Hello, I would like to find all CCRs/CCAs in a big diameter trace. Usually I use session-id to correlate them one CCA and one CCR. I filtered all CCAs, how can I find all related CCRs? Is it possible to use something like a FOR loop?
Thanks in advance
sorry I was not clear in my explanation:
I can find all CCRequests: (diameter.flags.request == 1) && (diameter.cmd.code == 272)
I can find all CCAnswers: (diameter.flags.request == 0) && (diameter.cmd.code == 272)
but to find related CCR/CCA, I need to use a filter on diameter.Session-Id == "bla bla bla" since CCR and related CCA will have the same session id
My issue is find all CCRs and related CCAs
I should use something like for CCR = x to CCR = n , where session id = bla bla bla x find related CCA
is it possible in wireshark?
Thanks in advance, Michele
(Assuming CCR is the diameter.CC-Request-Number)
For the sample capture:diameter.Session-Id == "GatewayService-7-10-0.NeveNG7;1368477994;1073741858" and diameter.CC-Request-Number in {1..3} and (diameter.flags.request == 0) && (diameter.cmd.code == 272)
I'm not a diameter wiz so guessing at the fields.
Asked: 2023-01-20 15:09:02 +0000
Seen: 623 times
Last updated: Jan 20 '23
There is a sample capture attached to 8692: Wireshark combines two diameter messages (RAA & CCR-U) in one
A display filter of
diameter.CC-Request-Numberseems to show allCCRandCCA.MATEcan be frustrating to work with but was created for stuff like this - WSUG - MATE.