ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: [Wireshark-dev] ANSI MAP / TCAP dissector hooks

From: "Michael Lum" <Michael.Lum@xxxxxxxxxx>
Date: Wed, 9 Aug 2006 12:17:34 -0700
Hello,

why was the way ANSI MAP hooks into TCAP changed?

I believe there is a problem with it.

I have attached a capture file with the following:

SCTP
M2UA
MTP3 (ITU)
SCCP
TCAP (ANSI)
ANSI MAP

My preferences were set to:

MTP3 (ANSI)
ANSI MAP (SSN RANGE 5-14)

Procedure:

1.  Start Ethereal
2.  Set filters
3.  Load file

Frames show up as SCCP (ANSI), ERR and DT2

4.  Edit preferences, change MTP3 -> ITU

With Ethereal 0.99.0 everything works fine
the four frames come out decoded as ANSI MAP
with:

UDT QueryWithPermInvoke(Last) Location Request
UDT QueryWithPermInvoke(Last) Routing Request
UDT ResponseRetRes(Last)
UDT ResponseRetRes(Last)

Following the same procedure with Wireshark 0.99.2
the decode goes as far as TCAP but not ANSI MAP.

To get the decode to work properly I have to:

5.  Edit preferences, change ANSI MAP SSN Range to something different,
apply



--
Michael Lum                  Principal Software Engineer
4600 Jacombs Road            +1.604.276.0055
Richmond, B.C.
Canada V6V 3B1
UTStarcom Canada, Inc.
CDMA Division


Attachment: itumtp3_ansimap.pcap
Description: Binary data