["Anders Broman (AL/EAB)" <anders.broman@xxxxxxxxxxxx>]

Title: Malformed packet when decoding SCCP over sigtran

Hi,

Is it the same Ethereal version on Linux? is the preferences set the same ? ( M3UA MTP3 SCCP) can you send the binary .pcap file?

what does the correctly decode frame look like?

 

Brg

Anders

---

From: ethereal-users-bounces@xxxxxxxxxxxx [mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of Edwin.Premkumar@xxxxxxxxx
Sent: den 27 februari 2006 08:39
To: ethereal-users@xxxxxxxxxxxx
Subject: [Ethereal-users] Malformed packet when decoding SCCP over sigtran

Hi ,

I am seeing the SCCP layer in a SIGTRAN interface (IP/SCTP/M3UA/SCCP..) as a malformed packet when using Ethereal running over Windows.

When I run ethereal over Linux I am able to decode the SCCP layer correctly.

Can anyone tell me what plugins am I missing in the windows version of ethereal ? I am running the latest version of Ethereal 10.14

Output is pasted below.

No.     Time                            Source                Destination           Protocol Info
71 2006-02-13 15:05:43.990000           65853                 13708843              SCCP (Int. ITU) SACK UDT [Malformed Packet]

+Frame 71 (134 bytes on wire, 134 bytes captured)
+Ethernet II, Src: Radisys_0a:34:c1 (00:00:50:0a:34:c1), Dst: Cisco_99:f8:90 (00:13:c4:99:f8:90) 
+Internet Protocol, Src: 10.13.55.8 (10.13.55.8), Dst: 10.187.25.204 (10.187.25.204) 
+Stream Control Transmission Protocol, Src Port: 49153 (49153), Dst Port: 2905 (2905) 
MTP 3 User Adaptation Layer
    Version: Release 1 (1)
    Reserved: 0x00
    Message class: Transfer messages (1)
    Message type: Payload data (DATA) (1)
    Message length: 56
    Network appearance (8)
        Parameter Tag: Network appearance (512)
        Parameter length: 8
        Network appearance: 8
    Protocol data (SS7 message of 21 bytes)
        Parameter Tag: Protocol data (528)
        Parameter length: 37
        OPC: 65853
        DPC: 13708843
        SI: SCCP (3)
        NI: 2
        MP: 3
        SLS: 1
Signalling Connection Control Part
    Message Type: Unitdata (0x09)
    .... 0000 = Class: 0x00
    0000 .... = Message handling: No special options (0x00)
    Pointer to first Mandatory Variable parameter: 3
    Pointer to second Mandatory Variable parameter: 5
    Pointer to third Mandatory Variable parameter: 10
    Called Party Address length: 2
    Called Party address (2 bytes)
        Address Indicator
            .1.. .... = Routing Indicator: Route on SSN (0x01)
            ..00 00.. = Global Title Indicator: No Global Title (0x00)
            .... ..0. = SubSystem Number Indicator: SSN not present (0x00)
            .... ...1 = Point Code Indicator: Point Code present (0x01)
[Malformed Packet: SCCP]

Thanks
Edwin