Wireshark-users: [Wireshark-users] Tshark - GTP problem

From: Salman Malik <salmanmk@xxxxxxxx>
Date: Sun, 14 Mar 2010 10:55:15 +0000
I am trying to filter conversation statistics for headers above GTP using: -q -z conv,udp . But tshark seems to give stats about the headers in GTP payload. I mean not only do I get udp conversation stats of hosts above GTP, but also of those in the payload of GTP. how can I distinguish/filter the two out ?

Hotmail: Free, trusted and rich email service. Get it now.