Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 1911] ISUP inside RUDP/Cisco SM packets not decoded

Date: Fri, 12 Oct 2007 15:39:20 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1911





------- Comment #2 from jeff.morriss@xxxxxxxxxxx  2007-10-12 15:39 GMT -------
The Cisco-SM dissector sees the PDU message type in these packets as 0x5347 but
it is expecting a message type of 0x10 or 0x11 in order to pass the payload off
to the MTP3 dissector.

It looks like this behavior appeared a couple of years ago with this revision:

http://anonsvn.wireshark.org/viewvc/viewvc.py?view=rev&revision=14013

which came from:

http://www.ethereal.com/lists/ethereal-dev/200504/msg00030.html

But even if I comment out the code that sends only certain message types to the
MTP3 dissector I don't get valid looking messages.

Of more concern is that the dissector says the length is 47784 which is clearly
bogus.

Are there different versions of the Cisco SM protocol?  Or what is the payload
directly above Cisco SM supposed to be (MTP3 or ISUP? ANSI or ITU?)?


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.