> -----Original Message-----
> From: Guy Harris [mailto:guy@xxxxxxxxxxxx]
> Sent: Tuesday, October 07, 2003 12:50 PM
> To: mlum@xxxxxxxxxxxxx
> Cc: packet steve; ethereal-dev@xxxxxxxxxxxx; Jeff Morriss
> Subject: Re: [Ethereal-dev] Questions about Connection Oriented SCCP
>
>
>
> On Oct 7, 2003, at 8:49 AM, Michael Lum wrote:
>
> > I don't know much (anything) about conversations, do they have the
> > capability to follow what could be long lasting SCCP connections.
>
> What do you mean by "long-lasting"? A conversation just associates
> information with two address/port pairs; it doesn't care how many
> packets happen to have that address/port pair.
>
OK
> > I am currently using an heuristic dissector.
>
> For which protocol? RANAP isn't a heuristic dissector in the current
> CVS version; have you modified it to be heuristic?
>
> > It seems like a lot of work to keep track of the MTP3/xLR/SSN
> > data.
>
> I'm not sure setting up a conversation would be that much work. In
> fact, if the idea is that all payload for a given SCCP connection
> should be dissected with a particular dissector, you wouldn't even need
> to keep track of the SSN, you'd just make that dissector the
> conversation dissector for that conversation.
OK, a given MTP3 point code pair, SSN=142 (RANAP), and the associated
SLR/DLR defines a conversation. We can associate a dissector with that
conversation.
SCCP Connection Request using SSN=142, MTP3 OPC=X, DPC=Y, SLR=A
starts a conversation
we can associate a dissector, in this case RANAP, and then push the payload
up
SCCP Connection Confirm MTP3 OPC=Y, DPC=X, SLR=B, DLR=A
this confirms the SCCP connection
continuation of the conversation
again push the payload up
SCCP Data Form 1 MTP3 [OPC=X, DPC=Y, DLR=B] or [OPC=Y, DPC=X, DLR=A] <====
occurs multiple times
continuation of the conversation
push the payload up
SCCP Released MTP3 [OPC=X, DPC=Y, SLR=A, DLR=B] or [OPC=Y, DPC=X, SLR=B,
DLR=A]
may or may not carry "user data"
SCCP Release Complete MTP3 [OPC=X, DPC=Y, SLR=A, DLR=B] or [OPC=Y, DPC=X,
SLR=B, DLR=A]
end of conversation
