This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Unable to decode TCAP/GSM_MAP/GSM_SMS protocol layers..showing upto SCCP

0

Hi All,

Not able to see the decoded trace after SCCP. Its showing as only data after SCCP. Please guide me to see decoded layers of TCAP/GSM_MAP/GSM_SMS protocol.

Is there any setting change required

Regards, Arpit

asked 10 Apr '14, 23:47

Arpit's gravatar image

Arpit
1111
accept rate: 0%


2 Answers:

0

Check tat your GSM MAP ssn preferences matches the ssn used in SCCP.

answered 11 Apr '14, 02:02

Anders's gravatar image

Anders ♦
4.6k952
accept rate: 17%

Its already configured SSN value as 0-8 in GSM MAP.

We have used SSN 8 at called GT in SCCP, but in opened trace in wire-shark, I am unable to find any SSN value.

Most of all packet is showing with as SSN not present:--

{.... ..0. = SubSystem Number Indicator: SSN not present (0x00)}

And for some packet, SSN field value appearing in wire-shark trace as:---

"Expert Info (Warn/Protocol): Message is routed on SSN, but SSN is not present"

Please guide.

Regard, Arpit

(14 Apr '14, 23:12) Arpit

0

From the Wireshark GUI, go to Edit > Preferences > Protocols > GSM MAP, and make sure that the called SSN in your SCCP header is included in the list of SSNs to map to this protocol.

answered 11 Apr '14, 17:32

Quadratic's gravatar image

Quadratic
1.9k6928
accept rate: 13%

Its already configured SSN value as 0-8 in GSM MAP.

We have used SSN 8 at called GT in SCCP, but in opened trace in wire-shark, I am unable to find any SSN value.

Most of all packet is showing with as SSN not present:--

{.... ..0. = SubSystem Number Indicator: SSN not present (0x00)}

And for some packet, SSN field value appearing in wire-shark trace as:---

"Expert Info (Warn/Protocol): Message is routed on SSN, but SSN is not present"

Please guide.

Regard, Arpit

(14 Apr '14, 23:12) Arpit

Try fiddling with the SCCP preferenses and "Users table", for more help you'll need to publish the trace somewhere so we can have a look at it.

(15 Apr '14, 00:44) Anders ♦

I've seen it show 'Message is routed on SSN but SSN is not present" when the MTP3 layer was incorrectly decoding. Under MTP3 preferences, make sure it's set correctly to ITU, ANSI, etc.

If it still doesn't work, please upload here and post the URL: https://appliance.cloudshark.org/upload/

(15 Apr '14, 15:27) Quadratic