You need to make sure sure have the appropriate protocols lined up.
Is this pure RANAP, if so then you should M2UA/MTP3/SCCP before it,
adjust the offsets and lengths and then use text2pcap to put an
SCTP layer under it all.
That would give you the following:
RANAP
SCCP
MTP3
M2UA
SCTP
IP
It should then decode properly assuming all of the lengths are correct.
> -----Original Message-----
> From: ethereal-users-bounces@xxxxxxxxxxxx
> [mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of Bieb
> Sent: Thursday, April 29, 2004 7:35 AM
> To: ethereal-users@xxxxxxxxxxxx
> Subject: [Ethereal-users] Ranap decoding
>
>
> Hi,
>
> I see that Ethereal can decode RANAP messages. I have
> a logfile (not a capture file) from a RADCOM analyser
> in this file the RANAP message is displayed and the
> Raw data is diplayed as follows:
>
> RAW DATA :
> 0000: 83 81 0C 6B 73 06 FE 00 AD 00 01 1E 00 14 40
> 1A ...ks...........
> 0010: 00 00 01 00 10 40 13 12 83 48 04 0A A2 88 81
> 21 .........H......
> 0020: 15 63 28 00 50 82 15 02 03 01 00 00 88 01 11
> C4 .c..P...........
> 0030: 83 81 0C 6B 73 06 FE 00 AD 00 01 1E 00 14 40
> 1A ...ks...........
> 0040: 00 00 01 00 10 40 13 12 83 48 04 0A A2 88 81
> 21 .........H......
> 0050: 15 63 28 00 50 82 15 02 00 00 00 30 84 30 96
> 04 .c..P......0.0..
>
>
> I read on the help page that I can convert this into a
> PCAP file that ethereal can read this file then, using
> text2pcap. I tried this but the file can not be read by
> ethereal. What am I doing wrong?
>
> Any help is welcome.
>
> Arbo
>
>
>
>
> __________________________________
> Do you Yahoo!?
> Win a $20,000 Career Makeover at Yahoo! HotJobs
> http://hotjobs.sweepstakes.yahoo.com/careermakeover
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ether> eal-users
>
