This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Specifying custom ISPC to name mapping in Wireshark

0

Hello,

Would it be possible to use a specific mapping of ISPC to name of the signalling point operator in Wireshark by specifying it in the configuration or somehow, without needing to specify it in packet-q708.c and recompiling it?

Cheers, zvmduka

asked 14 Jun '13, 03:11

zvmduka's gravatar image

zvmduka
16114
accept rate: 0%


2 Answers:

0

No, you can't do that now. But there's an enhancement request out there which requests the functionality.

answered 14 Jun '13, 06:57

JeffMorriss's gravatar image

JeffMorriss ♦
6.2k572
accept rate: 27%

Thanks for the info Jeff, I haven't seen this request before.

(15 Jun '13, 05:28) zvmduka

1

use a specific mapping of ISPC to name of the signalling point ... without needing to specify it in packet-q708.c

Unfortunately that is not implemented in that code (no user definable options). So, if you need to change a mapping, you'll have to change the code and then recompile it.

BTW #1: If a 'mapping bug' is the reason for the change, please file a bug report at https://bugs.wireshark.org

BTW #2: Why do you need a different mapping? Maybe there is another solution for your problem.

Regards
Kurt

answered 14 Jun '13, 06:26

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

edited 14 Jun '13, 06:26

For #2: think of it as IP<->hostname mapping except for SS7 point codes.

(14 Jun '13, 06:58) JeffMorriss ♦

maybe he needs the mapping just for some kind of quick analysis,which could also be done with a script !?!

(14 Jun '13, 07:17) Kurt Knochner ♦

Thanks for the info Kurt!

1: there's no bug in ISPC->operator mapping, that's all good.

2: to have a human-readable format of the point codes used in the internal communication between the nodes and as well with international ones.

In the telco network you have a big bunch of nodes communicating with paired routers and it would be easier to see through the Wireshark communication between "London-SMSC-4; London-HLR-1" rather than OPC/DPC == 1234/5678.

Anyways, thanks for the info. For the time being I'll keep the list of PCs in packet-q708.c and recompile when necessary.

Cheers!

(15 Jun '13, 05:19) zvmduka