Ethereal-users: [Ethereal-users] Q.931 SETUP with IP & TCP checksum error (win32) ?
Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.
From: "Mads Nielsen (DXD)" <Mads.B.Nielsen@xxxxxxxxxxxxxxx>
Date: Thu, 10 Oct 2002 08:38:58 +0200
Hi, This message was originally posted on the OpenH323 mailing list - but since the packets are decoded with Ethereal (0.9.7 and previous versions) I might get some knowledge from some of you... I have just started using OpenH323 and noticed that "Ethereal" with "H.323 plugin" not could reassemble a fragmented Q.931 SETUP frame (see attached log). This applies to (at least) callgen323 and openphone. The replies from the (remote) GK seems correct. After some debugging in Ethereal I realized that it showed IP & TCP checksum errors for these fragmented TPKT frames - and Ethereal refuses to desegment packets with such errors. I also noticed IP-checksum errors for "H.225 RAS" frames (but UDP checksum ok). *** Why can't Ethereal hightlight errors in the summary view? It could have saved me some valuable time ;-) Fortunately I just discovered that TCP-checksum validation can be turned off in Ethereal - and then desegmentation seems to work... But either Bill@xxxxxxxxxxx or OpenH323 seems to have a TCP-checksum problem ;-) *** Does anybody have any comment on this? I'm currently using the latest versions, i.e: ethereal 0.9.7 (I recompiled the H.323 plugin - but also tried with prebuild configurations - e.g. 0.9.6) openh323_20021008_win32.zip pwlib_20021003_win32.zip openphone_20021004_win32.zip callgen323_20021006_win32.zip Windows 2000 Workstation - SP2. Thanks, Mads Bligaard Nielsen System Engineer, Core Software Development
Frame 55 (1514 bytes on wire, 1514 bytes captured)
Arrival Time: Oct 8, 2002 17:55:59.831055000
Time delta from previous packet: 0.270050000 seconds
Time relative to first packet: 743.081878000 seconds
Frame Number: 55
Packet Length: 1514 bytes
Capture Length: 1514 bytes
Ethernet II, Src: 00:b0:d0:8d:66:d5, Dst: 00:60:cf:20:c1:f9
Destination: 00:60:cf:20:c1:f9 (00:60:cf:20:c1:f9)
Source: 00:b0:d0:8d:66:d5 (00:b0:d0:8d:66:d5)
Type: IP (0x0800)
Internet Protocol, Src Addr: 148.135.145.130 (148.135.145.130), Dst Addr: 172.30.250.147 (172.30.250.147)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 1500
Identification: 0x71b3
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0x0000 (incorrect, should be 0xb6ac)
Source: 148.135.145.130 (148.135.145.130)
Destination: 172.30.250.147 (172.30.250.147)
Transmission Control Protocol, Src Port: 3570 (3570), Dst Port: 1720 (1720), Seq: 992633435, Ack: 3325208158, Len: 1460
Source port: 3570 (3570)
Destination port: 1720 (1720)
Sequence number: 992633435
Next sequence number: 992634895
Acknowledgement number: 3325208158
Header length: 20 bytes
Flags: 0x0010 (ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 0... = Push: Not set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 17520
Checksum: 0xd28a (incorrect, should be 0x3789)
TPKT
Version: 3
Reserved: 0
Length: 1977
Q.931
Protocol discriminator: Q.931
Call reference value length: 2
Call reference value: 263A
Message type: SETUP (0x05)
Bearer capability
Information element: Bearer capability
Length: 3
Coding standard: ITU-T standardized coding
Information transfer capability: Unrestricted digital information
Transfer mode: Circuit mode
Information transfer rate: 384 kbit/s
User information layer 1 protocol: Recommendation H.221 and H.242
Display
Information element: Display
Length: 7
Display information: dxdmap\000
Calling party number
Information element: Calling party number
Length: 5
Type of number: Unknown
Numbering plan: E.164 ISDN/telephony numbering
Number: 4001
Called party number
Information element: Called party number
Length: 5
Type of number: Unknown
Numbering plan: E.164 ISDN/telephony numbering
Number: 4009
User-user
Information element: User-user
Length: 1937
Protocol discriminator: X.208 and X.209 coded user information
[Short Frame: Q.931]
0000 00 60 cf 20 c1 f9 00 b0 d0 8d 66 d5 08 00 45 00 .`. ......f...E.
0010 05 dc 71 b3 40 00 80 06 00 00 94 87 91 82 ac 1e ..q.@...........
