Wireshark-users: Re: [Wireshark-users] DAG 3.7T card SS7 capture
Is the MTP flavour in Preferences->protocols->MTP set to the right one
(ITU/ANSI/Japan)?


2008/5/14 B.Tosovsky <[email protected]>:
> Thank you for the response. I have partial succes. I changed link type to ss7 and now i see proper mtp3 layer messages, but sccp layer packets are malformed either as mtp2 layer packets  (FISU ???). Is it possible packets are somewhere cutted ?
>  I use latest stable wireshark 1.0.0 version and libpcap 0.9.8.
>
>  Thanks B.
>  > ------------ Původní zpráva ------------
>  > Od: B.Tosovsky <[email protected]>
>  > Předmět: DAG 3.7T card SS7 captur
>  > Datum: 14.5.2008 15:27:03
>  > ----------------------------------------
>
>
> > Hello,
>  >
>  > can you please help. I am playing with this card in Debian. Card is properly
>  > installed, libpcap was compiled with DAG support.
>  >
>  > If i try to capture mtp2 packets  with endace tool dagsnap and save in ERF
>  > format I a can read this file offline in wireshark properly.
>  >
>  > But if i try to capture packets  directly in wireshark through new interface
>  > dag0  I see capturing packets, but there are decoded as CISCO HDLC malformed
>  > packets ???
>  >
>  > Same situation is if i try to convert ERF file with dagconvert tool to pcap
>  > file.
>  >
>  > Thanks
>  >
>  > B.
>  >
>  >
>  _______________________________________________
>  Wireshark-users mailing list
>  [email protected]
>  http://www.wireshark.org/mailman/listinfo/wireshark-users
>



-- 
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan