Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 3116] New: wrong decoding IMSI with GSM MAP protocol

Date: Fri, 12 Dec 2008 13:54:34 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3116

           Summary: wrong decoding IMSI with GSM MAP protocol
           Product: Wireshark
           Version: 1.0.5
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: Major
          Priority: High
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: jlorca@xxxxxxxxxxxx


Build Information:
Version 1.0.5 (SVN Rev 26954)



Copyright 1998-2008 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.

This is free software; see the source for copying conditions. There is NO

warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.



Compiled with GTK+ 2.12.8, with GLib 2.14.6, with WinPcap (version unknown),

with libz 1.2.3, without POSIX capabilities, with libpcre 7.0, with SMI 0.4.8,

with ADNS, with Lua 5.1, with GnuTLS 2.3.8, with Gcrypt 1.4.1, with MIT

Kerberos, with PortAudio V19-devel, with AirPcap.



Running on Windows XP Service Pack 3, build 2600, with WinPcap version 4.0.2

(packet.dll version 4.0.0.1040), based on libpcap version 0.9.5, without

AirPcap.



Built using Microsoft Visual C++ 6.0 build 8804



Wireshark is Open Source Software released under the GNU General Public
License.



Check the man page and http://www.wireshark.org for more information.

--
There is a problem in the decoding of IMSI in the destination reference at
least. If you watch the next part of the trace the MNC is incorrect, must be
21. This happens in my case, using the GSM MAP protocol specifically in a
"Invoke unstructuredSS-Request" message. 

MAP-DialoguePDU: map-open (0)

    map-open

        destinationReference: 9617200111108221F3

            1... .... = Extension: No Extension

            .001 .... = Nature of number: International Number (0x01)

            .... 0110 = Number plan: Land Mobile Numbering (ITU-T Rec. E.212)
(0x06)

            Address digits: 710210110128123

            Mobile Country Code (MCC): Nicaragua (710)

            Mobile network code (MNC): 102

        originationReference: 910585051050


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.