Wireshark
the world's foremost network protocol analyzer
Wireshark-users: Re: [Wireshark-users] Query regarding GSM MAP traces analysis
From: "AMEAUME ALAIN" <Alain.Ameaume@xxxxxxxxxxxxxxxxx>
Date: Fri, 8 Feb 2008 08:55:34 +0100
> Dear All
> I have collected some SIGTRAN
traces between (R11 GSM MAP) with Wireshark 0.99.7 (Windows).
> All protocols have been enabled,
however when analyzing the packets, Wireshark disects and displays packet
details/attributes till SCCP layer (i.e. IP, SCTP, M3UA and SCCP).
> All SCCP User Data (e.g. MAP) however is
just shown as "Data". SCCP Message Type is UnitData (0x09), Class is 0x01.
> Any ideas if i have missed something while
enabling the protocols? Or do i need to do something specific to enable SCCP
user data analysis/disection?
To decode gsm MAP
protocols, define all the SubSystem Numbers reserved for MAP (SSN) :
Select menu : Edit / Preferences
Click on "Protocols"
Scroll down to "GSM_MAP"
Fill "TCAP SSNs" textfield (like :5,6,7,8,9,10,12,147)
Finished ? "APPLY/OK"
Select menu : Edit / Preferences
Click on "Protocols"
Scroll down to "GSM_MAP"
Fill "TCAP SSNs" textfield (like :5,6,7,8,9,10,12,147)
Finished ? "APPLY/OK"
Alain.
- References:
- [Wireshark-users] Query regarding GSM MAP traces analysis
- From: Jehanzeb Khan
- [Wireshark-users] Query regarding GSM MAP traces analysis
- Prev by Date: Re: [Wireshark-users] Query regarding GSM MAP traces analysis
- Next by Date: Re: [Wireshark-users] Query regarding GSM MAP traces analysis
- Previous by thread: Re: [Wireshark-users] Query regarding GSM MAP traces analysis
- Next by thread: Re: [Wireshark-users] Query regarding GSM MAP traces analysis
- Index(es):