Unable to find out input dir to run pcap files using tshark.

P1sec / SigFW

Open Source Signaling Firewall for SS7, Diameter filtering, antispoof and antisniff

https://www.blackhat.com/us-17/briefings.html#ss7-attacker-heaven-turns-into-riot-how-to-make-nation-state-and-intelligence-attackers-lives-much-harder-on-mobile-networks

GNU Affero General Public License v3.0

120 stars 54 forks source link

Unable to find out input dir to run pcap files using tshark. #12

Closed vnittur closed 6 years ago

vnittur commented 6 years ago

I have downloaded and built the project as per the instructions provided in readme and jss7 branch. Can you please help where to find diameter.pcap & sigtran.pcap.

p1-martin commented 6 years ago

@vnittur You can use any sigtran and diameter pcap which you found on internet or which were captured from some network. Additionally if there is no pcap you can use SS7Client/DiameterClient and craft messages programatically instead of SS7ClientLiveInput/DiameterClientLiveInput. For sigtran.pcap crafted artificially and which was used for SigFW demo, you can refer to this page.