Ethereal-users: Re: [Ethereal-users] Ethereal and SSCOP

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Tue, 30 Mar 2004 11:24:07 -0800
On Thu, Mar 25, 2004 at 01:39:28PM -0500, Stuart Miller wrote:
>   2) I am not sure how to interpret the ITU Q.2110 spec.  It
>      shows, for example, the Poll PDU as:
> 
>          |      1     |    2    |    3    |    4    |
>         -+------------+---------+---------+---------+
>         1|  Reserved  |          N(PS)              |
>         -+------------+---------+---------+---------+
>         2| Rsvd | PDU |          N(S)               |
>          |      | Type|                             |
>         -+------------+---------+---------+---------+
>           8765   4321
> 
>      Let say that:
> 
>        Reserved=0x00
>        N(PS)=0x987654
>        Rsvd=0x00
>        PDU Type=0x0a
>        N(S)=0x123456
> 
>      Would this be displayed as:
> 
>         00 98 76 54 0a 12 34 56
> 
>      or perhaps as:
> 
>         00 54 76 98 0a 56 34 12

Ethereal treats multi-byte fields in SSCOP as big-endian (I don't
remember whether there's some spec I saw that said they're big-endian or
whether I just tried to make it dissect the packets the same way some
other packet analyzer did), and it *does* appear to dissect packets
correctly, so that'd be

	00 98 76 54 0a 12 34 56