In this section:
TShark is a tool that is used to analyze the network issues by capturing the packet traces. These captured packets are saved as .pcap files and Wireshark reads these packet traces.
To protect the system from overload, TShark captures one packet trace at a time.
Ensure that Wireshark application is installed and configure appropriately before proceeding.
On the main SBC screen, go to Troubleshooting > Troubleshooting Tools > TShark. The Run TShark Trace window is displayed.
Run TShark Trace
The following fields are displayed.
TShark Trace Parameters
| Parameter | Description |
|---|---|
Platform Interfaces | Drop-down list of different platform interfaces available for capturing the packet traces. |
Filter | Optional field to enter a TShark filter. For example, to capture the ppkt2 interface traffic (media signaling) to and fro IP address 172.18.5.4, enter host 172.18.5.4. |
| Option to enter the name of the packet trace to be saved. |
| Specifies the status of the packet trace. |
To Start Trace
For Platform Interface, choose the desired value from the Platform Interface drop-down list.
\Platform Interface
(Optional) For Filter, enter a valid Tshark filter syntax.
TShark Filter
For Save log file as, enter the log file name.
Save log file as
Click Start Trace.
Start Trace
Status is updated toTrace Running.Trace Running Status
- Proceed to next section to stop and save the trace file.
To Stop and Save Trace
Click Stop and Save Trace. The status is updated to
Trace saved to a file <filename>.pcapwhere <filename> is the name of the saved log file.Stop and Save Trace
To view the TShark log files, go to Troubleshooting > Call Trace/Logs/Monitors > Log Management. Select T-Shark from the list to view the logs. Refer to Log Management for more information.
T-Shark option is not available under the list until at least one trace is started, stopped and saved.
Overview
Content Tools