This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

latest tshark is truncating the ESP packets coming from UE to P-CSCF

0

Hi All, We are using the tshark.exe for converting the PCAP files to TEXT files for our tool. We are able to do so using the earlier Wireshark version 1.12.6, however, when we moved to Wireshark version 2.4.1 the tshark is truncating the ESP packets coming from UE to P-CSCF.

We have tried several config changes and settings but the ESP/SIP packets are still getting truncated and therefore the tool is unable to capture them.

asked 21 Sep '17, 03:56

kamta's gravatar image

kamta
6●1●1●2
accept rate: 0%

Can you share a capture in a publicly accessible spot, e.g. CloudShark?

(21 Sep '17, 05:21) Jaap ♦

Maybe you could share the exact tshark.exe command-line you're using and include tshark.exe -v output too in case any of it matters.

(21 Sep '17, 06:42) cmaynard ♦♦