Wireshark-bugs: [Wireshark-bugs] [Bug 3244] New: Wireshark doesn't decode CRG message inside APM
Date: Sat, 7 Feb 2009 14:46:45 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3244

           Summary: Wireshark doesn't decode CRG message inside APM message
                    in ISUP over M3UA
           Product: Wireshark
           Version: 1.0.4
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: Critical
          Priority: High
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: zivpel@xxxxxxxxx


Build Information:
Version 1.0.4 (SVN Rev 26501)

Copyright 1998-2008 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.12.8, with GLib 2.14.6, with WinPcap (version unknown),
with libz 1.2.3, without POSIX capabilities, with libpcre 7.0, with SMI 0.4.8,
with ADNS, with Lua 5.1, with GnuTLS 2.3.8, with Gcrypt 1.4.1, with MIT
Kerberos, with PortAudio V19-devel, with AirPcap.

Running on Windows XP Service Pack 2, build 2600, with WinPcap version 4.0.2
(packet.dll version 4.0.0.1040), based on libpcap version 0.9.5, without
AirPcap.

Built using Microsoft Visual C++ 6.0 build 8804

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
Wireshark doesn't decode CRG message inside APM message in ISUP over M3UA:
Wireshark doesn't decode CRG parameters in APM message:
Example:
The packet in wireshark:
No.     Time        Source                Destination           Protocol Info
      2 0.025650    4-14-0                0-34-7                ISUP(ITU) APM
(CIC 95) 

