Wireshark-bugs: [Wireshark-bugs] [Bug 12960] smpp.message not decoded & not available for export
Date: Mon, 03 Oct 2016 18:42:05 +0000

changed bug 12960


What Removed Added
Status INCOMPLETE CONFIRMED

Comment # 4 on bug 12960 from
(In reply to Diego De Backere from comment #3)
> This is the complete output from "tshark -v" :
> 
> [root@SMS-Proxy diego]# tshark -v
> TShark 1.8.10 (SVN Rev Unknown from unknown)


Version 1.8 has long since been end-of-lifed (oldest supported version is 2.0),
but I can duplicate the issue in master branch.

The issue is that smpp.message "field type" (hf_smpp_short_message) is FT_NONE,
and not FT_STRING or FT_BYTES (which would give meaningful output for -T field
in TShark). Checking the log back to 2008 (it does go farther, but I got lazy),
it has been FT_NONE the whole time.

Could this have been "intentional" to "hide" the field data?  Doesn't make any
sense to me, but it's a simple enough fix.  Feedback welcome on if it should be
a FT_STRING (because "message" is typically ASCII) or if it should be FT_BYTES.


You are receiving this mail because:
  • You are watching all bug changes.