Ethereal-users: [Ethereal-users] ITU TCAP over SCCP/M3UA/SCTP: Problem in 0.10.12

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Joe Samaha" <joe.samaha@xxxxxxxxxxxxxx>
Date: Thu, 20 Oct 2005 11:33:53 +0300

Hi,

 

Following the latest change of release from 10.11 to 10.12, I have noticed a malfunction in the TCAP dissector when running over SCCP/M3UA/SCTP (Sigtran) using ITU standards.

The TCAP dissector is not decoding the fields correctly in that case. One possibility may be that it is attempting to decode it in ANSI mode; the clue being the names of the fields it displays (e.g. OTID, which is an ANSI field and not an ITU field). In the preferences setting, there used to be an ITU/ANSI choice in the TCAP protocol tab in 10.11. In the current rel 10.12, such a choice disappeared. The only choice of ITU/ANSI is made in the MTP3 tab – which I have set to ITU. I also made sure that SSN numbers entered in the TCAP and MAP tabs match the ones in the packets.

Of course, this is just a possibility and other reasons may be causing the problem.

 

Please find attached a sample capture. Opening it in ethereal 0.10.11 shows correct TCAP decoding (Do not bother about malformed packets on the GSM SMS layer, they are due to originally coding the packets incorrectly.) However, in ethereal 10.12, the decoding in TCAP is not successful.

 

Thank you for taking note of this problem.

 

Regards,

Joe

Attachment: Capture1
Description: Binary data