Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 1924] unable to decode the MTP3 - SCCP - TCAP - CAP HexDump

[bugzilla-daemon@xxxxxxxxxxxxx]

http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1924





------- Comment #7 from anders.broman@xxxxxxxxxxxx  2007-10-22 13:43 GMT -------
Hi,
If ssn 146 is tied to Camel in preferences the packet decodes as:
Camel
    10.. .... = Class: CONTEXT (2)
    ..1. .... = P/C: Constructed Encoding
    ...0 0001 = Tag: 1
    Length: 183
    invoke
        invokeId: present (0)
            00.. .... = Class: UNIVERSAL (0)
            ..0. .... = P/C: Primitive Encoding
            ...0 0010 = Tag: INTEGER (2)
            Length: 1
            present: 1
        opcode: local (0)
            00.. .... = Class: UNIVERSAL (0)
            ..0. .... = P/C: Primitive Encoding
            ...0 0010 = Tag: INTEGER (2)
            Length: 1
            local: initialDP (0)
        InitialDPArg
            00.. .... = Class: UNIVERSAL (0)
            ..1. .... = P/C: Constructed Encoding
            ...1 0000 = Tag: SEQUENCE (16)
            Length: 174
            10.. .... = Class: CONTEXT (2)
            ..0. .... = P/C: Primitive Encoding
            ...0 0000 = Tag: 0
            Length: 1
            serviceKey: 32
            10.. .... = Class: CONTEXT (2)
            ..0. .... = P/C: Primitive Encoding
            ...0 0010 = Tag: 2
            Length: 6
            calledPartyNumber: 1A99911800F6
            0... .... = Odd/even indicator: even number of address signals
            .001 1010 = Nature of address indicator: Unknown (26)
            1... .... = INN indicator: routing to internal network number not
allowed
            .001 .... = Numbering plan indicator: ISDN (Telephony) numbering
plan (1)
            Called Party Number: 1981006F
                .... 0001 = Address signal digit: 1 (1)
                1001 .... = Address signal digit: 9 (9)
                .... 1000 = Address signal digit: 8 (8)
                0001 .... = Address signal digit: 1 (1)
                .... 0000 = Address signal digit: 0 (0)
                0000 .... = Address signal digit: 0 (0)
                .... 0110 = Address signal digit: 6 (6)
                1111 .... = Address signal digit: Stop sending (15)
                E.164 Called party number digits: 1981006F
            10.. .... = Class: CONTEXT (2)
            ..0. .... = P/C: Primitive Encoding
            ...0 0011 = Tag: 3
            Length: 5
            callingPartyNumber: 9189113214
            1... .... = Odd/even indicator: odd number of address signals
            .001 0001 = Nature of address indicator: Unknown (17)
            1... .... = NI indicator: incomplete
            .000 .... = Numbering plan indicator: Unknown (0)
            .... 10.. = Address presentation restricted indicator: address not
available (national use) (2)
            .... ..01 = Screening indicator: user provided, verified and passed
(1)
            Calling Party Number: 11234
                .... 0001 = Address signal digit: 1 (1)
                0001 .... = Address signal digit: 1 (1)
                .... 0010 = Address signal digit: 2 (2)
                0011 .... = Address signal digit: 3 (3)
                .... 0100 = Address signal digit: 4 (4)
                ISUP Calling Number: 11234
            10.. .... = Class: CONTEXT (2)
            ..0. .... = P/C: Primitive Encoding
            ...0 0101 = Tag: 5
            Length: 1
            callingPartysCategory: ordinary calling subscriber (10)
            10.. .... = Class: CONTEXT (2)
            ..0. .... = P/C: Primitive Encoding
            ...0 1010 = Tag: 10
            Length: 5
            locationNumber: 89674513F2
            10.. .... = Class: CONTEXT (2)
            ..1. .... = P/C: Constructed Encoding
            ...0 1111 = Tag: 15
            Length: 11
            extensions: 1 item
                Item
                    00.. .... = Class: UNIVERSAL (0)
                    ..1. .... = P/C: Constructed Encoding
                    ...1 0000 = Tag: SEQUENCE (16)
                    Length: 9
                    type: local (0)
                        00.. .... = Class: UNIVERSAL (0)
                        ..0. .... = P/C: Primitive Encoding
                        ...0 0010 = Tag: INTEGER (2)
                        Length: 1
                        local: 1
                    00.. .... = Class: UNIVERSAL (0)
                    ..0. .... = P/C: Primitive Encoding
                    ...0 1010 = Tag: ENUMERATED (10)
                    Length: 1
                    criticality: ignore (0)
                    10.. .... = Class: CONTEXT (2)
                    ..0. .... = P/C: Primitive Encoding
                    ...0 0001 = Tag: 1
                    Length: 1
            10.. .... = Class: CONTEXT (2)