0020 fa 93 0d f2 06 b8 3b 2a 62 5b c6 32 a6 5e 50 10 ......;*b[.2.^P.
0030 44 70 d2 8a 00 00 03 00 07 b9 08 02 26 3a 05 04 Dp..........&:..
0040 03 88 93 a5 28 07 64 78 64 6d 61 70 00 6c 05 81 ....(.dxdmap.l..
0050 34 30 30 31 70 05 81 34 30 30 39 7e 07 91 05 20 4001p..4009~...
0060 b8 06 00 08 91 4a 00 04 02 40 05 00 64 00 78 00 [email protected].
0070 64 00 6d 00 61 00 70 01 80 73 34 22 c0 09 00 00 d.m.a.p..s4"....
0080 3d 16 45 71 75 69 76 61 6c 65 6e 63 65 20 4f 70 =.Equivalence Op
0090 65 6e 50 68 6f 6e 65 00 00 18 31 2e 35 2e 34 20 enPhone...1.5.4
00a0 28 4f 70 65 6e 48 33 32 33 20 76 31 2e 39 2e 39 (OpenH323 v1.9.9
00b0 29 00 00 00 01 01 80 73 3c 00 ac 1e fa 93 06 b8 )......s<.......
00c0 00 c8 87 a7 c8 7c eb 18 10 95 69 00 b0 d0 8d 66 .....|....i....f
00d0 d5 00 c5 1d 80 04 07 00 94 87 91 82 0d f2 11 00 ................
00e0 c8 87 a7 c8 7c eb 18 10 95 6a 00 b0 d0 8d 66 d5 ....|....j....f.
00f0 84 f3 1a 4c 40 00 00 06 04 01 00 4c 10 b5 00 53 [email protected]
0100 4c 2a 02 00 00 00 00 00 f9 01 00 00 f9 01 01 00 L*..............
0110 04 00 00 00 00 00 11 00 01 00 40 1f 00 00 d7 0f ..........@.....
0120 00 00 00 01 04 00 02 00 f9 01 00 00 80 12 1c 40 ...............@
0130 01 00 94 87 91 82 13 8c 00 94 87 91 82 13 8d 08 ................
0140 41 00 00 64 0c 10 b5 00 53 4c 2a 02 00 00 00 00 A..d....SL*.....
0150 00 f9 01 00 00 f9 01 01 00 04 00 00 00 00 00 11 ................
0160 00 01 00 40 1f 00 00 d7 0f 00 00 00 01 04 00 02 ...@............
0170 00 f9 01 00 00 80 0b 0d 40 01 00 94 87 91 82 13 ........@.......
0180 8d 84 4c 40 00 00 06 04 01 00 4c 10 b5 00 53 4c ..L@xxxxxxxxxxxx
0190 2a 02 00 00 00 00 00 40 01 00 00 40 01 02 00 08 *......@...@....
01a0 00 00 00 00 00 31 00 01 00 40 1f 00 00 59 06 00 [email protected]..
01b0 00 41 00 00 00 02 00 40 01 00 00 80 12 1c 40 01 .A.....@......@.
01c0 00 94 87 91 82 13 8c 00 94 87 91 82 13 8d 00 41 ...............A
01d0 00 00 65 0c 10 b5 00 53 4c 2a 02 00 00 00 00 00 ..e....SL*......
01e0 40 01 00 00 40 01 02 00 08 00 00 00 00 00 31 00 @[email protected].
01f0 01 00 40 1f 00 00 59 06 00 00 41 00 00 00 02 00 [email protected].....
0200 40 01 00 00 80 0b 0d 40 01 00 94 87 91 82 13 8d @......@........
0210 80 27 40 00 00 06 04 01 00 4c 10 09 00 00 3d 06 .'@......L....=.
0220 4c 50 43 2d 31 30 80 11 1c 00 01 00 94 87 91 82 LPC-10..........
0230 13 8c 00 94 87 91 82 13 8d 1d 00 00 66 0c 10 09 ............f...
0240 00 00 3d 06 4c 50 43 2d 31 30 80 0b 0d 00 01 00 ..=.LPC-10......
0250 94 87 91 82 13 8d 80 20 40 00 00 06 04 01 00 4e ....... @......N
0260 0c 03 00 83 00 80 11 1c 00 01 00 94 87 91 82 13 ................
0270 8c 00 94 87 91 82 13 8d 16 00 00 67 0e 0c 03 00 ...........g....
