Wireshark-bugs: [Wireshark-bugs] [Bug 1911] ISUP inside RUDP/Cisco SM packets not decoded
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1911
------- Comment #4 from ravasio@xxxxxxxxx 2007-10-12 16:08 GMT -------
(In reply to comment #2)
Hi Jeff,
thanks a million for your help on this one.
> The Cisco-SM dissector sees the PDU message type in these packets as 0x5347 but
> it is expecting a message type of 0x10 or 0x11 in order to pass the payload off
> to the MTP3 dissector.
...See below for a possibile reason...
[SNIP]
> Are there different versions of the Cisco SM protocol? Or what is the payload
> directly above Cisco SM supposed to be (MTP3 or ISUP? ANSI or ITU?)?
As far as I remember, the first protocol on top of Cisco SM should be MTP3,
then containing EISUP.
EISUP is a Cisco proprietary extension to ISUP, adding additional VoIP-specific
information. I contacted Cisco a few months ago asking if the protocol was
documented and/or if a dissector was avaialable. They replied that Ethereal was
already able to decode it.
I didn't believe them until they showed that to me in person: Ethereal was
using the ISUP dissector. I can't remember the version they were using, though.
This seems to be an old bug/problem, what I'm experiencing is the same as it's
described here:
http://www.ethereal.com/lists/ethereal-dev/200405/msg00121.html
Cheers,
Pietro
--
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
