Ethereal-dev: Re: [Ethereal-dev] Questions about Connection Oriented SCCP

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Tue, 7 Oct 2003 12:50:24 -0700

On Oct 7, 2003, at 8:49 AM, Michael Lum wrote:


I don't know much (anything) about conversations, do they have the
capability to follow what could be long lasting SCCP connections.
What do you mean by "long-lasting"? A conversation just associates information with two address/port pairs; it doesn't care how many packets happen to have that address/port pair. 


I am currently using an heuristic dissector.
For which protocol? RANAP isn't a heuristic dissector in the current CVS version; have you modified it to be heuristic? 


It seems like a lot of work to keep track of the MTP3/xLR/SSN
data.
I'm not sure setting up a conversation would be that much work. In fact, if the idea is that all payload for a given SCCP connection should be dissected with a particular dissector, you wouldn't even need to keep track of the SSN, you'd just make that dissector the conversation dissector for that conversation.