Frame 2 (206 bytes on wire, 206 bytes captured)
    Arrival Time: Feb  6, 2009 12:23:28.782464000
    [Time delta from previous captured frame: 0.025650000 seconds]
    [Time delta from previous displayed frame: 0.025650000 seconds]
    [Time since reference or first frame: 0.025650000 seconds]
    Frame Number: 2
    Frame Length: 206 bytes
    Capture Length: 206 bytes
    [Frame is marked: False]
    [Protocols in frame: eth:ip:sctp:m3ua:isup]
Ethernet II, Src: SunMicro_e5:ca:0e (00:14:4f:e5:ca:0e), Dst: FoundryN_90:11:00
(00:12:f2:90:11:00)
    Destination: FoundryN_90:11:00 (00:12:f2:90:11:00)
        Address: FoundryN_90:11:00 (00:12:f2:90:11:00)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address
(factory default)
    Source: SunMicro_e5:ca:0e (00:14:4f:e5:ca:0e)
        Address: SunMicro_e5:ca:0e (00:14:4f:e5:ca:0e)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
        .... ..0. .... .... .... .... = LG bit: Globally unique address
(factory default)
    Type: IP (0x0800)
Internet Protocol, Src: 192.168.101.4 (192.168.101.4), Dst: 192.168.101.68
(192.168.101.68)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 192
    Identification: 0xf243 (62019)
    Flags: 0x04 (Don't Fragment)
        0... = Reserved bit: Not set
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 64
    Protocol: SCTP (0x84)
    Header checksum: 0xfbdc [correct]
        [Good: True]
        [Bad : False]
    Source: 192.168.101.4 (192.168.101.4)
    Destination: 192.168.101.68 (192.168.101.68)
Stream Control Transmission Protocol, Src Port: m3ua (2905), Dst Port: m3ua
(2905)
    Source port: 2905
    Destination port: 2905
    Verification tag: 0x59fe6a02
    Checksum: 0x5636f303 [correct CRC32C]
    DATA chunk(ordered, complete segment, TSN: 21683, SID: 16, SSN: 18, PPID:
3, payload length: 144 bytes)
        Chunk type: DATA (0)
            0... .... = Bit: Stop processing of the packet
            .0.. .... = Bit: Do not report
        Chunk flags: 0x03
            .... ...1 = E-Bit: Last segment
            .... ..1. = B-Bit: First segment
            .... .0.. = U-Bit: Ordered deliviery
        Chunk length: 160
        TSN: 21683
        Stream Identifier: 0x0010
        Stream sequence number: 18
        Payload protocol identifier: M3UA (3)
MTP 3 User Adaptation Layer
    Version: Release 1 (1)
    Reserved: 0x00
    Message class: Transfer messages (1)
    Message type: Payload data (DATA) (1)
    Message length: 144
    Network appearance (1)
        Parameter Tag: Network appearance (512)
        Parameter length: 8
        Network appearance: 1
    Routing context (1 context)
        Parameter Tag: Routing context (6)
        Parameter length: 8
        Routing context: 1000
    Protocol data (SS7 message of 103 bytes)
        Parameter Tag: Protocol data (528)
        Parameter length: 119
        OPC: 8304 (4-14-0)
        DPC: 279 (0-34-7)
        SI: ISUP (5)
        NI: 3
        MP: 0
        SLS: 15
        MTP3 equivalents
            OPC: 8304
            DPC: 279
            PC: 8304
            PC: 279
            NI: 3
        Padding: 00
ISDN User Part
    CIC: 95
    Message type: Application transport (65)
    Pointer to start of optional part: 1
    Application transport, (88 bytes length)
        Optional Parameter: 120 (Application transport)
        Parameter length: 88
        Application transport parameter fields:
        1... .... = Extension indicator: last octet
        .... .... .000 0011 = Application context identifier: Charging ASE (3)
        Application transport instruction indicators: 
        1... .... = Extension indicator: last octet
        .... ..0. = Send notification indicator (SNI): do not send notification
        .... ...0 = Release call indicator (RCI): do not release call
        APM segmentation indicator:
        1... .... = Extension indicator: last octet
        .1.. .... = Sequence indicator (SI): new sequence
        ..00 0000 = APM segmentation indicator: final segment (0)
        APM-user information field (85 Bytes)
        No further dissection of APM-user information field
    Message compatibility information (1 byte length)
        Optional Parameter: 56 (Message compatibility information)
        Parameter length: 1
        Message compatibility information
        .... ...0 = Transit at intermediate exchange indicator: Transit
interpretation
        .... ..0. = Release call indicator: do not release call
        .... .0.. = Send notification indicator: do not send notification
        .... 0... = Discard message indicator: Do not discard message (pass on)
        ...1 .... = Pass on not possible indicator: discard information
        .00. .... = Broadband narrowband interworking indicator Bits GF: Pass
on (0x00)
        1... .... = Extension indicator: last octet
    Parameter compatibility information (3 bytes length)
        Optional Parameter: 57 (Parameter compatibility information)
        Parameter length: 3
        Upgraded parameter no: 1 = Application transport
        Instruction indicators: 0x40 
        .... ...0 = Transit at intermediate exchange indicator: Transit
interpretation
        .... ..0. = Release call indicator: do not release call
        .... .0.. = Send notification indicator: do not send notification
        .... 0... = Discard message indicator: Do not discard message (pass on)
        ...0 .... = Discard parameter indicator: Do not discard parameter (pass
on)
        .10. .... = Pass on not possible indicator: Discard parameter (0x02)
        0... .... = Extension indicator: information continues through the next
octet
        .... ..00 = Broadband narrowband interworking indicator Bits JF: Pass
on (0x00)
    End of optional parameters (0)

0000  00 12 f2 90 11 00 00 14 4f e5 ca 0e 08 00 45 00   ........O.....E.
0010  00 c0 f2 43 40 00 40 84 fb dc c0 a8 65 04 c0 a8   ...C@.@.....e...
0020  65 44 0b 59 0b 59 59 fe 6a 02 56 36 f3 03 00 03   eD.Y.YY.j.V6....
0030  00 a0 00 00 54 b3 00 10 00 12 00 00 00 03 01 00   ....T...........
0040  01 01 00 00 00 90 02 00 00 08 00 00 00 01 00 06   ................
0050  00 08 00 00 03 e8 02 10 00 77 00 00 20 70 00 00   .........w.. p..
0060  01 17 05 03 00 0f 5f 00 41 01 78 58 83 80 c0 a0   ......_.A.xX....
0070  53 80 02 05 00 a1 39 a0 37 a0 17 a0 11 30 0f a0   S.....9.7....0..
0080  06 80 01 01 81 01 fe 81 01 00 82 02 07 00 81 02   ................
0090  07 80 a1 1c a0 17 a0 11 30 0f a0 06 80 01 01 81   ........0.......
00a0  01 fe 81 01 00 82 02 07 00 81 02 07 80 81 01 58   ...............X
00b0  a3 0f 80 07 02 82 07 81 0f c0 70 81 04 0c 00 00   ..........p.....
00c0  84 85 01 08 38 01 90 39 03 78 40 80 00 00         ....8..9.x@...

