Re: [Wireshark-users] Diameter AVPs of Cx and Sh interface

2007-12-01 Thread Franz Edler
Hi Anders, > Is the Vendor-bit set and the vendor id set to 3GPP? Yes. > This AVP should be decoded by the upcoming 0.99.7 release and with that > Libxml2 is no longer needed with it. > http://www.wireshark.org/download/prerelease/wireshark-setup- > 0.99.7pre2.exe I downloaded and installed the

[Wireshark-users] Diameter AVPs of Cx and Sh interface

2007-11-30 Thread Franz Edler
Hi all, I need some help in decoding the Diameter AVPs of the Cx and Sh interface. - I have installed Wireshark 0.99.6a on my WindowsXP notebook. - I have also added libxml2.dll into the \Programme\Wireshark directory. - I also see imscxdx.xml and TGPPSh.xml in the \Programme\Wireshark\diameter di

[Wireshark-users] Windows XP: tracing of packets on loopback-interface

2007-08-11 Thread Franz Edler
Hi, is there any possibility to trace packets on loopback-interface of my WindowsXP machine. I want to trace IP packets sent from one application to the other (using different ports). On Linux e.g. I can trace on "any" interfaces, but this I cannot with Wireshark on Windows XP, right? -franz __

Re: [Wireshark-users] Assembling of fragmented IP protocol packets

2007-04-24 Thread Franz Edler
Yes, > If you only filter on ip-addresses you should be fine though :) It now works. Tcpdump "dumps" all fragments and these are correctly re-assembled by wireshark and by the tool to produce the message flow. Thanks again, all the helped so quickly. -Franz ___

Re: [Wireshark-users] Assembling of fragmented IP protocol packets

2007-04-24 Thread Franz Edler
Hi, > Did you by any chance use a filter with port numbers? Since port numbers > are only present in the IP-fragment that has the UDP/TCP header in it > all the other fragments are not seen by the filter. Yes. I used a port filter. > If you only filter on ip-addresses you should be fine though :

Re: [Wireshark-users] Assembling of fragmented IP protocol packets

2007-04-24 Thread Franz Edler
> > -Ursprungligt meddelande- > Från: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] För Franz Edler > Skickat: den 24 april 2007 19:25 > Till: 'Anders Broman (AL/EAB)'; 'Community support list for Wireshark' > Ämne: Re: [Wireshark-users] Assembl

[Wireshark-users] Assembling of fragmented IP protocol packets

2007-04-24 Thread Franz Edler
Hi, is there a possibility to arrange Wireshsark to assemble fragmented IP protocol packets? I trace SIP traffic and some INVITE messages are ~ 1800 bytes long. The application reassembles, why not also Wireshark? The problem is that I use a tool to process the pcap-file and produce a nice messag