Revision history [back]

Display Filter Reference: Session Initiation Protocol

FIELD NAME      DESCRIPTION                     TYPE                    VERSIONS
sip.From        From                            Character string    1.0.0 to 3.6.6
sip.from.user   SIP from address User Part      Character string    1.2.0 to 3.6.6

sip.From (case sensitive in 3.6.6) and sip.from.user are Character Strings.

A substring match would be: sip.from.user contains "555" or sip.From contains "555"