First time here? Check out the FAQ!
Sorry, this content is no longer available
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

Can we show IP address instead of Point codes as source and destination addresses for GSM MAP in the packet list?

Hi,

Currently, for GSM MAP traffic, Wireshark shows source and destination point codes in Wireshark.

Can we show IP address instead of Point codes for GSM MAP?

For e.g. This is a sample only

Currently, Wireshark shows:

1 0.000000 12345 12123 GSM MAP 226 SACK invoke sendRoutingInfo

Expected IP address instead of point code.

1 0.000000 10.10.10.10 10.12.12.12 GSM MAP 226 SACK invoke sendRoutingInfo

Please suggest, if any configuration/s in Wireshark to achieve this.

Thanks and best regards,

Ajit Kuchekar

ajitkuchekar's avatar
3
ajitkuchekar
asked 2021-05-31 06:13:32 +0000
Guy Harris's avatar
19.9k
Guy Harris
updated 2021-05-31 11:52:54 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

(There is a sample capture on the GSMMAP wiki page.)

The src and dst are defined in packet_info.h:

  address dl_src;                   /**< link-layer source address */
  address dl_dst;                   /**< link-layer destination address */
  address net_src;                  /**< network-layer source address */
  address net_dst;                  /**< network-layer destination address */
  address src;                      /**< source address (net if present, DL otherwise )*/
  address dst;                      /**< destination address (net if present, DL otherwise )*/


Then packet-mtp3.c comes along and changes them to higher protocol source and destination addresses.

  mtp3_addr_opc->type = (Standard_Type)mtp3_standard;
  mtp3_addr_opc->pc = opc;
  set_address(&pinfo->src, mtp3_address_type, mtp3_addr_len(), (guint8 *) mtp3_addr_opc);

  mtp3_addr_dpc->type = (Standard_Type)mtp3_standard;
  mtp3_addr_dpc->pc = dpc;
  set_address(&pinfo->dst, mtp3_address_type, mtp3_addr_len(), (guint8 *) mtp3_addr_dpc);


There's not much in the User's Guide on adding columns. Video here Getting Started With Wireshark - Initial Setup that covers making a new profile and adding columns.

In the screen below, I added columns for Network src addr and Network dest addr.
If that meets your needs, then the default Source and Address columns could be set to not display.

image description

Chuckc's avatar
3k
Chuckc
answered 2021-05-31 19:06:52 +0000
edit flag offensive 0 remove flag delete link

Comments

Thank you for the information! it really helps.

ajitkuchekar's avatar ajitkuchekar (2021-06-01 05:09:42 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer