Ask Your Question
0

Can we show IP address instead of Point codes as source and destination addresses for GSM MAP in the packet list?

asked 2021-05-31 06:13:32 +0000

ajitkuchekar gravatar image

updated 2021-05-31 11:52:54 +0000

Guy Harris gravatar image

Hi,

Currently, for GSM MAP traffic, Wireshark shows source and destination point codes in Wireshark.

Can we show IP address instead of Point codes for GSM MAP?

For e.g. This is a sample only

Currently, Wireshark shows:

1 0.000000 12345 12123 GSM MAP 226 SACK invoke sendRoutingInfo

Expected IP address instead of point code.

1 0.000000 10.10.10.10 10.12.12.12 GSM MAP 226 SACK invoke sendRoutingInfo

Please suggest, if any configuration/s in Wireshark to achieve this.

Thanks and best regards,

Ajit Kuchekar

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2021-05-31 19:06:52 +0000

Chuckc gravatar image

(There is a sample capture on the GSMMAP wiki page.)

The src and dst are defined in packet_info.h:

  address dl_src;                   /**< link-layer source address */
  address dl_dst;                   /**< link-layer destination address */
  address net_src;                  /**< network-layer source address */
  address net_dst;                  /**< network-layer destination address */
  address src;                      /**< source address (net if present, DL otherwise )*/
  address dst;                      /**< destination address (net if present, DL otherwise )*/


Then packet-mtp3.c comes along and changes them to higher protocol source and destination addresses.

  mtp3_addr_opc->type = (Standard_Type)mtp3_standard;
  mtp3_addr_opc->pc = opc;
  set_address(&pinfo->src, mtp3_address_type, mtp3_addr_len(), (guint8 *) mtp3_addr_opc);

  mtp3_addr_dpc->type = (Standard_Type)mtp3_standard;
  mtp3_addr_dpc->pc = dpc;
  set_address(&pinfo->dst, mtp3_address_type, mtp3_addr_len(), (guint8 *) mtp3_addr_dpc);


There's not much in the User's Guide on adding columns. Video here Getting Started With Wireshark - Initial Setup that covers making a new profile and adding columns.

In the screen below, I added columns for Network src addr and Network dest addr.
If that meets your needs, then the default Source and Address columns could be set to not display.

image description

edit flag offensive delete link more

Comments

Thank you for the information! it really helps.

ajitkuchekar gravatar imageajitkuchekar ( 2021-06-01 05:09:42 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2021-05-31 06:13:32 +0000

Seen: 719 times

Last updated: May 31 '21