Wireshark · Ethereal-users: Re: [Ethereal-users] TCAP decoding

["Martin Regner" <martin.regner@xxxxxxxxx>]

On Apr 30, 2004, at 12:18 PM, Umesha S Anand wrote:
> Hi
> I am using ethereal 0.10.0a to decode TCAP messages running over
> SUA protocol. I am able to decode
> SUA messages, but it doesn't decode the TCAP message contained in SUA
> messages. Can anyone help
>  me how to enable decoding of this.

Michael Tuxen wrote:
<The latest version should handle SSN=10. SSN=20 is currently not
<registered in the
<tcap dissector.

As a temporar solution you can try to use tethereal (the non_GUI version of
Ethereal that is distributed with Ethereal) and it's "decode as" feature,
the "-d" option.

Try with something like:

<tethereal -r infile.pcap -d sua.ssn==20,tcap -d sua.ssn==10,tcap -V

You then specify the sua.ssn value(s) that you want to be decoded as TCAP


If you have possibilities to build Ethereal/Tethereal then it is easy to add
a line in packet-tcap.c on the same place where the
other dissector_add entries are.

    dissector_add("sua.ssn", 20, tcap_handle);