Riverbed Cascade Pilot Personal Edition: Take Wireshark to the Next Level - Advanced Triggers and Alerts; Web and VoIP Analytics; Long-Term Trending and Forensics; Deep Packet Analysis with Wireshark

Wireshark-dev: [Wireshark-dev] 答复: Regarding Interface

Date Index Thread Index Other Months All Mailing Lists

Date Prev Date Next Thread Prev Thread Next

From: 董明 <bright.dong@xxxxxxxxx>
Date: Tue, 2 Jun 2009 22:46:22 +0800

Hi,

It should be impossible to send packet in the two stacks on one logic network interface. But the following scenario meets your capture log, capture packets from two interfaces in the same communication path, (use a Ethernet switch, which support mirror) :

start a SIP service from UE to a Internet user. UE must request a PDP context, and there will be a GTP tunnel from UE to NB/RNC, to GSNs. If IPRAN , SIP is carried by SIP/IP/GTP/UDP/IP. GSN extract SIP data, and route to Internet, SIP is carried by SIP/UDP/IP. If Wireshark can both capture RNC--SGSN interface, GGSN -- Internet interface

Regards,

Bright

发件人: wireshark-dev-bounces@xxxxxxxxxxxxx [mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] 代表 tulip neo
发送时间: 2009年6月2日 13:54
收件人: wireshark-dev@xxxxxxxxxxxxx
主题: [Wireshark-dev] Regarding Interface

Hi List,

May be this n't a vallid question but keeps wondering me.over which interface the following is possible.I mean sip over UDP and SIP over GTP.i mean both should be possible at a time.

Ethernet->ipv4->udp->SIP

Ethernet->ipv4->udp->GTP->ipv4->udp->sip

I have attached a small capture to illustrate the problem.

Is there any way i can know from capture what interface was used to capture the traffic.

Tulip

Explore and discover exciting holidays and getaways with Yahoo! India Travel Click here!

__________ Information from ESET NOD32 Antivirus, version of virus signature database 4117 (20090530) __________

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com

References:
- [Wireshark-dev] Regarding Interface
  - From: tulip neo

Prev by Date: [Wireshark-dev] 答复: how recognise a udp packet data part is sip packet?
Next by Date: Re: [Wireshark-dev] Ubuntu buildbot error
Previous by thread: Re: [Wireshark-dev] Regarding Interface
Next by thread: Re: [Wireshark-dev] Wireshark can't read PcapNG file
Index(es):
- Date
- Thread