i use wireshark-win32-1.6.5. what sccp protocol version is supported for wireshark-win32-1.6.5 ?? i can't have some information in sccp packet. This question is marked "community wiki". asked 16 Apr '12, 03:13  kernel7k |
One Answer:
The SCCP dissector's source code says that it is (hopefully) compliant with these specifications:
Though there hasn't been large changes in the SCCP specs in years so the actual versions shouldn't matter much. answered 27 Apr '12, 06:53  JeffMorriss ♦ |
What fields are missing? Keep in mind that if your MTP3 variant (ANSI or ITU or ???) is wrong, then the decoding of SCCP will be a train wreck because Wireshark will then not know where SCCP starts. As you're probably aware, the ITU MTP3 routing label is 32 bits. It has in it two 14-bit point codes and a 4-bit SLS. The ANSI MTP3 routing label is 7 octets. Two 24-bit point codes and a 5 or 8-bit SLS. A whole octet is donated to the ANSI MTP3 SLS no matter if it's 5 or 8 bits.
Check to make sure you're decoding MTP3 (or M3UA?) properly.