Igor i. Shulz wrote:
>
> I've last ver (0.9.12) Ethereal installed on my WinXP. It's strange - in all
> cases that I captured SMPP (Short Message Peer to Peer) packets on this PC
> they are not decoded (all SMPP-traffic is showed as TCP-protocol and
> SMPP-content is not decoded). I have file with previously captured
> SMPP-traffic and SMPP-contend is decoded whan I load this file in Ethereal.
> Why? What's wrong? I have SMPP-protocol enabled in Edit->Protocols list. But
> it slightly strange that this protocol (as well as many other protocols,
> that are present in Edit->Protocols list) is absent in
> Preferences->Protocols list.
It seems that the problem is that the Skinny dissector registers tcp port number 2000, but
doesn't handle packets that isn't Skinny packets in the way it should.
This means that packets sent to or from port 2000 will not be handed to heuristic dissectors.
You can use the "Decode As.." menu item.
Attachment:
smpp3.pcap
Description: Binary data