Skinny Client Control Protocol (SKINNY)
SKINNY is a proprietary VoIP protocol from Cisco.
XXX - add a brief SKINNY description here
XXX - add a brief description of SKINNY history
XXX - Add example traffic here (as plain text or Wireshark screenshot).
The SKINNY dissector is partially functional. It decodes SKINNY versions 17 and earlier pretty well, but fails on version 18. Notably, SKINNY version 18 has changed the definition for the second u_int32 field of the packet from all zeros (0x00000000) to a version number (as of v18, 0x00000012).
- Reassemble SCCP messages spanning multiple TCP segments. Default: TRUE
Example capture file
XXX - Add a simple example capture file to the SampleCaptures page and link from here. Keep it short, it's also a good idea to gzip it to make it even smaller, as Wireshark can open gzipped files automatically.
A complete list of SKINNY display filter fields can be found in the display filter reference
Show only the SKINNY based traffic:
You cannot directly filter SKINNY protocols while capturing. However if it flows though the default TCP port you can filter on that:
tcp port 2000