Transport Stream packet analysis software?

[Herc11]

Hi all,
I have a question to make!
Does anyone know a software that analyzes Transport streams and has the ability to find packets by their content? More precicely I need to identify how many times a specific packet appears on a TS.
Thanks!

[Ventolin]

Hi Herc11,

What is it that you are trying to identify exactly?

There are programs that can count the number of packets for a particular PID for instance, but if it's a specific pattern you are looking for you might be better off with a hex editor.

TSPE (http://www.bitstreamtools.com) (Transport Stream Packet Editor) does have extensive packet analysis features, but it doesn't search for specific packets yet. You can visibly see each packet and navigate using various TS properties like PID, PCR, PTS etc. TSPE is shareware though but an old freeware version is availble if you search :P

Other apps to look at are: TSReader (freeware/shareware), PVAStrumento (freeware), ProjectX (freeware), bitrate viewer (shareware), Mprobe (expensive), Interra Surveyor (expensive) and probably alot of others - have a look at the download section.

Hope that helps, but could probably suggest something more useful if you give more info.

Regards,

Vent

[Herc11]

Hi Ventolin,

I would like to analyze how often specific EMM packets are broadcasted and more particularly how often subscribers’ Smart Cards are updated with new keys. I can not decrypt their content but I am hoping that by observing EMM packets I can obtain this information.

So, I need a program that compares the content of the packets, because the header of the packet will be different (different continuity counter). Maybe a simple program in C would be the solution but I am not very familiar with programming.

A hex editor or an application like Transport Stream Packet Editor would be helpful as you can observe the payload of the packets. But the problem is that is very difficult to “manually” or with Find that editors provide observe and find the identical packets in a TS file as the number of packets is very large. I will have to record the transport stream of a channel for a day or two and then to find identical EMMs packets. So, there will be billions of packets.

That’s all I want!:):):)

Thanks,
Herc

[Ventolin]

Hi Herc11,

If the packets are identical (apart from the Continuity Counter), is it not possible to search for a byte sequence in a hex editor? (eg. search for the payload's CRC bytes).

It might help if you can provide a sample and some explanation (or reference) to what an EMM packet is.

I could see if I could add support for that in TSPE if you *really* want it :)

Regards,

Vent