Getting blank data for e212.imsi field while using tshark

asked 2022-05-03 13:55:20 +0000

Gopi gravatar image

Hi I;m using tshark to filter some of the required fields, where as the field "e212.imsi" is giving blank data. can anyone please help.

edit retag flag offensive close merge delete


There is a pcap attached to GTPv2: IMSI is decoded improperly. What do you get with:

Downloads$ tshark -r ./gtp.pcap -T fields -e e212.imsi -e e212.mcc -e e212.mnc
123456789056789 123,123 456,456
Chuckc gravatar imageChuckc ( 2022-05-03 15:21:06 +0000 )edit