This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

tshark 2.0.2 does not support gsm_a.imsi field ?

hi,

I am using tshark version 2.0.2, and tshark is not able to decode the field gsm_a.imsi (SGSAP message).

Observing the below error message when I execute the tshark command.

tshark -r test.pcap -T fields -e gsm_a.imsi tshark: Some fields aren't valid: gsm_a.imsi

test.pcap has the sgsap message with imsi IE.

Anyone observing the same problem ? Can you please let me know how to resolve this issue. Thanks

tshark error

asked 14 Apr '16, 12:26

srikanthtl
6●1●1●2
accept rate: 0%

One Answer:

That field was renamed to e212.imsi (this is actually a common IMSI field--so you can find all messages about a given IMSI, regardless of the protocol (at least for protocols that have been converted to use that field)).

answered 14 Apr '16, 14:19

JeffMorriss ♦
6.2k●5●72
accept rate: 27%

Thanks..it works now

(14 Apr '16, 14:32) srikanthtl

(I converted your answer to a comment.)

If an answer answers your question, please be sure to accept it (by clicking on the checkmark next to the answer). That way the question will no longer show up as unanswered.

(14 Apr '16, 14:50) JeffMorriss ♦