From 0da803c3f1efaeffb1ccafe38013593e2de887a6 Mon Sep 17 00:00:00 2001 From: Eduardo Ramos Testillano Date: Sun, 31 Jan 2016 04:15:42 +0100 Subject: [PATCH] non-standard disection --- example/diameter/pcapDecoder/tsharkDecoder.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/example/diameter/pcapDecoder/tsharkDecoder.sh b/example/diameter/pcapDecoder/tsharkDecoder.sh index 6b14320..b131fe5 100755 --- a/example/diameter/pcapDecoder/tsharkDecoder.sh +++ b/example/diameter/pcapDecoder/tsharkDecoder.sh @@ -107,7 +107,7 @@ RESULTS_DIR=`dirname $PCAP_FILE` # Fields needed (we won't need diameter.hopbyhopid & diameter.endtoendid to verify diameter message as hint patterns; length management will be enough): FIELDS_DIAMETER="-e diameter.cmd.code -e diameter.flags.request -e diameter.applicationId -e diameter.hopbyhopid -e diameter.endtoendid -e diameter.length" FIELDS="-e frame.number -e frame.time_epoch -e ip.src_host -e ip.dst_host $FIELDS_DIAMETER -e tcp.len -e frame.protocols -e tcp.segment" -# Disect selectors +# Disect selectors for non-standard diameter ports: # 13868 port for Ericsson Sy DISECT_SELECTORS="-d tcp.port=13868,diameter" -- 2.20.1