Dear All
 The issue has been resolved after defining the SSN numbers. Alain and Anders, thanks a lot for your help.
 
Regards
Jehanzeb
----- Original Message ----
From: AMEAUME ALAIN <Alain.Ameaume@xxxxxxxxxxxxxxxxx>
To: Community support list for Wireshark <wireshark-users@xxxxxxxxxxxxx>
Sent: Friday, February 8, 2008 12:55:34 PM
Subject: Re: [Wireshark-users] Query regarding GSM MAP traces analysis
 > Dear All
 >  I have collected some SIGTRAN traces between (R11 GSM MAP) with Wireshark 0.99.7 (Windows).
 
 >  All protocols have been enabled, however when analyzing the packets, Wireshark disects and displays packet details/attributes till SCCP layer (i.e. IP,  SCTP, M3UA and SCCP). 
 
  > All SCCP User Data (e.g. MAP) however is just shown as "Data". SCCP Message Type is UnitData (0x09), Class is 0x01.
 
  > Any ideas if i have missed something while enabling the protocols? Or do i need to do something specific to enable SCCP user data analysis/disection? 
 
 
To decode gsm MAP protocols, define all the SubSystem Numbers reserved for MAP (SSN) : 
Select menu : Edit / Preferences 
Click on "Protocols" 
Scroll down to "GSM_MAP" 
Fill "TCAP SSNs" textfield (like :5,6,7,8,9,10,12,147) 
Finished ? "APPLY/OK"
 
Alain.  
   
 
 
      
Be a better friend, newshound, and 
know-it-all with Yahoo! Mobile. 
 Try it now.