eSpace 6805 IP Phone
Administrator Guide
2.
Common Filter Expressions
Common filter expressions used to filter out packets are as follows:
Filtering Segment Packets
Use the filter criteria !(ip.frag_offset == 0) to check whether segment packets exist.
Choose Analyze > Expert Info. If TCP Bad checksum is displayed, segment packets may
exist, as shown in
that Checksum is correct. Therefore, Bad checksum is displayed.
Issue 01 (2014-01-06)
Press Enter or click Apply.
The packets that meet the filter criteria are displayed.
Filter expressions that specify protocols
−
ip
−
icmp
−
tcp
−
gtp
−
gre
http
−
Filter expressions that specify addresses
−
IP address
ip.addr==10.161.225.1
−
Source IP address
ip.src==10.161.225.1
−
Destination IP address
ip.dst==10.161.225.1
−
Source Media Access Control (MAC) address
eth.src == 00:e0:fc:44:5e:a1
−
Source User Datagram Protocol (UDP) port
udp.srcport == 2123
Filter expressions that specify fields (message types)
−
GTP Echo Request messages
gtp.message == 0x01
−
Remote authentication dial-in user service (RADIUS) accounting request or response
messages
radius.code == 4 || radius.code == 5
Figure
6-53. The Wireshark does not combine segment packets or verify
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6 Appendix
133