This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

GTPv2 TEID and SQN decoded in Decimal instead of Hexa in WS 1.12.7

0

Dear support,

WS 1.12.7 is decoding GTPv2 TEID and SQN in Decimal instead of Hexa. In GTPv1 it was always in Hexa. It makes troubleshooting a bit more difficult as a conversion is necessary.

Please can you let me know if there is any plans to correct this or not?

Thanks a lot

Br, Bulphi

asked 07 Oct '15, 07:23

109's gravatar image

109
6112
accept rate: 0%


One Answer:

0

In the upcoming Wireshark 2.0, TEID was changed to a 'HEX (DEC)' format display. Could you indicate what is the filter associated to this SQN parameter so as to verify?

Wireshark 1.99.9 development version (downloadable on Wireshark web site) already includes the TEID change.

answered 07 Oct '15, 11:21

Pascal%20Quantin's gravatar image

Pascal Quantin
5.5k1060
accept rate: 30%

Hi Pascal,

Thanks a lot for your prompt answer. The filter are gtpv2.seq and gtpv2.teid where I see the values in decimal instead of Hexa.

I am currently using WS 1.12.7 which is the last official version. This is the message I get when I use the check for update version.

Br, Bulphi

(07 Oct '15, 23:43) 109

Development versions are not proposed through the "check for update' system. You need to manually download and install it. The sequence number is still displayed as decimal. I'm gonna change it so as to display it in hexadecimal (decimal) format like the TEID.

(08 Oct '15, 01:30) Pascal Quantin

Hi Pascal, Thanks for your reply. Please can you let me know when Ws 2.0 will be released? In case I download 1.99.9, will I still get automatic update via the "check update" function?

Br, Bulphi

(08 Oct '15, 03:58) 109

The tentative date for Wireshark 2.0 is November the 18th. I think you should get an automatic update notification when coming from 1.99.9 development version, but it would be worth double checking manually.

(08 Oct '15, 11:09) Pascal Quantin

Thank you Pascal. It is all clear now. Br, Bulphi

(09 Oct '15, 00:38) 109

If you are happy with the answer, please consider accepting it (by clicking on the check mark next to the answer) so that it can help other users when doing a search. See the faq for details.

(09 Oct '15, 02:20) Pascal Quantin
showing 5 of 6 show 1 more comments