| Bug ID |
12674
|
| Summary |
ISUP dissector does not handle the "Carrier Identification" (0xc5) parameter properly
|
| Product |
Wireshark
|
| Version |
2.0.4
|
| Hardware |
x86
|
| OS |
Windows 10
|
| Status |
UNCONFIRMED
|
| Severity |
Normal
|
| Priority |
Low
|
| Component |
Dissection engine (libwireshark)
|
| Assignee |
[email protected]
|
| Reporter |
[email protected]
|
Build Information:
Version 2.0.4 (v2.0.4-0-gdd7746e from master-2.0)
Copyright 1998-2016 Gerald Combs <[email protected]> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (64-bit) with Qt 5.3.2, with WinPcap (4_1_3), with libz 1.2.8, with
GLib 2.42.0, with SMI 0.4.8, with c-ares 1.11.0, with Lua 5.2, with GnuTLS
3.2.15, with Gcrypt 1.6.2, with MIT Kerberos, with GeoIP, with QtMultimedia,
with AirPcap.
Running on 64-bit Windows 10, build 10586, with locale C, with Npcap version
0.07, based on WinPcap version 4.1.3 (packet.dll version 4.1.0.2980), based on
libpcap version 1.0 branch 1_0_rel0b (20091008), with GnuTLS 3.2.15, with
Gcrypt
1.6.2, without AirPcap.
Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz (with SSE4.2), with 8141MB of
physical memory.
Built using Microsoft Visual C++ 12.0 build 40629
Wireshark is Open Source Software released under the GNU General Public
License.
--
Hi,
in particular, the parameter c5 03 22 40 23 gets dissected as:
------
Parameter Type unknown/reserved (3 Bytes)
Optional Parameter: Carrier identification (197)
Parameter Length: 3
------
So nothing about the value in the dissection pane, and the text item in the
tree reads "unknown/reserved" although the parameter name is identified
properly as "Carrier Identification" in the subtree item.
The missing dissection of the parameter value is
0... .... = spare
.010 .... = Type of Network: National
.... 0010 = Network Identification Plan: 4-digit carrier identification
Carrier Identification: 0432
.... 0000 = Address signal digit: 0 (0)
0100 .... = Address signal digit: 4 (4)
.... 0011 = Address signal digit: 3 (3)
0010 .... = Address signal digit: 2 (2)
Carrier Identfication digits: 0432
The reference is available here:
ftp://ftp.3gpp2.org/Archive/TSGN%20(inactive)/Working/2001/2001_02_Chandler/Opening_Plenary/fyi%20T1%20Ballots/T1.113Ballot.pdf
A hex dump (to be imported using encapsulation type "Wireshark Upper PDU
export") of an example frame follows:
000000 00 0c 00 04 6d 33 75 61 00 14 00 04 c0 a8 7d 44
000010 00 15 00 04 c0 a8 7b 24 00 18 00 04 00 00 00 01
000020 00 19 00 04 00 00 6e 29 00 1a 00 04 00 00 0b 5a
000030 00 1e 00 04 00 00 4d 81 00 00 00 00 01 00 01 01
000040 00 00 00 4c 02 00 00 08 00 00 00 08 02 10 00 3b
000050 00 fa 84 01 00 05 5c 2e 05 02 00 0b 92 01 01 00
000060 60 10 0a 03 06 0d 03 90 90 a2 07 03 10 12 57 40
000070 01 86 0a 07 03 13 12 47 79 82 27 ea 01 00 c5 03
000080 22 04 32 c7 01 20 00 00
000000 00
(the last line, 000000 00, is a workaround of the bug of import from hex which
causes the last octet of the last frame to be omitted during import).
You are receiving this mail because:
- You are watching all bug changes.