Hi there,
I am trying to get the CSeq number from a UAS transaction in fact a PRACK
message, I have tried many regex and have finally realised there is
something else going on. As you can see below the branch parameter is being
handled correctly but the CSeq header is not, ideas?
XML Extract:
<!--
PRACK transaction initiated by Network
-->
<recv request="PRACK">
<action>
<ereg regexp="[Bb]ranch=(.*)" search_in="hdr" header="Via:"
check_it="true" assign_to="PRKbranch" />
<ereg regexp=":\s+(.*)@" search_in="hdr" header="From:" check_it="true"
assign_to="INVFromUser" />
<ereg regexp=".*" search_in="hdr" header="To:" check_it="true"
assign_to="INVTo" />
<ereg regexp=".*" search_in="hdr" header="CSeq:" check_it="true"
assign_to="PRKcseq" />
</action>
</recv>
<!--
200 OK (PRACK)......
-->
<send>
<![CDATA[
SIP/2.0 200 OK
Via: SIP/2.0/[transport] [remote_ip]:[remote_port];[$PRKbranch]
[last_From:]
[last_To:]
Date: [date]
[last_Call-ID:]
Server: Cisco-SIPGateway/IOS-15.3.2.T
[$PRKbranch]
[$PRKcseq]
Content-Length: 0
]]>
</send>
The 200 OK from wireshark (note the Branch is there twice once as a
parameter of the via hdr and once on the base message (correct) but the
Cseq line is not there at all)
SIP/2.0 200 OK
Via: SIP/2.0/UDP 192.168.0.65:5060
;branch=z9hG4bKPjb7d0a29d01fc4f308efa40f0cfea6a76
From: "Paul" <sip:5...@sip2serve.com>;tag=aa189dfaa2904bf78deb3c90e81776a0
To: <sip:1...@sip2serve.com>;tag=1
Date: Thu, 02 Oct 2014 04:23:41 GMT
Call-ID: eecb48282c5e413c9dce2439bfdde27b
Server: Cisco-SIPGateway/IOS-15.3.2.T
branch=z9hG4bKPjb7d0a29d01fc4f308efa40f0cfea6a76
Content-Length: 0
Thanks
Paul
------------------------------------------------------------------------------
Meet PCI DSS 3.0 Compliance Requirements with EventLog Analyzer
Achieve PCI DSS 3.0 Compliant Status with Out-of-the-box PCI DSS Reports
Are you Audit-Ready for PCI DSS 3.0 Compliance? Download White paper
Comply to PCI DSS 3.0 Requirement 10 and 11.5 with EventLog Analyzer
http://pubads.g.doubleclick.net/gampad/clk?id=154622311&iu=/4140/ostg.clktrk
_______________________________________________
Sipp-users mailing list
Sipp-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sipp-users
