Ethereal-users: [Ethereal-users] Ethereal interpretation of T.38 T.4-Non-ECM-Sig-End packet
Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.
From: "Lo, Herman" <hlo@xxxxxxxxxx>
Date: Tue, 7 Sep 2004 14:07:04 -0400
|
Hi,
Attached contains a T.38 T.4-Non-ECM-Sig-End packet (packet 2029) reported by Ethereal as a malformed packet. I’m wondering why Ethereal interprets this packet as malformed because it seems that it is compliant with the T.38 spec.
Thanks,
Herman
|
No. Time Source Destination Protocol Info
2028 90355.000000 47.57.34.205 47.57.34.206 T.38 UDP: UDPTLPacket Seq=01555 data:v17-14400: t4-non-ecm-data[FFFFFFFFFFFFFF...]
Frame 2028 (124 bytes on wire, 124 bytes captured)
Arrival Time: Sep 4, 1980 20:37:01.000000000
Time delta from previous packet: 22.000000000 seconds
Time since reference or first frame: 90355.000000000 seconds
Frame Number: 2028
Packet Length: 124 bytes
Capture Length: 124 bytes
Logical-Link Control
DSAP: SNAP (0xaa)
IG Bit: Individual
SSAP: SNAP (0xaa)
CR Bit: Command
Control field: U, func=UI (0x03)
000. 00.. = Command: Unnumbered Information (0x00)
.... ..11 = Frame type: Unnumbered frame (0x03)
Organization Code: Encapsulated Ethernet (0x000000)
Type: IP (0x0800)
Internet Protocol, Src Addr: 47.57.34.205 (47.57.34.205), Dst Addr: 47.57.34.206 (47.57.34.206)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0xb8 (DSCP 0x2e: Expedited Forwarding; ECN: 0x00)
1011 10.. = Differentiated Services Codepoint: Expedited Forwarding (0x2e)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 116
Identification: 0x9804 (38916)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0x3db0 (correct)
Source: 47.57.34.205 (47.57.34.205)
Destination: 47.57.34.206 (47.57.34.206)
User Datagram Protocol, Src Port: 57352 (57352), Dst Port: 57352 (57352)
Source port: 57352 (57352)
Destination port: 57352 (57352)
Length: 96
Checksum: 0x0000 (none)
ITU-T Recommendation T.38
UDPTLPacket
Sequence number: 1555
primary_ifp_packet_length: 41
IFPPacket
Type of message
Type of msg: data (1)
data
data: v17-14400 (8)
Data Field
Item 0
Data_Field_item
Field Type
Data_Field_field_type: t4-non-ecm-data (6)
Data_Field_field_data: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF...
Error recovery
Error recovery: secondary-ifp-packets (0)
Secondary IFPPackets
Item 0
secondary_ifp_packets_item_length: 41
IFPPacket
Type of message
Type of msg: data (1)
data
data: v17-14400 (8)
Data Field
Item 0
Data_Field_item
Field Type
Data_Field_field_type: t4-non-ecm-data (6)
Data_Field_field_data: 00B001800C006003001800FFFFFFFFFF...
0000 aa aa 03 00 00 00 08 00 45 b8 00 74 98 04 00 00 ........E..t....
0010 40 11 3d b0 2f 39 22 cd 2f 39 22 ce e0 08 e0 08 @.=./9"./9".....
0020 00 60 00 00 06 13 29 d0 01 e0 00 23 ff ff ff ff .`....)....#....
0030 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................
0040 ff ff ff ff ff ff ef ff fb df ff ff ff ff ff f8 ................
0050 00 01 29 d0 01 e0 00 23 00 b0 01 80 0c 00 60 03 ..)....#......`.
0060 00 18 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ................
0070 ff ff ff ff ff ff ff ff ff ff ff ff ............
No. Time Source Destination Protocol Info
2029 90376.000000 47.57.34.205 47.57.34.206 T.38 UDP: UDPTLPacket Seq=01556 data:v17-14400: t4-non-ecm-sig-end[5F61FF4D37CF2D...][UNKNOWN PER: 10.9.3.8.1][Malformed Packet]
Frame 2029 (106 bytes on wire, 106 bytes captured)
Arrival Time: Sep 4, 1980 20:37:22.000000000
Time delta from previous packet: 21.000000000 seconds
Time since reference or first frame: 90376.000000000 seconds
Frame Number: 2029
Packet Length: 106 bytes
Capture Length: 106 bytes
Logical-Link Control
DSAP: SNAP (0xaa)
IG Bit: Individual
SSAP: SNAP (0xaa)
CR Bit: Command
Control field: U, func=UI (0x03)
000. 00.. = Command: Unnumbered Information (0x00)
.... ..11 = Frame type: Unnumbered frame (0x03)
Organization Code: Encapsulated Ethernet (0x000000)
Type: IP (0x0800)
Internet Protocol, Src Addr: 47.57.34.205 (47.57.34.205), Dst Addr: 47.57.34.206 (47.57.34.206)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0xb8 (DSCP 0x2e: Expedited Forwarding; ECN: 0x00)
1011 10.. = Differentiated Services Codepoint: Expedited Forwarding (0x2e)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 98
Identification: 0x9805 (38917)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 64
Protocol: UDP (0x11)
Header checksum: 0x3dc1 (correct)
Source: 47.57.34.205 (47.57.34.205)
Destination: 47.57.34.206 (47.57.34.206)
User Datagram Protocol, Src Port: 57352 (57352), Dst Port: 57352 (57352)
Source port: 57352 (57352)
Destination port: 57352 (57352)
Length: 78
Checksum: 0x0000 (none)
ITU-T Recommendation T.38
UDPTLPacket
Sequence number: 1556
primary_ifp_packet_length: 23
IFPPacket
Type of message
Type of msg: data (1)
data
data: v17-14400 (8)
Data Field
Item 0
Data_Field_item
Field Type
Data_Field_field_type: t4-non-ecm-sig-end (7)
Data_Field_field_data: 5F61FF4D37CF2DF2C75DF0C30CF0DB5D...
Error recovery
Error recovery: secondary-ifp-packets (0)
Secondary IFPPackets
Item 0
something unknown here [10.9.3.8.1]
[Malformed Packet: T38]
0000 aa aa 03 00 00 00 08 00 45 b8 00 62 98 05 00 00 ........E..b....
0010 40 11 3d c1 2f 39 22 cd 2f 39 22 ce e0 08 e0 08 @.=./9"./9".....
0020 00 4e 00 00 06 14 17 d0 01 f0 00 11 5f 61 ff 4d .N.........._a.M
0030 37 cf 2d f2 c7 5d f0 c3 0c f0 db 5d 37 c7 00 01 7.-..].....]7...
0040 29 d0 01 e0 00 23 ff ff ff ff ff ff ff ff ff ff )....#..........
0050 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................
0060 ef ff fb df ff ff ff ff ff f8 ..........
- Prev by Date: [Ethereal-users] ethereal version 0.10.6
- Next by Date: Re: [Ethereal-users] WinPcap Error Message in Ethereal
- Previous by thread: Re: [Ethereal-users] ethereal version 0.10.6
- Next by thread: [Ethereal-users] WinXP problem with 0.10.5 and 0.10.6
- Index(es):
