This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

tcap tid filters

0

Hi what is meaning tcap.tid == 2f:00:57:21 , so what is meaning 2f:00:57:21 please thanks

asked 23 Aug '13, 12:13

sin73an's gravatar image

sin73an
1111
accept rate: 0%


One Answer:

1

The tid is the Transaction ID and 2f:00:57:21 is the filter matching criteria for the 4 bytes that comprise it. The notation used is hexadecimal since this field happens to be an FT_BYTES type, as can be seen using:

tshark -G | grep "tcap\.tid"

or by visiting the Wireshark "Display Filter Reference: Transaction Capabilities Application Part" page.

answered 23 Aug '13, 13:54

cmaynard's gravatar image

cmaynard ♦♦
9.4k1038142
accept rate: 20%