{"id":180,"date":"2014-05-08T22:38:46","date_gmt":"2014-05-08T22:38:46","guid":{"rendered":"http:\/\/www.flat-planet.net\/?p=180"},"modified":"2014-05-08T22:38:46","modified_gmt":"2014-05-08T22:38:46","slug":"decoding-tcap-in-wireshark","status":"publish","type":"post","link":"https:\/\/flat-planet.net\/?p=180","title":{"rendered":"Decoding TCAP in Wireshark"},"content":{"rendered":"<p>Just jotting this down as a quick note, as I had some problems getting Wireshark (not it&#8217;s fault) to decode a <a href=\"http:\/\/en.wikipedia.org\/wiki\/SIGTRAN\">SIGTRAN<\/a> trace I was working on.<\/p>\n<p>Normally you have to configure TCAP to know what Subsystem Numbers [SSN] to handle on the SCCP layer e.g. 7 for VLR, 8 for MSC, etc. and this is done under Edit -&gt; Preferences -&gt; Protocols -&gt; TCAP<\/p>\n<p><a href=\"http:\/\/www.flat-planet.net\/wp-content\/uploads\/2014\/05\/TCAP-SSN-Config.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-183\" src=\"http:\/\/www.flat-planet.net\/wp-content\/uploads\/2014\/05\/TCAP-SSN-Config.png\" alt=\"TCAP SSN Config\" width=\"1137\" height=\"324\" \/><\/a><\/p>\n<p>Unfortunately my trace had a bug &#8211; there was no SSN in the response message so Wireshark was only decoding up to the SCCP layer.<\/p>\n<p><a href=\"http:\/\/www.flat-planet.net\/wp-content\/uploads\/2014\/05\/SSN-Not-Present.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-182\" src=\"http:\/\/www.flat-planet.net\/wp-content\/uploads\/2014\/05\/SSN-Not-Present.png\" alt=\"SSN Not Present\" width=\"724\" height=\"275\" \/><\/a><\/p>\n<p>You can handle this case by instructing SCCP to decode as TCAP by default.<\/p>\n<p><a href=\"http:\/\/www.flat-planet.net\/wp-content\/uploads\/2014\/05\/SCCP-Default-Payload.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-181\" src=\"http:\/\/www.flat-planet.net\/wp-content\/uploads\/2014\/05\/SCCP-Default-Payload.png\" alt=\"SCCP Default Payload\" width=\"1132\" height=\"419\" \/><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Just jotting this down as a quick note, as I had some problems getting Wireshark (not it&#8217;s fault) to decode a SIGTRAN trace I was working on. Normally you have to configure TCAP to know what Subsystem Numbers [SSN] to handle on the SCCP layer e.g. 7 for VLR, 8 for MSC, etc. and this [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[55],"tags":[78,76,32,75,77,74],"series":[],"class_list":["post-180","post","type-post","status-publish","format-standard","hentry","category-information-technology","tag-sccp","tag-sigtran","tag-simple-things","tag-ss7","tag-tcap","tag-wireshark"],"_links":{"self":[{"href":"https:\/\/flat-planet.net\/index.php?rest_route=\/wp\/v2\/posts\/180","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/flat-planet.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/flat-planet.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/flat-planet.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/flat-planet.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=180"}],"version-history":[{"count":1,"href":"https:\/\/flat-planet.net\/index.php?rest_route=\/wp\/v2\/posts\/180\/revisions"}],"predecessor-version":[{"id":184,"href":"https:\/\/flat-planet.net\/index.php?rest_route=\/wp\/v2\/posts\/180\/revisions\/184"}],"wp:attachment":[{"href":"https:\/\/flat-planet.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=180"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/flat-planet.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=180"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/flat-planet.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=180"},{"taxonomy":"series","embeddable":true,"href":"https:\/\/flat-planet.net\/index.php?rest_route=%2Fwp%2Fv2%2Fseries&post=180"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}