Difference between revisions of "Wireshark monitoring traffic inside YateBTS"

From YateBTS
Jump to: navigation, search
Line 2: Line 2:
 
Traffic can be captured/analized with Wireshark in YateBTS when using '''GSM roaming''' or '''GSM dataroam''' working modes.
 
Traffic can be captured/analized with Wireshark in YateBTS when using '''GSM roaming''' or '''GSM dataroam''' working modes.
  
Do do so:
+
==Enable capturing of SIP and RTP packages==
* Enable GSMTAP.GSM capture from the Yate rmanager  
+
 
 +
GSMTAP.GSM will capture '''SIP and RTP packages'''.
 +
Enable GSMTAP.GSM capture from the Yate rmanager  
 
  >> telnet 0 5037
 
  >> telnet 0 5037
 
  mbts config TAP Control.GSMTAP.GSM on  
 
  mbts config TAP Control.GSMTAP.GSM on  
  
GSMTAP.GSM will capture '''SIP and RTP packages'''.
 
  
* Enable GSMTAP.GPRS capture from the Yate rmanager  
+
==Enable capturing of GTP-C and GTP-U packages==
 +
 
 +
GSMTAP.GPRS will capture '''GTP-C and GTP-U packages'''.
 +
Enable GSMTAP.GPRS capture from the Yate rmanager  
  
 
  >> telnet 0 5037
 
  >> telnet 0 5037
 
  mbts config TAP Control.GSMTAP.GPRS on  
 
  mbts config TAP Control.GSMTAP.GPRS on  
  
GSMTAP.GPRS will capture '''GTP-C and GTP-U packages'''.
+
==Checking if GSMTAP is enabled==
  
* To check if GSMTAP is enabled type '''mbts config TAP''' in Yate rmanager.
+
To check if GSMTAP is enabled type '''mbts config TAP''' in Yate rmanager.
 
<pre>
 
<pre>
 
>> telnet 0 5037
 
>> telnet 0 5037
Line 26: Line 30:
 
</pre>
 
</pre>
  
* To capture traffic use '''tcpdump''' Or '''Wireshark''' (already installed on the LatKit/SatSite) by adding a custom filter: '''udp port 4729'''.
+
==Capturing traffic==
 +
 
 +
To capture traffic use '''tcpdump''' Or '''Wireshark''' (already installed on the LatKit/SatSite) by adding a custom filter: '''udp port 4729'''.
  
 
  Command for tcpdump:
 
  Command for tcpdump:
 
  >> '''tcpdump -i any udp port 4729 -w GSMTAP-yatebts.pcap'''
 
  >> '''tcpdump -i any udp port 4729 -w GSMTAP-yatebts.pcap'''

Revision as of 13:05, 21 September 2017

Traffic can be captured/analized with Wireshark in YateBTS when using GSM roaming or GSM dataroam working modes.

Enable capturing of SIP and RTP packages

GSMTAP.GSM will capture SIP and RTP packages. Enable GSMTAP.GSM capture from the Yate rmanager

>> telnet 0 5037
mbts config TAP Control.GSMTAP.GSM on 


Enable capturing of GTP-C and GTP-U packages

GSMTAP.GPRS will capture GTP-C and GTP-U packages. Enable GSMTAP.GPRS capture from the Yate rmanager

>> telnet 0 5037
mbts config TAP Control.GSMTAP.GPRS on 

Checking if GSMTAP is enabled

To check if GSMTAP is enabled type mbts config TAP in Yate rmanager.

>> telnet 0 5037
yate-sdr@ybts-UNCONFIG> mbts config TAP 
Control.GSMTAP.GPRS on
Control.GSMTAP.GSM on
Control.GSMTAP.TargetIP 127.0.0.1     [default]
yate-sdr@ybts-UNCONFIG> 

Capturing traffic

To capture traffic use tcpdump Or Wireshark (already installed on the LatKit/SatSite) by adding a custom filter: udp port 4729.

Command for tcpdump:
>> tcpdump -i any udp port 4729 -w GSMTAP-yatebts.pcap