Wireshark-bugs: [Wireshark-bugs] [Bug 6968] New: ExtensionContainer in GSM MAP protocol not deco
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Mon, 19 Mar 2012 04:53:00 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6968

           Summary: ExtensionContainer in GSM MAP protocol not decoded
           Product: Wireshark
           Version: 1.6.0
          Platform: x86
        OS/Version: Windows XP
            Status: NEW
          Severity: Major
          Priority: Low
         Component: Wireshark
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: pavol.ondrusek@xxxxxxxxxxx


Created attachment 8048
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=8048
MAP message trace & screen from Wireshark

Build Information:
Version 1.6.0 (SVN Rev Unknown from unknown)

Copyright 1998-2011 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with GTK+ 2.22.1, with GLib 2.26.1, with WinPcap (version
unknown), with libz 1.2.5, without POSIX capabilities, without libpcre, with
SMI
0.4.8, with c-ares 1.7.1, with Lua 5.1, without Python, with GnuTLS 2.10.3,
with
Gcrypt 1.4.6, with MIT Kerberos, with GeoIP, with PortAudio V19-devel (built
Mar
14 2012), with AirPcap.

Running on Windows XP Service Pack 3, build 2600, with WinPcap version 4.1.2
(packet.dll version 4.1.0.2001), based on libpcap version 1.0 branch 1_0_rel0b
(20091008), GnuTLS 2.10.3, Gcrypt 1.4.6, without AirPcap.

Built using Microsoft Visual C++ 9.0 build 30729

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
In GSM MAP message is not decoded extensionContainer tag. This tag is
identified as extId 0.34.5, and currently it is not implemented in Wireshark.

Attached can be found trace, where mentioned tag can be found. Please note,
that message in trace does not contain real values for lower layers (IP
addresses, OPC, DPC, ...) whose are modified, because original message was
included within another proprietary protocol. So message was extracted and
inserted into attached trace - important is, that MAP part is not changed, so
trace can be used for analysis.

Is it possible to add support for this tag?

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.