Wireshark-dev: Re: [Wireshark-dev] is-637 dissector
From: "Marqui Peter-E50322" <peter.marqui@xxxxxxxxxxxx>
Date: Wed, 8 Apr 2009 16:35:50 -0400
Hi
Philippe
I've attached to
sample captures. As well as the decoding using tshark.exe. The text files
containing the dissected data were generated with the following
command
tshark -r
04-01.16-29-UM.ppp -V > 04-01.16-29-UM.txt
tshark -r
SMS_originator-UM.ppp -V > SMS_originator-UM.txt
The protocol column
doesn't get update correctly either although I'm pretty that it was displayed as
SIP/is637 when I ran the script last week.
Hello Peter, Your dissector is loaded correctly by Wireshark, but it is difficult without packets capture to see what is going wrong. Could you send us a capture example of your SIP protocol ? Regards Philippe Date: Fri, 3 Apr 2009 10:41:06 -0400 From: peter.marqui@xxxxxxxxxxxx To: wireshark-dev@xxxxxxxxxxxxx Subject: [Wireshark-dev] is-637 dissector Hi
I've
written a custom dissector enhance SIP message parsing. The
dissector works properly when invoked from tshark.exe
however the
is-637 decoding doesn't work from with the GUI version of wireshark.
Is there anything special that I need to do ?
Thanks |
Attachment:
SMS_originator-UM.ppp
Description: SMS_originator-UM.ppp
Attachment:
04-01.16-29-UM.ppp
Description: 04-01.16-29-UM.ppp
Frame 1 (880 bytes on wire, 880 bytes captured) Arrival Time: Mar 25, 2009 17:02:43.600000000 [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 880 bytes Capture Length: 880 bytes [Frame is marked: False] [Protocols in frame: ppp:ip:udp:sipsms:sip:ansi_637_trans:ansi_637_tele] Point-to-Point Direction: Sent (0) Point-to-Point Protocol Protocol: IP (0x0021) [Direction: DTE->DCE (0)] Internet Protocol, Src: 10.5.0.164 (10.5.0.164), Dst: 192.168.199.5 (192.168.199.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 877 Identification: 0x0006 (6) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x2623 [correct] [Good: True] [Bad : False] Source: 10.5.0.164 (10.5.0.164) Destination: 192.168.199.5 (192.168.199.5) User Datagram Protocol, Src Port: sip-tls (5061), Dst Port: sip-tls (5061) Source port: sip-tls (5061) Destination port: sip-tls (5061) Length: 857 Checksum: 0x292c [correct] [Good Checksum: True] [Bad Checksum: False] Session Initiation Protocol Request-Line: MESSAGE sip:15255015042@xxxxxxxxxxxxxxxxxxxxxxxxxx SIP/2.0 Method: MESSAGE [Resent Packet: False] Message Header From: <sip:+15255015048@xxxxxxxxxxxxxxxxxxxxxxxxxx>;tag=34ab460-a400050a-13c5-45026-36f56c83-1faaa659-36f56c83 SIP from address: sip:+15255015048@xxxxxxxxxxxxxxxxxxxxxxxxxx SIP tag: 34ab460-a400050a-13c5-45026-36f56c83-1faaa659-36f56c83 To: <sip:15255015042@xxxxxxxxxxxxxxxxxxxxxxxxxx> SIP to address: sip:15255015042@xxxxxxxxxxxxxxxxxxxxxxxxxx Call-ID: 34ab460-a400050a-13c5-45026-36f56c83-768a30e2-36f56c83@xxxxxxxxxxxxxxxxxxxxxxxxxx CSeq: 105779907 MESSAGE Sequence Number: 105779907 Method: MESSAGE Contact: <sip:[email protected]:5061> Contact Binding: <sip:[email protected]:5061> URI: <sip:[email protected]:5061> SIP contact address: sip:[email protected]:5061 P-Preferred-Identity: <sip:+15255015048@xxxxxxxxxxxxxxxxxxxxxxxxxx> Max-Forwards: 70 Via: SIP/2.0/UDP 10.5.0.164:5061;branch=z9hG4bK-36f56c83-aeafe1f3-7df4586e Transport: UDP Sent-by Address: 10.5.0.164 Sent-by port: 5061 Branch: z9hG4bK-36f56c83-aeafe1f3-7df4586e Supported: 100rel,replaces,timer P-Access-Network-Info: 3GPP2-1X-HRPD;ci-3gpp2=0080000000000040000A8C022400120268 Route: <sip:192.168.199.5:5061> User-Agent: IMS 76-CHRLIMS30.07.06D Content-Type: application/vnd.3gpp2.sms Content-Length: 54 Message Body \000\000\002\020\002\004\r \320Y\211\251\221\251\251\201\211\251\201\241\220\a\001\004\b\035\000\003 \000\020\001\004\020\024\215 \b\001\000\t\001\000\r \001\021\016\a\005\212\222\255\n \322@ is637 decoding ANSI IS-637-A (SMS) Transport Layer - Point-to-Point Teleservice Identifier - CDMA Cellular Messaging Teleservice (4098) Transport Param ID: Teleservice Identifier (0) Length: 2 CDMA Cellular Messaging Teleservice (4098) Destination Address Transport Param ID: Destination Address (4) Length: 13 1... .... : Digit mode: 8-bit ASCII .1.. .... : Number mode: Data Network Address ..01 0... : Type of number: Internet Email Address (RFC 822) (2) .... .000 : Number of fields (MSB): (11) 0101 1... : Number of fields (LSB) .... .001 : Most significant bits of first field Number: 15255015042 1001 0... : Least significant bits of last field .... .000 : Reserved Cause Codes - Reply Sequence Number (1) Transport Param ID: Cause Codes (7) Length: 1 0000 01.. : Reply Sequence Number: 1 .... ..00 : Error Class: No error Bearer Data Transport Param ID: Bearer Data (8) Length: 29 Bearer Data ANSI IS-637-A (SMS) Teleservice Layer - CDMA Cellular Messaging Teleservice (4098) Message Identifier Teleservice Subparam ID: Message Identifier (0) Length: 3 0010 .... .... .... .... .... = Message Type: Submit (mobile-originated only) (2) .... 0000 0000 0000 0001 .... = Message ID: 1 .... .... .... .... .... 0000 = Reserved: 0 User Data Teleservice Subparam ID: User Data (1) Length: 4 0001 0... : Encoding: 7-bit ASCII .... .000 : Number of fields (MSB): 2 0001 0... : Number of fields (LSB) .... .100 : Most significant bits of first field Encoded user data: Hi ...0 0000 : Reserved Priority Indicator Teleservice Subparam ID: Priority Indicator (8) Length: 1 00.. .... : Normal ..00 0000 : Reserved Privacy Indicator Teleservice Subparam ID: Privacy Indicator (9) Length: 1 00.. .... : Not restricted (privacy level 0) ..00 0000 : Reserved Language Indicator Teleservice Subparam ID: Language Indicator (13) Length: 1 Reserved Call-Back Number Teleservice Subparam ID: Call-Back Number (14) Length: 7 0... .... : Digit mode: 4-bit DTMF .000 0101 : Number of fields (MBS): (11) 1... .... : Number of fields (LSB) Number: 15255015048 .... .000 : Reserved Frame 2 (533 bytes on wire, 533 bytes captured) Arrival Time: Mar 25, 2009 17:02:44.600000000 [Time delta from previous captured frame: 1.000000000 seconds] [Time delta from previous displayed frame: 1.000000000 seconds] [Time since reference or first frame: 1.000000000 seconds] Frame Number: 2 Frame Length: 533 bytes Capture Length: 533 bytes [Frame is marked: False] [Protocols in frame: ppp:ip:udp:sipsms:sip] Point-to-Point Direction: Received (1) Point-to-Point Protocol Address: 0xff Control: 0x03 Protocol: IP (0x0021) [Direction: DCE->DTE (1)] Internet Protocol, Src: 192.168.199.5 (192.168.199.5), Dst: 10.5.0.164 (10.5.0.164) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 527 Identification: 0x4858 (18520) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 59 Protocol: UDP (0x11) Header checksum: 0x632f [correct] [Good: True] [Bad : False] Source: 192.168.199.5 (192.168.199.5) Destination: 10.5.0.164 (10.5.0.164) User Datagram Protocol, Src Port: sip-tls (5061), Dst Port: sip-tls (5061) Source port: sip-tls (5061) Destination port: sip-tls (5061) Length: 507 Checksum: 0x393f [correct] [Good Checksum: True] [Bad Checksum: False] Session Initiation Protocol Status-Line: SIP/2.0 200 OK Status-Code: 200 [Resent Packet: False] Message Header Allow: INVITE,ACK,CANCEL,BYE,INFO,UPDATE,MESSAGE Via: SIP/2.0/UDP 10.5.0.164:5061;received=10.5.0.164;branch=z9hG4bK-36f56c83-aeafe1f3-7df4586e Transport: UDP Sent-by Address: 10.5.0.164 Sent-by port: 5061 Received: 10.5.0.164 Branch: z9hG4bK-36f56c83-aeafe1f3-7df4586e Server: Lucent-HPSS/3.0.3 To: <sip:15255015042@xxxxxxxxxxxxxxxxxxxxxxxxxx>;tag=notag SIP to address: sip:15255015042@xxxxxxxxxxxxxxxxxxxxxxxxxx SIP tag: notag From: <sip:+15255015048@xxxxxxxxxxxxxxxxxxxxxxxxxx>;tag=34ab460-a400050a-13c5-45026-36f56c83-1faaa659-36f56c83 SIP from address: sip:+15255015048@xxxxxxxxxxxxxxxxxxxxxxxxxx SIP tag: 34ab460-a400050a-13c5-45026-36f56c83-1faaa659-36f56c83 Call-ID: 34ab460-a400050a-13c5-45026-36f56c83-768a30e2-36f56c83@xxxxxxxxxxxxxxxxxxxxxxxxxx CSeq: 105779907 MESSAGE Sequence Number: 105779907 Method: MESSAGE Content-Length: 0 Frame 3 (707 bytes on wire, 707 bytes captured) Arrival Time: Mar 25, 2009 17:02:44.600000000 [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 1.000000000 seconds] Frame Number: 3 Frame Length: 707 bytes Capture Length: 707 bytes [Frame is marked: False] [Protocols in frame: ppp:ip:udp:sipsms:sip:ansi_637_trans] Point-to-Point Direction: Received (1) Point-to-Point Protocol Address: 0xff Control: 0x03 Protocol: IP (0x0021) [Direction: DCE->DTE (1)] Internet Protocol, Src: 192.168.199.5 (192.168.199.5), Dst: 10.5.0.164 (10.5.0.164) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 701 Identification: 0x4859 (18521) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 59 Protocol: UDP (0x11) Header checksum: 0x6280 [correct] [Good: True] [Bad : False] Source: 192.168.199.5 (192.168.199.5) Destination: 10.5.0.164 (10.5.0.164) User Datagram Protocol, Src Port: sip-tls (5061), Dst Port: sip-tls (5061) Source port: sip-tls (5061) Destination port: sip-tls (5061) Length: 681 Checksum: 0xf06e [correct] [Good Checksum: True] [Bad Checksum: False] Session Initiation Protocol Request-Line: MESSAGE sip:[email protected]:5061 SIP/2.0 Method: MESSAGE [Resent Packet: False] Message Header Via: SIP/2.0/UDP 192.168.199.5:5061;branch=z9hG4bKd71ca68d8c0c148ce40774232f526d8649a89823-1238031832652435 Transport: UDP Sent-by Address: 192.168.199.5 Sent-by port: 5061 Branch: z9hG4bKd71ca68d8c0c148ce40774232f526d8649a89823-1238031832652435 Via: SIP/2.0/UDP 127.0.0.1;branch=z9hG4bK_10_999219336-999764552;lsstag=pt-4 Transport: UDP Sent-by Address: 127.0.0.1 Branch: z9hG4bK_10_999219336-999764552 lsstag=pt-4 Via: SIP/2.0/UDP 127.0.0.1;branch=z9hG4bK_05_981444616-999106696;dp;lsstag=st-1 Transport: UDP Sent-by Address: 127.0.0.1 Branch: z9hG4bK_05_981444616-999106696 dp lsstag=st-1 Via: SIP/2.0/UDP 135.2.247.70:5060;received=135.2.247.70;branch=z9hG4bK92a Transport: UDP Sent-by Address: 135.2.247.70 Sent-by port: 5060 Received: 135.2.247.70 Branch: z9hG4bK92a To: <tel:+15255015048> SIP to address: tel:+15255015048 From: <tel:+15255015042>;tag=1 SIP from address: tel:+15255015042 SIP tag: 1 Call-ID: 59b2839312435124@LIVEMAS5 CSeq: 1 MESSAGE Sequence Number: 1 Method: MESSAGE Max-Forwards: 68 Content-Length: 19 Content-Type: application/vnd.3gpp2.sms P-Called-Party-ID: <tel:+15255015048> User-Agent: Lucent-HPSS v3.0.3 Message Body \002\004\r \320Y\211\251\221\251\251\201\211\251\201\241\220\a\001\004 is637 decoding ANSI IS-637-A (SMS) Transport Layer - Acknowledge Destination Address Transport Param ID: Destination Address (4) Length: 13 1... .... : Digit mode: 8-bit ASCII .1.. .... : Number mode: Data Network Address ..01 0... : Type of number: Internet Email Address (RFC 822) (2) .... .000 : Number of fields (MSB): (11) 0101 1... : Number of fields (LSB) .... .001 : Most significant bits of first field Number: 15255015042 1001 0... : Least significant bits of last field .... .000 : Reserved Cause Codes - Reply Sequence Number (1) Transport Param ID: Cause Codes (7) Length: 1 0000 01.. : Reply Sequence Number: 1 .... ..00 : Error Class: No error Frame 4 (614 bytes on wire, 614 bytes captured) Arrival Time: Mar 25, 2009 17:02:45.300000000 [Time delta from previous captured frame: 0.700000000 seconds] [Time delta from previous displayed frame: 0.700000000 seconds] [Time since reference or first frame: 1.700000000 seconds] Frame Number: 4 Frame Length: 614 bytes Capture Length: 614 bytes [Frame is marked: False] [Protocols in frame: ppp:ip:udp:sipsms:sip] Point-to-Point Direction: Sent (0) Point-to-Point Protocol Protocol: IP (0x0021) [Direction: DTE->DCE (0)] Internet Protocol, Src: 10.5.0.164 (10.5.0.164), Dst: 192.168.199.5 (192.168.199.5) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 611 Identification: 0x0007 (7) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0x272c [correct] [Good: True] [Bad : False] Source: 10.5.0.164 (10.5.0.164) Destination: 192.168.199.5 (192.168.199.5) User Datagram Protocol, Src Port: sip-tls (5061), Dst Port: sip-tls (5061) Source port: sip-tls (5061) Destination port: sip-tls (5061) Length: 591 Checksum: 0xa537 [correct] [Good Checksum: True] [Bad Checksum: False] Session Initiation Protocol Status-Line: SIP/2.0 200 OK Status-Code: 200 [Resent Packet: False] Message Header From: <tel:+15255015042>;tag=1 SIP from address: tel:+15255015042 SIP tag: 1 To: <tel:+15255015048>;tag=34ab5d8-a400050a-13c5-45026-36f56c85-4de23eec-36f56c85 SIP to address: tel:+15255015048 SIP tag: 34ab5d8-a400050a-13c5-45026-36f56c85-4de23eec-36f56c85 Call-ID: 59b2839312435124@LIVEMAS5 CSeq: 1 MESSAGE Sequence Number: 1 Method: MESSAGE Via: SIP/2.0/UDP 192.168.199.5:5061;branch=z9hG4bKd71ca68d8c0c148ce40774232f526d8649a89823-1238031832652435 Transport: UDP Sent-by Address: 192.168.199.5 Sent-by port: 5061 Branch: z9hG4bKd71ca68d8c0c148ce40774232f526d8649a89823-1238031832652435 Via: SIP/2.0/UDP 127.0.0.1;branch=z9hG4bK_10_999219336-999764552;lsstag=pt-4 Transport: UDP Sent-by Address: 127.0.0.1 Branch: z9hG4bK_10_999219336-999764552 lsstag=pt-4 Via: SIP/2.0/UDP 127.0.0.1;branch=z9hG4bK_05_981444616-999106696;dp;lsstag=st-1 Transport: UDP Sent-by Address: 127.0.0.1 Branch: z9hG4bK_05_981444616-999106696 dp lsstag=st-1 Via: SIP/2.0/UDP 135.2.247.70:5060;received=135.2.247.70;branch=z9hG4bK92a Transport: UDP Sent-by Address: 135.2.247.70 Sent-by port: 5060 Received: 135.2.247.70 Branch: z9hG4bK92a Supported: 100rel,replaces,timer Content-Length: 0
Frame 1 (830 bytes on wire, 830 bytes captured) Arrival Time: Apr 1, 2009 15:29:42.600000000 [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 830 bytes Capture Length: 830 bytes [Frame is marked: False] [Protocols in frame: ppp:ip:udp:sipsms:sip:ansi_637_trans:ansi_637_tele] Point-to-Point Direction: Sent (0) Point-to-Point Protocol Protocol: IP (0x0021) [Direction: DTE->DCE (0)] Internet Protocol, Src: 75.220.202.8 (75.220.202.8), Dst: 144.190.82.45 (144.190.82.45) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 827 Identification: 0x0019 (25) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: UDP (0x11) Header checksum: 0xbfc8 [correct] [Good: True] [Bad : False] Source: 75.220.202.8 (75.220.202.8) Destination: 144.190.82.45 (144.190.82.45) User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060) Source port: sip (5060) Destination port: sip (5060) Length: 807 Checksum: 0xdb2a [correct] [Good Checksum: True] [Bad Checksum: False] Session Initiation Protocol Request-Line: MESSAGE tel:9786146632 SIP/2.0 Method: MESSAGE [Resent Packet: False] Message Header From: <sip:9786146633@xxxxxxxxxx>;tag=34ac440-8cadc4b-13c4-45026-36fe9136-7df6f9b1-36fe9136 SIP from address: sip:9786146633@xxxxxxxxxx SIP tag: 34ac440-8cadc4b-13c4-45026-36fe9136-7df6f9b1-36fe9136 To: <tel:9786146632> SIP to address: tel:9786146632 Call-ID: 34ac440-8cadc4b-13c4-45026-36fe9136-2ca8c38e-36fe9136@xxxxxxxxxx CSeq: 1579665096 MESSAGE Sequence Number: 1579665096 Method: MESSAGE Contact: <sip:75.220.202.8:5060> Contact Binding: <sip:75.220.202.8:5060> URI: <sip:75.220.202.8:5060> SIP contact address: sip:75.220.202.8:5060 P-Preferred-Identity: <sip:9786146633@xxxxxxxxxx> Max-Forwards: 70 Via: SIP/2.0/UDP 75.220.202.8:5060;branch=z9hG4bK-36fe9136-d2673ca2-13057daf Transport: UDP Sent-by Address: 75.220.202.8 Sent-by port: 5060 Branch: z9hG4bK-36fe9136-d2673ca2-13057daf Supported: 100rel,replaces,timer P-Access-Network-Info: 3GPP2-1X-HRPD;ci-3gpp2=008005800000000D040ACCE28501000240 Route: <sip:144.190.82.45:5060>,<sip:icscf2@xxxxxxxxxxxxxxxxx;lr>,<sip:scscf2@xxxxxxxxxxxxxxxxx;lr> User-Agent: IMS 76-CHRLIMS30.07.06D Content-Type: application/vnd.3gpp2.sms Content-Length: 53 Message Body \000\000\002\020\002\004\f\320Q\311\271\301\261\211\241\261\261\231\220\b \000\003 \000\240\001\a\0202\354Y6\367\350\b\001\000\t\001\000\r \001\021\016\a\005\213\2318\235E@ is637 decoding ANSI IS-637-A (SMS) Transport Layer - Point-to-Point Teleservice Identifier - CDMA Cellular Messaging Teleservice (4098) Transport Param ID: Teleservice Identifier (0) Length: 2 CDMA Cellular Messaging Teleservice (4098) Destination Address Transport Param ID: Destination Address (4) Length: 12 1... .... : Digit mode: 8-bit ASCII .1.. .... : Number mode: Data Network Address ..01 0... : Type of number: Internet Email Address (RFC 822) (2) .... .000 : Number of fields (MSB): (10) 0101 0... : Number of fields (LSB) .... .001 : Most significant bits of first field Number: 9786146632 1001 0... : Least significant bits of last field .... .000 : Reserved Bearer Data Transport Param ID: Bearer Data (8) Length: 32 Bearer Data ANSI IS-637-A (SMS) Teleservice Layer - CDMA Cellular Messaging Teleservice (4098) Message Identifier Teleservice Subparam ID: Message Identifier (0) Length: 3 0010 .... .... .... .... .... = Message Type: Submit (mobile-originated only) (2) .... 0000 0000 0000 1010 .... = Message ID: 10 .... .... .... .... .... 0000 = Reserved: 0 User Data Teleservice Subparam ID: User Data (1) Length: 7 0001 0... : Encoding: 7-bit ASCII .... .000 : Number of fields (MSB): 6 0011 0... : Number of fields (LSB) .... .010 : Most significant bits of first field Encoded user data: .bdmwt .... ...0 : Reserved Priority Indicator Teleservice Subparam ID: Priority Indicator (8) Length: 1 00.. .... : Normal ..00 0000 : Reserved Privacy Indicator Teleservice Subparam ID: Privacy Indicator (9) Length: 1 00.. .... : Not restricted (privacy level 0) ..00 0000 : Reserved Language Indicator Teleservice Subparam ID: Language Indicator (13) Length: 1 Reserved Call-Back Number Teleservice Subparam ID: Call-Back Number (14) Length: 7 0... .... : Digit mode: 4-bit DTMF .000 0101 : Number of fields (MBS): (11) 1... .... : Number of fields (LSB) Number: 17327130808 .... .000 : Reserved Frame 2 (427 bytes on wire, 427 bytes captured) Arrival Time: Apr 1, 2009 15:29:44.200000000 [Time delta from previous captured frame: 1.600000000 seconds] [Time delta from previous displayed frame: 1.600000000 seconds] [Time since reference or first frame: 1.600000000 seconds] Frame Number: 2 Frame Length: 427 bytes Capture Length: 427 bytes [Frame is marked: False] [Protocols in frame: ppp:ip:udp:sipsms:sip] Point-to-Point Direction: Received (1) Point-to-Point Protocol Address: 0xff Control: 0x03 Protocol: IP (0x0021) [Direction: DCE->DTE (1)] Internet Protocol, Src: 144.190.82.45 (144.190.82.45), Dst: 75.220.202.8 (75.220.202.8) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 421 Identification: 0x6d2a (27946) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 109 Protocol: UDP (0x11) Header checksum: 0xe64d [correct] [Good: True] [Bad : False] Source: 144.190.82.45 (144.190.82.45) Destination: 75.220.202.8 (75.220.202.8) User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060) Source port: sip (5060) Destination port: sip (5060) Length: 401 Checksum: 0xcda1 [correct] [Good Checksum: True] [Bad Checksum: False] Session Initiation Protocol Status-Line: SIP/2.0 100 Trying Status-Code: 100 [Resent Packet: False] Message Header From: <sip:9786146633@xxxxxxxxxx>;tag=34ac440-8cadc4b-13c4-45026-36fe9136-7df6f9b1-36fe9136 SIP from address: sip:9786146633@xxxxxxxxxx SIP tag: 34ac440-8cadc4b-13c4-45026-36fe9136-7df6f9b1-36fe9136 To: <tel:9786146632> SIP to address: tel:9786146632 Call-ID: 34ac440-8cadc4b-13c4-45026-36fe9136-2ca8c38e-36fe9136@xxxxxxxxxx CSeq: 1579665096 MESSAGE Sequence Number: 1579665096 Method: MESSAGE Via: SIP/2.0/UDP 75.220.202.8:5060;branch=z9hG4bK-36fe9136-d2673ca2-13057daf Transport: UDP Sent-by Address: 75.220.202.8 Sent-by port: 5060 Branch: z9hG4bK-36fe9136-d2673ca2-13057daf User-Agent: CDMA P-CSCF / AM Simualtor Version 00.00.16I Content-Length: 0 Frame 3 (478 bytes on wire, 478 bytes captured) Arrival Time: Apr 1, 2009 15:29:44.200000000 [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 1.600000000 seconds] Frame Number: 3 Frame Length: 478 bytes Capture Length: 478 bytes [Frame is marked: False] [Protocols in frame: ppp:ip:udp:sipsms:sip] Point-to-Point Direction: Received (1) Point-to-Point Protocol Address: 0xff Control: 0x03 Protocol: IP (0x0021) [Direction: DCE->DTE (1)] Internet Protocol, Src: 144.190.82.45 (144.190.82.45), Dst: 75.220.202.8 (75.220.202.8) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 472 Identification: 0x6d2b (27947) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 109 Protocol: UDP (0x11) Header checksum: 0xe619 [correct] [Good: True] [Bad : False] Source: 144.190.82.45 (144.190.82.45) Destination: 75.220.202.8 (75.220.202.8) User Datagram Protocol, Src Port: sip (5060), Dst Port: sip (5060) Source port: sip (5060) Destination port: sip (5060) Length: 452 Checksum: 0x5b7f [correct] [Good Checksum: True] [Bad Checksum: False] Session Initiation Protocol Status-Line: SIP/2.0 202 ACCEPTED Status-Code: 202 [Resent Packet: False] Message Header From: <sip:9786146633@xxxxxxxxxx>;tag=34ac440-8cadc4b-13c4-45026-36fe9136-7df6f9b1-36fe9136 SIP from address: sip:9786146633@xxxxxxxxxx SIP tag: 34ac440-8cadc4b-13c4-45026-36fe9136-7df6f9b1-36fe9136 To: <tel:9786146632>;tag=149cf18-2d52be90-13c4-1d207c-59636887-1d207c SIP to address: tel:9786146632 SIP tag: 149cf18-2d52be90-13c4-1d207c-59636887-1d207c Call-ID: 34ac440-8cadc4b-13c4-45026-36fe9136-2ca8c38e-36fe9136@xxxxxxxxxx CSeq: 1579665096 MESSAGE Sequence Number: 1579665096 Method: MESSAGE Via: SIP/2.0/UDP 75.220.202.8:5060;branch=z9hG4bK-36fe9136-d2673ca2-13057daf Transport: UDP Sent-by Address: 75.220.202.8 Sent-by port: 5060 Branch: z9hG4bK-36fe9136-d2673ca2-13057daf User-Agent: CDMA P-CSCF / AM Simualtor Version 00.00.16I Content-Length: 0
Attachment:
is637.lua
Description: is637.lua
- Prev by Date: [Wireshark-dev] buildbot failure in Wireshark (development) on Windows-XP-x86
- Next by Date: [Wireshark-dev] buildbot failure in Wireshark (release) on Windows-XP-x86
- Previous by thread: Re: [Wireshark-dev] is-637 dissector
- Next by thread: [Wireshark-dev] Simple Tap interface for dissector information
- Index(es):