Wireshark · Ethereal-users: [Ethereal-users] some wtp/wsp packets cannot be read by ethereal

Ethereal-users: [Ethereal-users] some wtp/wsp packets cannot be read by ethereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date: Fri, 9 Feb 2001 15:14:35 +0800

Hi,

I download the ethereal-0.8.15-non-capture version and it is great.

However, when I try to read some wsp/wtp snoop file, it just show the
protocol as UDP. When 
I use other utility, it can decode the data as wtp-Invoke, wtp-ack, etc. 

Attached the raw snoop file and the text output from other programs. The
packet that are 
having probelms is from 6 to 17.

Thanks. Hope this can correct soon as I like this much.

Attachment: D:\ethereal-0.8.15-non-capture\try1.dat
Description: Binary data

  1   0.00000 202.140.74.15 -> 202.140.100.66 UDP D=9201 S=50100 LEN=130
CLNT->SRVR: PDULen = 122.
WTP Invoke - CON(0x0 ), Type(0x1 ), GTR(0x1 ),TTR(0x1 ),RID(0x0 )
	TID(0x38ff), VER(0x0 ),TIDNEW(0x1 ),U/P(0x1 ),TCL(0x2 )

PDULen = 118.
MOR (3)ClientSDUSize = 3000
ServerSDUSize = 3000
ProtocolOptions (c0)
*******************
  2   0.00855 202.140.100.66 -> 202.140.74.15 UDP D=50100 S=9201 LEN=11
CLNT->SRVR: PDULen = 3.
WTP Ack -  CON(0x0 ), Type(0x3 ),Tve/Tok(0x1 ),RID(0x0 )
	TID(0xb8ff)

*******************
  3   1.99100 202.140.74.15 -> 202.140.100.66 UDP D=9201 S=50100 LEN=11
CLNT->SRVR: PDULen = 3.
WTP Ack -  CON(0x0 ), Type(0x3 ),Tve/Tok(0x1 ),RID(0x0 )
	TID(0x38ff)

*******************
  4   0.00921 202.140.100.66 -> 202.140.74.15 UDP D=50100 S=9201 LEN=21
CLNT->SRVR: PDULen = 13.
WTP Result - CON(0x0 ), Type(0x2 ),  GTR(0x1 ),TTR(0x1 ),RID(0x0 )
	TID(0xb8ff)

PDULen = 10.
WSP Redirect - Flags (0x40)
	RedirectAddress (len=8:[c4][00][c0]0[ca][8c]dB)

*******************
  5   1.80758 202.140.74.15 -> 202.140.100.66 UDP D=9201 S=50100 LEN=11
CLNT->SRVR: PDULen = 3.
WTP Ack -  CON(0x0 ), Type(0x3 ),Tve/Tok(0x0 ),RID(0x0 )
	TID(0x38ff)

*******************
  6   0.16733 202.140.74.15 -> 202.140.100.66 UDP D=49200 S=50101 LEN=130
CLNT->SRVR: PDULen = 122.
WTP Invoke - CON(0x0 ), Type(0x1 ), GTR(0x1 ),TTR(0x1 ),RID(0x0 )
	TID(0x3900), VER(0x0 ),TIDNEW(0x0 ),U/P(0x1 ),TCL(0x2 )

PDULen = 118.
MOR (3)ClientSDUSize = 3000
ServerSDUSize = 3000
ProtocolOptions (c0)
*******************
  7   0.00769 202.140.100.66 -> 202.140.74.15 UDP D=50101 S=49200 LEN=11
CLNT->SRVR: PDULen = 3.
WTP Ack -  CON(0x0 ), Type(0x3 ),Tve/Tok(0x1 ),RID(0x0 )
	TID(0xb900)

*******************
  8   1.80819 202.140.74.15 -> 202.140.100.66 UDP D=49200 S=50101 LEN=11
CLNT->SRVR: PDULen = 3.
WTP Ack -  CON(0x0 ), Type(0x3 ),Tve/Tok(0x1 ),RID(0x0 )
	TID(0x3900)

*******************
  9   0.03068 202.140.100.66 -> 202.140.74.15 UDP D=50101 S=49200 LEN=82
CLNT->SRVR: PDULen = 74.
WTP Result - CON(0x0 ), Type(0x2 ),  GTR(0x1 ),TTR(0x1 ),RID(0x0 )
	TID(0xb900)

PDULen = 71.
ClientSDUSize = 3000
ServerSDUSize = 3000
ProtocolOptions (0)MOR (3)
*******************
 10   1.76956 202.140.74.15 -> 202.140.100.66 UDP D=49200 S=50101 LEN=11
CLNT->SRVR: PDULen = 3.
WTP Ack -  CON(0x0 ), Type(0x3 ),Tve/Tok(0x0 ),RID(0x0 )
	TID(0x3900)

*******************
 11   0.00045 202.140.74.15 -> 202.140.100.66 UDP D=49200 S=50101 LEN=36
CLNT->SRVR: PDULen = 28.
WTP Invoke - CON(0x0 ), Type(0x1 ), GTR(0x1 ),TTR(0x1 ),RID(0x0 )
	TID(0x3901), VER(0x0 ),TIDNEW(0x0 ),U/P(0x1 ),TCL(0x2 )

PDULen = 24.
WSP Get PDU - GetType (64)
	Uri (len=22:http://wap.ismart.net/)
	Hdrs-raw (len=0:)
	Hdrs:

*******************
 12   0.03667 202.140.100.66 -> 202.140.74.15 UDP D=50101 S=49200 LEN=742
CLNT->SRVR: PDULen = 734.
WTP Result - CON(0x0 ), Type(0x2 ),  GTR(0x1 ),TTR(0x1 ),RID(0x0 )
	TID(0xb901)

PDULen = 731.
WSP Reply - Status (0x20)
	Hdrs-raw (len=124:[a6]Apache/1.3.12 (Unix) ApacheJServ/1.0fc1[00][ac][1f],[8e]wapgw2.ismart.net[00]"Transformation Applied"[00][92][04]:y[1e][c0][9d][04]9[93]c[aa][84][81][93]"13c5e-472-399363aa"[00])
	Hdrs:
Server: Apache/1.3.12 (Unix) ApacheJServ/1.0fc1
Warning: 14 wapgw2.ismart.net "Transformation Applied"
Date: Thu 01 Feb 2001 08:30:56 GMT
Last-Modified: Fri 11 Aug 2000 02:23:38 GMT
Accept-Ranges: Bytes
Etag: "13c5e-472-399363aa"
	ContentType (len=4:[03][94][81][ea])
	Data (len=599:[01][04]jo[e6][b5][81][e5][8b][95][e8][be][a6][e5][85][ac][e5][ae][a4][00][e5][90][83][e5][96][9d][e7][8e][a9][e6][a8][82][00]Funland[e5][85][b1][e5][92][8c][e5][9c][8b][00][e9][8a][80][e8][a1][8c][e5][9c][b0][e7][94][a2][00][e6][97][85][e9][81][8a][e9][8c][a6][e5][9b][8a][00][e7][86][b1][e9][96][80][e7][b6][b2][e7][ab][99][00][e6][96][b0][e8][81][9e][e9][80][9f][e9][81][9e][00][e8][82][a1][e5][a3][87][e8][84][88][e8][86][8a][00][7f]{[e8]F[18][03]Back[00][01]2[01][01][e7]U[03]MainMenu[00]6[03]SmarTone WAP[00][01][e0][07][01][ae][0c][03]52h[00]2[03]./wml/images/52h.wbmp[00][01][01]`[dc]J[03]./wml/menu/smteng/smt_e_main.wml[00][01][03]To English Menu[00][01]&[dc]K[03]funland.extra.com.hk/servlet/WAPHome[00][01][83][1d][01]&[dc]J[03]./wml/menu/smtchi/smt_c_money.wml[00][01][83]b[01]&[dc]J[03]./wml/menu/smtchi/smt_c_bank.wml[00][01][83].[01]&[dc]J[03]./wml/menu/smtchi/smt_c_travel.wml[00][01][83];[01]&[dc]J[03]./wml/menu/smtchi/smt_c_news.wml[00][01][83]U[01]&[dc]J[03]./wml/menu/smtchi/smt_c_leisure.)

*******************
 13   2.14590 202.140.74.15 -> 202.140.100.66 UDP D=49200 S=50101 LEN=11
CLNT->SRVR: PDULen = 3.
WTP Ack -  CON(0x0 ), Type(0x3 ),Tve/Tok(0x0 ),RID(0x0 )
	TID(0x3901)

*******************
 14   0.13329 202.140.74.15 -> 202.140.100.66 UDP D=49200 S=50101 LEN=59
CLNT->SRVR: PDULen = 51.
WTP Invoke - CON(0x0 ), Type(0x1 ), GTR(0x1 ),TTR(0x1 ),RID(0x0 )
	TID(0x3902), VER(0x0 ),TIDNEW(0x0 ),U/P(0x1 ),TCL(0x2 )

PDULen = 47.
WSP Get PDU - GetType (64)
	Uri (len=41:http://wap.ismart.net/wml/images/52h.wbmp)
	Hdrs-raw (len=4:[80][9d][80][ff])
	Hdrs:
Accept: image/gif
Accept: unrecognized content type value 007f