SS7 analyzer showing the full SS7 message:
--------------------------------------------------------------------------------
 Octet001  ITU-T SS7              Count=000001 Time=02/06/2009 11:23:28:823 
--------------------------------------------------------------------------------
 10100011  BIB/BSN                (163)  1/35 
 10000111  FIB/FSN                (135)  1/7   
 ..111111  SU type/length         (63) MSU63 
 00......  Spare                  0
--------------------------------------------------------------------------------
 Octet004  Service information octet  
--------------------------------------------------------------------------------
 ....0101  Service indicator      (5) ISUP       ISDN User Part 
 ..00....  Message priority       0
 11......  Network indicator      (3) NS  National Spare 
--------------------------------------------------------------------------------
 Octet005  Routing label         
--------------------------------------------------------------------------------
 ........  DPC                    00-2-02-7 211-CF2M--D_N1 
 ........  OPC                    08-0-14-0 69---0642AC_N1 
 1111....  SLS                    15
--------------------------------------------------------------------------------
 Octet009  Circuit identification code  
--------------------------------------------------------------------------------
 ........  CIC                    95
 ........  PCM                    (2) PCM  2 
 ........  Time Slot              (31) Time Slot  31 
 0000....  Spare                  0
--------------------------------------------------------------------------------
 Octet011  ISUP message          
--------------------------------------------------------------------------------
 01000001  Message type           (65) APM  Application Transport Message 
 00000001  Pointer->optionals     1
--------------------------------------------------------------------------------
 Octet013  ISUP Application Transport Parameter  
--------------------------------------------------------------------------------
 01111000  Parameter name code    (120) ISUP Application Transport Parameter 
 01011000  Parameter length       88
 .0000011  ApplicationContextId   (3) Charging ASE 
 1.......  Extension bit          (1) Last Octet 
 .......0  Release Call Ind       (0) Do not release call 
 ......0.  SendNotificationInd    (0) Do not send notification 
 .00000..  Spare                  0
 1.......  Extension bit          (1) Last Octet 
 ..000000  NmbrOfSegmentsRemain   (0) Final Segment 
 .1......  Sequence Indicator     (1) New sequence 
 1.......  Extension bit          (1) Last Octet 
--------------------------------------------------------------------------------
 Octet018  CRGT   Charging Tariff Info  
--------------------------------------------------------------------------------
 ...00000  Tag                    (0) CRGT   Charging Tariff Info 
 101.....  Class and form         (5) Context-specific, constructor 
 01010011  Length                 83
--------------------------------------------------------------------------------
 Octet020  Charging Control Indicators  
--------------------------------------------------------------------------------
 ...00000  Tag                    (0) Charging Control Indicators 
 100.....  Class and form         (4) Context-specific, primitive 
 00000010  Parameter length       2
 00000101  Unused Bits            5
 0.......  Subscriber Charge      (0) Advice of Charge 
 .0......  ImmedChgOfAppldTariff  (0) Immediate tariff change without restart 
 ..000000  Spare                  0
--------------------------------------------------------------------------------
 Octet024  Charging Tariff       
--------------------------------------------------------------------------------
 ...00001  Tag                    (1) Charging Tariff 
 101.....  Class and form         (5) Context-specific, constructor 
 00111001  Length                 57
--------------------------------------------------------------------------------
 Octet026  Tariff Currency       
--------------------------------------------------------------------------------
 ...00000  Tag                    (0) Tariff Currency 
 101.....  Class and form         (5) Context-specific, constructor 
 00110111  Length                 55
--------------------------------------------------------------------------------
 Octet028  Current Tariff Currency  
--------------------------------------------------------------------------------
 ...00000  Tag                    (0) Current Tariff Currency 
 101.....  Class and form         (5) Context-specific, constructor 
 00010111  Length                 23
--------------------------------------------------------------------------------
 Octet030  Communication Charge Sequence Currency  
--------------------------------------------------------------------------------
 ...00000  Tag                    (0) Communication Charge Sequence Currency 
 101.....  Class and form         (5) Context-specific, constructor 
 00010001  Length                 17
--------------------------------------------------------------------------------
 Octet032  Communication Charge Currency  
--------------------------------------------------------------------------------
 ...10000  Tag                    (16) Communication Charge Currency 
 001.....  Class and form         (1) Universal, constructor 
 00001111  Length                 15
