This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How to filter smpp by message type

0

I see https://www.wireshark.org/docs/dfref/s/smpp.html but I still cannot understand how to filter only submit_sm only. Can any one clarify this for me pls?

asked 29 Sep '14, 13:18

ky4k0b's gravatar image

ky4k0b
11●3●3●6
accept rate: 0%

One Answer:

1

If you have trouble figuring out what filter to use, select a packet with the thing you want to filter on and:

  1. Look in the lower-left corner of Wireshark: it will tell you the filter name of the object you're looking at
  2. (or) right-click on the object you're interested in and click "prepare as filter"

Using the SMPP capture on the SampleCaptures page we can find that you can use these filters to find submit_sm's:

  • smpp.command_id == 0x00000004
  • smpp.command_id == "Submit_sm"

answered 20 Oct '14, 05:20

JeffMorriss's gravatar image

JeffMorriss ♦
6.2k●5●72
accept rate: 27%