Riverbed Cascade Pilot Personal Edition: Take Wireshark to the Next Level - Advanced Triggers and Alerts; Web and VoIP Analytics; Long-Term Trending and Forensics; Deep Packet Analysis with Wireshark

Wireshark-users: Re: [Wireshark-users] How to decode SCCP in M3UA/SCTP/IP ?

Date Index Thread Index Other Months All Mailing Lists

Date Prev Date Next Thread Prev Thread Next

From: "Anders Broman" <anders.broman@xxxxxxxxxxxx>
Date: Thu, 11 Jun 2009 16:57:50 +0200

Title: How to decode SCCP in M3UA/SCTP/IP ?

Hi,

You may have to do edit->preferenses->protocol->ranap and put the subsystem number of RANAP (142) assuming it's a RANAP message.

With my top-of-tree build it decodes as RANAP.

Regards

Anders

From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Tamás Varga
Sent: den 11 juni 2009 16:28
To: wireshark-users@xxxxxxxxxxxxx
Subject: [Wireshark-users] How to decode SCCP in M3UA/SCTP/IP ?

Hello wiresharkers,

The attached Iu-over-IP protocol transaction seems to be uneasy to decode with 1.0.7: it decodes Ethernet, IP, SCTP, M3UA and indicates SCCP content and stops. In the protocol configuration I have found SCCP section, thus I assume this version supports SCCP decoding. is it true? then how to configure to do that?

cheers,
Tamas

<<a.pcap>>

References:
- [Wireshark-users] How to decode SCCP in M3UA/SCTP/IP ?
  - From: Tamás Varga

Prev by Date: [Wireshark-users] TLSv1 vs SSL3.0 decoding issue
Next by Date: Re: [Wireshark-users] Merging a bunch of PCAP files
Previous by thread: [Wireshark-users] How to decode SCCP in M3UA/SCTP/IP ?
Next by thread: [Wireshark-users] Merging a bunch of PCAP files
Index(es):
- Date
- Thread