Wireshark-bugs: [Wireshark-bugs] [Bug 9074] New: IMSI based filtering for SCCP/RANAP
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Sat, 24 Aug 2013 08:47:18 +0000
Bug ID 9074
Summary IMSI based filtering for SCCP/RANAP
Classification Unclassified
Product Wireshark
Version unspecified
Hardware All
OS All
Status UNCONFIRMED
Severity Enhancement
Priority Low
Component Dissection engine (libwireshark)
Assignee bugzilla-admin@wireshark.org
Reporter vineethvijaysv@gmail.com 

Created attachment 11447 [details]
Test Case

Build Information:
wireshark 1.11.0 (SVN Rev 51506 from /trunk)

Copyright 1998-2013 Gerald Combs <gerald@wireshark.org> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with GTK+ 2.22.0, with Cairo 1.10.0, with Pango 1.28.2, with
GLib 2.26.1, with libpcap, with libz 1.2.3.4, without POSIX capabilities,
without libnl, without SMI, without c-ares, without ADNS, without Lua, without
Python, without GnuTLS, without Gcrypt, without Kerberos, without GeoIP,
without
PortAudio, with AirPcap.

Running on Linux 2.6.35-22-generic, with locale en_IN, with libpcap version
1.1.1, with libz 1.2.3.4, without AirPcap.

Built using gcc 4.4.5.
--
Hi,

I saw in some threads that work was going on for IMSI based flow filtering for
protocols like SCCP,TCAP etc.

Attached are some "rudimentary" patches for getting this working for SCCP
message flow bearing IMSI in RANAP.

There are certain points like the use of global variable which I wanted to
avoid but couldn't think of a simple way to do so. Would be great if somebody
can clean this up/guide me to do so.

Also attached is a sample pcap containing two separate IMSI flows.

PS: All three patches need to be implemented for this to work.

You are receiving this mail because:
  • You are watching all bug changes.