Thanks Tamas. And how do I do it other way around ? If I want the conversations for the inner IP's only ?
From: Tamas.Varga@xxxxxxxxxxxx To: wireshark-users@xxxxxxxxxxxxx Date: Fri, 19 Mar 2010 16:16:02 +0100 Subject: Re: [Wireshark-users] Tshark - GTP problem
Turn off
dissection of the GTP T-PDUs, then you will be able to filter to the "outer" IP
address.
For this
purpose, go Edit -> Preferences -> Protocols -> GTP and uncheck
"Dissect T-PDU".
cheers,
Tamas
I am trying to filter conversation statistics for headers above GTP
using: -q -z conv,udp . But tshark seems to give stats about the headers in GTP
payload. I mean not only do I get udp conversation stats of hosts above GTP, but
also of those in the payload of GTP. how can I distinguish/filter the two out
?
Hotmail: Powerful Free email with security by Microsoft. Get it now.
|