On 23.05.2006, at 12:31, dirk Bruyland wrote: Hello Users, I need to analyse M3UA and MTP3 protocol messages (specific messages , between 2 specific network elements) in ethereal SIGTRAN (IP/Ethernet) capture logfiles. The ethereal display filter will only select large ( containing many disparate MTP3 messages) ethernet frames. When I filter on "MTP3 msg xyz between node NE1 and NE2" (as specified by M3UA DPC), I get selected frames containing indeed the desired xyz but also 95% other MTP3/M3UA/SCTP messages from all over the place I am not really interested in.
Sounds like your MTP3 link transports messages for other nodes? -Has anybody encountered this SIGTRAN difficulty before?
I trace a lot on MTP3 but I've never seen that (but my links are based on M2PA, not M3UA and rarely have more than one MTP3 packet inside the SCTP packet). -Is it possible to dissect the capture file (get rid of the ethernet frame structure) and produce a new cap file only containing standalone elementary messages, so that the ethereal display filter works and selects on these messages and not on the large frames ?
Then ethereal wouldn't display it anymore. Can you give me an example of such a capture file? _______________________________________________ Ethereal-users mailing list
Andreas Fink Fink Consulting GmbH
--------------------------------------------------------------- Tel: +41-61-6666332 Fax: +41-61-6666331 Mobile: +41-79-2457333 Address: Clarastrasse 3, 4058 Basel, Switzerland E-Mail: afink@xxxxxxxxxxxxxxxxxx Homepage: http://www.finkconsulting.com ---------------------------------------------------------------
ICQ: 101946485 MSN: msn1@xxxxxx AIM: smsrelay Skype: andreasfink Yahoo: finkconsulting SMS: +41792457333 PGP9: 0714 DF2B A189 A760 6201 5CBD D040 3E71 4DAF 68BB
|
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users