Wireshark-bugs: [Wireshark-bugs] [Bug 8004] Incorrect Decoding for TCAP Abort
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Tue, 20 Nov 2012 11:35:18 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8004

--- Comment #2 from Anders Broman <anders.broman@xxxxxxxxxxxx> 2012-11-20 11:35:17 PST ---
It looks to me like there is
Frame 1
Transaction Capabilities Application Part

0000   67 2c 49 04 28 0d 00 01 6b 24 28 22 06 07 00 11  g,I.(...k$("....
0010   86 05 01 01 01 a0 17 64 15 80 01 00 be 10 28 0e  .......d......(.
0020   06 07 04 00 00 01 01 01 01 a0 03 a4 01 80        ..............

The last byte 0x80 is map-userAbort (CHOICE tag 4) 

MAP-DialoguePDU ::= CHOICE {
    map-open        [0] MAP-OpenInfo,
    map-accept    [1] MAP-AcceptInfo,
    map-close        [2] MAP-CloseInfo,
    map-refuse    [3] MAP-RefuseInfo,
    map-userAbort    [4] MAP-UserAbortInfo,
    map-providerAbort    [5] MAP-ProviderAbortInfo}

MAP-UserAbortInfo is missing from the buffer.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.