Hello everyone, Is there any special configuration needed in Tshark so that it can decode TCAP/GSM MAP/GSM SMS packets? Current captures show nothing above SCCP. Had the same issue with Wireshark but following postings in this forum I was able to resolve it by setting View -> Preferences -> Protocols -> MTP3=ANSI. How can something similar be done in Tshark? Many thanks in advance! Bill asked 09 Jun '17, 10:07  pafi84 |
One Answer:
You can use the '-o' option: answered 11 Jun '17, 08:52  Uli edited 11 Jun '17, 08:52 |
Uli, Thank you for taking the time to reply. Tshark now displays GSM MAP and GSM SMS messages. Best Regards, Bill
FYI, a more "permanent" method is to edit your .wireshark/preferences file (assuming Linux), and change the mtp3 parameter within the preferences file. That saves you from adding the -o flag if most of your traces use ANSI-standard for MTP3/M3UA.
@pafi84
If an answer has solved your issue, please accept the answer for the benefit of other users by clicking the checkmark icon next to the answer. Please read the FAQ for more information.