Wireshark-users: Re: [Wireshark-users] SS7 over IP

[Guy Harris <guy@xxxxxxxxxxxx>]

On Aug 3, 2006, at 5:22 PM, Alan B Francisco wrote:

> Hello, this is Alan Francisco with Engage Communication.
>
> Please tell me if there is a way for Ethereal to decode an
> SS7 message (FISU, LSSU, or MSU) preceded by an Ethernet header, IP  
> header, UDP header, and then a two-byte non-standard header.

Only if there's a protocol dissector for your non-standard header for  
SS7-over-UDP.

I assume from "FISU, LSSU, or MSU" that this is MTP2-over-UDP.  The  
current version of Wireshark (Gerald moved to a new company, but the  
old company had the Ethereal name, so development is continuing at  
wireshark.org with the new name) doesn't have any MTP2-over-UDP  
encapsulations, so you'd have to write a dissector for your  
encapsulation and submit it to wireshark-dev@xxxxxxxxxxxxx in order  
for Wireshark to recognize it.

(BTW, Gerald, Gilbert, and I are all on the ethereal-users and  
wireshark-users lists; you don't need to send mail to us individually  
if you're sending it to the users lists.)