I captured the traffic for an Avaya VoIP phone with Wireshark. the user phone (10.10.10.100) is calling another user on the remote site (10.10.30.100). I am not sure I understand the flow of UDP. I don't see the conversation between 10.10.10.100 and 10.10.20.100. I only see the conversation between 10.10.10.100 and 10.10.20.1 (the IP Office). 10.10.10.100 and 10.10.20.1 are on the same location.