Guy thanks a lot for prompt reply. I have another question - is there a
way of counting the number of packets compliant to a particular filter?
Thanks,
Vikas
-----Original Message-----
From: Guy Harris [mailto:guy@xxxxxxxxxxxx]
Sent: Thursday, July 10, 2003 3:56 PM
To: Vikas Sarawat
Cc: ethereal-users@xxxxxxxxxxxx
Subject: Re: [Ethereal-users] MGCP filter
On Thursday, July 10, 2003, at 1:17 PM, Vikas Sarawat wrote:
> I am using ethereal for MGCP traces. I was wondering, if I can filter
> MGCP messages based on content of the MGCP message.
That depends on the part of the content you want to check. If you
click on the "Filter:" button when constructing a filter to filter the
display, you'll get a dialog box with an "Add Expression..." button; in
the color filter dialog, the "New..." button will pop up a dialog box
with that button as well. If you click on the "Add Expression..."
button, you'll have a scrolling list of protocols - search for "MGCP"
and click on the "[+]" box to open up the list of filterable fields for
MGCP.
> For example : - I want to see MGCP packets with Response code other
> than
> 200 and 100 in color other than black.
From a quick look at the code, it appears that the filter
mgcp.rsp.rspcode != 200 && mgcp.rsp.rspcode != 100
will check for that.