Skip to content
philpraxis edited this page Sep 13, 2010 · 15 revisions

Welcome to the dialogic-compagnon wiki!

Usage example

$ ./diadecode.py -m M-t7740-i0000-fef-d33-r8000-p0183032233d2efef00000001011000ef000000000000000000000000000000000000000000000000000000000000000000000000000000000
0000000
Found definition: type SCP_MSG_CONFIG (0×7740)
in sccp.db
Field description: type SCP_MSG_CONFIG (0×7740)
Field description: id 0
Field description: src Sending module_id
Field description: dst SCP_TASK_ID
Field description: rsp_req used to request a confirmation
Field description: hclass 0
Field description: status 0
Field description: err_info 0
Field description: len 60
d: 33
f: ef
i: 0000
p: 0183032233d2efef00000001011000ef000000000000000000000000000000000000000000000000000000000000000000000000000000000
r: 8000
t: 7740
decompose(0183032233d2efef00000001011000ef000000000000000000000000000000000000000000000000000000000000000000000000000000000)
Offset + description: 0 1 cnf_ver – must be set to one
cnf_ver= 0×01 (cnf_ver – must be set to one)
Offset + description: 1 1 sio – Service Information Octet value
sio= 0×83 (sio – Service Information Octet value)
Offset + description: 2 2 options
options= 0×0322 (options)
Offset + description: 4 1 module_id – SCCP module id
module_id= 0×33 (module_id – SCCP module id)
Offset + description: 5 1 mtp_id – MTP module id
mtp_id= 0xd2 (mtp_id – MTP module id)
Offset + description: 6 1 mngt_id – Management module id
mngt_id= 0xef (mngt_id – Management module id)
Offset + description: 7 1 maint_id – Maintenance module id
maint_id= 0xef (maint_id – Maintenance module id)
Offset + description: 8 4 point_code – Local point code
point_code= 0×00000001 (point_code – Local point code)
Offset + description: 12 2 max_sif
max_sif= 0×0110 (max_sif)
Offset + description: 14 1 sccp_instance
sccp_instance= 0×00 (sccp_instance)
Offset + description: 15 1 smb_id – Broadcast module id
smb_id= 0xef (smb_id – Broadcast module id)
Offset + description: 16 2 smb_flags – Broadcast flags
smb_flags= 0×0000 (smb_flags – Broadcast flags)
Offset + description: 18 2 num_uc – Required number of User
num_uc= 0×0000 (num_uc – Required number of User connections)
Offset + description: 20 2 uc_onset – Onset of congestion point for user
uc_onset= 0×0000 (uc_onset – Onset of congestion point for user connections)
Offset + description: 22 2 uc_abmt
uc_abmt= 0×0000 (uc_abmt)
Offset + description: 24 2 num_ic
num_ic= 0×0000 (num_ic)
Offset + description: 26 2 ic_onset
ic_onset= 0×0000 (ic_onset)
Offset + description: 28 2 ic_abmt
ic_abmt= 0×0000 (ic_abmt)
Offset + description: 30 2 num_data
num_data= 0×0000 (num_data)
Offset + description: 32 2 data_onset
data_onset= 0×0000 (data_onset)
Offset + description: 34 2 data_abmt
data_abmt= 0×0000 (data_abmt)
Offset + description: 36 2 num_edata
num_edata= 0×0000 (num_edata Section 10 Non-Primitive Interface page 57 MESSAGE HEADER FIELD NAME MEANING)
Offset + description: 38 2 edata_onset
edata_onset= 0×0000 (edata_onset)
Offset + description: 40 2 edata_abmt
edata_abmt= 0×0000 (edata_abmt)
Offset + description: 42 2 ext_options
ext_options= 0×0000 (ext_options)
Offset + description: 44 2 base_id
base_id= 0×0000 (base_id)
Offset + description: 46 2 top_id
top_id= 0×0000 (top_id)
Offset + description: 48 2 min_id
min_id= 0×0000 (min_id)
Offset + description: 50 2 max_id
max_id= 0×0000 (max_id)
Offset + description: 52 1 isup_id
isup_id= 0×00 (isup_id)
Offset + description: 53 2 nc
nc= 0×0000 (nc)
Offset + description: 55 1 hop_counter
hop_counter= 0×00 (hop_counter)
Offset + description: 56 2 error_offset
error_offset= 0×0 (error_offset)
Offset + description: 58 2 reserved – set to zero
reserved= 0x (reserved – set to zero )
01 83 0322 33 d2 ef ef 00000001 0110 00 ef 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 00 0000 00 0
$

