This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

CAP session

0

Dear All,

how to delimite a complete CAP seesion in a given .pcap file ?

i wanna see all sequences since the beggining to the end for a given MSISDN.

thank you. mohamed

asked 02 Jan '12, 10:16

mzakour's gravatar image

mzakour
1111
accept rate: 0%

in other terms:

i wanna know how to identify packets related for a complete call flow.

(02 Jan '12, 11:36) mzakour

One Answer:

0

After finding the CAP message with the calling or called party number use the TCAP transaction Id(s) to fileter out the sequence.

answered 02 Jan '12, 22:54

Anders's gravatar image

Anders ♦
4.6k952
accept rate: 17%

Dear Anders,

thank you for your feedback, i located the initDPGPRS() in the trace, it's the first packet sent to create pdp, i took the tcap transaction id and filter, but i founded only packets related to pdp create. how to check if there is packet lost ?

(03 Jan '12, 02:46) mzakour