Hi,
It is because Dissect T-PDU option must be enabled in the GTP protocol preference. If you disable this option, you will get the former addresses.
You can do following:
Edit menu -> preferences -> protocols -> GTP -> disable dissect T-PDU
Hope this resolves your problem.
Thanks Regards,
Satish
On Thu, Aug 6, 2009 at 11:20 AM, tulip neo
<neo.tulip@xxxxxxxxx> wrote:
|
Hi List,
Good Morning.
I have bit confusion in IPV4 addressing.In the attached capture u would find the data goes through ethernet->IPV4->UDP->GTP->IPV4->UDP->SIP.so IPv4 is at top of ethernet as well GTP.IPV4 on top of ethernet has source and destination address as follows:
172.18.160.57 and 10.127.130.19
and IPV4 at top of GTP has source and dest address as follows:
172.18.196.18 and 172.18.1.39.
First source and destination address sensed by wireshark is 172.18.160.57 and 10.127.130.19. but why in source and destination column the latter is displayed.
Any pointer or help this would be of great help.Does it conceptulay vallid to show the latter or just wireshark works that way.
Br
tulip
|
Love Cricket? Check out live scores, photos, video highlights and more. Click here.
___________________________________________________________________________
Sent via: Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives: http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe
--
Satish Chandra