This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

alt text

Wireshark not recognized new SCCP protocol . You can found messages only if you will do filter by SCCP port 2000 .

Is any plan to support it ?

Thank you

asked 31 Jan '11, 08:07

Dan_D's gravatar image

Dan_D
1111
accept rate: 0%


As with any protocol, I guess it will be updated if it is scratching someone's itch.

The best way to get it in the face of developers, file a bug at bugs.wireshark.org with as much information as you can.

And as grossman correctly pointed out the packet you have expanded above (frame 12) isn't anything other than a TCP ACK (it has length 0)

permanent link

answered 03 Feb '11, 17:32

martyvis's gravatar image

martyvis
8911525
accept rate: 7%

While there are some SKINNY messages that the dissector doesn't recognize, it looks like this is a pure TCP ACK, judging by the LEN=0 in the screen-shot.

permanent link

answered 31 Jan '11, 10:35

grossman's gravatar image

grossman
16114
accept rate: 0%

It is a updated skinny protocol which available in CM 7 and firmware 903 .before this firmaware wireshark can recognize all message with small issue which I discrabe in

http://ask.wireshark.org/questions/558/skinny-protocol-problem

permanent link

answered 02 Feb '11, 10:00

Dan_D's gravatar image

Dan_D
1111
accept rate: 0%

I know I'm a little late to this post, but I have seen the same thing, where wireshark doesn't recognize the skinny packet in the new firmware and CM 7 as anything other than generic SCCP.

From what I have seen the issue is that the reserved portion of the SCCP packet is no longer all zeros. Cisco is now populating these bits, so Wireshark and other tools don't recognize them anymore. I have just recently gotten confirmation from a Cisco TAC engineer that this is a permanent change to the protocol, so hopefully Wireshark will be able to recognize these packets eventually.

permanent link

answered 28 Apr '11, 07:24

robrien's gravatar image

robrien
1
accept rate: 0%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×69
×43
×13
×5
×2

question asked: 31 Jan '11, 08:07

question was seen: 7,494 times

last updated: 28 Apr '11, 07:24

p​o​w​e​r​e​d by O​S​Q​A