Wireshark mailing list archives

Defining global filters?


From: Anders Broman <anders.broman () ericsson com>
Date: Mon, 18 Aug 2014 13:46:28 +0000

Hi,
How to define filters and display the data of fields that may occur in multiple protocols? One example is IMSI ( 
International Mobile Subscriber identity) that exists in multiple 3GPP and 3GPP2 protocols, following a call flow 
through the system it could be interesting to filter on
IMSI across multiple protocols to build a filter covering all messages in the call flow.

Suggestion:

Create global_filters.[ch] in epan/dissectors or (packet-global_filters?) define functions to parse the data there 
and/or export the hf
Variable to be used in the protocol dissectors.

From GTPv2 current:
:
International Mobile Subscriber Identity (IMSI) : 262021030000050
IE Type: International Mobile Subscriber Identity (IMSI) (1)
IE Length: 8
0000 .... = CR flag: 0
.... 0000 = Instance: 0
IMSI(International Mobile Subscriber Identity number): 262021030000050
:

New
International Mobile Subscriber Identity (IMSI) : 262021030000050
IE Type: International Mobile Subscriber Identity (IMSI) (1)
IE Length: 8
0000 .... = CR flag: 0
.... 0000 = Instance: 0
IMSI(International Mobile Subscriber Identity number): 262021030000050
[Global filter IMSI : 262021030000050]

Comments?

Regards
Anders

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: