Hi, It is because Dissect T-PDU option must be enabled in the GTP protocol preference. If you disable this option, you will get the former addresses.
You can do following: Edit menu -> preferences -> protocols -> GTP -> disable dissect T-PDU Hope this resolves your problem. Thanks Regards, Satish On Thu, Aug 6, 2009 at 11:20 AM, tulip neo <[email protected]> wrote: > Hi List, > Good Morning. > I have bit confusion in IPV4 addressing.In the attached capture u would > find the data goes through ethernet->IPV4->UDP->GTP->IPV4->UDP->SIP.so IPv4 > is at top of ethernet as well GTP.IPV4 on top of ethernet has source and > destination address as follows: > > 172.18.160.57 and 10.127.130.19 > > and IPV4 at top of GTP has source and dest address as follows: > > 172.18.196.18 and 172.18.1.39. > > First source and destination address sensed by wireshark is 172.18.160.57 > and 10.127.130.19. but why in source and destination column the latter is > displayed. > Any pointer or help this would be of great help.Does it conceptulay vallid > to show the latter or just wireshark works that way. > > Br > tulip > > > > ------------------------------ > Love Cricket? Check out live scores, photos, video highlights and more. Click > here <http://in.rd.yahoo.com/tagline_cricket_2/*http://cricket.yahoo.com>. > ___________________________________________________________________________ > Sent via: Wireshark-dev mailing list <[email protected]> > Archives: http://www.wireshark.org/lists/wireshark-dev > Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev > mailto:[email protected]?subject=unsubscribe > -- Satish Chandra
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <[email protected]> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:[email protected]?subject=unsubscribe
