Wireshark-users: Re: [Wireshark-users] Query regarding GSM MAP traces analysis
From: "AMEAUME ALAIN" <Alain.Ameaume@xxxxxxxxxxxxxxxxx>
Date: Fri, 8 Feb 2008 08:55:34 +0100
 > Dear All
 >  I have collected some SIGTRAN traces between (R11 GSM MAP) with Wireshark 0.99.7 (Windows).
 
 >  All protocols have been enabled, however when analyzing the packets, Wireshark disects and displays packet details/attributes till SCCP layer (i.e. IP,  SCTP, M3UA and SCCP).
 
  > All SCCP User Data (e.g. MAP) however is just shown as "Data". SCCP Message Type is UnitData (0x09), Class is 0x01.
 
  > Any ideas if i have missed something while enabling the protocols? Or do i need to do something specific to enable SCCP user data analysis/disection? 
 
 
To decode gsm MAP protocols, define all the SubSystem Numbers reserved for MAP (SSN) :
Select menu : Edit / Preferences
Click on "Protocols"
Scroll down to "GSM_MAP"
Fill "TCAP SSNs" textfield (like :5,6,7,8,9,10,12,147)
Finished ? "APPLY/OK"
 
Alain.