Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 7941] New: GSM_MAP: Wireshark not able to display the cont

Date: Wed, 31 Oct 2012 05:43:02 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7941

           Summary: GSM_MAP: Wireshark not able to display the contents of
                    InsertSubscriberData
           Product: Wireshark
           Version: 1.6.4
          Platform: x86
        OS/Version: Windows XP
            Status: NEW
          Severity: Normal
          Priority: Low
         Component: Capture file support (libwiretap)
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: mail2nitinkalra@xxxxxxxxx


Created attachment 9461
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=9461
Screenshot for the capture which wireshark couldn't parse

Build Information:
Version 1.6.4 (SVN Rev 39941 from /trunk-1.6)

Copyright 1998-2011 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with GTK+ 2.22.1, with GLib 2.26.1, with WinPcap (version
unknown), with libz 1.2.5, without POSIX capabilities, without libpcre, with
SMI
0.4.8, with c-ares 1.7.1, with Lua 5.1, without Python, with GnuTLS 2.10.3,
with
Gcrypt 1.4.6, with MIT Kerberos, with GeoIP, with PortAudio V19-devel (built
Nov
18 2011), with AirPcap.

Running on Windows XP Service Pack 3, build 2600, without WinPcap, GnuTLS
2.10.3, Gcrypt 1.4.6, without AirPcap.

Built using Microsoft Visual C++ 9.0 build 21022

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
Hi Wireshark,

I am not able to view the contents of the messages after the first insert
subscriber data in the TCAP dialogue. As from the second packet onwards
wireshark displays upto TCAP layer only, beyond that just DATA.

It looks like wireshark isn't able to parse the GSM_MAP layer successfully,
however rest all layers can be parsed by the wireshark. Except for the USSD
GSM_MAP for which I opened a bug and the error was pointed to Ericsson's
message framing.

This is captured using Wireshark Version 1.0.15 running on Linux:
2.6.18-274.el5 

Thanks

Nitin Kalra

PS: I am attaching the screenshot for the capture

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.