Re: Tshark - GTP problem

[Salman Malik <salmanmk () live com>]

Thanks Tamas. And how do I do it other way around ? If I want the conversations for the inner IP's only ?

From: Tamas.Varga () ericsson com
To: wireshark-users () wireshark org
Date: Fri, 19 Mar 2010 16:16:02 +0100
Subject: Re: [Wireshark-users] Tshark - GTP problem










Turn off 
dissection of the GTP T-PDUs, then you will be able to filter to the "outer" IP 
address.
For this 
purpose, go Edit -> Preferences -> Protocols -> GTP and uncheck 
"Dissect T-PDU".
cheers,
Tamas



From: wireshark-users-bounces () wireshark org 
[mailto:wireshark-users-bounces () wireshark org] On Behalf Of Salman 
Malik
Sent: Sunday, March 14, 2010 11:55
To: 
wireshark-users () wireshark org
Subject: [Wireshark-users] Tshark - GTP 
problem


I am trying to filter conversation statistics for headers above GTP 
using: -q -z conv,udp . But tshark seems to give stats about the headers in GTP 
payload. I mean not only do I get udp conversation stats of hosts above GTP, but 
also of those in the payload of GTP. how can I distinguish/filter the two out 
?

                                          
_________________________________________________________________
Hotmail: Powerful Free email with security by Microsoft.
https://signup.live.com/signup.aspx?id=60969

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe