Wireshark-dev: Re: [Wireshark-dev] is-637 dissector
From: "Marqui Peter-E50322" <peter.marqui@xxxxxxxxxxxx>
Date: Wed, 8 Apr 2009 16:35:50 -0400
Hi
Philippe
I've attached to
sample captures. As well as the decoding using tshark.exe. The text files
containing the dissected data were generated with the following
command
tshark -r
04-01.16-29-UM.ppp -V > 04-01.16-29-UM.txt
tshark -r
SMS_originator-UM.ppp -V > SMS_originator-UM.txt
The protocol column
doesn't get update correctly either although I'm pretty that it was displayed as
SIP/is637 when I ran the script last week.

| Hello Peter, Your dissector is loaded correctly by Wireshark, but it is difficult without packets capture to see what is going wrong. Could you send us a capture example of your SIP protocol ? Regards Philippe Date: Fri, 3 Apr 2009 10:41:06 -0400 From: peter.marqui@xxxxxxxxxxxx To: wireshark-dev@xxxxxxxxxxxxx Subject: [Wireshark-dev] is-637 dissector Hi
I've
written a custom dissector enhance SIP message parsing. The
dissector works properly when invoked from tshark.exe
however the
is-637 decoding doesn't work from with the GUI version of wireshark.
Is there anything special that I need to do ?
Thanks |
Attachment:
SMS_originator-UM.ppp
Description: SMS_originator-UM.ppp
Attachment:
04-01.16-29-UM.ppp
Description: 04-01.16-29-UM.ppp
Frame 1 (880 bytes on wire, 880 bytes captured)
Arrival Time: Mar 25, 2009 17:02:43.600000000
[Time delta from previous captured frame: 0.000000000 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 0.000000000 seconds]
Frame Number: 1
Frame Length: 880 bytes
Capture Length: 880 bytes
[Frame is marked: False]
[Protocols in frame: ppp:ip:udp:sipsms:sip:ansi_637_trans:ansi_637_tele]
Point-to-Point Direction: Sent (0)
Point-to-Point Protocol
Protocol: IP (0x0021)
[Direction: DTE->DCE (0)]
Internet Protocol, Src: 10.5.0.164 (10.5.0.164), Dst: 192.168.199.5 (192.168.199.5)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 877
Identification: 0x0006 (6)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 255
Protocol: UDP (0x11)
Header checksum: 0x2623 [correct]
[Good: True]
[Bad : False]
Source: 10.5.0.164 (10.5.0.164)
Destination: 192.168.199.5 (192.168.199.5)
User Datagram Protocol, Src Port: sip-tls (5061), Dst Port: sip-tls (5061)
Source port: sip-tls (5061)
Destination port: sip-tls (5061)
Length: 857
Checksum: 0x292c [correct]
[Good Checksum: True]
[Bad Checksum: False]
Session Initiation Protocol
Request-Line: MESSAGE sip:15255015042@xxxxxxxxxxxxxxxxxxxxxxxxxx SIP/2.0
Method: MESSAGE
[Resent Packet: False]
Message Header
From: <sip:+15255015048@xxxxxxxxxxxxxxxxxxxxxxxxxx>;tag=34ab460-a400050a-13c5-45026-36f56c83-1faaa659-36f56c83
SIP from address: sip:+15255015048@xxxxxxxxxxxxxxxxxxxxxxxxxx
SIP tag: 34ab460-a400050a-13c5-45026-36f56c83-1faaa659-36f56c83
To: <sip:15255015042@xxxxxxxxxxxxxxxxxxxxxxxxxx>
SIP to address: sip:15255015042@xxxxxxxxxxxxxxxxxxxxxxxxxx
Call-ID: 34ab460-a400050a-13c5-45026-36f56c83-768a30e2-36f56c83@xxxxxxxxxxxxxxxxxxxxxxxxxx
CSeq: 105779907 MESSAGE
Sequence Number: 105779907
Method: MESSAGE
Contact: <sip:[email protected]:5061>
Contact Binding: <sip:[email protected]:5061>
URI: <sip:[email protected]:5061>
SIP contact address: sip:[email protected]:5061
P-Preferred-Identity: <sip:+15255015048@xxxxxxxxxxxxxxxxxxxxxxxxxx>
Max-Forwards: 70
Via: SIP/2.0/UDP 10.5.0.164:5061;branch=z9hG4bK-36f56c83-aeafe1f3-7df4586e
Transport: UDP
Sent-by Address: 10.5.0.164
Sent-by port: 5061
Branch: z9hG4bK-36f56c83-aeafe1f3-7df4586e
Supported: 100rel,replaces,timer
P-Access-Network-Info: 3GPP2-1X-HRPD;ci-3gpp2=0080000000000040000A8C022400120268
Route: <sip:192.168.199.5:5061>
User-Agent: IMS 76-CHRLIMS30.07.06D
Content-Type: application/vnd.3gpp2.sms
Content-Length: 54
Message Body
\000\000\002\020\002\004\r
\320Y\211\251\221\251\251\201\211\251\201\241\220\a\001\004\b\035\000\003 \000\020\001\004\020\024\215 \b\001\000\t\001\000\r
\001\021\016\a\005\212\222\255\n
\322@
is637 decoding
ANSI IS-637-A (SMS) Transport Layer - Point-to-Point
Teleservice Identifier - CDMA Cellular Messaging Teleservice (4098)
Transport Param ID: Teleservice Identifier (0)
Length: 2
CDMA Cellular Messaging Teleservice (4098)
Destination Address
Transport Param ID: Destination Address (4)
Length: 13
1... .... : Digit mode: 8-bit ASCII
.1.. .... : Number mode: Data Network Address
..01 0... : Type of number: Internet Email Address (RFC 822) (2)
.... .000 : Number of fields (MSB): (11)
0101 1... : Number of fields (LSB)
.... .001 : Most significant bits of first field
Number: 15255015042
1001 0... : Least significant bits of last field
.... .000 : Reserved
Cause Codes - Reply Sequence Number (1)
Transport Param ID: Cause Codes (7)
Length: 1
0000 01.. : Reply Sequence Number: 1
.... ..00 : Error Class: No error
Bearer Data
Transport Param ID: Bearer Data (8)
Length: 29
Bearer Data
ANSI IS-637-A (SMS) Teleservice Layer - CDMA Cellular Messaging Teleservice (4098)
Message Identifier
Teleservice Subparam ID: Message Identifier (0)
Length: 3
0010 .... .... .... .... .... = Message Type: Submit (mobile-originated only) (2)
.... 0000 0000 0000 0001 .... = Message ID: 1
.... .... .... .... .... 0000 = Reserved: 0
User Data
Teleservice Subparam ID: User Data (1)
Length: 4
0001 0... : Encoding: 7-bit ASCII
.... .000 : Number of fields (MSB): 2
0001 0... : Number of fields (LSB)
.... .100 : Most significant bits of first field
Encoded user data: Hi
...0 0000 : Reserved
Priority Indicator
Teleservice Subparam ID: Priority Indicator (8)
Length: 1
00.. .... : Normal
..00 0000 : Reserved
Privacy Indicator
Teleservice Subparam ID: Privacy Indicator (9)
Length: 1
00.. .... : Not restricted (privacy level 0)
..00 0000 : Reserved
Language Indicator
Teleservice Subparam ID: Language Indicator (13)
Length: 1
Reserved
Call-Back Number
Teleservice Subparam ID: Call-Back Number (14)
Length: 7
0... .... : Digit mode: 4-bit DTMF
.000 0101 : Number of fields (MBS): (11)
1... .... : Number of fields (LSB)
Number: 15255015048
.... .000 : Reserved
Frame 2 (533 bytes on wire, 533 bytes captured)
Arrival Time: Mar 25, 2009 17:02:44.600000000
[Time delta from previous captured frame: 1.000000000 seconds]
[Time delta from previous displayed frame: 1.000000000 seconds]
[Time since reference or first frame: 1.000000000 seconds]
Frame Number: 2
Frame Length: 533 bytes
Capture Length: 533 bytes
[Frame is marked: False]
[Protocols in frame: ppp:ip:udp:sipsms:sip]
Point-to-Point Direction: Received (1)
Point-to-Point Protocol
Address: 0xff
Control: 0x03
Protocol: IP (0x0021)
[Direction: DCE->DTE (1)]
Internet Protocol, Src: 192.168.199.5 (192.168.199.5), Dst: 10.5.0.164 (10.5.0.164)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 527
Identification: 0x4858 (18520)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 59
Protocol: UDP (0x11)
Header checksum: 0x632f [correct]
[Good: True]
[Bad : False]
Source: 192.168.199.5 (192.168.199.5)
Destination: 10.5.0.164 (10.5.0.164)
User Datagram Protocol, Src Port: sip-tls (5061), Dst Port: sip-tls (5061)
Source port: sip-tls (5061)
Destination port: sip-tls (5061)
Length: 507
Checksum: 0x393f [correct]
[Good Checksum: True]
[Bad Checksum: False]
Session Initiation Protocol
Status-Line: SIP/2.0 200 OK
Status-Code: 200
[Resent Packet: False]
Message Header
Allow: INVITE,ACK,CANCEL,BYE,INFO,UPDATE,MESSAGE
Via: SIP/2.0/UDP 10.5.0.164:5061;received=10.5.0.164;branch=z9hG4bK-36f56c83-aeafe1f3-7df4586e
Transport: UDP
Sent-by Address: 10.5.0.164
Sent-by port: 5061
Received: 10.5.0.164
Branch: z9hG4bK-36f56c83-aeafe1f3-7df4586e
Server: Lucent-HPSS/3.0.3
To: <sip:15255015042@xxxxxxxxxxxxxxxxxxxxxxxxxx>;tag=notag
SIP to address: sip:15255015042@xxxxxxxxxxxxxxxxxxxxxxxxxx
SIP tag: notag
From: <sip:+15255015048@xxxxxxxxxxxxxxxxxxxxxxxxxx>;tag=34ab460-a400050a-13c5-45026-36f56c83-1faaa659-36f56c83
SIP from address: sip:+15255015048@xxxxxxxxxxxxxxxxxxxxxxxxxx
SIP tag: 34ab460-a400050a-13c5-45026-36f56c83-1faaa659-36f56c83
Call-ID: 34ab460-a400050a-13c5-45026-36f56c83-768a30e2-36f56c83@xxxxxxxxxxxxxxxxxxxxxxxxxx
CSeq: 105779907 MESSAGE
Sequence Number: 105779907
Method: MESSAGE
Content-Length: 0
Frame 3 (707 bytes on wire, 707 bytes captured)
Arrival Time: Mar 25, 2009 17:02:44.600000000
[Time delta from previous captured frame: 0.000000000 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 1.000000000 seconds]
Frame Number: 3
Frame Length: 707 bytes
Capture Length: 707 bytes
[Frame is marked: False]
[Protocols in frame: ppp:ip:udp:sipsms:sip:ansi_637_trans]
Point-to-Point Direction: Received (1)
Point-to-Point Protocol
Address: 0xff
Control: 0x03
Protocol: IP (0x0021)
[Direction: DCE->DTE (1)]
Internet Protocol, Src: 192.168.199.5 (192.168.199.5), Dst: 10.5.0.164 (10.5.0.164)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 701
Identification: 0x4859 (18521)
Flags: 0x04 (Don't Fragment)
0... = Reserved bit: Not set
.1.. = Don't fragment: Set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 59
Protocol: UDP (0x11)
Header checksum: 0x6280 [correct]
[Good: True]
[Bad : False]
Source: 192.168.199.5 (192.168.199.5)
Destination: 10.5.0.164 (10.5.0.164)
User Datagram Protocol, Src Port: sip-tls (5061), Dst Port: sip-tls (5061)
Source port: sip-tls (5061)
Destination port: sip-tls (5061)
Length: 681
Checksum: 0xf06e [correct]
[Good Checksum: True]
[Bad Checksum: False]
Session Initiation Protocol
Request-Line: MESSAGE sip:[email protected]:5061 SIP/2.0
Method: MESSAGE
[Resent Packet: False]
Message Header
Via: SIP/2.0/UDP 192.168.199.5:5061;branch=z9hG4bKd71ca68d8c0c148ce40774232f526d8649a89823-1238031832652435
Transport: UDP
Sent-by Address: 192.168.199.5
Sent-by port: 5061
Branch: z9hG4bKd71ca68d8c0c148ce40774232f526d8649a89823-1238031832652435
Via: SIP/2.0/UDP 127.0.0.1;branch=z9hG4bK_10_999219336-999764552;lsstag=pt-4
Transport: UDP
Sent-by Address: 127.0.0.1
Branch: z9hG4bK_10_999219336-999764552
lsstag=pt-4
Via: SIP/2.0/UDP 127.0.0.1;branch=z9hG4bK_05_981444616-999106696;dp;lsstag=st-1
Transport: UDP
Sent-by Address: 127.0.0.1
Branch: z9hG4bK_05_981444616-999106696
dp
lsstag=st-1
Via: SIP/2.0/UDP 135.2.247.70:5060;received=135.2.247.70;branch=z9hG4bK92a
Transport: UDP
Sent-by Address: 135.2.247.70
Sent-by port: 5060
Received: 135.2.247.70
Branch: z9hG4bK92a
To: <tel:+15255015048>
SIP to address: tel:+15255015048
From: <tel:+15255015042>;tag=1
SIP from address: tel:+15255015042
SIP tag: 1
Call-ID: 59b2839312435124@LIVEMAS5
CSeq: 1 MESSAGE
Sequence Number: 1
Method: MESSAGE
Max-Forwards: 68
Content-Length: 19
Content-Type: application/vnd.3gpp2.sms
P-Called-Party-ID: <tel:+15255015048>
User-Agent: Lucent-HPSS v3.0.3
Message Body
\002\004\r
\320Y\211\251\221\251\251\201\211\251\201\241\220\a\001\004
is637 decoding
ANSI IS-637-A (SMS) Transport Layer - Acknowledge
Destination Address
Transport Param ID: Destination Address (4)
Length: 13
1... .... : Digit mode: 8-bit ASCII
.1.. .... : Number mode: Data Network Address
..01 0... : Type of number: Internet Email Address (RFC 822) (2)
.... .000 : Number of fields (MSB): (11)
0101 1... : Number of fields (LSB)
.... .001 : Most significant bits of first field
Number: 15255015042
1001 0... : Least significant bits of last field
.... .000 : Reserved
Cause Codes - Reply Sequence Number (1)
Transport Param ID: Cause Codes (7)
Length: 1
0000 01.. : Reply Sequence Number: 1
.... ..00 : Error Class: No error
Frame 4 (614 bytes on wire, 614 bytes captured)
Arrival Time: Mar 25, 2009 17:02:45.300000000
[Time delta from previous captured frame: 0.700000000 seconds]
[Time delta from previous displayed frame: 0.700000000 seconds]
[Time since reference or first frame: 1.700000000 seconds]
Frame Number: 4
Frame Length: 614 bytes
Capture Length: 614 bytes
[Frame is marked: False]
[Protocols in frame: ppp:ip:udp:sipsms:sip]
Point-to-Point Direction: Sent (0)
Point-to-Point Protocol
Protocol: IP (0x0021)
[Direction: DTE->DCE (0)]
Internet Protocol, Src: 10.5.0.164 (10.5.0.164), Dst: 192.168.199.5 (192.168.199.5)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 611
Identification: 0x0007 (7)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 255
Protocol: UDP (0x11)
Header checksum: 0x272c [correct]
[Good: True]
[Bad : False]
Source: 10.5.0.164 (10.5.0.164)
Destination: 192.168.199.5 (192.168.199.5)
User Datagram Protocol, Src Port: sip-tls (5061), Dst Port: sip-tls (5061)
Source port: sip-tls (5061)
Destination port: sip-tls (5061)
Length: 591
Checksum: 0xa537 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Session Initiation Protocol
Status-Line: SIP/2.0 200 OK
Status-Code: 200
[Resent Packet: False]
Message Header
From: <tel:+15255015042>;tag=1
SIP from address: tel:+15255015042
SIP tag: 1
To: <tel:+15255015048>;tag=34ab5d8-a400050a-13c5-45026-36f56c85-4de23eec-36f56c85
SIP to address: tel:+15255015048
SIP tag: 34ab5d8-a400050a-13c5-45026-36f56c85-4de23eec-36f56c85
Call-ID: 59b2839312435124@LIVEMAS5
CSeq: 1 MESSAGE
Sequence Number: 1
Method: MESSAGE
Via: SIP/2.0/UDP 192.168.199.5:5061;branch=z9hG4bKd71ca68d8c0c148ce40774232f526d8649a89823-1238031832652435
Transport: UDP
Sent-by Address: 192.168.199.5
Sent-by port: 5061
Branch: z9hG4bKd71ca68d8c0c148ce40774232f526d8649a89823-1238031832652435
Via: SIP/2.0/UDP 127.0.0.1;branch=z9hG4bK_10_999219336-999764552;lsstag=pt-4
Transport: UDP
Sent-by Address: 127.0.0.1
Branch: z9hG4bK_10_999219336-999764552
lsstag=pt-4
Via: SIP/2.0/UDP 127.0.0.1;branch=z9hG4bK_05_981444616-999106696;dp;lsstag=st-1
Transport: UDP
Sent-by Address: 127.0.0.1
Branch: z9hG4bK_05_981444616-999106696
dp
lsstag=st-1
Via: SIP/2.0/UDP 135.2.247.70:5060;received=135.2.247.70;branch=z9hG4bK92a
Transport: UDP
Sent-by Address: 135.2.247.70
Sent-by port: 5060
Received: 135.2.247.70
Branch: z9hG4bK92a
Supported: 100rel,replaces,timer
Content-Length: 0
Frame 1 (830 bytes on wire, 830 bytes captured)
Arrival Time: Apr 1, 2009 15:29:42.600000000
[Time delta from previous captured frame: 0.000000000 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 0.000000000 seconds]
Frame Number: 1
Frame Length: 830 bytes
Capture Length: 830 bytes
[Frame is marked: False]
[Protocols in frame: ppp:ip:udp:sipsms:sip:ansi_637_trans:ansi_637_tele]
Point-to-Point Direction: Sent (0)
Point-to-Point Protocol
Protocol: IP (0x0021)
[Direction: DTE->DCE (0)]
Internet Protocol, Src: 75.220.202.8 (75.220.202.8), Dst: 144.190.82.45 (144.190.82.45)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 827
Identification: 0x0019 (25)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 255
Protocol: UDP (0x11)
Header checksum: 0xbfc8 [correct]
[Good: True]
[Bad : False]
Source: 75.220.202.8 (75.220.202.8)
Destination: 144.190.82.45 (144.190.82.45)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
Source port: sip (5060)
Destination port: sip (5060)
Length: 807
Checksum: 0xdb2a [correct]
[Good Checksum: True]
[Bad Checksum: False]
Session Initiation Protocol
Request-Line: MESSAGE tel:9786146632 SIP/2.0
Method: MESSAGE
[Resent Packet: False]
Message Header
From: <sip:9786146633@xxxxxxxxxx>;tag=34ac440-8cadc4b-13c4-45026-36fe9136-7df6f9b1-36fe9136
SIP from address: sip:9786146633@xxxxxxxxxx
SIP tag: 34ac440-8cadc4b-13c4-45026-36fe9136-7df6f9b1-36fe9136
To: <tel:9786146632>
SIP to address: tel:9786146632
Call-ID: 34ac440-8cadc4b-13c4-45026-36fe9136-2ca8c38e-36fe9136@xxxxxxxxxx
CSeq: 1579665096 MESSAGE
Sequence Number: 1579665096
Method: MESSAGE
Contact: <sip:75.220.202.8:5060>
Contact Binding: <sip:75.220.202.8:5060>
URI: <sip:75.220.202.8:5060>
SIP contact address: sip:75.220.202.8:5060
P-Preferred-Identity: <sip:9786146633@xxxxxxxxxx>
Max-Forwards: 70
Via: SIP/2.0/UDP 75.220.202.8:5060;branch=z9hG4bK-36fe9136-d2673ca2-13057daf
Transport: UDP
Sent-by Address: 75.220.202.8
Sent-by port: 5060
Branch: z9hG4bK-36fe9136-d2673ca2-13057daf
Supported: 100rel,replaces,timer
P-Access-Network-Info: 3GPP2-1X-HRPD;ci-3gpp2=008005800000000D040ACCE28501000240
Route: <sip:144.190.82.45:5060>,<sip:icscf2@xxxxxxxxxxxxxxxxx;lr>,<sip:scscf2@xxxxxxxxxxxxxxxxx;lr>
User-Agent: IMS 76-CHRLIMS30.07.06D
Content-Type: application/vnd.3gpp2.sms
Content-Length: 53
Message Body
\000\000\002\020\002\004\f\320Q\311\271\301\261\211\241\261\261\231\220\b \000\003 \000\240\001\a\0202\354Y6\367\350\b\001\000\t\001\000\r
\001\021\016\a\005\213\2318\235E@
is637 decoding
ANSI IS-637-A (SMS) Transport Layer - Point-to-Point
Teleservice Identifier - CDMA Cellular Messaging Teleservice (4098)
Transport Param ID: Teleservice Identifier (0)
Length: 2
CDMA Cellular Messaging Teleservice (4098)
Destination Address
Transport Param ID: Destination Address (4)
Length: 12
1... .... : Digit mode: 8-bit ASCII
.1.. .... : Number mode: Data Network Address
..01 0... : Type of number: Internet Email Address (RFC 822) (2)
.... .000 : Number of fields (MSB): (10)
0101 0... : Number of fields (LSB)
.... .001 : Most significant bits of first field
Number: 9786146632
1001 0... : Least significant bits of last field
.... .000 : Reserved
Bearer Data
Transport Param ID: Bearer Data (8)
Length: 32
Bearer Data
ANSI IS-637-A (SMS) Teleservice Layer - CDMA Cellular Messaging Teleservice (4098)
Message Identifier
Teleservice Subparam ID: Message Identifier (0)
Length: 3
0010 .... .... .... .... .... = Message Type: Submit (mobile-originated only) (2)
.... 0000 0000 0000 1010 .... = Message ID: 10
.... .... .... .... .... 0000 = Reserved: 0
User Data
Teleservice Subparam ID: User Data (1)
Length: 7
0001 0... : Encoding: 7-bit ASCII
.... .000 : Number of fields (MSB): 6
0011 0... : Number of fields (LSB)
.... .010 : Most significant bits of first field
Encoded user data: .bdmwt
.... ...0 : Reserved
Priority Indicator
Teleservice Subparam ID: Priority Indicator (8)
Length: 1
00.. .... : Normal
..00 0000 : Reserved
Privacy Indicator
Teleservice Subparam ID: Privacy Indicator (9)
Length: 1
00.. .... : Not restricted (privacy level 0)
..00 0000 : Reserved
Language Indicator
Teleservice Subparam ID: Language Indicator (13)
Length: 1
Reserved
Call-Back Number
Teleservice Subparam ID: Call-Back Number (14)
Length: 7
0... .... : Digit mode: 4-bit DTMF
.000 0101 : Number of fields (MBS): (11)
1... .... : Number of fields (LSB)
Number: 17327130808
.... .000 : Reserved
Frame 2 (427 bytes on wire, 427 bytes captured)
Arrival Time: Apr 1, 2009 15:29:44.200000000
[Time delta from previous captured frame: 1.600000000 seconds]
[Time delta from previous displayed frame: 1.600000000 seconds]
[Time since reference or first frame: 1.600000000 seconds]
Frame Number: 2
Frame Length: 427 bytes
Capture Length: 427 bytes
[Frame is marked: False]
[Protocols in frame: ppp:ip:udp:sipsms:sip]
Point-to-Point Direction: Received (1)
Point-to-Point Protocol
Address: 0xff
Control: 0x03
Protocol: IP (0x0021)
[Direction: DCE->DTE (1)]
Internet Protocol, Src: 144.190.82.45 (144.190.82.45), Dst: 75.220.202.8 (75.220.202.8)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 421
Identification: 0x6d2a (27946)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 109
Protocol: UDP (0x11)
Header checksum: 0xe64d [correct]
[Good: True]
[Bad : False]
Source: 144.190.82.45 (144.190.82.45)
Destination: 75.220.202.8 (75.220.202.8)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
Source port: sip (5060)
Destination port: sip (5060)
Length: 401
Checksum: 0xcda1 [correct]
[Good Checksum: True]
[Bad Checksum: False]
Session Initiation Protocol
Status-Line: SIP/2.0 100 Trying
Status-Code: 100
[Resent Packet: False]
Message Header
From: <sip:9786146633@xxxxxxxxxx>;tag=34ac440-8cadc4b-13c4-45026-36fe9136-7df6f9b1-36fe9136
SIP from address: sip:9786146633@xxxxxxxxxx
SIP tag: 34ac440-8cadc4b-13c4-45026-36fe9136-7df6f9b1-36fe9136
To: <tel:9786146632>
SIP to address: tel:9786146632
Call-ID: 34ac440-8cadc4b-13c4-45026-36fe9136-2ca8c38e-36fe9136@xxxxxxxxxx
CSeq: 1579665096 MESSAGE
Sequence Number: 1579665096
Method: MESSAGE
Via: SIP/2.0/UDP 75.220.202.8:5060;branch=z9hG4bK-36fe9136-d2673ca2-13057daf
Transport: UDP
Sent-by Address: 75.220.202.8
Sent-by port: 5060
Branch: z9hG4bK-36fe9136-d2673ca2-13057daf
User-Agent: CDMA P-CSCF / AM Simualtor Version 00.00.16I
Content-Length: 0
Frame 3 (478 bytes on wire, 478 bytes captured)
Arrival Time: Apr 1, 2009 15:29:44.200000000
[Time delta from previous captured frame: 0.000000000 seconds]
[Time delta from previous displayed frame: 0.000000000 seconds]
[Time since reference or first frame: 1.600000000 seconds]
Frame Number: 3
Frame Length: 478 bytes
Capture Length: 478 bytes
[Frame is marked: False]
[Protocols in frame: ppp:ip:udp:sipsms:sip]
Point-to-Point Direction: Received (1)
Point-to-Point Protocol
Address: 0xff
Control: 0x03
Protocol: IP (0x0021)
[Direction: DCE->DTE (1)]
Internet Protocol, Src: 144.190.82.45 (144.190.82.45), Dst: 75.220.202.8 (75.220.202.8)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 472
Identification: 0x6d2b (27947)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 109
Protocol: UDP (0x11)
Header checksum: 0xe619 [correct]
[Good: True]
[Bad : False]
Source: 144.190.82.45 (144.190.82.45)
Destination: 75.220.202.8 (75.220.202.8)
User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060)
Source port: sip (5060)
Destination port: sip (5060)
Length: 452
Checksum: 0x5b7f [correct]
[Good Checksum: True]
[Bad Checksum: False]
Session Initiation Protocol
Status-Line: SIP/2.0 202 ACCEPTED
Status-Code: 202
[Resent Packet: False]
Message Header
From: <sip:9786146633@xxxxxxxxxx>;tag=34ac440-8cadc4b-13c4-45026-36fe9136-7df6f9b1-36fe9136
SIP from address: sip:9786146633@xxxxxxxxxx
SIP tag: 34ac440-8cadc4b-13c4-45026-36fe9136-7df6f9b1-36fe9136
To: <tel:9786146632>;tag=149cf18-2d52be90-13c4-1d207c-59636887-1d207c
SIP to address: tel:9786146632
SIP tag: 149cf18-2d52be90-13c4-1d207c-59636887-1d207c
Call-ID: 34ac440-8cadc4b-13c4-45026-36fe9136-2ca8c38e-36fe9136@xxxxxxxxxx
CSeq: 1579665096 MESSAGE
Sequence Number: 1579665096
Method: MESSAGE
Via: SIP/2.0/UDP 75.220.202.8:5060;branch=z9hG4bK-36fe9136-d2673ca2-13057daf
Transport: UDP
Sent-by Address: 75.220.202.8
Sent-by port: 5060
Branch: z9hG4bK-36fe9136-d2673ca2-13057daf
User-Agent: CDMA P-CSCF / AM Simualtor Version 00.00.16I
Content-Length: 0
Attachment:
is637.lua
Description: is637.lua
- Prev by Date: [Wireshark-dev] buildbot failure in Wireshark (development) on Windows-XP-x86
- Next by Date: [Wireshark-dev] buildbot failure in Wireshark (release) on Windows-XP-x86
- Previous by thread: Re: [Wireshark-dev] is-637 dissector
- Next by thread: [Wireshark-dev] Simple Tap interface for dissector information
- Index(es):