Frame 1723 (783 bytes on wire, 783 bytes captured)
Internet Protocol, Src Addr: 10.250.250.202 (10.250.250.202), Dst Addr: 10.200.1.4 (10.200.1.4)
User Datagram Protocol, Src Port: 5060 (5060), Dst Port: 5060 (5060)
Session Initiation Protocol
    Request line: REFER sip:jringle@10.200.1.4:5060;line=1 SIP/2.0
        Method: REFER
    Message Header
        Via: SIP/2.0/UDP 10.250.250.202:5060;branch=a4a74f6e54de2d044a958f5800ff79d9.4
        Via: SIP/2.0/UDP 10.250.250.202:5060;branch=01bf06676b9c028cb116b3af53316adb.2
        Via: SIP/2.0/UDP 10.200.1.3:5060;branch=z9hG4bK-ff0kusul6i4j
        To: "jringle" <sip:jringle@10.250.250.202>;tag=y15w2v0hsd
        From: <sip:1416@10.250.250.202;user=phone>;tag=7hih3peh59
        Call-ID: 3c41dede1ca4-hbbht6cxjl7v@10.200.1.4
        CSeq: 2 REFER
        Max-Forwards: 69
        Refer-To: sip:1142@vocal.engdomain.com?Replaces=3c267f8aa4f4-e79vhj2ilvrq%4010-200-1-3%3Bto-tag%3Dm9s3kn0jf0%3Bfrom-tag%3D6q87tf5tyz
        Referred-By: sip:1416@10.250.250.202;user=phone
        Contact: <sip:kkeim@10.200.1.3:5060;line=1>
        Content-Language: en
        Content-Length: 0