How to enable src/dst IP and port in pcap

[SadeghKrmi]

How is it possible to have port and IP addresses in the pcap traces? for example in the following snapshot which is gnb_ngap.pcap

[andrepuschmann]

We don't fill those fields when writing the PCAP as we capture this on NGAP level the information is actually already gone. But if you need that you could also simply fire up Wireshark and capture on the actual interface.

[SadeghKrmi]

@andrepuschmann what if capture is being done on the whole interface, how to decode f1ap and e1ap etc.?

[SadeghKrmi]

@andrepuschmann I am attaching the capture, please help if you know how to decode f1ap in the pcap.
capture_network.zip

[wmwwimor]

Could you tell me how to grasp data from all of interfaces by wireshark in real-time?Thx!!

[andrepuschmann]

@SadeghKrmi Right now you can't capture F1 or E1 on the network interface because they are not send over the network.
The trace above is a NGAP PCAP. You can look at it using the internal capture (e.g. the file in /tmp/gnb_ngap.pcap) or using Wireshark on the interface.