ad9a9a6a9d
Here are some patches and a new module to introduce the notion of Tcap context for a Tcap transaction. For each Tcap transaction, several parameters, like session identifier, start time or OID, will be saved in a hash table, to keep these informations available for the next messages. This context is then given to the upper layer, and can be used, for example, to generate transaction-associated statistics. Moreover, the Upper protocol, detected in the Begin of the TCAP transaction ( according to the OID ), is saved in the context, and will be reused for the next messages of the transaction. This help the decoding of SS7 messages, without any SSN configuration in the "wireshark preferences". You will have too, the possibility to apply a filter to see only the messages related to a TCAP transaction. (tcap.srt.session_id=XXX) To enable the use of the Tcap context, you have 2 new parameters in the preferences, - SRT, enable search for a Tcap context for any TCAP messages - persistentSRT, keep the Tcap context, even after the transaction has been closed. This is mandatory with Wireshark, to have a clean display of the stats. There is 2 new timers in the preferences for the statistics, to tune the retransmission timeout, and messages lost timeout. svn path=/trunk/; revision=19341
87 lines
2.6 KiB
C
87 lines
2.6 KiB
C
/* Do not modify this file. */
|
|
/* It is created automatically by the ASN.1 to Wireshark dissector compiler */
|
|
/* .\packet-tcap.h */
|
|
/* ../../tools/asn2wrs.py -b -e -p tcap -c tcap.cnf -s packet-tcap-template tcap.asn */
|
|
|
|
/* Input file: packet-tcap-template.h */
|
|
|
|
#line 1 "packet-tcap-template.h"
|
|
/* packet-tcap.h
|
|
*
|
|
* $Id$
|
|
*
|
|
* Copyright 2004, Tim Endean <endeant@hotmail.com>
|
|
*
|
|
* Wireshark - Network traffic analyzer
|
|
* By Gerald Combs <gerald@wireshark.org>
|
|
* Copyright 1998 Gerald Combs
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* as published by the Free Software Foundation; either version 2
|
|
* of the License, or (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
|
|
*/
|
|
|
|
|
|
#ifndef PACKET_tcap_H
|
|
#define PACKET_tcap_H
|
|
/* TCAP component type */
|
|
#define TCAP_COMP_INVOKE 0xa1
|
|
#define TCAP_COMP_RRL 0xa2
|
|
#define TCAP_COMP_RE 0xa3
|
|
#define TCAP_COMP_REJECT 0xa4
|
|
#define TCAP_COMP_RRN 0xa7
|
|
|
|
|
|
#define ANSI_TC_INVOKE_L 0xe9
|
|
#define ANSI_TC_RRL 0xea
|
|
#define ANSI_TC_RE 0xeb
|
|
#define ANSI_TC_REJECT 0xec
|
|
#define ANSI_TC_INVOKE_N 0xed
|
|
#define ANSI_TC_RRN 0xee
|
|
|
|
#define TCAP_SEQ_TAG 0x30
|
|
#define TCAP_SET_TAG 0x31
|
|
|
|
#define TCAP_INVOKE_ID_TAG 0x02
|
|
#define TCAP_LINKED_ID_TAG 0x80
|
|
|
|
#define TCAP_EOC_LEN 2
|
|
|
|
#define TCAP_CONSTRUCTOR(TCtag) (TCtag & 0x20)
|
|
|
|
#define TC_BEGIN 1
|
|
#define TC_CONT 2
|
|
#define TC_END 3
|
|
#define TC_ABORT 4
|
|
|
|
struct tcap_private_t {
|
|
gboolean acv; /* Is the Application Context Version present */
|
|
void * oid;
|
|
guint32 session_id;
|
|
void * context;
|
|
};
|
|
|
|
extern gint tcap_standard;
|
|
|
|
extern const value_string tcap_component_type_str[];
|
|
|
|
extern dissector_handle_t get_itu_tcap_subdissector(guint32 ssn);
|
|
|
|
extern void add_ansi_tcap_subdissector(guint32 ssn, dissector_handle_t dissector);
|
|
extern void add_itu_tcap_subdissector(guint32 ssn, dissector_handle_t dissector);
|
|
|
|
extern void delete_ansi_tcap_subdissector(guint32 ssn, dissector_handle_t dissector);
|
|
extern void delete_itu_tcap_subdissector(guint32 ssn, dissector_handle_t dissector);
|
|
|
|
#endif /* PACKET_tcap_H */
|