Hi, While testing I observed while capturing SIP packets in the Wireshark that when we put an intercept, there are basically 2 IP packets over the same Ethernet frame. For example, the packet looks like:
Ethernet II / IP / UDP / PacketCable Lawful Intercept / IP / UDP / SIP The source and dest IP addresses and port number are different in IP/UDP for intercept and for SIP. I am trying to understand how we can have 2 IP packets basically over the same Ethernet frame? How should I read this? Is it like forking? Thanks, Vivek. _______________________________________________ Sip-implementors mailing list Sip-implementors@lists.cs.columbia.edu https://lists.cs.columbia.edu/cucslists/listinfo/sip-implementors
