On 11/14/13 11:14, Anders Broman wrote:
Hi,
The following tshark parameters ” -Y diameter -z
proto,colinfo,diameter.Experimental-Result-Code,diameter.Experimental-Result-Code”
yields no result where as
-Y diameter -z proto,colinfo,diameter.Result-Code,diameter.Result-Code
Does the only difference seems to be that the first one is grouped.
Looking at the code I can’t see why it shouldn’t work – ideas?
After a bit of digging I can find that I can fix the problem by
commenting out the (Vendor=ETSI) Experimental-Result-Code AVP from
diameter/etsie2e4.xml .
I suppose (but I'm out of time to check now) that the problem is that
we're getting 2 hf's with the same abbreviation and the "filter" portion
of that command is picking the 2nd but the "field" portion is choosing
the 1st. Or something like that?
___________________________________________________________________________
Sent via: Wireshark-dev mailing list <[email protected]>
Archives: http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
mailto:[email protected]?subject=unsubscribe
