Wireshark-bugs: [Wireshark-bugs] [Bug 6146] Malformed RANAP packets when HandOver procedure on i
Date: Tue, 2 Aug 2011 09:45:24 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6146

--- Comment #4 from Anders Broman <anders.broman@xxxxxxxxxxxx> 2011-08-02 09:45:24 PDT ---
Hi,
It looks to me like the lenght is encoded twice in the failing Packets
for SourceRNC-ToTargetRNC-TransparentContainer.
Packet 11 
0000   00 0c 29 8c 63 54 10 00 00 01 02 03 08 00 45 02  ..).cT........E.
0010   01 34 00 d2 40 00 40 84 b6 10 c0 a8 00 61 c0 a8  .4..@.@......a..
0020   00 b0 ac a5 71 f1 09 c6 ff 6d fd 7f 0d ed 00 03  ....q....m......
0030   01 13 e9 06 46 21 00 00 00 2b 00 00 00 13 00 02  ....F!...+......
0040   40 80 fe 00 00 03 00 07 00 01 00 00 03 00 03 00  @...............
0050   00 19 00 04 00 80 ea 80 e8 00 02 00 80 e3 00 00  ................
0060   05 00 38 00 01 40 00 04 40 02 0b 00 00 3c 40 06  ..8..@..@....<@.
0070   00 00 f5 52 00 10 00 3e 00 09 20 00 f5 52 00 02  ...R...>.. ..R..
0080   02 00 20 00 3d 00 80 b9 <-- here (80 b9 and starting next row 80 b7

                               80 b7 73 36 39 b0 10 10  .. .=.....s69...
0090   00 03 a0 00 02 0a 0a 00 00 00 01 40 00 00 00 80  ...........@....
00a0   00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00  ................
00b0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00c0   00 00 00 6c 00 00 00 00 00 00 00 22 02 0a 00 00  ...l......."....
00d0   00 01 0c 1d 14 08 35 2a 15 43 50 21 40 0a a2 4d  ......5*.CP!@..M
00e0   cc e0 00 41 81 04 01 81 98 1a b8 c4 81 98 05 08  ...A............
00f0   14 40 81 00 00 00 08 00 0a 20 a0 24 80 80 15 55  .@....... .$...U
0100   55 55 4a 06 90 68 00 42 00 10 b3 a2 da 51 33 08  UUJ..h.B.....Q3.
0110   54 43 40 0a 50 01 89 9d 16 d2 89 98 42 a2 1a 00  TC@.P.......B...
0120   94 80 15 40 00 0c 4a 57 e0 00 20 80 00 49 00 23  ...@..JW.. ..I.#
0130   b8 6a 80 00 82 08 00 82 00 01 24 00 8e e1 c3 50  .j........$....P
0140   00 00                                            ..

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.