Rady AbdElWahed

1 Insert Confidentiality level | 17 May 2023

 Content

• Wire-Shark Basics

• Filter

• Result

• Statistics

2 Insert Confidentiality level | 17 May 2023

 Wire-Shark Basics

3 Insert Confidentiality level | 17 May 2023

 Search

4 Insert Confidentiality level | 17 May 2023

 Filter

5 Insert Confidentiality level | 17 May 2023

 Column Preparation

Column is very helpful while STS preparation and to have clear view on messages

Right click "Apply as Column

6 Insert Confidentiality level | 17 May 2023

 Draw Flow As Diagram

7 Insert Confidentiality level | 17 May 2023

 HOSTS File

• Create a hosts file as attached, e.g:

10.38.86.7 MME-1 # MME
10.42.82.244 EPG-1 # EPG

• Place the hosts file in C:\Users\{username}\AppData\Roaming\Wireshark

• In wireshark tick the box:

Preferences -> Name Resolution -> "Resolve network (IP) addresses"

hosts

8 Insert Confidentiality level | 17 May 2023

 Save Trace

9 Insert Confidentiality level | 17 May 2023

 Save Trace as tacp

Selected packets (For Certain Message) or (All Packets)

10 Insert Confidentiality level | 17 May 2023

 Save trace other format

11 Insert Confidentiality level | 17 May 2023

 Message Filter

12 Insert Confidentiality level | 17 May 2023

 Customer Filter

13 Insert Confidentiality level | 17 May 2023

 Node Filter

14 Insert Confidentiality level | 17 May 2023

 Protocol Message Filter

15 Insert Confidentiality level | 17 May 2023

 Manual

 SIP : sip.Method

 DIAMAETER : diameter

 MAP : TCAP

 ISUP : ISUP

 BICC : BICC --- > Filter on all all BICC Messages

16 Insert Confidentiality level | 17 May 2023

 Result

17 Insert Confidentiality level | 17 May 2023

 Bulk Traces Statistic

18 Insert Confidentiality level | 17 May 2023

 SIP Message Statistics

19 Insert Confidentiality level | 17 May 2023

 MAP

20 Insert Confidentiality level | 17 May 2023

 MAP

• Apply Filter : gsm_old.errorCode

 
 
• local value : column

• Noting That Message name will be found on Opcode

21 Insert Confidentiality level | 17 May 2023

 BICC
• Search on BICC Messages only.

• Apply Column

• Apply Filter For Rel Message

• Make Column For Cause Indicator

• Save File as excel or txt then excel

• Import To Excel sheet and Make STS

• Noting That Message name will be found on Message Type

22 Insert Confidentiality level | 17 May 2023

 Diameter

• Search on Diameter Message only

• Apply Column on AVP Result Code on Any answer Message

• Noting That Message name will be found on Command code.

23 Insert Confidentiality level | 17 May 2023