Hi,
Following the latest change of release from 10.11 to 10.12,
I have noticed a malfunction in the TCAP dissector when running over SCCP/M3UA/SCTP
(Sigtran) using ITU standards.
The TCAP dissector is not decoding the fields correctly in
that case. One possibility may be that it is attempting to decode it in ANSI
mode; the clue being the names of the fields it displays (e.g. OTID, which is
an ANSI field and not an ITU field). In the preferences setting, there used to
be an ITU/ANSI choice in the TCAP protocol tab in 10.11. In the current rel
10.12, such a choice disappeared. The only choice of ITU/ANSI is made in the
MTP3 tab – which I have set to ITU. I also made sure that SSN numbers entered
in the TCAP and MAP tabs match the ones in the packets.
Of course, this is just a possibility and other reasons may
be causing the problem.
Please find attached a sample capture. Opening it in
ethereal 0.10.11 shows correct TCAP decoding (Do not bother about malformed packets
on the GSM SMS layer, they are due to originally coding the packets
incorrectly.) However, in ethereal 10.12, the decoding in TCAP is not
successful.
Thank you for taking note of this problem.
Regards,
Joe
|
Attachment:
Capture1
Description: Binary data