            ..1. .... = P/C: Constructed Encoding
            ...1 1011 = Tag: 27
            Length: 5
            10.. .... = Class: CONTEXT (2)
            ..0. .... = P/C: Primitive Encoding
            ...0 0000 = Tag: 0
            Length: 3
            bearerCapability: bearerCap (0)
                bearerCap: 8090A3
                1... .... = Extension indicator: last octet
                .00. .... = Coding standard: ITU-T standardized coding (0x00)
                ...0 0000 = Information transfer capability: Speech (0x00)
                1... .... = Extension indicator: last octet
                .00. .... = Transfer mode: Circuit mode (0x00)
                ...1 0000 = Information transfer rate: 64 kbit/s (0x10)
                1... .... = Extension indicator: last octet
                ...0 0011 = User information layer 1 protocol: Recommendation
G.711 A-law (0x03)
            10.. .... = Class: CONTEXT (2)
            ..0. .... = P/C: Primitive Encoding
            ...1 1100 = Tag: 28
            Length: 1
            eventTypeBCSM: collectedInfo (2)
            10.. .... = Class: CONTEXT (2)
            ..0. .... = P/C: Primitive Encoding
            Tag: 50
            Length: 8
            iMSI: 04150051160000F0
            TBCD digits: 405100156100000
            10.. .... = Class: CONTEXT (2)
            ..1. .... = P/C: Constructed Encoding
            Tag: 52
            Length: 67
            locationInformation
                00.. .... = Class: UNIVERSAL (0)
                ..0. .... = P/C: Primitive Encoding
                ...0 0010 = Tag: INTEGER (2)
                Length: 1
                ageOfLocationInformation: 0
                10.. .... = Class: CONTEXT (2)
                ..0. .... = P/C: Primitive Encoding
                ...0 0001 = Tag: 1
                Length: 5
                vlr-number: 9152761711
                    Country Code: 256 Uganda length 3
                1... .... = Extension: No Extension
                .001 .... = Nature of number: International Number (0x01)
                .... 0001 = Number plan: ISDN/Telephony Numbering (Rec ITU-T
E.164) (0x01)
                Address digits: 25677111
                10.. .... = Class: CONTEXT (2)
                ..1. .... = P/C: Constructed Encoding
                ...0 0011 = Tag: 3
                Length: 9
                10.. .... = Class: CONTEXT (2)
                ..0. .... = P/C: Primitive Encoding
                ...0 0000 = Tag: 0
                Length: 7
                cellGlobalIdOrServiceAreaIdOrLAI:
cellGlobalIdOrServiceAreaIdFixedLength (0)
                    cellGlobalIdOrServiceAreaIdFixedLength: 61FA193E080C00
                10.. .... = Class: CONTEXT (2)
                ..1. .... = P/C: Constructed Encoding
                ...0 0100 = Tag: 4
                Length: 44
                extensionContainer
                    10.. .... = Class: CONTEXT (2)
                    ..1. .... = P/C: Constructed Encoding
                    ...0 0000 = Tag: 0
                    Length: 42
                    privateExtensionList: 1 item
                        BER Error: Wrong field in SQ OF
            10.. .... = Class: CONTEXT (2)
            ..0. .... = P/C: Primitive Encoding
            Tag: 54
            Length: 4
            callReferenceNumber: 35749828
            10.. .... = Class: CONTEXT (2)
            ..0. .... = P/C: Primitive Encoding
            Tag: 55
            Length: 5
            mscAddress: 9119890110
                Country Code: 91 India length 2
            1... .... = Extension: No Extension
            .001 .... = Nature of number: International Number (0x01)
            .... 0001 = Number plan: ISDN/Telephony Numbering (Rec ITU-T E.164)
(0x01)
            Address digits: 91981001
            10.. .... = Class: CONTEXT (2)
            ..0. .... = P/C: Primitive Encoding
            Tag: 56
            Length: 6
            calledPartyBCDNumber: 1A99911800F6
            10.. .... = Class: CONTEXT (2)
            ..0. .... = P/C: Primitive Encoding
            Tag: 57
            Length: 8
            timeAndTimezone: 0250503111344200
            10.. .... = Class: CONTEXT (2)
            ..1. .... = P/C: Constructed Encoding
            Tag: 59
            Length: 4
            initialDPArgExtension
                10.. .... = Class: CONTEXT (2)
                ..0. .... = P/C: Primitive Encoding
                ...0 0001 = Tag: 1
                Length: 2
                forwardingDestinationNumber: 0103
                0... .... = Odd/even indicator: even number of address signals
                .000 0001 = Nature of address indicator: subscriber number
(national use) (1)
                0... .... = INN indicator: routing to internal network number
allowed 
                .000 .... = Numbering plan indicator: Unknown (0)
[Malformed Packet: CAMEL]

