drop pcap with sip + rtp · reconstruct call setup + audio packet timeline
flags incomplete teardown · one-way audio · codec mismatch hints
heuristic sip/rtp decode — not full media playback · not definitive proof