UDP (0x11)
Header checksum: 0x09c2 [correct]
[Good: True]
[Bad : False]
Source: 172.30.239.59 (172.30.239.59)
Destination: 172.30.238.15 (172.30.238.15)
User Datagram Protocol, Src Port: 6060 (6060), Dst Port: 6060 (6060)
Source port: 6060 (6060)
Destination port: 6060 (6060)
Length: 332
Checksum: 0x7bb3 [correct]
Session Initiation Protocol
Status-Line: SIP/2.0 100 Trying
Status-Code: 100
[Resent Packet: False]
Message Header
Via: SIP/2.0/UDP 172.30.238.15:6060;branch=z9hG4bK-1777a1-5bab5016-4079a3bb
From: <sip:1096@172.30.238.15>;tag=b4e9a0-0-17ac-1777a1-3b060aba-1777a1
SIP from address: sip:1096@172.30.238.15
SIP tag: b4e9a0-0-17ac-1777a1-3b060aba-1777a1
To: <sip:1096@172.30.238.15>
SIP to address: sip:1096@172.30.238.15
Call-ID: 16ba9a0-0-17ac-177106-20e20ca4-177106
CSeq: 50 REGISTER
Server: Brekeke SIP Server rev.239
Content-Length: 0

No. Time Source Destination Protocol Info
10 11:03:27.718 172.30.239.59 172.30.238.15 SIP Status: 200 OK (0 bindings)

Frame 10 (389 bytes on wire, 389 bytes captured)
Arrival Time: Mar 3, 2008 11:03:27.718223000
[Time delta from previous packet: 0.001795000 seconds]
[Time since reference or first frame: 12.624279000 seconds]
Frame Number: 10
Packet Length: 389 bytes
Capture Length: 389 bytes
[Frame is marked: False]
[Protocols in frame: eth:ip:udp:sip]
[Coloring Rule Name: UDP]
[Coloring Rule String: udp]
Ethernet II, Src: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1), Dst: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0)
Destination: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0)
Address: HewlettP_e5:64:a0 (00:18:fe:e5:64:a0)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Source: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1)
Address: 00:1c:23:b7:12:e1 (00:1c:23:b7:12:e1)
.... ...0 .... .... .... .... = Multicast: This is a UNICAST frame
.... ..0. .... .... .... .... = Locally Administrated Address: This is a FACTORY DEFAULT address
Type: IP (0x0800)
Internet Protocol, Src: 172.30.239.59 (172.30.239.59), Dst: 172.30.238.15 (172.30.238.15)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x04 (DSCP 0x01: Unknown DSCP; ECN: 0x00)
0000 01.. = Differentiated Services Codepoint: Unknown (0x01)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 375
Identification: 0xfa47 (64071)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: UDP (0x11)
Header checksum: 0x09a2 [correct]
[Good: True]
[Bad : False]
Source: 172.30.239.59 (172.30.239.59)
Destination: 172.30.238.15 (172.30.238.15)
User Datagram Protocol, Src Port: 6060 (6060), Dst Port: 6060 (6060)
Source port: 6060 (6060)
Destination port: 6060 (6060)
Length: 355
Checksum: 0x035f [correct]
Session Initiation Protocol
Status-Line: SIP/2.0 200 OK
Status-Code: 200
[Resent Packet: False]
Message Header
Via: SIP/2.0/UDP 172.30.238.15:6060;branch=z9hG4bK-1777a1-5bab5016-4079a3bb
From: <sip:1096@172.30.238.15>;tag=b4e9a0-0-17ac-1777a1-3b060aba-1777a1
SIP from address: sip:1096@172.30.238.15
SIP tag: b4e9a0-0-17ac-1777a1-3b060aba-1777a1
To: <sip:1096@172.30.238.15>;tag=b38de8ff8s
SIP to address: sip:1096@172.30.238.15
SIP tag: b38de8ff8s
Call-ID: 16ba9a0-0-17ac-177106-20e20ca4-177106
CSeq: 50 REGISTER
Server: Brekeke SIP Server rev.239
Expires: 0
Content-Length: 0

packet capture seems 486 packet was sent from the client (172.30.238.15) not SIP Server...

What kind of SIP client are you using?
and use the port-5060 for the SIP client.

Part of the problem of having your Soft Phone and SIP registrar on the same host, is the confusion it can cause. I see now that the INVITE packet has "via" references to local host. So I thought the 486 was coming from the OnDO registrar when, as you note, it was instead coming from one of the TWO sip stacks on 172.30.238.15. And apparently not the one that has the address 1096 registered to it.

Thank you for seeing this confusion and setting me straight.