Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] how to decode sccp messages?

From: Anders Broman <a.broman@xxxxxxxxxxxx>
Date: Wed, 22 Aug 2012 08:41:38 +0200
hadi motamedi skrev 2012-08-22 06:41:
On 8/21/12, Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> wrote:
hadi motamedi wrote:
Dear All
Can you please let me know if we can decode sccp messages via wireshark?
Yes, Wireshark has understood SCCP for a long time (2002 according to
the copyright in packet-sccp.c).  Wireshark can decode it over M3UA,
MTP3, TALI, and from PCAP files with a DLT value of 142.

Note: I'm assuming you're talking about SS7 SCCP; Wireshark also
understands Skinny which is also abbreviated SCCP sometimes.
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users

mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe

Sorry. My sccp messages is captured as a *.txt file how can I convert
it to *.pcap file so the Wireshark can analyze its sccp packets?
Use tex2pcap with a DLT value of 142, see tex2pcap man page for the usage. You can also try
file->import from the menu bar chose encapsulation type SS7 SCCP.
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
              mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe