Re: how to decode sccp messages?

[Anders Broman <a.broman () bredband net>]

hadi motamedi skrev 2012-08-22 06:41:
> On 8/21/12, Jeff Morriss <jeff.morriss.ws () gmail com> wrote:
> > hadi motamedi wrote:
> > > Dear All
> > > Can you please let me know if we can decode sccp messages via wireshark?
> > Yes, Wireshark has understood SCCP for a long time (2002 according to
> > the copyright in packet-sccp.c).  Wireshark can decode it over M3UA,
> > MTP3, TALI, and from PCAP files with a DLT value of 142.
> >
> > Note: I'm assuming you're talking about SS7 SCCP; Wireshark also
> > understands Skinny which is also abbreviated SCCP sometimes.
> > ___________________________________________________________________________
> > Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
> > Archives:    http://www.wireshark.org/lists/wireshark-users
> > Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
> >
> > mailto:wireshark-users-request () wireshark org?subject=unsubscribe
> Sorry. My sccp messages is captured as a *.txt file how can I convert
> it to *.pcap file so the Wireshark can analyze its sccp packets?
Use tex2pcap with a DLT value of 142, see tex2pcap man page for the 
usage. You can also try
file->import from the menu bar chose encapsulation type SS7 SCCP.
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
> Archives:    http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>               mailto:wireshark-users-request () wireshark org?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request () wireshark org?subject=unsubscribe