I'm allowing SIP traffic in to my network from outside using my 2821 ISR's "match protocol sip" statement in a class map and ACL. I'd like to know what criteria this statement uses to identify sip traffic.
P.S. "It matches sip traffic." is not quite what I'm after :) How does it recognise sip traffic?