Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 3173] New: changeback messages not detected inside MTP3 ov

Date: Mon, 5 Jan 2009 07:41:40 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3173

           Summary: changeback messages not detected inside MTP3 over RUDP
                    (Cisco proprietary)
           Product: Wireshark
           Version: 1.0.2
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: Normal
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: renato@xxxxxxxx


Created an attachment (id=2629)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=2629)
snoop captured on Sun solaris containing COO & COA but not decoding CBD & CBA

Build Information:
Version 1.0.2 (SVN Rev 25698)

Copyright 1998-2008 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.12.8, with GLib 2.14.6, with WinPcap (version unknown),
with libz 1.2.3, without POSIX capabilities, with libpcre 7.0, with SMI 0.4.8,
with ADNS, with Lua 5.1, with GnuTLS 2.3.8, with Gcrypt 1.4.1, with MIT
Kerberos, with PortAudio V19-devel, with AirPcap.

Running on Windows XP Service Pack 3, build 2600, with WinPcap version 4.0.2
(packet.dll version 4.0.0.1040), based on libpcap version 0.9.5, without
AirPcap.

Built using Microsoft Visual C++ 6.0 build 8804

--
Wireshark is not detecting CBD & CBA messages (changeback) inside MTP3, which
is transported over RUDP between Cisco devices. All other messages are decoded
correctly including COO & COA (changeover). Changeback message is sent to
cancel (undo) the effect produced by changeover message. I'm attaching snoop
capture where SS7 link is forced into Out Of Service state (which in turn
generated changeover message pair) and then returned back into In Service state
(as a consequence, changeback message pair is generated) but this is not
decoded in the snoop capture.


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.