Ethereal-users: [Ethereal-users] SMPP protocol sometimes is not decoded

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Igor I. Shulz" <shulz@xxxxxxxxxxxxx>
Date: Wed, 21 May 2003 15:27:05 +0300
I've last ver (0.9.12) Ethereal installed on my WinXP. It's strange - in all
cases that I captured SMPP (Short Message Peer to Peer) packets on this PC
they are not decoded (all SMPP-traffic is showed as TCP-protocol and
SMPP-content is not decoded). I have file with previously captured
SMPP-traffic and SMPP-contend is decoded whan I load this file in Ethereal.
Why? What's wrong? I have SMPP-protocol enabled in Edit->Protocols list. But
it slightly strange that this protocol (as well as many other protocols,
that are present in Edit->Protocols list) is absent in
Preferences->Protocols list.

Below is good and bad examples:


Good:
Transmission Control Protocol, Src Port: 21244 (21244), Dst Port: 4530
(4530), Seq: 1491122004, Ack: 386008263, Len: 24
    Source port: 21244 (21244)
    Destination port: 4530 (4530)
    Sequence number: 1491122004
    Next sequence number: 1491122028
    Acknowledgement number: 386008263
    Header length: 32 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 33304
    Checksum: 0x0f3d (correct)
    Options: (12 bytes)
        NOP
        NOP
        Time stamp: tsval 441312272, tsecr 285258927
Short Message Peer to Peer
    Length    : 24
    Operation : Bind_receiver - resp (0x80000001)
    Result    : Ok (0x00000000)
    Sequence #: 1
    System ID: System_ID
    Optional parameters
        Optional parameter - Reserved

0000  00 d0 b7 b7 6c 32 00 03 47 3b 2d 77 08 00 45 00   ....l2..G;-w..E.
0010  00 4c 80 c5 40 00 40 06 36 93 c0 a8 01 01 c0 a8   .L..@.@.6.......
0020  01 02 52 fc 11 b2 58 e0 b7 54 17 02 04 c7 80 18   ..R...X..T......
0030  82 18 0f 3d 00 00 01 01 08 0a 1a 4d e4 10 11 00   ...=.......M....
0040  b4 af 00 00 00 18 80 00 00 01 00 00 00 00 00 00   ................
0050  00 01 XX XX XX XX XX XX XX 00                     ..XXXXXXX.


Bad:
Transmission Control Protocol, Src Port: 2000 (2000), Dst Port: 2622 (2622),
Seq: 6891993, Ack: 68479334, Len: 24
    Source port: 2000 (2000)
    Destination port: 2622 (2622)
    Sequence number: 6891993
    Next sequence number: 6892017
    Acknowledgement number: 68479334
    Header length: 20 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8638
    Checksum: 0x08bc (correct)
Data (24 bytes)

0000  00 90 7f 00 72 93 00 40 c7 97 55 0e 08 00 45 00   ....r..@..U...E.
0010  00 40 b1 1f 40 00 80 06 fb 62 XX XX XX XX XX XX   .@..@...........
0020  XX XX 07 d0 0a 3e 00 69 29 d9 04 14 e9 66 50 18   .....>.i)....fP.
0030  21 be 08 bc 00 00 00 00 00 18 80 00 00 02 00 00   !...............
0040  00 00 00 00 00 00 XX XX XX XX XX XX XX 00         ......XXXXXXX.


--Igor