Paul Ionescu wrote:
> On Thu, 2004-05-06 at 11:12, Guy Harris wrote:
> > I.e., with "Decode As" it doesn't pass the data to Cisco SM and with the
> > dissector explicitly changed it does, even though, in both cases, it
> > dissects it as RUDP?
>
> Yeap, that's right.
>
> > That's bizarre - the code path should be the same in both cases. Do you
> > have a sample capture you could send us?
>
> See the sample capture attached.
> The UDP port is 7007.
I get it to work with Ethereal 0.10.3 on Windows XP.
User Datagram Protocol, Src Port: 7007 (7007), Dst Port: 7007 (7007)
Source port: 7007 (7007)
Destination port: 7007 (7007)
Length: 61
Checksum: 0xb2cd (correct)
Reliable UDP
RUDP Header flags: 64
0... .... = Syn: False
.1.. .... = Ack: True
..0. .... = Eak: False
...0 .... = RST: False
.... 0... = NULL: False
.... .0.. = CHK: False
.... ..0. = TCS: False
.... ...0 = 0: False
Header Length: 4
Seq: 112
Ack: 170
Cisco Session Management
SM Message Type: 0x00008000
Protocol Type: 0x0001
Message ID: 0x0000
Message Type: 0x0010
Channel ID: 0x0000
Bearer ID: 0x0000
Length: 33
Message Transfer Part Level 3
Service information octet
10.. .... = Network indicator: National network (0x02)
..00 .... = Spare: 0x00
.... 0101 = Service indicator: ISUP (0x05)
Routing label
DPC (161-128-11) (753825)
0000 1011 .... .... .... .... = DPC Member: 11
.... .... 1000 0000 .... .... = DPC Cluster: 128
.... .... .... .... 1010 0001 = DPC Network: 161
OPC (0-31-242) (15867648)
1111 0010 .... .... .... .... = OPC Member: 242
.... .... 0001 1111 .... .... = OPC Cluster: 31
.... .... .... .... 0000 0000 = OPC Network: 0
.... 0001 = Signalling Link Selector: 1
ISDN User Part
CIC: 0
Message type: Initial address (1)
Nature of Connection Indicators: 0xa
Mandatory Parameter: 6 (Nature of connection indicators)
.... ..10 = Satellite Indicator: Two Satellite circuits in
connection (0x02)
.... 10.. = Continuity Check Indicator: Continuity check performed
on a previous circuit (0x02)
...0 .... = Echo Control Device Indicator: Echo control device not
included
Forward Call Indicators: 0x2
Mandatory Parameter: 7 (Forward call indicators)
.... ...0 .... .... = National/international call indicator: Call to
be treated as national call
.... .00. .... .... = End-to-end method indicator: No End-to-end
method available (only link-by-link method available) (0x0000)
.... 0... .... .... = Interworking indicator: no interworking
encountered (No.7 signalling all the way)
...0 .... .... .... = End-to-end information indicator: no
end-to-end information available
..0. .... .... .... = ISDN user part indicator: ISDN user part not
used all the way
00.. .... .... .... = ISDN user part preference indicator: ISDN user
part prefered all the way (0x0000)
.... .... .... ...0 = ISDN access indicator: originating access
non-ISDN
.... .... .... .01. = SCCP method indicator: Connectionless method
available (national use) (0x0001)
Calling Party's category: 0x9 (reserved/spare)
Mandatory Parameter: 9 (Calling party's category)
Calling Party's category: Unknown (0x09)
Transmission medium requirement: 7 (2x64 kbit/s unrestricted)
Mandatory Parameter: 2 (Transmission medium requirement)
Transmission medium requirement: 2x64 kbit/s unrestricted (7)
Called Party Number
Mandatory Parameter: 4 (Called party number)
Pointer to Parameter: 3
Parameter length: 65
[Malformed Packet: ISUP]