Ethereal-users: [Ethereal-users] Dissect Sigtran capture files

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "dirk Bruyland" <dbruyland98@xxxxxxxxxxx>
Date: Tue, 23 May 2006 10:31:29 +0000

Hello Users,

I need to analyse M3UA and MTP3 protocol messages (specific messages , between 2 specific network elements) in ethereal SIGTRAN (IP/Ethernet) capture logfiles.

The ethereal display filter will only select large ( containing many disparate MTP3 messages) ethernet frames.

When I filter on "MTP3 msg xyz between node NE1 and NE2" (as specified by M3UA DPC), I get selected frames containing indeed the desired xyz  but also 95% other MTP3/M3UA/SCTP messages from all over the place I am not really interested in.

-Has anybody encountered this SIGTRAN difficulty before?

-Is it possible to dissect the capture file (get rid of the ethernet frame structure) and produce a new cap file only containing standalone elementary messages, so that the ethereal display filter works and selects on these messages and not on the large frames ?

Thanks in advance

Dirk

_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users