http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1821
Summary: ANSI TCAP component Parameter should be CHOICE of Set or
Sequence
Product: Wireshark
Version: 0.99.6
Platform: PC
OS/Version: Windows XP
Status: NEW
Severity: Normal
Priority: Medium
Component: Wireshark
AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
ReportedBy: peter.leeming@xxxxxx
Build Information:
Version 0.99.6a (SVN Rev 22276)
Copyright 1998-2007 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled with GTK+ 2.10.12, with GLib 2.12.12, with WinPcap (version unknown),
with libz 1.2.3, with libpcre 6.4, with Net-SNMP 5.4, with ADNS, with Lua 5.1,
with GnuTLS 1.6.1, with Gcrypt 1.2.3, with MIT Kerberos, with PortAudio
PortAudio V19-devel, with AirPcap.
Running on Windows XP Service Pack 2, build 2600, with WinPcap version 4.0.1
(packet.dll version 4.0.0.901), based on libpcap version 0.9.5, without
AirPcap.
Built using Microsoft Visual C++ 6.0 build 8804
Wireshark is Open Source Software released under the GNU General Public
License.
Check the man page and http://www.wireshark.org for more information.
--
When decoding ANSI TCAP, Wireshark does not allow for the Component Parameter
to be a Parameter Set [PRIVATE 18]. It only allows for a Parameter Sequence
UNIVERSAL SEQUENCE (tag 16). This should be a CHOICE of Parameter Set or
Parameter Sequence.
The reference is ANSI T1.114-1996, sections 5.17 to 5.20, which clearly allows
the CHOICE of either element.
In our testing, Parameter Set is used exclusively, causing a TCAP decoding
error on every packet. Wireshark detects the error:
BER Error: Wrong field in sequence expected class:0 (UNIVERSAL)
tag:16(SEQUENCE) but found class:3(PRIVATE) tag:18
The full TCAP [acket decoded is as follows:
No. Time Source Destination Protocol Info
4 0.354541 4444 6473 ANSI MAP
Analyzed Information Request Response
Frame 4 (170 bytes on wire, 170 bytes captured)
Ethernet II, Src: GlobalDa_4e:c6:7f (00:18:71:4e:c6:7f), Dst: HewlettP_ec:33:ec
(00:1a:4b:ec:33:ec)
Internet Protocol, Src: 192.168.5.11 (192.168.5.11), Dst: 192.168.5.1
(192.168.5.1)
Stream Control Transmission Protocol, Src Port: 2905 (2905), Dst Port: 2905
(2905)
MTP 3 User Adaptation Layer
Signalling Connection Control Part
Transaction Capabilities Application Part
ansiresponse
identifier: 0F00048D
componentPortion: 1 item
Item: returnResultLastansi (10)
returnResultLastansi
componentID: 01
BER Error: Wrong field in sequence expected class:0
(UNIVERSAL) tag:16(SEQUENCE) but found class:3(PRIVATE) tag:18
ANSI Mobile Application Part
0000 00 1a 4b ec 33 ec 00 18 71 4e c6 7f 08 00 45 00 ..K.3...qN....E.
0010 00 9c b4 de 40 00 ff 84 3a a2 c0 a8 05 0b c0 a8 ....@...:.......
0020 05 01 0b 59 0b 59 1f c1 8e b9 6a a0 28 40 00 03 ...Y.Y....j.(@..
0030 00 7c f4 9c f7 c4 00 0d 00 7a 00 00 00 03 01 00 .|.......z......
0040 01 01 00 00 00 6c 02 00 00 08 00 00 00 02 00 06 .....l..........
0050 00 08 00 00 00 03 02 10 00 53 00 00 11 5c 00 00 .........S...\..
0060 19 49 03 02 00 0c 09 01 03 07 0b 04 43 49 19 08 .I..........CI..
0070 04 43 5c 11 fc 33 e4 31 c7 04 0f 00 04 8d e8 29 .C\..3.1.......)
0080 ea 27 cf 01 01 f2 22 bf 82 14 1e bf 82 16 1a 9f .'....".........
0090 20 05 00 5c 11 00 fc 9f 82 1b 0e dc 21 23 24 25 ..\........!#$%
00a0 26 27 29 41 42 46 dd 28 45 00 &')ABF.(E.
--
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.