This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Using MATE with MGCP

0

I have wireshark version 1.12.8 and am trying to use MATE to analyse MGCP capture.

Using the following mate file:

Pdu mgcp_pdu Proto mgcp Transport ip {
    Extract addr From ip.addr;
    Extract transid From mgcp.transid;
    Extract endpoint From mgcp.req.endpoint;
    Extract callid From mgcp.param.callid;
};
Done;

Starting wireshark with option to load mate file.

wireshark -o "mate.config: mgcp.mate" -r mcgp.cap

After loading files wireshark show the MATE heading in the Packet Details frame but only with source and destination ip addresses. None of MGCP parameters are displayed. Is this a bug or am I doing something wrong?

Thanks,

Paul

asked 13 Dec '15, 18:28

Paul%20Hughes's gravatar image

Paul Hughes
1111
accept rate: 0%


One Answer:

0

This seems like a bug to me. I can't figure out how to get any mgcp fields to be "mate-extracted" either. I would suggest filing a bug report for it.

answered 12 Feb '16, 12:57

cmaynard's gravatar image

cmaynard ♦♦
9.4k1038142
accept rate: 20%