Scribd
Upload
146 views3 pages

Wireshark Filters

The document contains Wireshark filters used for analysis of various network protocols including RTP loss, SIP errors, GTP delete, context release requests, BYE requests after ASR from PCRF, and Diameter errors. It was sent by Shijae Lee from Samsung Electronics, sharing the filters for troubleshooting network issues.

Uploaded by

Sunny Girija Sapru
Copyright
© © All Rights Reserved
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
Download as docx, pdf, or txt
146 views3 pages

Wireshark Filters

The document contains Wireshark filters used for analysis of various network protocols including RTP loss, SIP errors, GTP delete, context release requests, BYE requests after ASR from PCRF, and Diameter errors. It was sent by Shijae Lee from Samsung Electronics, sharing the filters for troubleshooting network issues.

Uploaded by

Sunny Girija Sapru
Copyright
© © All Rights Reserved
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
Download as docx, pdf, or txt
Download as docx, pdf, or txt
You are on page 1/ 3

Thanks & Regards,

Sandeep Katoch
Samsung SI Team
+91-9820700783

------- Original Message ------Sender : Shijae Lee<[email protected]> E5/Senior Engineer/PS_Core Lab./Samsung Electronics
Date : Jun 17, 2016 18:51 (GMT+09:00)
Title : [FYI] Wireshark filters

Dear team,

Wireshark filters I use for analysis.

For RTP loss


ipv6.src==2405:204:eb85:2e5e::2a9b:88a4 && rtcp.pt==200 || sip

SIP Error
(sip.Status-Code == 400 || sip.Status-Code == 402 || sip.Status-Code == 403 || sip.Status-Code == 404 ||
sip.Status-Code == 405 || sip.Status-Code == 406 || sip.Status-Code == 407 || sip.Status-Code == 408 ||
sip.Status-Code == 410 || sip.Status-Code == 413 || sip.Status-Code == 414 || sip.Status-Code == 415 ||
sip.Status-Code == 420 || sip.Status-Code == 421 || sip.Status-Code == 480 || sip.Status-Code == 482 ||
sip.Status-Code == 483 || sip.Status-Code == 484 || sip.Status-Code == 485 || sip.Status-Code == 486 ||
sip.Status-Code == 487 || sip.Status-Code == 488 || sip.Status-Code == 500 ||sip.Status-Code == 501 ||
sip.Status-Code == 502 || sip.Status-Code == 503 || sip.Status-Code == 504 || sip.Status-Code == 505 ||

sip.Status-Code == 513)

GTP delete
gtpv2.message_type == 66 || gtpv2.message_type == 99

For context release request


s1ap.radioNetwork == 0 || s1ap.radioNetwork == 1 || s1ap.radioNetwork == 20 || s1ap.radioNetwork ==
21 || s1ap.radioNetwork == 26 || s1ap.radioNetwork == 31 || s1ap.misc == 4

BYE request after getting ASR from PCRF


sip.Reason == "SIP;cause=503;text=\"Session released - service based local policy function aborted
session\""

Diameter Error
diameter.Result-Code == 3001 || diameter.Result-Code == 3002 || diameter.Result-Code == 3003 || diameter.ResultCode == 3004 || diameter.Result-Code == 3005 || diameter.Result-Code == 3006 || diameter.Result-Code == 3007 ||
diameter.Result-Code == 3008 || diameter.Result-Code == 3009 || diameter.Result-Code == 3010 || diameter.ResultCode == 3002 || diameter.Result-Code == 4001 || diameter.Result-Code == 4002 || diameter.Result-Code == 5001 ||
diameter.Result-Code == 5002 || diameter.Result-Code == 5003 || diameter.Result-Code == 5004 || diameter.ResultCode == 5005 || diameter.Result-Code == 5006 || diameter.Result-Code == 5007 || diameter.Result-Code == 5008 ||
diameter.Result-Code == 5009 || diameter.Result-Code == 5010 || diameter.Result-Code == 5011 || diameter.ResultCode == 5012 || diameter.Result-Code == 5013 || diameter.Result-Code == 5014 || diameter.Result-Code == 5015 ||
diameter.Result-Code == 5016 || diameter.Result-Code == 5017 ||diameter.Experimental-Result-Code > 2999

Regards

Shi Jae (CJ)

Shi-Jae Lee (CJ)

Senior Engineer

PS_Core lab.
Telecommunication System Division
Telecommunication Network Samsung Electronics co.LTD
TEL : +82-31-279-3807
Mobile : +82-10-9530-3807, +91-9167-422114
E-Mail : [email protected]

You might also like