This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

could you tell me how to dissect fp over udp?

1

could you tell me how to dissect fp over udp? Gr.

asked 03 Jul '12, 01:11

smilezuzu's gravatar image

smilezuzu
20323237
accept rate: 0%


One Answer:

1

You can't dissect FP over UDP and the higer layers without prior knowledge of the content/Configuration hence the FP dissector requires a "per-packet" structure to be filed in in order to do the dissection. The NBAP dissectore has code to set up a conversation and fill parts of the required information should NBAP signaling be present in the trace(Work in progress). There is provissions for a pseudo UDP FP format should your equipment be able to produce it. See the wireshark wiki and simmilar questions asked before. The FP-hint dissector also handles some pseudo format. It might be possible to constuct a heuristic FP dissector but it might requre "three-pass" dissection. 1) Use the header CRC to confirm FP packet. 1b)Use the command code to find the channel type. If it's not a DCH channel there might be enough information to dissect the rest of the packet.

answered 03 Jul '12, 22:28

Anders's gravatar image

Anders ♦
4.6k952
accept rate: 17%