Network

Wednesday 27 November 2013, 15:21  #1
Global System Traffic for Mobile communication
TRUMP88
  • 2 posts

Looks like nokia phonet protocol (but i’m not sure), are there some tools for analysis ? Or only manual ?

Wednesday 27 November 2013, 17:57  #2
Global System Traffic for Mobile communication
Mawu3n4
  • 48 posts

The attached RFC for the chall was writen by a Nokia employee so you might be right.
I guess Wireshark and Scapy are a great way to start.

Thursday 29 December 2016, 15:14  #3
Global System Traffic for Mobile communication
Kchtun
  • 2 posts

Any other hints for this challenge ?

Monday 24 July 2017, 10:31  #4
Global System Traffic for Mobile communication
Shostarsson
  • 8 posts

Hi everyone,

I read the file entirely and found a way to start on the pcap file.
I see a packet that is bigger than the others on Wireshark.
Length 126 instead of 31 or 40 for all the others.

Nevertheless, I never see something that relates to sms in the pcap file.

Do you know how I could be able to find the url scheme sms on the pcap file.

There is indeed some sort of communication between the modem and the "unknown" as the frame 87 comes from the modem and the 88 comes from the "unknown".
Nevertheless, I don’t see how I could go any further. 😕

Thanks for your help.

Monday 24 July 2017, 11:25  #5
Global System Traffic for Mobile communication
Shostarsson
  • 8 posts

Ok, I got it.

It is an Sms, so the data stream is an encoded SMS message.
Sms is a 7-bit encoded message from the RFC.

You should find something to decode a 7-bit encode message on the internet (or Github as a quick python script).

Monday 13 November 2017, 09:49  #6
Global System Traffic for Mobile communication
repoog
  • 1 posts

@Shostarsson
You’re on right way, continue finding the hex data, try to decode it.

Wednesday 11 March 2020, 12:00  #7
Global System Traffic for Mobile communication
geronimo-ooo
  • 18 posts

Hello,
I passed this challenge but I search for informations about how decrypt data with wireshark. Did someone has found how to use a gsm plugin with wireshark?

Friday 28 August 2020, 19:10  #8
Global System Traffic for Mobile communication
crypter
  • 1 posts

There is indeed a wireshark plugin https://git.ring0.de/sre/isi-wireshark-plugin, but I haven’t tested it.
Also per https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11676 this protocol should already be handled by wireshark since 2015 (?)