--------------------------------------------------------------------------------
 Octet034  Currency Factor Scale 
--------------------------------------------------------------------------------
 ...00000  Tag                    (0) Currency Factor Scale 
 101.....  Class and form         (5) Context-specific, constructor 
 00000110  Length                 6
--------------------------------------------------------------------------------
 Octet036  Currency Factor       
--------------------------------------------------------------------------------
 ...00000  Tag                    (0) Currency Factor 
 100.....  Class and form         (4) Context-specific, primitive 
 00000001  Length                 1
 ........  Value                  1
--------------------------------------------------------------------------------
 Octet039  Currency Scale        
--------------------------------------------------------------------------------
 ...00001  Tag                    (1) Currency Scale 
 100.....  Class and form         (4) Context-specific, primitive 
 00000001  Parameter length       1
 11111110  Currency Scale         (254) 0,01 
--------------------------------------------------------------------------------
 Octet042  Tariff Duration       
--------------------------------------------------------------------------------
 ...00001  Tag                    (1) Tariff Duration 
 100.....  Class and form         (4) Context-specific, primitive 
 00000001  Length                 1
 ........  Seconds                0
--------------------------------------------------------------------------------
 Octet045  Sub Tariff Control    
--------------------------------------------------------------------------------
 ...00010  Tag                    (2) Sub Tariff Control 
 100.....  Class and form         (4) Context-specific, primitive 
 00000010  Parameter length       2
 00000111  Unused Bits            7
 0.......  One Time Charge        (0) Cyclic Tariff 
 .0000000  Spare                  0
--------------------------------------------------------------------------------
 Octet049  Tariff Control Indicators  
--------------------------------------------------------------------------------
 ...00001  Tag                    (1) Tariff Control Indicators 
 100.....  Class and form         (4) Context-specific, primitive 
 00000010  Parameter length       2
 00000111  Unused Bits            7
 1.......  Non-cyclic Tariff      (1) Yes 
 .0000000  Spare                  0
--------------------------------------------------------------------------------
 Octet053  Tariff Switch Currency  
--------------------------------------------------------------------------------
 ...00001  Tag                    (1) Tariff Switch Currency 
 101.....  Class and form         (5) Context-specific, constructor 
 00011100  Length                 28
--------------------------------------------------------------------------------
 Octet055  Next Tariff Currency  
--------------------------------------------------------------------------------
 ...00000  Tag                    (0) Next Tariff Currency 
 101.....  Class and form         (5) Context-specific, constructor 
 00010111  Length                 23
--------------------------------------------------------------------------------
 Octet057  Communication Charge Sequence Currency  
--------------------------------------------------------------------------------
 ...00000  Tag                    (0) Communication Charge Sequence Currency 
 101.....  Class and form         (5) Context-specific, constructor 
 00010001  Length                 17
--------------------------------------------------------------------------------
 Octet059  Communication Charge Currency  
--------------------------------------------------------------------------------
 ...10000  Tag                    (16) Communication Charge Currency 
 001.....  Class and form         (1) Universal, constructor 
 00001111  Length                 15
--------------------------------------------------------------------------------
 Octet061  Currency Factor Scale 
--------------------------------------------------------------------------------
 ...00000  Tag                    (0) Currency Factor Scale 
 101.....  Class and form         (5) Context-specific, constructor 
 00000110  Length                 6
--------------------------------------------------------------------------------
 Octet063  Currency Factor       
--------------------------------------------------------------------------------
 ...00000  Tag                    (0) Currency Factor 
 100.....  Class and form         (4) Context-specific, primitive 
 00000001  Length                 1
 ........  Value                  1
--------------------------------------------------------------------------------
 Octet066  Currency Scale        
--------------------------------------------------------------------------------
 ...00001  Tag                    (1) Currency Scale 
 100.....  Class and form         (4) Context-specific, primitive 
 00000001  Parameter length       1
 11111110  Currency Scale         (254) 0,01 
--------------------------------------------------------------------------------
 Octet069  Tariff Duration       
--------------------------------------------------------------------------------
 ...00001  Tag                    (1) Tariff Duration 
 100.....  Class and form         (4) Context-specific, primitive 
