Bon je ne connais pas ngrep, j'espère que cela te sera utile
Code:
U 192.168.1.6:5012 -> 192.168.1.17:15426
#
U 91.121.129.20:5060 -> 192.168.1.17:5060
  SIP/2.0 200 OK..Call-ID: 038eb32514b21ec727eef1b95c039152@sip.ovh.fr..Contact: <sip:10.7.1.65:5060>..Content-Type: application/sdp..CSeq: 
  103 INVITE..From: "400" <sip:0033183626986@sip.ovh.fr>;tag=as3a707396..Record-Route: <sip:91.121.129.20:5060;transport=udp;lr>..To: <sip:0
  148734812@sip.ovh.fr>;tag=00-08131-013bd79d-2efba9650..Via: SIP/2.0/UDP 192.168.1.17:5060;received=89.83.76.95;rport=5060;branch=z9hG4bK57
  de0768..Allow: UPDATE,REFER,INFO..Server: Cirpack/v4.56 (gw_sip)..Content-Length: 265....v=0..o=cp10 139170892574 139170892575 IN IP4 10.7
  .1.133..s=SIP Call..c=IN IP4 91.121.129.139..t=0 0..m=audio 34508 RTP/AVP 0 8 101..b=AS:77..a=rtpmap:0 PCMU/8000/1..a=rtpmap:8 PCMA/8000/1
  ..a=rtpmap:101 telephone-event/8000..a=fmtp:101 0-15..a=ptime:30..a=sendrecv..                                                            
#
U 192.168.1.6:5012 -> 192.168.1.17:15426
  ..4..1/.a.'UU......U.UUUU.U.UU..UU...UU.UU...UUUUU.UUUU.UU....U..U..U.U...U........UU..UU..UUU.UUU...UUUUUU.UU...U.......UU..U.....UU.U...
  .U.U.UUUUUU.UU..UU.......UU..UUUUU                                                                                                        
#
U 192.168.1.17:5060 -> 91.121.129.20:5060
  ACK sip:10.7.1.65:5060 SIP/2.0..Via: SIP/2.0/UDP 89.83.76.95:5060;branch=z9hG4bK6fdec53a;rport..Route: <sip:91.121.129.20:5060;transport=u
  dp;lr>..Max-Forwards: 70..From: "400" <sip:0033183626986@sip.ovh.fr>;tag=as3a707396..To: <sip:0148734812@sip.ovh.fr>;tag=00-08131-013bd79d
  -2efba9650..Contact: <sip:0033183626986@89.83.76.95:5060>..Call-ID: 038eb32514b21ec727eef1b95c039152@sip.ovh.fr..CSeq: 103 ACK..User-Agent
  : Asterisk PBX 10.7.0..Content-Length: 0....                                                                                              
#
U 192.168.1.6:5012 -> 192.168.1.17:15426
  ..4..1?.a.'U..U.U.UU.........U.U.U.U..UU.U.U.UUU...U...U.U..U..U......U.UUUUU.....U..U.UU..U....UU.UU.....UU....U.U............U..U..UU..U
  UUUUUUUUUUUUUUUUU.UUU.....U.......                                                                                                        
#
U 192.168.1.17:10328 -> 91.121.129.139:34508
  .....1?.......~.~.~~.........~.~.~.~..~~.~.~.~~~...~...~.~..~..~......~.~~~~~.....~..~.~~..~....~~.~~.....~~....~.~............~..~..~~..~
  ~~~~~~~~~~~~~~~~~.~~~.....~.......                                                                                                        
#
U 91.121.129.20:5962 -> 192.168.1.17:5060
  BYE sip:0033183626986@89.83.76.95:5060 SIP/2.0..Call-ID: 038eb32514b21ec727eef1b95c039152@sip.ovh.fr..CSeq: 18289435 BYE..From: <sip:01487
  34812@sip.ovh.fr>;tag=00-08131-013bd79d-2efba9650..Max-Forwards: 30..Record-Route: <sip:91.121.129.20:5962;lr>..To: "400" <sip:00331836269
  86@sip.ovh.fr>;tag=as3a707396..Via: SIP/2.0/UDP 91.121.129.20:5962;branch=z9hG4bK-ESIS-0855cdd0-3bd0ec53..User-Agent: Cirpack/v4.56 (gw_si
  p)..Content-Length: 0....                                                                                                                 
#
U 192.168.1.17:5060 -> 91.121.129.20:5962
  SIP/2.0 200 OK..Via: SIP/2.0/UDP 91.121.129.20:5962;branch=z9hG4bK-ESIS-0855cdd0-3bd0ec53;received=91.121.129.20;rport=5962..Record-Route:
   <sip:91.121.129.20:5962;lr>..From: <sip:0148734812@sip.ovh.fr>;tag=00-08131-013bd79d-2efba9650..To: "400" <sip:0033183626986@sip.ovh.fr>;
  tag=as3a707396..Call-ID: 038eb32514b21ec727eef1b95c039152@sip.ovh.fr..CSeq: 18289435 BYE..Server: Asterisk PBX 10.7.0..Allow: INVITE, ACK,
   CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH..Supported: replaces, timer..Content-Length: 0....                         
