Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] decoding IuPS traffic

From: "Anders Broman" <anders.broman@xxxxxxxxxxxx>
Date: Fri, 30 Oct 2009 15:54:31 +0100
Hi,
Edit->preferenses->DLT_USER->Edit Pops up the Users DlT table
Press New (or edit if DLT 147 exists)
Enter sscop in payload protocol
Header size 0
Trailer size 0

Ok, 
OK/Apply

Regards
Anders

-----Original Message-----
From: wireshark-users-bounces@xxxxxxxxxxxxx
[mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Roger Mahler
Sent: den 30 oktober 2009 14:32
To: wireshark-users@xxxxxxxxxxxxx
Subject: [Wireshark-users] decoding IuPS traffic

Hello all

in older versions of Wireshark (e.g. 0.99.2) there was under
"Preferences"-->"Protocols" --> DLT User A,B,C,D.
I was able to make use of one such DLT by setting "Special
Encapsulation" to "SSCOP" and "Payload" to "sscf-nni".

With these settings I was able to decode IuPS traffic with
SSCOP:SSCF-NNI:MTP3b:SCCP:RANAP

Since a while back the DLT User A,B,C,D has disappeared. Instead the GUI
offers a table.
How do I have to fill this table to achieve the same result as before?
(or any other ideas how to make the newer versions of Wireshark decode
the attached frame?)


Cheers
Roger