Wireshark-users: Re: [Wireshark-users] SS7 over IP

From: Joerg Mayer <jmayer@xxxxxxxxx>
Date: Sat, 5 Aug 2006 19:13:52 +0200

On Fri, Aug 04, 2006 at 06:37:27PM -0700, Guy Harris wrote:
> > Please tell me if there is a way for Ethereal to decode an
> > SS7 message (FISU, LSSU, or MSU) preceded by an Ethernet header, IP  
> > header, UDP header, and then a two-byte non-standard header.
> 
> Only if there's a protocol dissector for your non-standard header for  
> SS7-over-UDP.
...
> wireshark.org with the new name) doesn't have any MTP2-over-UDP  
> encapsulations, so you'd have to write a dissector for your  
> encapsulation and submit it to wireshark-dev@xxxxxxxxxxxxx in order  
> for Wireshark to recognize it.

Or you could submit a sample trace and documentation regarding the two
extra bytes and maybe someone is willing to write that code for you -
it looks like this will not be too much work. But remember, we like
traces and documentation.

 Ciao
  Joerg

-- 
Joerg Mayer                                           <jmayer@xxxxxxxxx>
We are stuck with technology when what we really want is just stuff that
works. Some say that should read Microsoft instead of technology.