Ethereal-users: Re: [Ethereal-users] does ethereal support native SS7 capture/decode ?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Jeff Morriss <jeff.morriss@xxxxxxxxxxx>
Date: Tue, 06 Sep 2005 09:16:10 -0400


Banibrata Dutta wrote:

Hi,

Does ethereal (v.10.12) support capture/decode of native SS7 PDU's ? I
was suprised to see that ethereal had decoded the message from MTP2
layer onwards, i.e. MTP2, MTP3, SCCP, TCAP, IS-41 MAP, without any
SIGTRAN headers involved !!
Ethereal has supported decoding from MTP2 up for quite some time. There are PCAP linktypes (DLT_ values) for raw MTP2, MTP3, SCCP, and MTP2-with-a-special-header so those messages from those protocols can be read from a PCAP file with one of those DLT values. Some SS7 stacks (or, in some cases, SS7 applications) can write out such PCAP files for analysis with Ethereal.
Capturing with Ethereal is a different story. I saw some talk recently about a patch to libpcap (used by tcpdump and Ethereal) to support native capturing on Septel cards (probably if you compile your own version with a special 'configure' option). But that's all I'm aware of.