Wireshark-users: Re: [Wireshark-users] capture Q931 protocol
From: "Anders Broman" <a.broman@xxxxxxxxx>
Date: Sat, 10 Jan 2009 22:32:41 +0100
You'd also need some sort of tap functionality on the card to insert it
Between the MSC and the PRA.
Regards
Anders

-----Ursprungligt meddelande-----
Från: wireshark-users-bounces@xxxxxxxxxxxxx
[mailto:wireshark-users-bounces@xxxxxxxxxxxxx] För Guy Harris
Skickat: den 10 januari 2009 21:02
Till: Community support list for Wireshark
Ämne: Re: [Wireshark-users] capture Q931 protocol


On Jan 10, 2009, at 7:41 AM, Anders Broman wrote:

> In principe you’d need a card that can capture the D-channel and  
> write the packets to a file in libpcap format. If such a card is  
> available
> I do not know.

An Endace DAG card:

	http://www.endace.com/dag-3.7t-datasheet.html

might be able to do it; libpcap can be built with support for DAG  
cards, and a version of Wireshark that uses that version of libpcap  
could capture on them.

However, Wireshark doesn't currently dissect LAPD captured from them,  
so some work would be needed to have Wireshark dissect the resulting  
capture.
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
 
mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe