On Tue, Mar 16, 2004 at 12:14:24PM -0600, Minh Ngoc Nguyen (QC/EMC) wrote:
> I try to use Ethereal to decode SMPP But I could not see the data in
> the message Submit_sm [Short Frame].
> What is wrong?
Some of the the SMPP packets are being sent in more than one TCP
segment, and you probably don't have SMPP-over-TCP reassembly enabled,
so it doesn't attempt to reassemble the TCP segments making up the
message, and thus doesn't have the full contents of the message and gets
an exception when it runs out of message data while dissecting the
message. That exception gets reported as "[Short Frame]", which is the
wrong exception (it should say something such as "[Unreassembled
Packet]").
> Should I set the filter somewhere?
No, you should set the option(s) to cause SMPP-over-TCP to be
reassembled.
Select "Preferences" from the "Edit" menu. Open up the "Protocols" list
in the pane on the left in the dialog box that pops up, by clicking on
the "[+]" next to "Protocols". Then select "SMPP" (you'll probably have
to scroll down), turn on "Reassemble SMPP over TCP", select "TCP" from
the "Protocols" list, and turn on "Allow subdissector to desegment TCP
streams", click "Save", and click "OK".
