top button
Flag Notify
    Connect to us
      Site Registration

Site Registration

Capture Diameter Message

+1 vote
5,159 views

Using Wireshark

Step 1: Capture DIAMETER traffic over the default TCP port i.e. 3868 or default SCTP port i.e. 3868)
tcp port 3868
sctp port 3868

Step 2: Now set the filter as diameter

Using tcpdump

Step 1: $ tcpdump -w diameterpackets.pcap -i eth0 dst 10.181.140.216 and port 3868
or tcpdump -s 0 -i any host 10.181.140.216 -w diameterpackets.pcap

Check the following link for more customization:
http://www.thegeekstuff.com/2010/08/tcpdump-command-examples/

Step 2: Open the diameterpackets.pcap using wireshark and analyse

Using tShark

Exhaustive Information

tshark -R diameter -V [-w diameterpackets.pcap]

Capture PCAP file with Log-Rotate

tshark -b filesize:10240 -a files:1000 -w diameterpackets.pcap

Now open these pcap in wireshark.

Sample Wireshark Capture Video (Not a Diameter Example)

posted Jul 28, 2014 by anonymous

  Promote This Article
Facebook Share Button Twitter Share Button LinkedIn Share Button

...