0280 83 00 80 0b 0d 00 01 00 94 87 91 82 13 8d 80 1d ................
0290 40 00 00 06 04 01 00 4d 60 05 80 11 1c 00 01 00 @......M`.......
02a0 94 87 91 82 13 8c 00 94 87 91 82 13 8d 13 00 00 ................
02b0 68 0d 60 05 80 0b 0d 00 01 00 94 87 91 82 13 8d h.`.............
02c0 80 1d 40 00 00 06 04 01 00 4d 40 05 80 11 1c 00 [email protected]@.....
02d0 01 00 94 87 91 82 13 8c 00 94 87 91 82 13 8d 13 ................
02e0 00 00 69 0d 40 05 80 0b 0d 00 01 00 94 87 91 82 ..i.@...........
02f0 13 8d 80 4d 40 00 00 06 04 01 00 4c 10 09 00 00 [email protected]....
0300 3d 2c 47 2e 37 32 36 2d 31 36 6b 00 0a 20 11 2d =,G.726-16k.. .-
0310 30 a0 a1 2a 30 f0 a1 2a 30 50 a2 2a 30 2a f7 07 0..*0..*0P.*0*..
0320 30 20 a4 2a 30 24 f7 07 30 1e f7 07 30 a4 80 11 0 .*0$..0...0...
0330 1c 00 01 00 94 87 91 82 13 8c 00 94 87 91 82 13 ................
0340 8d 43 00 00 6a 0c 10 09 00 00 3d 2c 47 2e 37 32 .C..j.....=,G.72
0350 36 2d 31 36 6b 00 0a 20 11 2d 30 a0 a1 2a 30 f0 6-16k.. .-0..*0.
0360 a1 2a 30 50 a2 2a 30 2a f7 07 30 20 a4 2a 30 24 .*0P.*0*..0 .*0$
0370 f7 07 30 1e f7 07 30 a4 80 0b 0d 00 01 00 94 87 ..0...0.........
0380 91 82 13 8d 80 4d 40 00 00 06 04 01 00 4c 10 09 [email protected]..
0390 00 00 3d 2c 47 2e 37 32 36 2d 32 34 6b 00 0a 47 ..=,G.726-24k..G
03a0 2e 37 32 36 2d 31 36 6b 00 00 20 11 2d 30 a0 a1 .726-16k.. .-0..
03b0 2a 30 f0 a1 2a 30 50 a2 2a 30 2a f7 07 30 20 a4 *0..*0P.*0*..0 .
03c0 80 11 1c 00 01 00 94 87 91 82 13 8c 00 94 87 91 ................
03d0 82 13 8d 43 00 00 6b 0c 10 09 00 00 3d 2c 47 2e ...C..k.....=,G.
03e0 37 32 36 2d 32 34 6b 00 0a 47 2e 37 32 36 2d 31 726-24k..G.726-1
03f0 36 6b 00 00 20 11 2d 30 a0 a1 2a 30 f0 a1 2a 30 6k.. .-0..*0..*0
0400 50 a2 2a 30 2a f7 07 30 20 a4 80 0b 0d 00 01 00 P.*0*..0 .......
0410 94 87 91 82 13 8d 80 4d 40 00 00 06 04 01 00 4c [email protected]
0420 10 09 00 00 3d 2c 47 2e 37 32 36 2d 33 32 6b 00 ....=,G.726-32k.
0430 0a 47 2e 37 32 36 2d 32 34 6b 00 00 47 2e 37 32 .G.726-24k..G.72
0440 36 2d 31 36 6b 00 00 20 11 2d 30 a0 a1 2a 30 f0 6-16k.. .-0..*0.
0450 a1 2a 80 11 1c 00 01 00 94 87 91 82 13 8c 00 94 .*..............
0460 87 91 82 13 8d 43 00 00 6c 0c 10 09 00 00 3d 2c .....C..l.....=,
0470 47 2e 37 32 36 2d 33 32 6b 00 0a 47 2e 37 32 36 G.726-32k..G.726
0480 2d 32 34 6b 00 00 47 2e 37 32 36 2d 31 36 6b 00 -24k..G.726-16k.
0490 00 20 11 2d 30 a0 a1 2a 30 f0 a1 2a 80 0b 0d 00 . .-0..*0..*....
04a0 01 00 94 87 91 82 13 8d 80 4d 40 00 00 06 04 01 .........M@.....
04b0 00 4c 10 09 00 00 3d 2c 47 2e 37 32 36 2d 34 30 .L....=,G.726-40
04c0 6b 00 0a 47 2e 37 32 36 2d 33 32 6b 00 00 47 2e k..G.726-32k..G.
04d0 37 32 36 2d 32 34 6b 00 00 47 2e 37 32 36 2d 31 726-24k..G.726-1
04e0 36 6b 00 00 80 11 1c 00 01 00 94 87 91 82 13 8c 6k..............
04f0 00 94 87 91 82 13 8d 43 00 00 6d 0c 10 09 00 00 .......C..m.....
0500 3d 2c 47 2e 37 32 36 2d 34 30 6b 00 0a 47 2e 37 =,G.726-40k..G.7
0510 32 36 2d 33 32 6b 00 00 47 2e 37 32 36 2d 32 34 26-32k..G.726-24
0520 6b 00 00 47 2e 37 32 36 2d 31 36 6b 00 00 80 0b k..G.726-16k....
0530 0d 00 01 00 94 87 91 82 13 8d 80 1d 40 00 00 06 ............@...
0540 04 01 00 4c 60 1d 80 11 1c 00 01 00 94 87 91 82 ...L`...........
0550 13 8c 00 94 87 91 82 13 8d 13 00 00 6e 0c 60 1d ............n.`.
0560 80 0b 0d 00 01 00 94 87 91 82 13 8d 80 1d 40 00 ..............@.
0570 00 06 04 01 00 4c 20 1d 80 11 1c 00 01 00 94 87 .....L .........
0580 91 82 13 8c 00 94 87 91 82 13 8d 13 00 00 6f 0c ..............o.
0590 20 1d 80 0b 0d 00 01 00 94 87 91 82 13 8d 80 22 .............."
05a0 40 00 00 06 04 01 00 48 71 03 51 00 80 01 00 80 @......Hq.Q.....
05b0 11 1c 00 02 00 94 87 91 82 13 8e 00 94 87 91 82 ................
05c0 13 8f 22 40 00 00 06 04 01 00 48 6b 03 51 00 80 .."@......Hk.Q..
05d0 01 00 80 11 1c 00 02 00 94 87 91 82 13 8e 00 94 ................
05e0 87 91 82 13 8f 01 00 01 00 01 ..........
Frame 56 (571 bytes on wire, 571 bytes captured)
Arrival Time: Oct 8, 2002 17:55:59.831090000
Time delta from previous packet: 0.000035000 seconds
Time relative to first packet: 743.081913000 seconds
Frame Number: 56
Packet Length: 571 bytes
Capture Length: 571 bytes
Ethernet II, Src: 00:b0:d0:8d:66:d5, Dst: 00:60:cf:20:c1:f9
Destination: 00:60:cf:20:c1:f9 (00:60:cf:20:c1:f9)
Source: 00:b0:d0:8d:66:d5 (00:b0:d0:8d:66:d5)
Type: IP (0x0800)
Internet Protocol, Src Addr: 148.135.145.130 (148.135.145.130), Dst Addr: 172.30.250.147 (172.30.250.147)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 557
Identification: 0x71b4
Flags: 0x04
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 128
Protocol: TCP (0x06)
Header checksum: 0x0000 (incorrect, should be 0xba5a)
Source: 148.135.145.130 (148.135.145.130)
Destination: 172.30.250.147 (172.30.250.147)
Transmission Control Protocol, Src Port: 3570 (3570), Dst Port: 1720 (1720), Seq: 992634895, Ack: 3325208158, Len: 517
Source port: 3570 (3570)
Destination port: 1720 (1720)
Sequence number: 992634895
Next sequence number: 992635412
Acknowledgement number: 3325208158
Header length: 20 bytes
Flags: 0x0018 (PSH, ACK)
0... .... = Congestion Window Reduced (CWR): Not set
.0.. .... = ECN-Echo: Not set
..0. .... = Urgent: Not set
...1 .... = Acknowledgment: Set
.... 1... = Push: Set
.... .0.. = Reset: Not set
.... ..0. = Syn: Not set
.... ...0 = Fin: Not set
Window size: 17520
Checksum: 0xcedb (incorrect, should be 0x1e2c)
Data (517 bytes)
0000 00 60 cf 20 c1 f9 00 b0 d0 8d 66 d5 08 00 45 00 .`. ......f...E.
0010 02 2d 71 b4 40 00 80 06 00 00 94 87 91 82 ac 1e .-q.@...........
