Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-dev: Re: [Ethereal-dev] SS7 ISUP

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Michael Tuexen <Michael.Tuexen@xxxxxxxxxxxxxxxxx>
Date: Wed, 14 Jul 2004 17:47:36 +0200
See my comments in-line.

Best regards
Michael

On Jul 14, 2004, at 5:20 PM, Jeff Morriss wrote:


Michael and Dimitar,

Michael Tuexen wrote:

[...]

The other stuff which needs to be done is the sniffing
support. There you need to extend the libpcap to work
with the SS7 card. I have no idea how difficult this might
be, but it would definitely be great. Possibly someone
else on the list can provide more help on this topic?
Do you get some software with the SS7 card which allows
you to capture traffic and write it to a disk file. We
could add support for reading such files to ethereal.

In fact the PCAP file format already supports storing MTP2 or MTP3 directly (LINKTYPE_RAWSS7_MTP2 and LINKTYPE_RAWSS7_MTP3 for libpcap users or WTAP_ENCAP_MTP2 and LINKTYPE_ENCAP_MTP3 for wiretap users).

I did not know that this is the file format used by capture software
which comes with the cards Dimitar is talking about.
So all that's really necessary to do the 2nd case above is to somehow write the MSUs to a PCAP file on disk--Ethereal is already capable of reading that file.

Regards,
-Jeff

On Jul 14, 2004, at 8:49 AM, Dimitar Stoichev wrote:
Hello everybody,
I was wondering is there any development in the direction of sniffing SS7 traffic from a real (septel) SS7 card, that does not utilize sigtran. Please share any information on ways to do that. Is this on the roadmap at all?

Best Regards
Dimitar

_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev