Wireshark-bugs: [Wireshark-bugs] [Bug 1911] ISUP inside RUDP/Cisco SM packets not decoded

Date: Fri, 12 Oct 2007 16:08:24 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1911





------- Comment #4 from ravasio@xxxxxxxxx  2007-10-12 16:08 GMT -------
(In reply to comment #2)

Hi Jeff, 

thanks a million for your help on this one.

> The Cisco-SM dissector sees the PDU message type in these packets as 0x5347 but
> it is expecting a message type of 0x10 or 0x11 in order to pass the payload off
> to the MTP3 dissector.

...See below for a possibile reason...

[SNIP]

> Are there different versions of the Cisco SM protocol?  Or what is the payload
> directly above Cisco SM supposed to be (MTP3 or ISUP? ANSI or ITU?)?

As far as I remember, the first protocol on top of Cisco SM should be MTP3,
then containing EISUP.
EISUP is a Cisco proprietary extension to ISUP, adding additional VoIP-specific
information. I contacted Cisco a few months ago asking if the protocol was
documented and/or if a dissector was avaialable. They replied that Ethereal was
already able to decode it.
I didn't believe them until they showed that to me in person: Ethereal was
using the ISUP dissector. I can't remember the version they were using, though.

This seems to be an old bug/problem, what I'm experiencing is the same as it's
described here:
http://www.ethereal.com/lists/ethereal-dev/200405/msg00121.html

Cheers,
Pietro 


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.