[ale] Weird problem looking at some data capture

[Alex LeDonne]

On Nov 20, 2007 10:37 AM, Christopher Fowler
<cfowler at outpostsentinel.com> wrote:
> This is what makes it stranger.
>
> When he connects via Procomm plus using telnet here is what he sees:
>
> Version: 3.1.6 Release, Build: 032707-120532
> OutPost Sentinel Username: root
> Password:
> [root at ens4]# connect 1
> Connecting to port 1 name P1
> and displaying last 20 lines of buffer
> Enter root at 127.0.0.1's password:
> [Enter `^Ec?' for help]
> [replay 20]
> [-- Console up -- Tue Nov 20 09:51:27 2007]
>
> N 038 00 A001004 4230    11/20 09:48:49 00:07:34.0
>
>  &3147871800XXXXXX
> 004.0.00.03 00
> 0 000
>  &                                     000 01 2
>
> N 039 00 A001001 4250    11/20 10:01:10 00:01:14.0
>
> Now this is what I see:
> [tomcat at demo tomcat]$ telnet 10.0.5.91
> Trying 10.0.5.91...
> Connected to 10.0.5.91.
> Escape character is '^]'.
>
> Version: 3.1.6 Release, Build: 032707-120532
> OutPost Sentinel Username: root
> Password:
> [root at ens4]# connect 1
> Connecting to port 1 name P1
> and displaying last 20 lines of buffer
> Enter root at 127.0.0.1's password:
> [Enter `^Ec?' for help]
> [replay 20]
> [-- Console up -- Tue Nov 20 09:51:27 2007]
> ???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????
>
>
>
> On Tue, 2007-11-20 at 10:11 -0500, Asif E. wrote:
> > Chris,
> >
> > I do see the phone number in that chunk of data, highlighted below.
> > Is that what you are looking for?
> >
> > Asif
> >
> >
> > On 11/20/07, Christopher Fowler <cfowler at outpostsentinel.com> wrote:
>
> >         I have a device connected serially to a Meridian PBX trying to
> >         capture
> >         CDR data.
> >
> >         >From my END I see nothing but garbage.  The guy I'm working
> >         on is
> >         connected to the device via Procomm plus.  He says he can see
> >         phone
> >         numbers and data just fine.  I can't and I'm in Linux.
> >
> >         I did an od -a on the capture and I see the following:
> >
> >         0016120   g  sp   d   o   w   n  sp   -
> >         -   ]  cr  nl  cr  cr  cr  nl
> >         0016140   N  sp   0   3   8  sp   0   0  sp   A   0   0   1
> >         nul   0   0
> >         0016160   4  sp   4   2   3   0  sp  sp  sp  sp   1   1   /
> >         2   0  sp
> >         0016200   0   9   :   4   8   :   4   9  sp   0   0   :   0
> >         7   :   3
> >         0016220   4 nul   .
> >         0  sp  sp  sp  sp  sp  sp  sp  sp  sp  sp  sp  sp
> >         0016240  sp  sp  sp  sp  sp  sp  sp  sp  sp  sp  sp  sp  sp  sp  sp  sp
> >         0016260  sp  sp  sp  sp  sp  sp  sp  sp  sp  cr  nl  sp   &
> >         3   1   4
> >         0016300   7   8   7   1   8   0   0   X   X   X   X   X
> >         X  sp  sp  sp
> >         0016320  sp  sp  sp  sp  sp  sp  sp  sp  sp  sp  sp  sp  sp  sp  sp  sp
> >
> >         I see some numbers that appear to be a phone number in that
> >         file.
> >
> >         When I look at this file in VI I do not see 3147871800  I als
> >         grep this
> >         file and come up empty handed there.  What am I doing wrong?
> >

This looks like a terminal character encoding issue. ASCII transcoded
to UTF8 looks like ASCII in every other byte, which looks like what
you have in your capture file. What does stty show on your terminal?
Try toggling the iutf8 setting in stty, and see if that helps.

-A