Ethereal-users: RE: [Ethereal-users] Ranap decoding
Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.
From: "Michael Lum" <mlum@xxxxxxxxxxxxx>
Date: Thu, 29 Apr 2004 09:46:44 -0700
OK, I did it for you and the RANAP dissector seg faults. I am submitting a patch for that problem but that's not going to help you because the dissector thinks that the message has extensions. I have attached the text file I used with text2pcap so people have an example. In this case I just stuffed the RANAP message into an ANSI SCCP Unitdata message. M2UA should be set to Draft 7. I have attached the text2pcap output that will cause a "stock" ethereal to crap out. I have attached a small working RANAP file, this particular one needs MTP3 set to Chinese ITU, and M2UA set to Draft 7. It contains one RANAP Initial UE Message with an embedded DTAP Location Update Request. (ran_killer - don't worry about the name) > -----Original Message----- > From: ethereal-users-bounces@xxxxxxxxxxxx > [mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of Michael Lum > Sent: Thursday, April 29, 2004 8:32 AM > To: 'Ethereal user support' > Subject: RE: [Ethereal-users] Ranap decoding > > > You need to make sure sure have the appropriate protocols lined up. > > Is this pure RANAP, if so then you should M2UA/MTP3/SCCP > before it, adjust the offsets and lengths and then use > text2pcap to put an SCTP layer under it all. > > That would give you the following: > > RANAP > SCCP > MTP3 > M2UA > SCTP > IP > > It should then decode properly assuming all of the lengths > are correct. > > > -----Original Message----- > > From: ethereal-users-bounces@xxxxxxxxxxxx > > [mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of Bieb > > Sent: Thursday, April 29, 2004 7:35 AM > > To: ethereal-users@xxxxxxxxxxxx > > Subject: [Ethereal-users] Ranap decoding > > > > > > Hi, > > > > I see that Ethereal can decode RANAP messages. I have > > a logfile (not a capture file) from a RADCOM analyser > > in this file the RANAP message is displayed and the > > Raw data is diplayed as follows: > > > > RAW DATA : > > 0000: 83 81 0C 6B 73 06 FE 00 AD 00 01 1E 00 14 40 > > 1A ...ks........... > > 0010: 00 00 01 00 10 40 13 12 83 48 04 0A A2 88 81 > > 21 .........H...... > > 0020: 15 63 28 00 50 82 15 02 03 01 00 00 88 01 11 > > C4 .c..P........... > > 0030: 83 81 0C 6B 73 06 FE 00 AD 00 01 1E 00 14 40 > > 1A ...ks........... > > 0040: 00 00 01 00 10 40 13 12 83 48 04 0A A2 88 81 > > 21 .........H...... > > 0050: 15 63 28 00 50 82 15 02 00 00 00 30 84 30 96 > > 04 .c..P......0.0.. > > > > > > I read on the help page that I can convert this into a > > PCAP file that ethereal can read this file then, using > > text2pcap. I tried this but the file can not be read by > > ethereal. What am I doing wrong? > > > > Any help is welcome. > > > > Arbo > > > > > > > > > > __________________________________ > > Do you Yahoo!? > > Win a $20,000 Career Makeover at Yahoo! HotJobs > > http://hotjobs.sweepstakes.yahoo.com/careermakeover > > > > _______________________________________________ > > Ethereal-users mailing list > > Ethereal-users@xxxxxxxxxxxx > > http://www.ethereal.com/mailman/listinfo/ether> eal-users > > > > _______________________________________________ > Ethereal-users mailing list > Ethereal-users@xxxxxxxxxxxx > http://www.ethereal.com/mailman/listinfo/ethereal-users >
Attachment:
output
Description: Binary data
Attachment:
input
Description: Binary data
Attachment:
ran_killer
Description: Binary data
- References:
- RE: [Ethereal-users] Ranap decoding
- From: Michael Lum
- RE: [Ethereal-users] Ranap decoding
- Prev by Date: RE: [Ethereal-users] Problem installing WinPcap3.0 and Ethereal
- Next by Date: [Ethereal-users] Tethereal start capture question
- Previous by thread: RE: [Ethereal-users] Ranap decoding
- Next by thread: [Ethereal-users] Ethereal 0.10.3/WinPCap 3.1b/XP/Dialup
- Index(es):