Wireshark-dev: Re: [Wireshark-dev] Need Help of on IPV4
From: Satish Chandra <[email protected]>
Date: Thu, 6 Aug 2009 12:25:16 +0530
Hi,

It is because Dissect T-PDU option must be enabled in the GTP protocol preference. If you disable this option, you will get the former addresses.

You can do following:

Edit menu -> preferences -> protocols -> GTP -> disable dissect T-PDU

Hope this resolves your problem.

Thanks Regards,
Satish

On Thu, Aug 6, 2009 at 11:20 AM, tulip neo <[email protected]> wrote:
Hi List,
Good Morning.
I have bit confusion in IPV4 addressing.In the attached capture u would find the data goes through ethernet->IPV4->UDP->GTP->IPV4->UDP->SIP.so IPv4 is at top of ethernet as well GTP.IPV4 on top of ethernet has source and destination address as follows:
 
172.18.160.57 and 10.127.130.19
 
and IPV4 at top of GTP has source and dest address as follows:
 
172.18.196.18 and 172.18.1.39.
 
First source and destination address sensed by wireshark is 172.18.160.57 and 10.127.130.19. but why in source and destination column the latter is displayed.
Any pointer or help this would be of great help.Does it conceptulay vallid to show the latter or just wireshark works that way.
 
Br
tulip
 
 


Love Cricket? Check out live scores, photos, video highlights and more. Click here.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <[email protected]>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
            mailto:[email protected]?subject=unsubscribe



--
Satish Chandra