• caglararli@hotmail.com
  • 05386281520

Need tcpdump command capture smpp bind requests only [migrated]

Çağlar Arlı      -    81 Views

Need tcpdump command capture smpp bind requests only [migrated]

I want to capture accounts on smpp connection while smpp operation is only bind, not submit or deliver. Let's say bind_transciever.

I tried these 2 commands but no packets were captured, and I'm not sure if the format is right/complete:

tcpdump -s 0 -i any port 15019 -w /tmp/data01.cap 'tcp[12:4] = 0x00000002 or tcp[12:4] = 0x00000001 or tcp[12:4] = 0x00000009'

tcpdump -s 0 -i any port 15019 -w /tmp/data01.cap 'tcp[13] = 2 or tcp[13] = 1 or tcp[13] = 9'

below is a sample from our service traffic trace

enter image description here

I need help setting the command to get what I need.