This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I'm monitoring a Cisco CUCM for troubleshooting purposes. All I care about are call setup messages.

The REGISTER and OPTIONS messages are cluttering up the display, and I was wondering if I could filter those out?

asked 23 Sep '11, 08:47

Cisco%20TelePresence%20Guy's gravatar image

Cisco TelePr...
16112
accept rate: 0%


Apply display filter sip.Method == "INVITE"

permanent link

answered 23 Sep '11, 12:34

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

OK, so if all I want to see are the INVITEs and the dialog that comes after them, I would use:

sip.Method != "REGISTER" or sip.Method != "OPTIONS"

(23 Sep '11, 13:19) Cisco TelePr...
1

@Cisco, I don't know much about SIP, but I think you meant:

(sip.Method != "REGISTER") && (sip.Method != "OPTIONS")
(23 Sep '11, 13:48) helloworld
2

If you want to see them use:
(sip.Method == "REGISTER") || (sip.Method == "OPTIONS")
If you want to hide them use:
!(sip.Method == "REGISTER") && !(sip.Method == "OPTIONS")

(23 Sep '11, 14:32) joke

Yes, I think the last comment is the syntax of what I was looking for. Thanks!

(23 Sep '11, 14:37) Cisco TelePr...

above ones are not filtering all OPTIONS and 200 OK response to OPTIONS message.

But below one is working for that.

sip && !(sip.CSeq.method == "OPTIONS")

(26 Sep '12, 15:50) optionsboy
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×349
×109
×16
×8

question asked: 23 Sep '11, 08:47

question was seen: 47,158 times

last updated: 27 Sep '12, 00:13

p​o​w​e​r​e​d by O​S​Q​A