[tcpdump-workers] BPF syntax extension for GTP-U (mobile ip packet)

2010-08-17 Thread Ambika Prasad Tripathy
Hi Experts, I am searching a way how to filter GTP packets and hence mobile IP data over GTP-U. I can do that by applying index based filter for BPF. But can when I see struct bpf_insn structure I think, if I modify the gencode.c/h and grammer.y to extend the GTP based filter it can work. But

Re: [tcpdump-workers] BPF syntax extension for GTP-U (mobile ip packet)

2010-08-20 Thread Dánial
> > I am searching a way how to filter GTP packets and hence mobile IP data over > GTP-U. I've wanted to do this as well, to filter on APN, IMSI or MSISDN. Is it not possible to do with the current tcpdump? - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.

Re: [tcpdump-workers] BPF syntax extension for GTP-U (mobile ip packet)

2010-08-22 Thread Ambika Prasad Tripathy
orkers-ow...@lists.tcpdump.org [mailto:tcpdump-workers-ow...@lists.tcpdump.org] On Behalf Of Dánial Sent: Friday, August 20, 2010 5:39 PM To: tcpdump-workers@lists.tcpdump.org Subject: Re: [tcpdump-workers] BPF syntax extension for GTP-U (mobile ip packet) > > I am searching a way how to filter

Re: [tcpdump-workers] BPF syntax extension for GTP-U (mobile ip packet)

2010-08-23 Thread Guy Harris
On Aug 17, 2010, at 2:21 AM, Ambika Prasad Tripathy wrote: > I am searching a way how to filter GTP packets and hence mobile IP data over > GTP-U. I can do that by applying index based filter for BPF. But can when I > see struct bpf_insn structure I think, if I modify the gencode.c/h and > gramme

Re: [tcpdump-workers] BPF syntax extension for GTP-U (mobile ip packet)

2010-08-23 Thread Guy Harris
On Aug 22, 2010, at 10:15 PM, Ambika Prasad Tripathy wrote: > But my proposal is to include a filter like VLAN for GTP. Exactly. See my response to your earlier message, except that: > So after support it the above filter will work like > > "Gtp 23456345" to filter all GTP packets with TEID