*******************
 15   0.02393 202.140.100.66 -> 202.140.74.15 UDP D=50101 S=49200 LEN=322
CLNT->SRVR: PDULen = 314.
WTP Result - CON(0x0 ), Type(0x2 ),  GTR(0x1 ),TTR(0x1 ),RID(0x0 )
	TID(0xb902)

PDULen = 311.
WSP Reply - Status (0x20)
	Hdrs-raw (len=123:[a6]Apache/1.3.12 (Unix) ApacheJServ/1.0fc1[00][ac][1f],[8e]wapgw2.ismart.net[00]"Transformation Applied"[00][92][04]:y[1e][c2][9d][04]8[c6][15][ca][84][81][93]"239e3-b8-38c615ca"[00])
	Hdrs:
Server: Apache/1.3.12 (Unix) ApacheJServ/1.0fc1
Warning: 14 wapgw2.ismart.net "Transformation Applied"
Date: Thu 01 Feb 2001 08:30:58 GMT
Last-Modified: Wed 08 Mar 2000 08:56:42 GMT
Accept-Ranges: Bytes
Etag: "239e3-b8-38c615ca"
	ContentType (len=1:[a1])
	Data (len=184:[00][00]][0f][ff][ff][ff][ff][ff][ff][ff][ff][ff][ff][ff][f8][f0]?[ff][ff][ff][ff][00]?[ff][ff][ff][f8][e0][1f][ff][ff][ff][ff][00]?[ff][ff][ff][f8][c7][9f][ff][ff][ff][ff][f3][ff][ff][ff][ff][f8][cf][fe][fe][fc]~[03][f3][fc]?>p[08][cf][fe]|[fc]~[01][f3][f0][0f][1e]p[08][c0][fe]8[fc]~y[f3][e1][87][0e]s[f8][e0]>[10][f8]>y[f3][e7][e7][06]s[f8][fc][1e][00][f9]>y[f3][e7][e7][02]@[18][ff][8e]D[f9]8[01][f3][e7][e7] @[18][ff][8e]l[f0][18][03][f3][e7][e7]0s[f8][8f][8e]|[f0][1e]s[f3][e7][e7]8s[f8][87][1e]|[e3][8e]q[f3][f1][8f]<s[f8][c0]>|[e7][ce]y[f3][f0][0f]<p[08][f0][fe]|[cf][c6]x[f3][fc]?>p[08])

*******************
 16   1.82640 202.140.74.15 -> 202.140.100.66 UDP D=49200 S=50101 LEN=11
CLNT->SRVR: PDULen = 3.
WTP Ack -  CON(0x0 ), Type(0x3 ),Tve/Tok(0x0 ),RID(0x0 )
	TID(0x3902)

*******************
 17  14.71737 202.140.74.15 -> 202.140.100.66 UDP D=49200 S=50101 LEN=16
CLNT->SRVR: PDULen = 8.
WTP Invoke - CON(0x0 ), Type(0x1 ), GTR(0x1 ),TTR(0x1 ),RID(0x0 )
	TID(0x3903), VER(0x0 ),TIDNEW(0x0 ),U/P(0x1 ),TCL(0x0 )

PDULen = 4.
WSP Disconnect - Session Id (774105)

*******************

Follow-Ups:
- Re: [Ethereal-users] some wtp/wsp packets cannot be read by ethereal
  - From: Neil Hunter

Prev by Date: RE: [Ethereal-users] I want to monitor the packets that are comin g from dialup
Next by Date: Re: [Ethereal-users] some wtp/wsp packets cannot be read by ethereal
Previous by thread: RE: [Ethereal-users] I want to monitor the packets that are comin g from dialup
Next by thread: Re: [Ethereal-users] some wtp/wsp packets cannot be read by ethereal
Index(es):
- Date
- Thread

Riverbed Cascade Pilot: Take Wireshark to the Next Level - Advanced Triggers and Alerts; Web and VoIP Analytics; Long-Term Trending and Forensics; Deep Packet Analysis with Wireshark

Riverbed Cascade Pilot Personal Edition: Take Wireshark to the Next Level - Advanced Triggers and Alerts; Web and VoIP Analytics; Long-Term Trending and Forensics; Deep Packet Analysis with Wireshark

Riverbed AirPcap: Complete Visibility of Your Wireless Networks; Multi-Channel, Aggregated Analysis; Portable and Versatile; Easy to Setup and Easy to Use; Ready to Power Your Application

$Riverbed TurboCap: Full-Speed GbE Capture; Port Aggregation; Pass-thru Mode; Aggregating Tap; Full-Speed GbE Injection; Exported Interfaces; TurboCap API Developer\'s Pack$