Wireshark-users: Re: [Wireshark-users] Fitlering messages based on criteria.
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Thu, 5 Aug 2010 18:23:20 -0700
On Aug 4, 2010, at 10:40 PM, Sake Blok wrote:

>>> Please advise if its possible in wireshark to display messages based
>>> on criteria. E.g. I would like to get traces for all the messages for
>>> Particular IMSI.
>>> 
>>> E.g. If IMSI is 404201234567890
>>> Get Transaction id for all the traces where imsi matches and then show
>>> all the messages which matches the transaction id. This way I will get
>>> all the messages for the transactions matching for this imsi.
>>> Appreciate your help in this regard.
> 
> There is no direct way in wireshark/tshark to achieve what you describe.

Is this the sort of thing that MATE:

	http://wiki.wireshark.org/Mate

could do?