Wireshark-bugs: [Wireshark-bugs] [Bug 12960] smpp.message not decoded & not available for export
Date: Mon, 03 Oct 2016 12:06:55 +0000

Comment # 3 on bug 12960 from
Hi Michael,

Thx for your reply.

I have attached a pcap file with one submit_sm message. You will see the
smpp.sm_length=77. When you open in wireshark, you can see the message text in
the ascii dump.

When I run 

/usr/sbin/tshark -r submit_sm.pcapng -R smpp -T fields -e frame.number -e
frame.time_epoch -e ip.src -e tcp.srcport -e ip.dst -e tcp.dstport -e
smpp.command_id -e smpp.source_addr -e smpp.source_addr_ton -e
smpp.destination_addr -e smpp.dest_addr_ton -e smpp.sequence_number -e
smpp.message -e smpp.command_status -e smpp.message_id -E aggregator=# -E
separator=, -E quote=n

this is the output :

1,1475061092.311009142,194.0.137.66,58998,217.113.81.46,16004,0x00000004,8613143320472,0x01,8618601362689,0x01,21509,1,,

The third-last field in the csv should contain the smpp.message, but only
contains a "1"


This is the complete output from "tshark -v" :

[root@SMS-Proxy diego]# tshark -v
TShark 1.8.10 (SVN Rev Unknown from unknown)

Copyright 1998-2013 Gerald Combs <gerald@wireshark.org> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GLib 2.28.8, with libpcap, with libz 1.2.3, without
POSIX
capabilities, with SMI 0.4.8, without c-ares, without ADNS, without Lua,
without
Python, with GnuTLS 2.8.5, with Gcrypt 1.4.5, with MIT Kerberos, without GeoIP.

Running on Linux 2.6.32-573.18.1.el6.x86_64, with locale en_US.UTF-8, with
libpcap version 1.4.0, with libz 1.2.3.

Built using gcc 4.4.7 20120313 (Red Hat 4.4.7-16).


You are receiving this mail because:
  • You are watching all bug changes.