Ethereal-dev: Re: [Ethereal-dev] ISUP/MTP support

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Tue, 18 Nov 2003 01:11:00 -0800
On Tue, Nov 18, 2003 at 11:06:05AM +0530, Lalit Manchanda wrote:
> Another question is, if I have a septel card, connecting to network
> using E1 interface, how can I catpture and decode packets from this
> interface?

If the card looks like a regular network interface (the same way an
Ethernet card is), you'd capture on it.

However, I infer from

	http://resource.intel.com/telecom/support/releases/winnt/SR511/docs/htmlfiles/gcss7tug/globalc3.htm

that it's probably *not* such a card.

If so, then, if you want to do the capturing with Ethereal, you would
have to

	1) find out from Intel how an application running on the machine
	   with that card can "tap in" to some other application's
	   session on that card;

	2) write code to do that and plug it into libpcap;

	3) get a link-layer type value from tcpdump.org for it (which
	   would probably just involve using one of the LINKTYPE_RAWSS7
	   values);

	4) change Ethereal to support the link-layer type in question;

or you'd have to find some type of hardware that could passively tap
into the E1 line and write code for libpcap to plug into *it*.

You might also be able to capture with some commercial product, although
if you want Ethereal to be able to read captures from that product, you
might either have to get documentation for that product's file format,
or get some captures from it and do reverse engineering.