Ethereal-dev: Re: [Ethereal-dev] [possibly bug] RUDP and user specific decodes

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Martin Regner" <martin.regner@xxxxxxxxx>
Date: Thu, 6 May 2004 19:02:36 +0200
Paul Ionescu wrote:
> On Thu, 2004-05-06 at 11:12, Guy Harris wrote:
> > I.e., with "Decode As" it doesn't pass the data to Cisco SM and with the
> > dissector explicitly changed it does, even though, in both cases, it
> > dissects it as RUDP?
>
> Yeap, that's right.
>
> > That's bizarre - the code path should be the same in both cases.  Do you
> > have a sample capture you could send us?
>
> See the sample capture attached.
> The UDP port is 7007.


I get it to work with Ethereal 0.10.3 on Windows XP.

User Datagram Protocol, Src Port: 7007 (7007), Dst Port: 7007 (7007)
    Source port: 7007 (7007)
    Destination port: 7007 (7007)
    Length: 61
    Checksum: 0xb2cd (correct)
Reliable UDP
    RUDP Header flags: 64
        0... .... = Syn: False
        .1.. .... = Ack: True
        ..0. .... = Eak: False
        ...0 .... = RST: False
        .... 0... = NULL: False
        .... .0.. = CHK: False
        .... ..0. = TCS: False
        .... ...0 = 0: False
    Header Length: 4
    Seq: 112
    Ack: 170
Cisco Session Management
    SM Message Type: 0x00008000
    Protocol Type: 0x0001
    Message ID: 0x0000
    Message Type: 0x0010
    Channel ID: 0x0000
    Bearer ID: 0x0000
    Length: 33
Message Transfer Part Level 3
    Service information octet
        10.. .... = Network indicator: National network (0x02)
        ..00 .... = Spare: 0x00
        .... 0101 = Service indicator: ISUP (0x05)
    Routing label
        DPC (161-128-11) (753825)
            0000 1011 .... .... .... .... = DPC Member: 11
            .... .... 1000 0000 .... .... = DPC Cluster: 128
            .... .... .... .... 1010 0001 = DPC Network: 161
        OPC (0-31-242) (15867648)
            1111 0010 .... .... .... .... = OPC Member: 242
            .... .... 0001 1111 .... .... = OPC Cluster: 31
            .... .... .... .... 0000 0000 = OPC Network: 0
        .... 0001 = Signalling Link Selector: 1
ISDN User Part
    CIC: 0
    Message type: Initial address (1)
    Nature of Connection Indicators: 0xa
        Mandatory Parameter: 6 (Nature of connection indicators)
        .... ..10 = Satellite Indicator: Two Satellite circuits in
connection (0x02)
        .... 10.. = Continuity Check Indicator: Continuity check performed
on a previous circuit (0x02)
        ...0 .... = Echo Control Device Indicator: Echo control device not
included
    Forward Call Indicators: 0x2
        Mandatory Parameter: 7 (Forward call indicators)
        .... ...0 .... .... = National/international call indicator: Call to
be treated as national call
        .... .00. .... .... = End-to-end method indicator: No End-to-end
method available (only link-by-link method available) (0x0000)
        .... 0... .... .... = Interworking indicator: no interworking
encountered (No.7 signalling all the way)
        ...0 .... .... .... = End-to-end information indicator: no
end-to-end information available
        ..0. .... .... .... = ISDN user part indicator: ISDN user part not
used all the way
        00.. .... .... .... = ISDN user part preference indicator: ISDN user
part prefered all the way (0x0000)
        .... .... .... ...0 = ISDN access indicator: originating access
non-ISDN
        .... .... .... .01. = SCCP method indicator: Connectionless method
available (national use) (0x0001)
    Calling Party's category: 0x9 (reserved/spare)
        Mandatory Parameter: 9 (Calling party's category)
        Calling Party's category: Unknown (0x09)
    Transmission medium requirement: 7 (2x64 kbit/s unrestricted)
        Mandatory Parameter: 2 (Transmission medium requirement)
        Transmission medium requirement: 2x64 kbit/s unrestricted (7)
    Called Party Number
        Mandatory Parameter: 4 (Called party number)
        Pointer to Parameter: 3
        Parameter length: 65
[Malformed Packet: ISUP]