Re: Dissect Sigtran capture files

Andreas Fink <[email protected]>
Newsgroups gmane.network.ethereal.user
Message-ID <[email protected]>
On 23.05.2006, at 12:31, dirk Bruyland wrote:

> Hello Users,
>
> I need to analyse M3UA and MTP3 protocol messages (specific  
> messages , between 2 specific network elements) in ethereal SIGTRAN  
> (IP/Ethernet) capture logfiles.
>
> The ethereal display filter will only select large ( containing  
> many disparate MTP3 messages) ethernet frames.
>
> When I filter on "MTP3 msg xyz between node NE1 and NE2" (as  
> specified by M3UA DPC), I get selected frames containing indeed the  
> desired xyz  but also 95% other MTP3/M3UA/SCTP messages from all  
> over the place I am not really interested in.

Sounds like your MTP3 link transports messages for other nodes?

> -Has anybody encountered this SIGTRAN difficulty before?

I trace a lot on MTP3 but I've never seen that (but my links are  
based on M2PA, not M3UA and rarely have more than one MTP3 packet  
inside the SCTP packet).
> -Is it possible to dissect the capture file (get rid of the  
> ethernet frame structure) and produce a new cap file only  
> containing standalone elementary messages, so that the ethereal  
> display filter works and selects on these messages and not on the  
> large frames ?

Then ethereal wouldn't display it anymore.
Can you give me an example of such a capture file?
> Thanks in advance
>
> Dirk
>
>
> _______________________________________________
> Ethereal-users mailing list
> [email protected]
> http://www.ethereal.com/mailman/listinfo/ethereal-users


Andreas Fink
Fink Consulting GmbH

---------------------------------------------------------------
Tel: +41-61-6666332 Fax: +41-61-6666331  Mobile: +41-79-2457333
Address: Clarastrasse 3, 4058 Basel, Switzerland
E-Mail:  [email protected]
Homepage: http://www.finkconsulting.com
---------------------------------------------------------------

ICQ: 101946485 MSN: [email protected] AIM: smsrelay Skype: andreasfink
Yahoo: finkconsulting SMS: +41792457333
PGP9: 0714 DF2B A189 A760 6201  5CBD D040 3E71 4DAF 68BB

_______________________________________________
Ethereal-users mailing list
[email protected]
http://www.ethereal.com/mailman/listinfo/ethereal-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.