Wireshark-users: Re: [Wireshark-users] transparent GTP-'detunneling' in wireshark
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Fri, 17 Oct 2008 15:11:05 -0700

On Oct 17, 2008, at 5:39 AM, Ariel Burbaickij wrote:


is it possible to ssomehow 'de-tunnel' GTP traffic, so that read
filters can be naturally applied to the traffic
tunneled inside GTP?
Read filters are just display filters, and those depend on dissection, so read filters should work iff Wireshark dissects the traffic tunneled inside GTP ("work" to the same extent that display filters work).