sctpscan

Core Network & SignalingReady to RunLocation: /usr/local/bin/sctpscan

Command Line Execution

Run this command in the TelcoChisel terminal to launch or execute the tool:

sctpscan Command
sctpscan --help

Detailed Technical Overview

sctpscan is a specialized network utility optimized for the Stream Control Transmission Protocol (SCTP). It probes cellular signaling gateways to identify open SCTP ports hosting S1AP (LTE), NGAP (5G), M3UA (SS7), or Diameter interfaces.

Configuration & Usage Guide

To initialize and configure sctpscan for telecom security audits, follow these steps:

  1. 1Scan a target IP for open SCTP ports: sctpscan 192.168.10.20
  2. 2Specify custom port ranges: sctpscan -p 29000-30000 192.168.10.20
  3. 3Save scan results to file: sctpscan -o results.txt 192.168.10.20

Troubleshooting & Security Audits

sctpscan Audit Warning
Ensure the kernel sctp module is loaded (done automatically by TelcoChisel) before running sctpscan.
SIGNALING CORE LAB

Master sctpscan with Interactive Telecom Labs

Practice deploying sctpscan against live cellular networks, radio interfaces, and mobile cores in TelcoSec Academy's browser-accessible cloud sandboxes.

Interactive Cloud Labs No Hardware Required CTSP Certification
Launch Interactive Labapp.telcosec.net · Instant access

Frequently Asked Questions

Why use sctpscan instead of nmap?

While nmap supports SCTP scanning, sctpscan is faster and handles SCTP multi-homing probes more reliably.

What are common SCTP ports scanned?

3868 (Diameter), 29097 (M3UA), 36412 (S1AP), and 38412 (NGAP).

Back to Tools Directory