I have sample SS7 traces...and my aim is to find tcap abort send in response of alertSC to achieve same following is the procedure i follow. 1.Apply filter gsm_old.localValue == 64 this will filter out all alertSC packet. 2.Get tcap id from TCAP layer. 3.Apply filter tcap.tid == <id> 4.Check if this is abort packet or not. Now my problem is there are n huge number of alertSC packets and i cant keep on doing this for every packet, is there any way to sort out the problem With Regards Avinash Jha This question is marked "community wiki". asked 26 Jul '12, 03:16  creative edited 26 Jul '12, 03:25 |
One Answer:
There's a thing called MATE build into Wireshark. That may be of help here. answered 26 Jul '12, 05:10  Jaap ♦ |
