ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-dev: Re: [Ethereal-dev] ISUP patch

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Martin Regner" <martin.regner@xxxxxxxxx>
Date: Wed, 20 Aug 2003 01:25:22 +0200
Hi,

The capture that Anders Broman is referring to is probably the capture that is attached to the
message by Michael Lum (the first message in the thread):
http://www.ethereal.com/lists/ethereal-dev/200308/msg00212.html

When I try with that capture I get "Unknown parameter with tag 14" independently of what preference settings I use.
I tried will several different versions of Ethereal but none of them supports tag 14.
I tried with setting MTP3 preferences to ANSI but that didn't help anything.
I assume that maybe Michael Lum is using a modified M2UA dissector.

It might be that the problem is that the length of parameter with tag 14 should be 12 instead of 11 (i.e. a fault in the data that is sent), so that the 0x00 byte is part of the ISUP data - and not put as "Padding".

I think that a ISUP RLC should be sent as "0x10 0x00" (Message=RLC (0x10) followed by optional parameter pointer=0x00) and then the fault is probably not in Ethereal.
However I don't have the relevant specifications available right now.

MTP 2 User Adaptation Layer
    Version: Release 1 (1)
    Reserved: 0x00
    Message class: MTP2 user adaptation messages (6)
    Message type: DATA (DATA) (1)
    Message length: 32
    Interface identifier (integer) (53)
        Parameter Tag: Interface identifier (integer) (0x0001)
        Parameter length: 8
        Interface Identifier (integer): 53
    Unknown parameter with tag 14 and 11 bytes value
        Parameter Tag: Unknown (0x000e)
        Parameter length: 15
        Parameter value: A55D120507150101310010
        Padding: 00

0000  00 03 ba 0f 93 6d 00 90 8f 03 95 63 08 00 45 00   .....m.....c..E.
0010  00 60 a7 08 00 00 40 84 ed a0 c0 a8 32 15 c0 a8   .`[email protected]...
0020  32 0b 0b 58 0b 58 fb 55 35 00 6c 15 07 8f 03 00   2..X.X.U5.l.....
0030  00 10 fb 5b 19 50 00 00 29 40 00 00 00 00 00 03   ...[.P..)@......
0040  00 30 00 0f 25 87 00 03 16 04 00 00 00 02 01 00   .0..%...........
0050  06 01 00 00 00 20 00 01 00 08 00 00 00 35 00 0e   ..... .......5..
0060  00 0f a5 5d 12 05 07 15 01 01 31 00 10 00         ...]......1...

Michael Tuxen:

>Hi Anders,
>can you send a a (small) sample trace file to
>
>tuexen@xxxxxxxxxxxxxx
>
>showing the problem?
>
>The parameter tag 14 is not a valid M2UA parameter tag.
>