[Wireshark-dev] Decode MTP3 message

2012-02-24 Thread Anya Verizi
Hello, Can anyone know how I can decode MTP3 message? For example I put code in txt file and then to pcap (text2pcap -l 141 file.txt file.pcap ), but when I open it in wireshark I got malformed packet:ISUP? Do I must put some in txt file before? Thanks Anya

Re: [Wireshark-dev] Decode MTP3 message

2012-02-24 Thread Martin Kaiser
Thus wrote Anya Verizi (anya_ver...@hotmail.com): Can anyone know how I can decode MTP3 message? For example I put code in txt file and then to pcap (text2pcap -l 141 file.txt file.pcap ), but when I open it in wireshark I got malformed packet:ISUP? Do I )must put some in txt file before? in

Re: [Wireshark-dev] Decode MTP3 message

2012-02-24 Thread Anya Verizi
+0100 From: li...@kaiser.cx To: wireshark-dev@wireshark.org Subject: Re: [Wireshark-dev] Decode MTP3 message Thus wrote Anya Verizi (anya_ver...@hotmail.com): Can anyone know how I can decode MTP3 message? For example I put code in txt file and then to pcap (text2pcap -l 141 file.txt

Re: [Wireshark-dev] Decode MTP3 message

2012-02-24 Thread Martin Kaiser
Thus wrote Anya Verizi (anya_ver...@hotmail.com): I have to decode this sequence 02 00 10 c0 00 19 81 0f 0f 00 2c 01 01 11 02 16 00 00 but when I put it in txt and run as pcap I got this Frame 1 (23 bytes on wire, 23 bytes captured) Arrival Time: Feb 24, 2012 13:38:09.0

Re: [Wireshark-dev] Decode MTP3 message

2012-02-24 Thread Jeff Morriss
Martin Kaiser wrote: Thus wrote Anya Verizi (anya_ver...@hotmail.com): I have to decode this sequence 02 00 10 c0 00 19 81 0f 0f 00 2c 01 01 11 02 16 00 00 but when I put it in txt and run as pcap I got this your problem is the leading 05 00 00 00 00 bytes Those bytes starting at 05

Re: [Wireshark-dev] Decode MTP3 message

2012-02-24 Thread Anya Verizi
figure out where are isup messages... Date: Fri, 24 Feb 2012 09:24:37 -0500 From: jeff.morriss...@gmail.com To: wireshark-dev@wireshark.org Subject: Re: [Wireshark-dev] Decode MTP3 message Martin Kaiser wrote: Thus wrote Anya Verizi (anya_ver...@hotmail.com): I have to decode

Re: [Wireshark-dev] Decode MTP3 message

2012-02-24 Thread Anya Verizi
I solve it. First 16 bits are from MTP2 , others are ISUP message than can be decoded. Thanks all Cheers Date: Fri, 24 Feb 2012 09:24:37 -0500 From: jeff.morriss...@gmail.com To: wireshark-dev@wireshark.org Subject: Re: [Wireshark-dev] Decode MTP3 message Martin Kaiser wrote: Thus