Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 11696] New: TCAP/MAP/USSD - BER Error This field lies beyo

Date: Thu, 12 Nov 2015 11:11:40 +0000
Bug ID 11696
Summary TCAP/MAP/USSD - BER Error This field lies beyond the end of the known sequence definition
Product Wireshark
Version 1.12.8
Hardware All
OS All
Status UNCONFIRMED
Severity Normal
Priority Low
Component Dissection engine (libwireshark)
Assignee [email protected]
Reporter [email protected]

Created attachment 13996 [details]
TCAP/MAP/USSD - BER Error

Build Information:
Version 1.12.8 (v1.12.8-0-g5b6e543 from master-1.12)

Copyright 1998-2015 Gerald Combs <[email protected]> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with GTK+ 2.24.23, with Cairo 1.10.2, with Pango 1.34.0, with
GLib 2.38.0, with WinPcap (4_1_3), with libz 1.2.5, with SMI 0.4.8, with c-ares
1.9.1, with Lua 5.2, without Python, with GnuTLS 3.2.15, with Gcrypt 1.6.2,
with
MIT Kerberos, with GeoIP, with PortAudio V19-devel (built Oct 14 2015), with
AirPcap.

Running on Windows XP Service Pack 3, build 2600, with WinPcap version 4.1.3
(packet.dll version 4.1.0.2980), based on libpcap version 1.0 branch 1_0_rel0b
(20091008), GnuTLS 3.2.15, Gcrypt 1.6.2, without AirPcap.
              Intel(R) Pentium(R) 4 CPU 3.80GHz, with 3199MB of physical
memory.


Built using Microsoft Visual C++ 10.0 build 40219
--
Hi,

the attached USSD frame contains two Ericsson specific fields that are not
decoded.

It would be useful for us to decode them and use in a filter.


Below a proposal for the enhancement:

wireshark\asn1\gsm_map\MAP-DialogueInformation.asn

MAP-OpenInfo ::= SEQUENCE {
 destinationReference [0] AddressString OPTIONAL,
 originationReference [1] AddressString OPTIONAL,
 callingMsisdn        [2] AddressString OPTIONAL,
 callingVlrAddress    [3] AddressString OPTIONAL,
 ...,
 extensionContainer ExtensionContainer OPTIONAL
 -- extensionContainer must not be used in version 2
 }


You are receiving this mail because:
  • You are watching all bug changes.