Hi All
I Found this while looking at the flow monitor.
Some UDP 5060 packets are reports as MagicJack.
See Pic.
Mark
tcpdump -s 0 -n -i any -w dumpfile.pcap udp and port 5060 or port 5070
tcpdump -s 0 -n -i any -w dumpfile.pcap udp and port 5060 or port 5070