Hi,
I've been using ethereal to decode exactly the the protocol stack you describe. Version 10.7 works well, but
unfortunately there are bugs in the GSM decoder for later versions of ethereal that I've tried (which I've
reported to this list).
Regarding configuration, each decoder must pass on it's payload to the next one, so at lower levels you must
make sure the decoder is processing the correct port numbers. At higher levels you need to make sure that the
right sub-system numbers are being processed.
In the ethereal menu system select "edit" -> "preferences" -> "protocols" enter the appropriate settings for
the protocols you're using. It's pretty obvious what to do once you find the right entries. Just check each
protocol you're using until you find the setting that's blocking the decode (I usually find its the sub-system
number)
Once it's working OK, you should be able to read SMS text messages, look at IMSI addresses, and MSISDN
addresses, etc.
Good luck.
/John.
Message: 7
Date: Thu, 05 May 2005 23:30:49 +0000
From: "Pow Wanger" <wangpower@xxxxxxxxxxx>
Subject: [Ethereal-users] decoding GSM MAP
To: ethereal-users@xxxxxxxxxxxx
Message-ID: <BAY103-F39C1CB7371508889AC5731AF1A0@xxxxxxx>
Content-Type: text/plain; format=flowed
Hi all
does anyone how to use ethereal to decode GSM MAP? I have a trace which has
the protocol stack GSM_MAP/TCAP/SCCP/M3UA/SCTP/IP, but ethereal can only
decode up to M3UA.
Thanks, pw