Ethereal-users: RE: [Ethereal-users] Malformed packet when decoding SCCP over sigtran

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Anders Broman (AL/EAB)" <anders.broman@xxxxxxxxxxxx>
Date: Mon, 27 Feb 2006 15:24:14 +0100
Title: Malformed packet when decoding SCCP over sigtran
Hi,
Is it the same Ethereal version on Linux? is the preferences set the same ? ( M3UA MTP3 SCCP) can you send the binary .pcap file?
what does the correctly decode frame look like?
 
Brg
Anders

From: ethereal-users-bounces@xxxxxxxxxxxx [mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of Edwin.Premkumar@xxxxxxxxx
Sent: den 27 februari 2006 08:39
To: ethereal-users@xxxxxxxxxxxx
Subject: [Ethereal-users] Malformed packet when decoding SCCP over sigtran

Hi ,

I am seeing the SCCP layer in a SIGTRAN interface (IP/SCTP/M3UA/SCCP..) as a malformed packet when using Ethereal running over Windows.

When I run ethereal over Linux I am able to decode the SCCP layer correctly.

Can anyone tell me what plugins am I missing in the windows version of ethereal ? I am running the latest version of Ethereal 10.14

Output is pasted below.

No.     Time                            Source                Destination           Protocol Info
71 2006-02-13 15:05:43.990000           65853                 13708843              SCCP (Int. ITU) SACK UDT [Malformed Packet]

+Frame 71 (134 bytes on wire, 134 bytes captured)
+Ethernet II, Src: Radisys_0a:34:c1 (00:00:50:0a:34:c1), Dst: Cisco_99:f8:90 (00:13:c4:99:f8:90) 
+Internet Protocol, Src: 10.13.55.8 (10.13.55.8), Dst: 10.187.25.204 (10.187.25.204) 
+Stream Control Transmission Protocol, Src Port: 49153 (49153), Dst Port: 2905 (2905) 
MTP 3 User Adaptation Layer
    Version: Release 1 (1)
    Reserved: 0x00
    Message class: Transfer messages (1)
    Message type: Payload data (DATA) (1)
    Message length: 56
    Network appearance (8)
        Parameter Tag: Network appearance (512)
        Parameter length: 8
        Network appearance: 8
    Protocol data (SS7 message of 21 bytes)
        Parameter Tag: Protocol data (528)
        Parameter length: 37
        OPC: 65853
        DPC: 13708843
        SI: SCCP (3)
        NI: 2
        MP: 3
        SLS: 1
Signalling Connection Control Part
    Message Type: Unitdata (0x09)
    .... 0000 = Class: 0x00
    0000 .... = Message handling: No special options (0x00)
    Pointer to first Mandatory Variable parameter: 3
    Pointer to second Mandatory Variable parameter: 5
    Pointer to third Mandatory Variable parameter: 10
    Called Party Address length: 2
    Called Party address (2 bytes)
        Address Indicator
            .1.. .... = Routing Indicator: Route on SSN (0x01)
            ..00 00.. = Global Title Indicator: No Global Title (0x00)
            .... ..0. = SubSystem Number Indicator: SSN not present (0x00)
            .... ...1 = Point Code Indicator: Point Code present (0x01)
[Malformed Packet: SCCP]

Thanks
Edwin