ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-users: Re: [Wireshark-users] DAG 3.7T card SS7 capture

From: B.Tosovsky <B.Tosovsky@xxxxxxxxx>
Date: Wed, 14 May 2008 16:57:10 +0200 (CEST)
Yes, mtp3 layer is decoded correctly- ITU-T, I see proper SPCs. Also i see proper GT numbers and SSN, but after Calling GT number  i see malfolrmed packet...
When i load ERF file, everythig is decoded correctly.

> ------------ Původní zpráva ------------
> Od: B.Tosovsky <B.Tosovsky@xxxxxxxxx>
> Předmět: Re:DAG 3.7T card SS7 capture
> Datum: 14.5.2008 16:41:30
> ----------------------------------------
> Thank you for the response. I have partial succes. I changed link type to ss7
> and now i see proper mtp3 layer messages, but sccp layer packets are malformed
> either as mtp2 layer packets  (FISU ???). Is it possible packets are somewhere
> cutted ?
> I use latest stable wireshark 1.0.0 version and libpcap 0.9.8.
>
> Thanks B.
> > ------------ Původní zpráva ------------
> > Od: B.Tosovsky <B.Tosovsky@xxxxxxxxx>
> > Předmět: DAG 3.7T card SS7 captur
> > Datum: 14.5.2008 15:27:03
> > ----------------------------------------
> > Hello,
> >
> > can you please help. I am playing with this card in Debian. Card is properly
> > installed, libpcap was compiled with DAG support.
> >
> > If i try to capture mtp2 packets  with endace tool dagsnap and save in ERF
> > format I a can read this file offline in wireshark properly.
> >
> > But if i try to capture packets  directly in wireshark through new interface
> > dag0  I see capturing packets, but there are decoded as CISCO HDLC malformed
> > packets ???
> >
> > Same situation is if i try to convert ERF file with dagconvert tool to pcap
> > file.
> >
> > Thanks
> >
> > B.
> >
> >
>
>