Ethereal-dev: [Ethereal-dev] Re: Encapsulation formats for MTP3 or M3UA?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Thomas Steffen <steffen.list.account@xxxxxxxxx>
Date: Wed, 17 Aug 2005 15:28:02 +0200
On 8/1/05, Thomas Steffen <steffen.list.account@xxxxxxxxx> wrote:
> I use Ethereal to dissect MTP3 and M3UA messages, that are captured
> just above the MTP2 and the SCTP layer. 

and the problem was to get them into one trace. This is the solution
that I found:

I add synthetic Ethernet headers to the SCTP packets, which is straight forward.

For the MTP3 packets, I was looking for a way to get them into the
same trace (which is an IP trace). There is a dissector that can do
this: TALI (Tekelec's Transport Adapter Layer Interface, RFC 3094). It
can read MTP3 packets (and several other SS7 layers) encapsulated in a
TCP stream. So I add synthetic TALI, TCP, IP, Ethernet and libpcap
headers, and it works like a charm. I should even be able to encode
the timeslot and the direction.

Thanks for all the helpful hints. Yes, of course libpcap TNG will be
nice, but I need something now, so this is the second best :-)

Thomas