Wireshark · Wireshark-users: [Wireshark-users] Gr Interface

["Cortes, Joseph" <joseph.cortes@xxxxxxxxxxx>]

Hi,

 

Totally new to the wireshark product:         

 

I’ve captured the following on the Gr interface i.e. between the SGSN and the HLR on a Nettest MPA 7300 and save the capture as hex only. (file attached)

 

I’ve tried the text2pcap – l 147 hex.txt hex.cap ( Not sure if this is what I should be doing) this creates the hex.cap file.

 

C:\Programs\Wireshark>text2pcap -l 147 hex.txt hex.cap

Input from: hex.txt

Output to: hex.cap

Wrote packet of 15 bytes at 0

Wrote packet of 15 bytes at 15

Wrote packet of 15 bytes at 30

Wrote packet of 15 bytes at 45

Wrote packet of 15 bytes at 60

Wrote packet of 15 bytes at 75

Read 6 potential packets, wrote 6 packets

 

 

I open this file with wireshark, then under DLT user A I select the DLT=147 and the payload as gsm_map but I get

 

“DLT User A: No such proto: gsm_map”

 

How do I go about to decode this file??

 

Thanks

 

Joe

 

 

 

 

If you have any questions or comments please let me know.

 

Kind Regards

 

Joseph Cortes

 

Current Date & Time in Gibraltar

 

Joseph Cortes

Wireless Department

 

Gibtelecom

P.O. Box 929

Suite 942 Europort

Gibraltar

 

Tel: +350 52211

GSM: +350 57003000

Fax: +350 57003500

Email: joseph.cortes@xxxxxxxxxxx

Web: www.gibtele.com

 

STANDARD EMAIL DISCLAIMER FOLLOWS FOR LEGAL REASONS: 

This electronic message contains information from GIBTELECOM which may be privileged or confidential. The information is intended to be for the use of the individual(s) or entity named above. If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of this information is prohibited. If you have received this electronic message in error please notify us by telephone or e-mail (to the number or address above) and delete it

 

Viruses: Although our Company attempts to sweep e-mail and attachments for viruses, it does not guarantee that either are virus-free and accepts no liability for any damage sustained as a result of viruses

 

 

