| Bug ID |
9074
|
| Summary |
IMSI based filtering for SCCP/RANAP
|
| Classification |
Unclassified
|
| Product |
Wireshark
|
| Version |
unspecified
|
| Hardware |
All
|
| OS |
All
|
| Status |
UNCONFIRMED
|
| Severity |
Enhancement
|
| Priority |
Low
|
| Component |
Dissection engine (libwireshark)
|
| Assignee |
[email protected]
|
| Reporter |
[email protected]
|
Created attachment 11447 [details]
Test Case
Build Information:
wireshark 1.11.0 (SVN Rev 51506 from /trunk)
Copyright 1998-2013 Gerald Combs <[email protected]> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (32-bit) with GTK+ 2.22.0, with Cairo 1.10.0, with Pango 1.28.2, with
GLib 2.26.1, with libpcap, with libz 1.2.3.4, without POSIX capabilities,
without libnl, without SMI, without c-ares, without ADNS, without Lua, without
Python, without GnuTLS, without Gcrypt, without Kerberos, without GeoIP,
without
PortAudio, with AirPcap.
Running on Linux 2.6.35-22-generic, with locale en_IN, with libpcap version
1.1.1, with libz 1.2.3.4, without AirPcap.
Built using gcc 4.4.5.
--
Hi,
I saw in some threads that work was going on for IMSI based flow filtering for
protocols like SCCP,TCAP etc.
Attached are some "rudimentary" patches for getting this working for SCCP
message flow bearing IMSI in RANAP.
There are certain points like the use of global variable which I wanted to
avoid but couldn't think of a simple way to do so. Would be great if somebody
can clean this up/guide me to do so.
Also attached is a sample pcap containing two separate IMSI flows.
PS: All three patches need to be implemented for this to work.
You are receiving this mail because:
- You are watching all bug changes.