Cisco BTS 10200 Troubleshooting Manual page 642

Troubleshooting Using Snoop
Each interface reported above must be snooped to catch all packets across redundant routes. In the given
Note
example interface qfe0 as well as qfe4 must be snooped.
Step 2 Issue the snoop command. It may differ in syntax depending on protocol(s) that are being analyzed.
Session Initiation Protocol (SIP) example:
10.0.0.1 is a SIP Phone. The goal is to monitor the SIP traffic between the BTS 10200 and the SIP phone.
# snoop -d qfe0 -x 42 host 10.0.0.1 and port 5060 and udp &
# snoop -d qfe4 -x 42 host 10.0.0.1 and port 5060 and udp &
MGCP/network-based call signaling (NCS) example:
10.0.0.1 is an integrated access device (IAD) running MGCP. The goal is to monitor MGCP traffic
between the BTS 10200 and the IAD.
# snoop -d qfe0 -x 42 host 10.0.0.1 and port 2427 and udp &
# snoop -d qfe4 -x 42 host 10.0.0.1 and port 2427 and udp &
Stream Control Transmission Protocol (SCTP)/MTP3 user adaptation (M3UA)/ISDN user part (ISUP)
example:
Since these protocols are not TEXT based as the ones mentioned above, use the -o option with snoop to
capture packets in an Ethereal readable format. Ethereal can decode SCTP/M3UA/ISUP or SCTP/SCCP
user adapter (SUA)/Transaction Capabilities Application Part (TCAP). 10.0.0.1 is a Signaling Gateway
acting as an M3UA peer with the BTS 10200.
# snoop -d qfe0 -o sctp.cap host 10.0.0.1
Use Control-C to stop the packet capture. Open the file in Ethereal and inspect. To capture sctp packets
Step 3
that contain M3UA information:
First, find the port M3UA will use to communicate with the signaling gateway (SG).
a.
CLI>show sctp-assoc platform-id=CA146
ID=sgp1-itpa
SGP_ID=sgp1
SCTP_ASSOC_PROFILE_ID=sctp-prof1
REMOTE_PORT=2905
REMOTE_TSAP_ADDR1=10.0.0.1
PLATFORM_ID=CA146
DSCP=NONE
IP_TOS_PRECEDENCE=CRITICAL
LOCAL_RCVWIN=3000
MAX_INIT_RETRANS=3
MAX_INIT_RTO=500
STATUS=INS
ULP=XUA
# snoop -d qfe0 -o m3ua.cap host 10.0.0.1 and port 2905
b. Use Control-C to stop the packet capture. Open the file in Ethereal and inspect.
Cisco BTS 10200 Softswitch Troubleshooting Guide, Release 5.0.x
15-16
(this will capture all traffic)
<-------------------this port
Chapter 15 Diagnostic Tests
OL-8723-19