 00000001  Length                 1
 ........  Seconds                0
--------------------------------------------------------------------------------
 Octet072  Sub Tariff Control    
--------------------------------------------------------------------------------
 ...00010  Tag                    (2) Sub Tariff Control 
 100.....  Class and form         (4) Context-specific, primitive 
 00000010  Parameter length       2
 00000111  Unused Bits            7
 0.......  One Time Charge        (0) Cyclic Tariff 
 .0000000  Spare                  0
--------------------------------------------------------------------------------
 Octet076  Tariff Control Indicators  
--------------------------------------------------------------------------------
 ...00001  Tag                    (1) Tariff Control Indicators 
 100.....  Class and form         (4) Context-specific, primitive 
 00000010  Parameter length       2
 00000111  Unused Bits            7
 1.......  Non-cyclic Tariff      (1) Yes 
 .0000000  Spare                  0
--------------------------------------------------------------------------------
 Octet080  Tariff Switchover Time  
--------------------------------------------------------------------------------
 ...00001  Tag                    (1) Tariff Switchover Time 
 100.....  Class and form         (4) Context-specific, primitive 
 00000001  Length                 1
 01011000  Time HHMM              (88) 22 hours  0 minutes        
--------------------------------------------------------------------------------
 Octet083  Origination Identification  
--------------------------------------------------------------------------------
 ...00011  Tag                    (3) Origination Identification 
 101.....  Class and form         (5) Context-specific, constructor 
 00001111  Length                 15
--------------------------------------------------------------------------------
 Octet085  Network Identification  
--------------------------------------------------------------------------------
 ...00000  Tag                    (0) Network Identification 
 100.....  Class and form         (4) Context-specific, primitive 
 00000111  Parameter length       7
 00000010  Recommendation         (2) itu-t administration 
 ........  Regulating Authority   (263) Germany 
 ........  Network                (143) Undefined 
 ........  Node Identification    C070
--------------------------------------------------------------------------------
 Octet094  Reference Id          
--------------------------------------------------------------------------------
 ...00001  Tag                    (1) Reference Id 
 100.....  Class and form         (4) Context-specific, primitive 
 00000100  Length                 4
 ........  Value                  201326724
--------------------------------------------------------------------------------
 Octet100  Currency              
--------------------------------------------------------------------------------
 ...00101  Tag                    (5) Currency 
 100.....  Class and form         (4) Context-specific, primitive 
 00000001  Parameter length       1
 00001000  Currency               (8) Euro 
--------------------------------------------------------------------------------
 Octet103  ISUP Msg compatibility information parameter  
--------------------------------------------------------------------------------
 00111000  Parameter name code    (56) ISUP Msg compatibility information
parameter 
 00000001  Parameter length       1
 .......0  Transit at exchange    (0) Transit interpretation 
 ......0.  Release call           (0) Do not release call 
 .....0..  Send notification      (0) Do not send notification 
 ....0...  Discard message        (0) Do not discard message (pass on) 
 ...1....  Pass on not possible   (1) Discard information 
 .00.....  Broad/Narrow band      (0) Pass on 
 1.......  Extension bit          (1) Last octet 
--------------------------------------------------------------------------------
 Octet106  ISUP Parameter compatibility information parameter  
--------------------------------------------------------------------------------
 00111001  Parameter name code    (57) ISUP Parameter compatibility information
parameter 
 00000011  Parameter length       3
 01111000  Upgraded parameter     (120) ISUP Application Transport Parameter 
 .......0  Transit at exchange    (0) Transit interpretation 
 ......0.  Release call           (0) Do not release call 
 .....0..  Send notification      (0) Do not send notification 
 ....0...  Discard message        (0) Do not discard message (pass on) 
 ...0....  Discard parameter      (0) Do not discard parameter (pass on) 
 .10.....  PassOnNotPossibleInd   (2) discard parameter 
 0.......  Extension bit          (0) Information continues through the next
octet 
 ......00  Broad/narrowband Ind   (0) pass on 
 100000..  Spare                  32
--------------------------------------------------------------------------------
 Octet111  ISUP End of optional parameters  
--------------------------------------------------------------------------------
 00000000  Parameter name code    (0) ISUP End of optional parameters 
--------------------------------------------------------------------------------
 Checksum  CRC16................  0000000000000000 hex=0000
--------------------------------------------------------------------------------


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.