#
U 192.168.1.17:5060 -> 192.168.1.6:11340
  BYE sip:400@192.168.1.6:11340 SIP/2.0..Via: SIP/2.0/UDP 192.168.1.17:5060;branch=z9hG4bK51c44e18;rport..Max-Forwards: 70..From: <sip:01487
  34812@192.168.1.17>;tag=as5697ea83..To: "400" <sip:400@192.168.1.17>;tag=511943350..Call-ID: 604316341-11340-4@BJC.BGI.B.G..CSeq: 102 BYE.
  .User-Agent: Asterisk PBX 10.7.0..X-Asterisk-HangupCause: Normal Clearing..X-Asterisk-HangupCauseCode: 16..Content-Length: 0....          
#
U 192.168.1.6:11340 -> 192.168.1.17:5060
  SIP/2.0 200 OK..Via: SIP/2.0/UDP 192.168.1.17:5060;branch=z9hG4bK51c44e18;rport=5060..From: <sip:0148734812@192.168.1.17>;tag=as5697ea83..
  To: "400" <sip:400@192.168.1.17>;tag=511943350..Call-ID: 604316341-11340-4@BJC.BGI.B.G..CSeq: 102 BYE..Contact: <sip:400@192.168.1.6:11340
  >..Supported: replaces, path, timer..User-Agent: Grandstream GXP2140 1.0.0.17..Allow: INVITE, ACK, OPTIONS, CANCEL, BYE, SUBSCRIBE, NOTIFY
  , INFO, REFER, UPDATE, MESSAGE..Content-Length: 0....                                                                                     
#
U 192.168.1.6:5012 -> 192.168.1.17:15426
  ..4..1@ a.'U....U..U.....U.UU.UUU.UU...UU..UU...UU.UU..UUUU..U..UUUUUUU.U..U....U.U......U..U.UUU..U.UUU.........UU..U......U...U...U..UUU
  UUUUUUUU.U.UU.U.U..U....UU..UU....                                                                                                        
#
I 192.168.1.17 -> 192.168.1.6 3:3
  ....E0....@.@.............<B......4..1@ a.'U....U..U.....U.UU.UUU.UU...UU..UU...UU.UU..UUUU..U..UUUUUUU.U..U....U.U......U..U.UUU..U.UUU..
  .......UU..U......U...U...U..UUUUUUUUUUU.U.UU.U.U..U....UU..UU....                                                                        
#
U 192.168.1.6:5012 -> 192.168.1.17:15426
  ..4..1@.a.'U.UU...UUUUUUU..U..U..UUU...............U.......UU..UUUUUU.U.UUUUUUU..U.U...UUUU...................UU..UU...........UUUU..UU.U.
  UUUU....UU..UUU...................                                                                                                        
#
I 192.168.1.17 -> 192.168.1.6 3:3
  ....E0....@.@.............<B..cL..4..1@.a.'U.UU...UUUUUUU..U..U..UUU...............U.......UU..UUUUUU.U.UUUUUUU..U.U...UUUU...............
  ....UU..UU...........UUUU..UU.U.UUUU....UU..UUU...................                                                                        
#
T 192.168.1.17:47725 -> 173.194.34.29:443 [AP]
  .... .W0AE.....o....&Y.....\.\..]....                                                                                                     
#
T 173.194.34.29:443 -> 192.168.1.17:47725 [AP]
  .... ..W..2....[.l.....HT..........p.                                                                                                     
##
T 173.194.45.54:443 -> 192.168.1.17:34380 [AP]
  ....1=.Y$.......!..2.....mqNm.4e..(>}.......F..`...8g.                                                                                    
#^Cexit
8185 received, 0 dropped
pascal@pascal-SATELLITE-T130:/$ sudo /etc/init.d/asterisk stop