Difference between revisions of "Wireshark monitoring traffic inside YateBTS"

From YateBTS
Jump to: navigation, search
(Enable capturing of GTP-C and GTP-U packages)
(Capturing traffic)
Line 31: Line 31:
 
==Capturing traffic==
 
==Capturing traffic==
  
To capture traffic use '''tcpdump''' Or '''Wireshark''' (already installed on the LatKit/SatSite) by adding a custom filter: '''udp port 4729'''.
+
To capture traffic use '''tcpdump''' or '''Wireshark''' (already installed on the LatKit/SatSite) by adding a custom filter: '''udp port 4729'''.
  
 
  Command for tcpdump:
 
  Command for tcpdump:
 
  >> '''tcpdump -i any udp port 4729 -w GSMTAP-yatebts.pcap'''
 
  >> '''tcpdump -i any udp port 4729 -w GSMTAP-yatebts.pcap'''

Revision as of 13:06, 21 September 2017

Traffic can be captured/analized with Wireshark in YateBTS when using GSM roaming or GSM dataroam working modes.

Enable capturing of SIP and RTP packages

GSMTAP.GSM will capture SIP and RTP packages.
Enable GSMTAP.GSM capture from the Yate rmanager:

>> telnet 0 5037
mbts config TAP Control.GSMTAP.GSM on

Enable capturing of GTP-C and GTP-U packages

GSMTAP.GPRS will capture GTP-C and GTP-U packages.
Enable GSMTAP.GPRS capture from the Yate rmanager:

>> telnet 0 5037
mbts config TAP Control.GSMTAP.GPRS on

Checking if GSMTAP is enabled

To check if GSMTAP is enabled type mbts config TAP in Yate rmanager.

>> telnet 0 5037
yate-sdr@ybts-UNCONFIG> mbts config TAP 
Control.GSMTAP.GPRS on
Control.GSMTAP.GSM on
Control.GSMTAP.TargetIP 127.0.0.1     [default]
yate-sdr@ybts-UNCONFIG> 

Capturing traffic

To capture traffic use tcpdump or Wireshark (already installed on the LatKit/SatSite) by adding a custom filter: udp port 4729.

Command for tcpdump:
>> tcpdump -i any udp port 4729 -w GSMTAP-yatebts.pcap