Ethereal-users: Re: [Ethereal-users] Sip

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxx>
Date: Wed, 11 Dec 2002 10:06:06 -0800
On Wed, Dec 11, 2002 at 12:31:22PM +0100, Roberto Tealdi wrote:
> how can I filter SIP message with ethereal?

When capturing, or when you're looking at a trace you've already
captured?

When capturing, you have to figure out the TCP or UDP port on which the
SIP traffic will be sent, e.g. 5060, and use that filter in an
expression such as

	port 5060

or

	tcp port 5060

When looking at a trace you've already captured, the filter is just
"sip".