Problems locating relevant calls
<[email protected]> Wed, 4 Oct 2006 12:56:58 +0100
| Newsgroups | gmane.network.ethereal.user |
|---|---|
| Message-ID | <188EE061641EE54680596A639A2E5C6679C7CB@wsqfmb01.britain.agilent.com> |
This is a multi-part message in MIME format. --===============1670550496== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline ------------------- The Ethereal project is being continued at a new site. Please go to http://www.wireshark.org and subscribe to [email protected]. Don't forget to unsubscribe from this list at http://www.ethereal.com/mailman/listinfo/ethereal-users ------------------- --===============1670550496== Content-class: urn:content-classes:message Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C6E7AC.31E65BC5" This is a multi-part message in MIME format. ------_=_NextPart_001_01C6E7AC.31E65BC5 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable Ethereal Version "0.99.0" =20 1) In the main "Packet List" window, I can see the messages of interest = that I would like to extract. =20 I'm monitoring MGCP traffic, so I'd like to extract the call that this = message belongs to. =20 I've made use of the "VoIP Calls" feature, but I cannot associate the = message I'm interested in with the call it belongs to. =20 I've tried using the message timestamp as a reference point, but still = cannot easily find the 1 call containing that message. =20 How can I achieve this goal using available filtering features? =20 I've tried EndPoint filtering, but this only matches parts of the call. = Some call messages don't contain anything more than a transaction id. =20 =20 2) I did manage to locate a call containing the message of interest, but = the call was 112 messages long. I cannot build a filter to isolate all = 112 messages (Complete call). The current limitation seems between 80 = and 90 messages. =20 Is there an option I can tweak, or is this a known limitation that will = be fixed? =20 =20 Kevin Duffy Solutions Test Engineer Assurance Solutions Division Agilent Technologies UK Limited =20 ------_=_NextPart_001_01C6E7AC.31E65BC5 Content-Type: text/html; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable <html xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:st1=3D"urn:schemas:contacts" = xmlns:st2=3D"urn:schemas-microsoft-com:office:smarttags" = xmlns=3D"http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3DContent-Type content=3D"text/html; = charset=3Dus-ascii"> <meta name=3DGenerator content=3D"Microsoft Word 11 (filtered medium)"> <o:SmartTagType namespaceuri=3D"urn:schemas:contacts" name=3D"Sn"/> <o:SmartTagType namespaceuri=3D"urn:schemas:contacts" = name=3D"GivenName"/> <o:SmartTagType = namespaceuri=3D"urn:schemas-microsoft-com:office:smarttags" name=3D"PersonName"/> <!--[if !mso]> <style> st1\:*{behavior:url(#default#ieooui) = }st2\:*{behavior:url(#default#ieooui) } </style> <![endif]--> <style> <!-- /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {margin:0cm; margin-bottom:.0001pt; font-size:12.0pt; font-family:"Times New Roman";} a:link, span.MsoHyperlink {color:blue; text-decoration:underline;} a:visited, span.MsoHyperlinkFollowed {color:#606420; text-decoration:underline;} span.EmailStyle17 {mso-style-type:personal-compose; font-family:Arial; color:windowtext;} @page Section1 {size:595.3pt 841.9pt; margin:72.0pt 90.0pt 72.0pt 90.0pt;} div.Section1 {page:Section1;} --> </style> </head> <body lang=3DEN-GB link=3Dblue vlink=3D"#606420"> <div class=3DSection1> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'>Ethereal Version = “0.99.0”<o:p></o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'><o:p> </o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'>1) In the main “Packet List” window, I = can see the messages of interest that I would like to = extract.<o:p></o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'><o:p> </o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'>I’m monitoring MGCP traffic, so I’d like = to extract the call that this message belongs = to.<o:p></o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'><o:p> </o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'>I’ve made use of the “VoIP Calls” = feature, but I cannot associate the message I’m interested in with the call = it belongs to.<o:p></o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'><o:p> </o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'>I’ve tried using the message timestamp as a = reference point, but still cannot easily find the 1 call containing that = message.<o:p></o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'><o:p> </o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'>How can I achieve this goal using available filtering = features?<o:p></o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'><o:p> </o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'>I’ve tried EndPoint filtering, but this only = matches parts of the call. Some call messages don’t contain anything more = than a transaction id.<o:p></o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'><o:p> </o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'><o:p> </o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'>2) I did manage to locate a call containing the = message of interest, but the call was 112 messages long. I cannot build a filter to isolate all 112 messages (Complete call). The current limitation seems = between 80 and 90 messages.<o:p></o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'><o:p> </o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'>Is there an option I can tweak, or is this a known limitation that will be fixed?<o:p></o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'><o:p> </o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'><o:p> </o:p></span></font></p> <p class=3DMsoNormal><st2:PersonName w:st=3D"on"><st1:GivenName = w:st=3D"on"><strong><b><font size=3D3 face=3DArial><span = style=3D'font-size:12.0pt;font-family:Arial'>Kevin</span></font></b></str= ong></st1:GivenName><strong><b><font face=3DArial><span style=3D'font-family:Arial'> <st1:Sn = w:st=3D"on">Duffy</st1:Sn></span></font></b></strong></st2:PersonName><o:= p></o:p></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'>Solutions Test Engineer</span></font><o:p></o:p></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'>Assurance Solutions = Division</span></font><o:p></o:p></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'>Agilent Technologies UK = Limited</span></font><o:p></o:p></p> <p class=3DMsoNormal><font size=3D3 face=3D"Times New Roman"><span = style=3D'font-size: 12.0pt'><o:p> </o:p></span></font></p> </div> </body> </html> ------_=_NextPart_001_01C6E7AC.31E65BC5-- --===============1670550496== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Ethereal-users mailing list [email protected] http://www.ethereal.com/mailman/listinfo/ethereal-users --===============1670550496==--