Wireshark-bugs: [Wireshark-bugs] [Bug 4050] ISUP ACM with invalid packet is not identified as pr
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4050
--- Comment #4 from Anders Broman <anders.broman@xxxxxxxxxxxx> 2009-10-16 08:23:26 PDT ---
Hi,
Wiresharks dissectors get's handed tvb(buffer) with the protocol data.
In this trace the ISUP dissector gets handed
0000 1b 00 06 10 14 01 29 01 01 00 e.g no extra octet locking further
the MTP2 lenght is "Message length: 35" the SCTP info is:
DATA chunk(ordered, complete segment, TSN: 649430584, SID: 1, SSN: 3211, PPID:
5, payload length: 36 bytes).
So I guess the SCTP data is one octet longer than the MTP2 data
>I am told by my vendor Squire Technologies
>(http://www.squire-technologies.co.uk) that they are padding to the 32bit
>boundary per the SPEC. I personally don't see this in the SPEC.
This would bet the SCTP spec I would think...
I see no error in Wireshark, I would say that the wendor flagging the ACM as
faulty is in error they are not reading the MTP2 length. The ISUP message
stops on "End of optional parameters" as per the MTP2 lenght indicator.
Regards
Anders
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