LU4 NPSTN2A SMS     2007 February 21 18:03:32.110 
000:   C8 99 3F 83   34 83 CA 70   09 00 03 10   1B 0D 12 06
010:   00 71 04 43   26 02 01 00   11 61 02 0B   12 95 00 11
020:   04 53 50 08   00 00 04 3F   62 3D 48 02   0A B9 6B 1E
030:   28 1C 06 07   00 11 86 05   01 01 01 A0   11 60 0F 80
040:   02 07 80 A1   09 06 07 04   00 00 01 00   0E 03 6C 17
050:   A1 15 02 01   01 02 01 38   30 0D 80 08   12 04 04 01
060:   00 11 61 F2   02 01 03
LU4 NPSTN2B SMS     2007 February 21 18:03:32.671 
000:   99 C9 3F 83   2A 03 CD 50   09 80 03 0E   19 0B 52 95
010:   00 11 04 53   50 08 00 00   04 0B 12 06   00 11 04 43
020:   26 92 39 11   01 A3 65 81   A0 48 04 80   00 01 D8 49
030:   02 0A B9 6B   2A 28 28 06   07 00 11 86   05 01 01 01
040:   A0 1D 61 1B   80 02 07 80   A1 09 06 07   04 00 00 01
050:   00 0E 03 A2   03 02 01 00   A3 05 A1 03   02 01 00 6C
060:   80 A2 64 02   01 01 30 5F   02 01 38 A3   80 A1 80 30
070:   52 04 10 5E   47 00 BE CC   18 89 6B D7   BF EA A9 79
080:   9C 81 A3 04   08 71 94 B3   E8 F6 FC 5E   A6 04 10 6D
090:   29 6A 34 F2   1C 8B C9 E4   63 79 2F 90   07 8B D9 04
0A0:   10 DE 47 80   7F 5D 16 62   FF 67 49 86   61 18 F0 21
0B0:   7A 04 10 8E   73 68 95 C2   75 00 00 6A   BF 47 6A 3B
0C0:   9B 05 40 00   00 00 00 00   00
LU4 NPSTN2A SMS     2007 February 21 18:03:34.104 
000:   C9 9A 39 83   34 83 CA 70   09 00 03 0E   19 0B 12 06
010:   00 11 04 43   26 92 39 11   01 0B 12 95   00 11 04 53
020:   50 08 00 00   04 16 65 14   48 02 0A B9   49 04 80 00
030:   01 D8 6C 08   A1 06 02 01   02 02 01 38
LU4 NPSTN1B SMS SBi 2007 February 21 18:03:34.629 
000:   8A AD 3F 83   2A 03 CD 60   09 80 03 0E   19 0B 52 95
010:   00 11 04 53   50 08 00 00   04 0B 12 06   00 11 04 43
020:   26 92 39 11   01 C6 64 81   C3 49 02 0A   B9 6C 81 BC
030:   A2 81 B9 02   01 02 30 81   B3 02 01 38   A3 80 A1 80
040:   30 52 04 10   D7 BC B0 13   F5 9F 9E AD   E5 6C 89 CC
050:   F6 73 0D 39   04 08 13 81   2C 3A 10 A4   75 AE 04 10
060:   1E FF 08 A9   97 96 2E 14   8C 9D 10 92   1D D1 7D 4B
070:   04 10 A4 FA   FF C7 4F 74   0A 20 7B C8   26 67 C1 53
080:   12 F7 04 10   5D BC D9 F2   E3 C0 00 00   27 25 B3 66
090:   66 BC 9C C0   30 52 04 10   3C 49 92 2B   D0 16 12 04
0A0:   E9 43 45 23   BC 52 B0 1E   04 08 ED 85   EC 82 E4 23
0B0:   41 BA 04 10   62 B4 94 F7   23 D5 8D CA   EB 3F DF 3B
0C0:   81 7D AD B4   04 10 EB E3   D1 2A DD 71   DE 9E 56 E2
0D0:   AF 7F 6A 8D   51 48 04 10   03 65 FD F2   4E CA 00 00
0E0:   18 36 E6 5E   B1 99 AA 81   00 00 00 00
LU4 NPSTN1A SMS SBi 2007 February 21 18:03:36.100 
000:   AD 8B 3F 83   34 83 CA 80   09 00 03 10   1B 0D 12 06
010:   00 71 04 43   26 02 01 00   11 61 02 0B   12 95 00 11
020:   04 53 50 08   00 00 04 4C   62 4A 48 02   0B B9 6B 1E
030:   28 1C 06 07   00 11 86 05   01 01 01 A0   11 60 0F 80
040:   02 07 80 A1   09 06 07 04   00 00 01 00   20 03 6C 24
050:   A1 22 02 01   01 02 01 17   30 1A 04 08   12 04 04 01
060:   00 11 61 F2   04 07 91 53   50 08 00 00   F4 04 05 04
070:   C0 F4 D6 83
LU4 NPSTN1B SMS SBi 2007 February 21 18:03:36.565 
000:   8B AE 3F 83   2A 03 CD C0   09 81 03 0E   19 0B 52 95
010:   00 11 04 53   50 08 00 00   04 0B 12 06   00 11 04 43
020:   26 92 39 11   01 43 64 41   49 02 0B B9   6B 2A 28 28
030:   06 07 00 11   86 05 01 01   01 A0 1D 61   1B 80 02 07
040:   80 A1 09 06   07 04 00 00   01 00 20 03   A2 03 02 01
050:   00 A3 05 A1   03 02 01 00   6C 80 A3 0B   02 01 01 02
060:   01 08 30 03   0A 01 00 00   00