Title: Malformed packet when decoding SCCP over sigtran
Hi ,
I am seeing the SCCP layer in a SIGTRAN interface (IP/SCTP/M3UA/SCCP..) as a malformed packet when using Ethereal running over Windows.
When I run ethereal over Linux I am able to decode the SCCP layer correctly.
Can anyone tell me what plugins am I missing in the windows version of ethereal ? I am running the latest version of Ethereal 10.14
Output is pasted below.
No. Time Source Destination Protocol Info
71 2006-02-13 15:05:43.990000 65853 13708843 SCCP (Int. ITU) SACK UDT [Malformed Packet]
+Frame 71 (134 bytes on wire, 134 bytes captured)
+Ethernet II, Src: Radisys_0a:34:c1 (00:00:50:0a:34:c1), Dst: Cisco_99:f8:90 (00:13:c4:99:f8:90)
+Internet Protocol, Src: 10.13.55.8 (10.13.55.8), Dst: 10.187.25.204 (10.187.25.204)
+Stream Control Transmission Protocol, Src Port: 49153 (49153), Dst Port: 2905 (2905)
MTP 3 User Adaptation Layer
Version: Release 1 (1)
Reserved: 0x00
Message class: Transfer messages (1)
Message type: Payload data (DATA) (1)
Message length: 56
Network appearance (8)
Parameter Tag: Network appearance (512)
Parameter length: 8
Network appearance: 8
Protocol data (SS7 message of 21 bytes)
Parameter Tag: Protocol data (528)
Parameter length: 37
OPC: 65853
DPC: 13708843
SI: SCCP (3)
NI: 2
MP: 3
SLS: 1
Signalling Connection Control Part
Message Type: Unitdata (0x09)
.... 0000 = Class: 0x00
0000 .... = Message handling: No special options (0x00)
Pointer to first Mandatory Variable parameter: 3
Pointer to second Mandatory Variable parameter: 5
Pointer to third Mandatory Variable parameter: 10
Called Party Address length: 2
Called Party address (2 bytes)
Address Indicator
.1.. .... = Routing Indicator: Route on SSN (0x01)
..00 00.. = Global Title Indicator: No Global Title (0x00)
.... ..0. = SubSystem Number Indicator: SSN not present (0x00)
.... ...1 = Point Code Indicator: Point Code present (0x01)
[Malformed Packet: SCCP]
Thanks
Edwin