On Aug 4, 2010, at 10:40 PM, Sake Blok wrote:
>>> Please advise if its possible in wireshark to display messages based
>>> on criteria. E.g. I would like to get traces for all the messages for
>>> Particular IMSI.
>>>
>>> E.g. If IMSI is 404201234567890
>>> Get Transaction id for all the traces where imsi matches and then show
>>> all the messages which matches the transaction id. This way I will get
>>> all the messages for the transactions matching for this imsi.
>>> Appreciate your help in this regard.
>
> There is no direct way in wireshark/tshark to achieve what you describe.
Is this the sort of thing that MATE:
http://wiki.wireshark.org/Mate
could do?