0000  83 14 00 20 13 09 81 03 0d 17 0a 12 92 00 12 04   ... ............
0010  19 89 55 55 55 0a 12 92 00 12 04 19 89 44 44 44   ..UUU........DDD
0020  e6 62 81 e3 48 04 22 00 00 01 6b 1e 28 1c 06 07   .b..H."...k.(...
0030  00 11 86 05 01 01 01 a0 11 60 0f 80 02 07 80 a1   .........`......
0040  09 06 07 04 00 00 01 00 32 01 6c 81 ba a1 81 b7   ........2.l.....
0050  02 01 01 02 01 00 30 81 ae 80 01 20 82 06 1a 99   ......0.... ....
0060  91 18 00 f6 83 05 91 89 11 32 14 85 01 0a 8a 05   .........2......
0070  89 67 45 13 f2 af 0b 30 09 02 01 01 0a 01 00 81   .gE....0........
0080  01 01 bb 05 80 03 80 90 a3 9c 01 02 9f 32 08 04   .............2..
0090  15 00 51 16 00 00 f0 bf 34 43 02 01 00 81 05 91   ..Q.....4C......
00a0  52 76 17 11 a3 09 80 07 61 fa 19 3e 08 0c 00 a4   Rv......a..>....
00b0  2c a0 2a 04 28 58 59 5a 20 58 59 58 00 00 00 00   ,.*.(XYZ XYX....
00c0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
00d0  00 00 00 00 00 00 00 00 00 00 00 00 00 9f 36 04   ..............6.
00e0  35 74 98 28 9f 37 05 91 19 89 01 10 9f 38 06 1a   5t.(.7.......8..
00f0  99 91 18 00 f6 9f 39 08 02 50 50 31 11 34 42 00   ......9..PP1.4B.
0100  bf 3b 04 81 02 01 03                              .;.....

Where:
                    privateExtensionList: 1 item
                        BER Error: Wrong field in SQ OF
I think the Extension container is supposed to have an OID in there...

And the decoding of:
                forwardingDestinationNumber: 0103
                0... .... = Odd/even indicator: even number of address signals
                .000 0001 = Nature of address indicator: subscriber number
(national use) (1)
                0... .... = INN indicator: routing to internal network number
allowed 
                .000 .... = Numbering plan indicator: Unknown (0)
expects a minimum of one digit. I don't know if that's "formaly" required it
seems a bit strange to send a forwarding number without any digits...
/Anders


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.