0020 fa 93 0d f2 06 b8 3b 2a 68 0f c6 32 a6 5e 50 18 ......;*h..2.^P.
0030 44 70 ce db 00 00 00 01 00 81 fc 02 81 f1 02 70 Dp.............p
0040 01 06 00 08 81 75 00 07 80 13 80 00 32 00 01 00 .....u......2...
0050 00 01 00 00 01 00 00 0c c0 01 00 01 80 11 80 00 ................
0060 00 20 20 b5 00 53 4c 2a 02 00 00 00 00 00 f9 01 . ..SL*........
0070 00 00 f9 01 01 00 04 00 00 00 00 00 11 00 01 00 ................
0080 40 1f 00 00 d7 0f 00 00 00 01 04 00 02 00 f9 01 @...............
0090 00 00 80 00 01 20 20 b5 00 53 4c 2a 02 00 00 00 ..... ..SL*....
00a0 00 00 40 01 00 00 40 01 02 00 08 00 00 00 00 00 ..@...@.........
00b0 31 00 01 00 40 1f 00 00 59 06 00 00 41 00 00 00 [email protected]...
00c0 02 00 40 01 00 00 80 00 02 20 20 09 00 00 3d 06 ..@...... ...=.
00d0 4c 50 43 2d 31 30 80 00 03 24 18 03 00 e6 00 80 LPC-10...$......
00e0 00 04 22 c0 17 80 00 05 22 80 17 80 00 06 20 20 ..".....".....
00f0 09 00 00 3d 2c 47 2e 37 32 36 2d 31 36 6b 00 f0 ...=,G.726-16k..
0100 20 11 2d 30 a0 a1 2a 30 f0 a1 2a 30 50 a2 2a 30 .-0..*0..*0P.*0
0110 2a f7 07 30 20 a4 2a 30 24 f7 07 30 1e f7 07 30 *..0 .*0$..0...0
0120 a4 80 00 07 20 20 09 00 00 3d 2c 47 2e 37 32 36 .... ...=,G.726
0130 2d 32 34 6b 00 f0 47 2e 37 32 36 2d 31 36 6b 00 -24k..G.726-16k.
0140 00 20 11 2d 30 a0 a1 2a 30 f0 a1 2a 30 50 a2 2a . .-0..*0..*0P.*
0150 30 2a f7 07 30 20 a4 80 00 08 20 20 09 00 00 3d 0*..0 .... ...=
0160 2c 47 2e 37 32 36 2d 33 32 6b 00 f0 47 2e 37 32 ,G.726-32k..G.72
0170 36 2d 32 34 6b 00 00 47 2e 37 32 36 2d 31 36 6b 6-24k..G.726-16k
0180 00 00 20 11 2d 30 a0 a1 2a 30 f0 a1 2a 80 00 09 .. .-0..*0..*...
0190 20 20 09 00 00 3d 2c 47 2e 37 32 36 2d 34 30 6b ...=,G.726-40k
01a0 00 f0 47 2e 37 32 36 2d 33 32 6b 00 00 47 2e 37 ..G.726-32k..G.7
01b0 32 36 2d 32 34 6b 00 00 47 2e 37 32 36 2d 31 36 26-24k..G.726-16
01c0 6b 00 00 80 00 0a 20 c0 ef 80 00 0b 20 40 ef 80 k..... ..... @..
01d0 00 0c 08 e2 03 51 00 80 01 00 80 00 0d 08 d6 03 .....Q..........
01e0 51 00 80 01 00 80 00 0e 83 01 50 80 00 0f 83 01 Q.........P.....
01f0 10 80 00 10 83 01 40 80 00 11 8a 06 14 04 30 2d [email protected]
0200 31 36 00 80 01 04 0b 00 00 00 01 00 02 00 03 00 16..............
0210 04 00 05 00 06 00 07 00 08 00 09 00 0a 00 0b 00 ................
0220 00 0c 00 00 0d 00 00 0e 02 00 0f 00 10 00 11 07 ................
0230 01 00 32 80 c0 d5 48 04 80 01 80 ..2...H....
- Prev by Date: Re: [Ethereal-users] SPNEGO decoder?
- Next by Date: [Ethereal-users] save as plain text
- Previous by thread: Re: [Ethereal-users] Ipv6 Source and Dest addresses not showing on capture (Win2000)
- Next by thread: [Ethereal-users] save as plain text
- Index(es):
- Get Wireshark
- Download
- Code of Conduct