trying to capture ANSI MAP i.e IS41 trace on wireshark but its showing till SCCP and that too malformed Please suggest asked 18 Mar '15, 04:33  rkadvantal |
One Answer:
you need to choose ANSI under mtp3 in preferences-->protocols answered 18 Mar '15, 06:28  Dianalab9 |
What Dianalab9 said, as well as make sure in the ANSI_MAP protocol preferences you have the correct SSN(s) listed. Wireshark gets to SCCP but for some reason, it is not obvious to it how to decode the layer above SCCP (which is ANSI TCAP in your case)