Re: [Ethereal-users] ITU TCAP decoding might be broken

[Banibrata Dutta <banibrata.dutta@xxxxxxxxx>]

Uhh... yes. I was trying lot of changes to figure out your
suggestions. It is indeed true that you don't need to have to make
these preference changes without a pcap loaded.

thanks again,
bd

On 9/7/05, Jeff Morriss <jeff.morriss@xxxxxxxxxxx> wrote:
> 
> Hi Dutta,
> 
> Hmm, I'm not sure why you would need to set the preferences _before_
> loading the file.  For example, when I read your first email, I did
> these steps:
> 
> - open the sample capture
> - (at this point all my preferences were wrong: MTP3 was set to ANSI and
> neither TCAP nor CAMEL were set to use SSN==200)
> - Edit->Preferences->Protocols
>        - set MTP3 standard to ITU
>        - change TCAP and CAMEL SSN ranges to include 200
>        - click OK or Apply or whatever
> 
> Upon doing that, all the frames were re-dissected with the new
> preference settings and I could see the TCAP and CAMEL portions.
> 
> Regards,
> -Jeff
> 
> Banibrata Dutta wrote:
> > Oops, sorry, figured that one out. Thanks Jeff, your tip did help. I
> > just had to make the preference changes before loading the PCAP file.
> >
> > regards,
> > bd
> >
> > On 9/7/05, Banibrata Dutta <banibrata.dutta@xxxxxxxxx> wrote:
> >
> >>Hi Jeff,
> >>
> >>Thanks for pointing that out. I had ensured that atleat MTP3 is
> >>decoded as ITU-T, but beyond that Ethereal doesn't seem to give me a
> >>way to make any explicit choices. I am attaching a GIF of the
> >>screenshot of ethereal that contains what I can see. As you'd see all
> >>I can see is upto SCCP level, not even TCAP. So unless I am able to
> >>highlight TCAP I don't think I'd be able to set preference, isn't that
> >>so?
> >>
> >>regards,
> >>bdutta
> >>
> >>On 9/6/05, Jeff Morriss <jeff.morriss@xxxxxxxxxxx> wrote:
> >>
> >>>
> >>>Banibrata Dutta wrote:
> >>>
> >>>>hi,
> >>>>
> >>>>i feel that the ITU-T TCAP decoding is broken in Ethereal v0.10.12.
> >>>>while Ethereal is successfully able to decode a pcap file containing
> >>>>IS-41 MAP operations (so obviously ANSI TCAP is working fine).
> >>>>
> >>>>the pcap files tried are the one which are available on:-
> >>>>http://wiki.ethereal.com/SampleCaptures
> >>>>
> >>>>while I do not remember with absolutely certainity, but i think the
> >>>>camel.pcap file used to work on an Ethereal version which was about
> >>>>3-4 gens older. i mean the one available here:-
> >>>>http://wiki.ethereal.com/SampleCaptures?action=AttachFile&do=get&target=camel.pcap
> >>>
> >>>What problem are you seeing with the decoding of that capture file?  I
> >>>just looked at it (briefly) and didn't see any problems.
> >>>
> >>>Note, though, that the CAMEL messages in that capture file are on a
> >>>non-standard SSN (200) so you need to change the TCAP and CAMEL SSN
> >>>preferences to include SSN==200.
> >>>
> >>>(Of course the MTP3 standard has to be set to ITU, too.)
> 
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
> 


-- 
--------------------
Diamond is a piece of coal that did well under pressure.