ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 12911] New: Decoding/Display of an INAP CONNECT message go

Date: Sat, 17 Sep 2016 13:38:26 +0000
Bug ID 12911
Summary Decoding/Display of an INAP CONNECT message goes wrong for the Destination Routing Address part.
Product Wireshark
Version 2.2.0
Hardware x86
OS Windows 7
Status UNCONFIRMED
Severity Normal
Priority Low
Component Dissection engine (libwireshark)
Assignee [email protected]
Reporter [email protected]

Created attachment 14926 [details]
Single INAP message with DRA number digits show twice.

Build Information:
Version 2.2.0 (v2.2.0-0-g5368c50 from master-2.2)

Copyright 1998-2016 Gerald Combs <[email protected]> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with Qt 5.3.2, with WinPcap (4_1_3), with GLib 2.38.0, with
zlib 1.2.8, with SMI 0.4.8, with c-ares 1.11.0, with Lua 5.2.4, with GnuTLS
3.2.15, with Gcrypt 1.6.2, with MIT Kerberos, with GeoIP, with QtMultimedia,
with AirPcap.

Running on 32-bit Windows 7 Service Pack 1, build 7601, with locale
Dutch_Netherlands.1252, with WinPcap version 4.1.3 (packet.dll version
4.1.0.2980), based on libpcap version 1.0 branch 1_0_rel0b (20091008), with
GnuTLS 3.2.15, with Gcrypt 1.6.2, without AirPcap.
Intel(R) Core(TM)2 Duo CPU     E8400  @ 3.00GHz, with 3547MB of physical
memory.


Built using Microsoft Visual C++ 12.0 build 40629

Wireshark is Open Source Software released under the GNU General Public
License.

--
Decoding/Display of an INAP CONNECT message goes wrong for the Destination
Routing Address part.

As can be seen in the attachment, the field CalledPartyNumber shows the digits
contained in this field as an ascii string.
However the string does show the digits-string twice.

Further detailed decoding below that, when "+" clicked, shows the correct
content, including the E.164 field at the bottom.

See the attachement for details. It is the single message from a larger trace.

= = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = =
Text export of the message:

No.     Time     Source                Destination           src port dst port
Protocol Info
     22 0.044    4603                  3311                  2901     50000   
INAP     SACK End dtid(1500007b) sendChargingInformation connect 

Frame 22: 242 bytes on wire (1936 bits), 242 bytes captured (1936 bits)
Ethernet II, Src: CiscoInc_26:b2:10 (e4:c7:22:26:b2:10), Dst: AlcatelD_e2:d3:2b
(00:11:3f:e2:d3:2b)
Internet Protocol Version 4, Src: 10.45.246.66, Dst: 10.45.156.166
Stream Control Transmission Protocol, Src Port: 2901 (2901), Dst Port: 50000
(50000)
MTP 3 User Adaptation Layer
Signalling Connection Control Part
Transaction Capabilities Application Part
Intelligent Network Application Protocol
    invoke
        invokeId: present (0)
        opcode: local (0)
        SendChargingInformationArg
Intelligent Network Application Protocol
    invoke
        invokeId: present (0)
        opcode: local (0)
        ConnectArg
            destinationRoutingAddress: 1 item
                CalledPartyNumber: 7c10710040000071674500f6
                0... .... = Odd/even indicator: even number of address signals
                .111 1100 = Nature of address indicator: Unknown (124)
                0... .... = INN indicator: routing to internal network number
allowed 
                .001 .... = Numbering plan indicator: ISDN (Telephony)
numbering plan (1)
                Called Party Number: 1700040000177654006F1700040000177654006F
                    .... 0001 = Address signal digit: 1 (1)
                    0111 .... = Address signal digit: 7 (7)
                    .... 0000 = Address signal digit: 0 (0)
                    0000 .... = Address signal digit: 0 (0)
                    .... 0000 = Address signal digit: 0 (0)
                    0100 .... = Address signal digit: 4 (4)
                    .... 0000 = Address signal digit: 0 (0)
                    0000 .... = Address signal digit: 0 (0)
                    .... 0000 = Address signal digit: 0 (0)
                    0000 .... = Address signal digit: 0 (0)
                    .... 0001 = Address signal digit: 1 (1)
                    0111 .... = Address signal digit: 7 (7)
                    .... 0111 = Address signal digit: 7 (7)
                    0110 .... = Address signal digit: 6 (6)
                    .... 0101 = Address signal digit: 5 (5)
                    0100 .... = Address signal digit: 4 (4)
                    .... 0000 = Address signal digit: 0 (0)
                    0000 .... = Address signal digit: 0 (0)
                    .... 0110 = Address signal digit: 6 (6)
                    1111 .... = Address signal digit: Stop sending (15)
                    E.164 Called party number digits: 1700040000177654006F


You are receiving this mail because:
  • You are watching all bug changes.