 | 1 | initial version |
You're not doing anything wrong, but your expectations are different from what is on offer. What you have here is a field that has no value itself. The value "1" is merely an indication that it is present in the packet. It is a node in the tree where other nodes (protocol items and subtrees) are hanging from. So if you know which specific item you need look for that filter expression and use that. If you need the complete SIP message than what you can do is enable the option to display the raw SIP message, and parse your way through that.
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