Usage help

$ ./diadecode.py

Created by Philippe Langlois on 2009-11-11.
Copyright © 2009 P1 Security. All rights reserved.
http://www.p1security.com/

Usage:
diadecode.py [ m | -l “” ]
“-h”, "
-help":
this message
“-m”, “—message”:
message you want to decode

Example:
./diadecode.py -m M-t7740-i0000-fef-d33-r8000-p018381063322efef00000002011000ef001c000000000000000000000000000000000000000000000000000000000000000000000000000000000000
./diadecode.py -m M-t7780-i0000-fef-d14-r8000-p001415339e9e00000000002000400040000080000410080200ff0000000000000000000000000000
./diadecode.py -l “S7L:I0000 M t3741 i0000 f33 def r0000 s06 e00000000 p00031401000000000800000000000000000000000000000000000000000000000000000000000000”

Configuration for s7_play for Dialogic are not really super clear:
**************************************************************

  • SCCP Configuration.
    **************************************************************
  • Issue configuration message to the SCCP module:
  • —maint_id
  • -mod_id -SMB flags
  • --options -——-pc —SMB id
  • —sio —mgmt_id —SCCP inst
  • -ver —mtp_id -—max_sif — num_uc
    M-t7740-i0000-fef-d33-r8000-p018303223322efef00000002011000ef0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000

Logs from Dialogic are typically cryptic:
S7L:I0000 M t32da i0000 fd2 def r0000 s00 e00000000 p0002000000010000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
S7L:I0000 M t02f0 i0000 fd2 def r0000 s00 e00000000 p0000000100020000000000010000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
S7L:I0000 M t02db i0000 fd2 def r0000 s00 e00000000 p00000002
S7L:I0000 M t02e0 i0000 fd2 def r0000 s00 e00000000 p0002
S7L:I0000 M t0762 i7740 f33 def r0000 s05 e000000cd
S7L:I0000 SCCP Software event : SCPSWE_BAD_MSG
S7L:I0000 M t3740 i0000 f33 def r0000 s05 e00000000 p018303223322efef00000001011000ef0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
S7L:I0000 M t3741 i0000 f33 def r0000 s06 e00000000 p00031401000000000800000000000000000000000000000000000000000000000000000000000000
S7L:I0000 M t3741 i0000 f33 def r0000 s06 e00000000 p00010000000000020000000000000000000000000000000000000000000000000000000000000000
S7L:I0000 M t3741 i0000 f33 def r0000 s06 e00000000 p00020000000000020800000000000000000000000000000000000000000000000000000000000000
S7L:I0000 M t8744 i0008 f33 def r0000 s00 e00000000 p0101000000000000
S7L:I0000 M t07a2 i7780 f14 def r0000 s06 e000000cd
S7L:I0000 TCAP Software event : TCPSWE_BAD_MSG
S7L:I0000 M t3780 i0000 f14 def r0000 s05 e00000000 p000015339e9e00000020000000400040000080000410080200ff0000000000000000000000000000
S7L:I0000 M t1795 i0000 f14 def r0000 s00 e00000000 p0000000f0000000f0000007f

The *.db files must be in the current directory where you execute this program.

References

Clone this wiki locally