Hello, I have a difficulty to use MATE plugin to filter diameter.cmd.code==309 && diameter.Result-Code==5003. I would like to get both request (PNR) and the Answer (PNA). This is the draft that I can think of, but no sure how to modify it to meet my requirement.
Please kindly help me to resolve it, thanks! Alex asked 02 Dec ‘14, 23:05 Alex Lu edited 03 Dec ‘14, 06:41 JeffMorriss ♦ |
One Answer:
To do that you'll need to store the Result-Code in the GOP. So this configuration file:
with a display filter of:
will show you both the Request(s) and their corresponding Answer(s). answered 03 Dec ‘14, 06:54 JeffMorriss ♦ edited 09 Jan ‘15, 08:04 |
Thank you very much, Jeff!
Somehow it is still not working as expected.
Could it be caused by
Thanks again.
(Sorry, I was offline over the holidays.)
(BTW I converted your Answer to a Comment.)
Are you putting quotes around the command code and resultcode (as shown in the example above)? It wasn’t working for me, either, when I typed in the filter by hand but when I used “prepare as filter” it worked well–and I noticed that “prepare as filter” was putting the quotes in there.
(It is annoying that the quotes must be there; I guess MATE’s fields are all strings? That’s worth of investigation–if I have time <sigh>.)
Works flawless! Thank you Jeff!