Re: Tshark - GTP problem

[Tamás Varga <Tamas.Varga () ericsson com>]

Turn off dissection of the GTP T-PDUs, then you will be able to filter to the "outer" IP address.
For this purpose, go Edit -> Preferences -> Protocols -> GTP and uncheck "Dissect T-PDU".
cheers,
Tamas

________________________________
From: wireshark-users-bounces () wireshark org [mailto:wireshark-users-bounces () wireshark org] On Behalf Of Salman 
Malik
Sent: Sunday, March 14, 2010 11:55
To: wireshark-users () wireshark org
Subject: [Wireshark-users] Tshark - GTP problem

I am trying to filter conversation statistics for headers above GTP using: -q -z conv,udp . But tshark seems to give 
stats about the headers in GTP payload. I mean not only do I get udp conversation stats of hosts above GTP, but also of 
those in the payload of GTP. how can I distinguish/filter the two out ?

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe