IMF - Integrated Monitoring Feed(1)

 

On this page, I am going to cover Integrated Monitoring Feed. This is Ribbon proprietary protocol and default license. We can copy all types of messages being flowed on links such as LSL, HSL, SIGTRAN, DIAMETER to a server by IMF.

For example, Ribbon DSC can act as STP and DSC. STP can have various links such as LSL, ATM, ANNEXA, M2PA, M2UA, M3UA, SUA. Messages flow via the links. We can copy the message to a server by IMF and we can analyze the message with Wireshark.

For more details, https://support.sonus.net/display/DSCDOC180/The+IMF+Interface?desktop=true¯oName=div

 

 

Ribbon DSC can store the copied messages in DSC or send copied messages to a server.

 

We'll see how to store and see the copied messages in DSC first.

 

We created a message on the last page.  IMF can be enabled on each a linkset. so I will turn on IMF on LS2222 on NA1 and LS2222 on NA3. They are the orange points in below diagram.

 

 

1. Go to the LS2222 on NA1.

Applications > MTP3 > NA1 > LS 2222 > IMF Support : ENABLED > Continue

You don't need to deactivate the linkset to change the IMF attribute.

IMF ENABLED on LS2222 of NA1

2. Go to the LS2222 on NA3

Applications > MTP3 > NA3 > LS 2222 > IMF Support : ENABLED > Continue

IMF ENABLED on LS2222 of NA3

 

3. Capturing messages by IMF

   3.1 Starting to IMF Packet Capture

   Applications > IMF > IMF Packet Capture > Capture time > Continue > Start

   I'm going to capture the Linksets for 10 seconds.

   After 10 seconds, it will be stopped and a pcap file will be created in DSC.

 

   3.2 Downloading IMF capture file.

   System > File Retrieval > packet_capture.pcap

   You can easliy download the capture file by click.

 

4. Showing IMF capture file.

As I mentioned, IMF is Ribbon proprietary protocol. You need to apply Lua plugin files to your wireshark.

 

   4.1 Dowloading IMF plugin.

   System > File Retrieval > plugins > sonuscm.1.12.lua, sonusimf.1.12.lua

   Download the two lua files.

   4.2 Moving the files to Wireshark plugin directory.

   4.3 Open 'packet_capture.pcap'

   Edit > Preference > Protocols > MTP3 > MTP3 standard, ITU PC, format > OK

   You need to modify your wireshark. if you use ANSI, you should change MTP3 standard to ANSI. if ITU, you need to change ITU. ITU Pointcode structure is 3-8-3. You can set Address foramt. if you want to see Point Code as Decimal, Set Decimal. if you want to see PC as dash like 0-138-7, Set Dashed.

 

   4.4 Looking for IMF and MTP3

   I created junk ISUP messages.

On 23line, NA1 sent ISUP message with OPC1111, DPC5555 via LS2222. You can see IMF stacks having message information such as Time, Network Appearance, SS7 Variant, SLC, APC, MSU Direction, Link Type and Length. we can reand NA1 on ITU is outgoing a message through APC 1.21.6(2222), SLC 0. the link type is M2PA. You can also see MTP3 layer such as SIO and DPC, DPC, SLS numbers.

 

On 25line, the message is incoming to NA3 on ITU through APC 1.21.6(2222), SLC 0. the link type is M2PA.

 

 

This is first chapter for IMF to store IMF packets in DSC. it is quite easier than the second chapter.

 

Let's move on Second Chapter!