ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-dev: Re: [Ethereal-dev] ISUP patch

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Tue, 19 Aug 2003 23:12:08 -0700
On Fri, Aug 15, 2003 at 11:31:37AM -0700, Michael Lum wrote:
> I believe the ISUP dissector has a bug when decoding the
> optional parameter pointer.

So what is the added check doing?  It looks as if it's checking whether
the optional parameter pointer is present in the packet.

> Please see the attached isup.snoop.  Packet 5 contains an RLC in
> which the last octet (optional parameter pointer) is not handled
> correctly.

Unfortunately, as per your mail, that's a trace from a machine running
code that implements an old M2UA draft (older than even the draft
implemented by the first version of the M2UA dissector in Ethereal), so
if it shows ISUP traffic, you presumably have a dissector that you've
modified to support that older draft - should a dissector preference be
added to allow the RFC, and various older drafts, to be supported?