Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] transparent GTP-'detunneling' in wireshark

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Fri, 17 Oct 2008 15:11:05 -0700

On Oct 17, 2008, at 5:39 AM, Ariel Burbaickij wrote:

is it possible to ssomehow 'de-tunnel' GTP traffic, so that read
filters can be naturally applied to the traffic
tunneled inside GTP?

Read filters are just display filters, and those depend on dissection, so read filters should work iff Wireshark dissects the traffic tunneled inside GTP ("work" to the same extent that display filters work).