This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I am trying to decode SCTP frames that contain CAPv2 (Camel) operations however decoding stops at SCCP level. SCCP addresses contain: - Address Indicator H'0989 - Route on GT - GT indicator: Translation Type only - SSN not present - Point Code present - Point Code - Global Title - Translation Type - Address information (digits)

The Addresses on SCCP do not contain SSN, instead routing is performed solely on global title containing Translation Type and Address Information. Is there a setting I can use to decode these messages on TCAP level including the Camel decoding?

asked 06 May '11, 00:58

acve's gravatar image

acve
1112
accept rate: 0%


In current trunk (and 1.5.1) the SCCP dissector has a preference for a "default payload" (it was added by https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3301 ). You'd need to set that to "tcap" to decode messages with no SSN in it as TCAP.

[Update] Don't forget to drop by and Accept this answer if it answered your question.

permanent link

answered 06 May '11, 06:32

JeffMorriss's gravatar image

JeffMorriss ♦
6.2k572
accept rate: 27%

edited 09 Mar '12, 07:03

Great, this worked for me. Thanks for the help

(09 May '11, 04:22) acve
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×16
×13
×7
×3
×1

question asked: 06 May '11, 00:58

question was seen: 5,173 times

last updated: 09 Mar '12, 07:03

p​o​w​e​r​e​d by O​S​Q​A