Wireshark-bugs: [Wireshark-bugs] [Bug 12674] ISUP dissector does not handle the "Carrier Identif
Pascal Quantin
changed
bug 12674
| What |
Removed |
Added |
| CC |
|
pascal.quantin@gmail.com
|
Comment # 1
on bug 12674
from Pascal Quantin
(In reply to Pavel Sindelka from comment #0)
> Build Information:
> Version 2.0.4 (v2.0.4-0-gdd7746e from master-2.0)
>
> Copyright 1998-2016 Gerald Combs <gerald@wireshark.org> and contributors.
> License GPLv2+: GNU GPL version 2 or later
> <http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
> This is free software; see the source for copying conditions. There is NO
> warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
>
> Compiled (64-bit) with Qt 5.3.2, with WinPcap (4_1_3), with libz 1.2.8, with
> GLib 2.42.0, with SMI 0.4.8, with c-ares 1.11.0, with Lua 5.2, with GnuTLS
> 3.2.15, with Gcrypt 1.6.2, with MIT Kerberos, with GeoIP, with QtMultimedia,
> with AirPcap.
>
> Running on 64-bit Windows 10, build 10586, with locale C, with Npcap version
> 0.07, based on WinPcap version 4.1.3 (packet.dll version 4.1.0.2980), based
> on
> libpcap version 1.0 branch 1_0_rel0b (20091008), with GnuTLS 3.2.15, with
> Gcrypt
> 1.6.2, without AirPcap.
> Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz (with SSE4.2), with 8141MB of
> physical memory.
>
>
> Built using Microsoft Visual C++ 12.0 build 40629
>
> Wireshark is Open Source Software released under the GNU General Public
> License.
>
> --
> Hi,
>
> in particular, the parameter c5 03 22 40 23 gets dissected as:
> ------
> Parameter Type unknown/reserved (3 Bytes)
> Optional Parameter: Carrier identification (197)
> Parameter Length: 3
> ------
> So nothing about the value in the dissection pane, and the text item in the
> tree reads "unknown/reserved" although the parameter name is identified
> properly as "Carrier Identification" in the subtree item.
>
> The missing dissection of the parameter value is
> 0... .... = spare
> .010 .... = Type of Network: National
> .... 0010 = Network Identification Plan: 4-digit carrier identification
> Carrier Identification: 0432
> .... 0000 = Address signal digit: 0 (0)
> 0100 .... = Address signal digit: 4 (4)
> .... 0011 = Address signal digit: 3 (3)
> 0010 .... = Address signal digit: 2 (2)
> Carrier Identfication digits: 0432
>
> The reference is available here:
> ftp://ftp.3gpp2.org/Archive/TSGN%20(inactive)/Working/2001/2001_02_Chandler/
> Opening_Plenary/fyi%20T1%20Ballots/T1.113Ballot.pdf
>
> A hex dump (to be imported using encapsulation type "Wireshark Upper PDU
> export") of an example frame follows:
Would have been easier to attach the pcapng file directly :)
>
> (the last line, 000000 00, is a workaround of the bug of import from hex
> which causes the last octet of the last frame to be omitted during import).
This is due to a missing space at the end of the previous packet dump
You are receiving this mail because:
- You are watching all bug changes.
