Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

answered 2022-07-04 23:21:11 +0000

Chuckc gravatar image

Display Filter Reference: Session Initiation Protocol

FIELD NAME      DESCRIPTION                     TYPE                    VERSIONS
sip.From        From                            Character string    1.0.0 to 3.6.6
sip.from.user   SIP from address User Part      Character string    1.2.0 to 3.6.6

sip.From (case sensitive in 3.6.6) and sip.from.user are Character Strings.

A substring match would be: sip.from.user contains "555" or sip.From contains "555"