ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-users: Re: [Wireshark-users] how to decode sccp messages?

From: Anders Broman <a.broman@xxxxxxxxxxxx>
Date: Wed, 22 Aug 2012 08:41:38 +0200
hadi motamedi skrev 2012-08-22 06:41:
On 8/21/12, Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> wrote:
hadi motamedi wrote:
Dear All
Can you please let me know if we can decode sccp messages via wireshark?
Yes, Wireshark has understood SCCP for a long time (2002 according to
the copyright in packet-sccp.c).  Wireshark can decode it over M3UA,
MTP3, TALI, and from PCAP files with a DLT value of 142.

Note: I'm assuming you're talking about SS7 SCCP; Wireshark also
understands Skinny which is also abbreviated SCCP sometimes.
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users

mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe

Sorry. My sccp messages is captured as a *.txt file how can I convert
it to *.pcap file so the Wireshark can analyze its sccp packets?
Use tex2pcap with a DLT value of 142, see tex2pcap man page for the usage. You can also try
file->import from the menu bar chose encapsulation type SS7 SCCP.
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
              mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe