ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-users: Re: [Wireshark-users] Dissectors for SMS over 3GPP IMS Network

From: "Anders Broman" <a.broman@xxxxxxxxx>
Date: Mon, 1 Mar 2010 19:06:39 +0100


Not without the code change committed in revision 32066.

You can try SVN Build 32066 or later.

from which should finish in an hour or so.



P.S Could you let us know if it works, I don’t have a trace to verify with.



Från: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] För rajeev
Skickat: den 1 mars 2010 11:49
Till: wireshark-users@xxxxxxxxxxxxx
Ämne: [Wireshark-users] Dissectors for SMS over 3GPP IMS Network


Is there a way to dissect the 3GPP SMS, contained in the message body of
SIP MESSAGE method, as per the 3GPP standard 3GPP TS 24.341?

A typical example of the MESSAGE from MO (3GPP TS 24.341[Table B.5-1]) is

Via: SIP/2.0/UDP [5555::aaa:bbb:ccc:ddd]:1357;comp=sigcomp; branch=z9hG4bKnashds7
Max-Forwards: 70
Route: <;lr;comp=sigcomp>, <sip:orig@xxxxxxxxxxxxxxxx;lr>
P-Preferred-Identity: "John Doe" <sip:user1_public1@xxxxxxxxx>
From: <sip:user1_public1@xxxxxxxxx>; tag=171828
To: <>
Call-ID: cb03a0s09a2sdfglkj490333
Cseq: 666 MESSAGE
Content-Type: application/vnd.3gpp.sms
Content-Length: (…)

The payload includes an RP-DATA message (as per 3GPP TS 24.011 [8]). It includes:
- Address of the originating UE: this field includes the length indicator only, 3GPP
- Address of the destination SC, which is configured in the UE; and
- RP-User-Data (3GPP TS 23.040 [3]), which includes SMS-SUBMIT as type indicator.