This is our old Q&A Site. Please post any new questions and answers at

alt text

Wireshark not recognized new SCCP protocol . You can found messages only if you will do filter by SCCP port 2000 .

Is any plan to support it ?

Thank you

asked 31 Jan '11, 08:07

Dan_D's gravatar image

accept rate: 0%

As with any protocol, I guess it will be updated if it is scratching someone's itch.

The best way to get it in the face of developers, file a bug at with as much information as you can.

And as grossman correctly pointed out the packet you have expanded above (frame 12) isn't anything other than a TCP ACK (it has length 0)

permanent link

answered 03 Feb '11, 17:32

martyvis's gravatar image

accept rate: 7%

While there are some SKINNY messages that the dissector doesn't recognize, it looks like this is a pure TCP ACK, judging by the LEN=0 in the screen-shot.

permanent link

answered 31 Jan '11, 10:35

grossman's gravatar image

accept rate: 0%

It is a updated skinny protocol which available in CM 7 and firmware 903 .before this firmaware wireshark can recognize all message with small issue which I discrabe in

permanent link

answered 02 Feb '11, 10:00

Dan_D's gravatar image

accept rate: 0%

I know I'm a little late to this post, but I have seen the same thing, where wireshark doesn't recognize the skinny packet in the new firmware and CM 7 as anything other than generic SCCP.

From what I have seen the issue is that the reserved portion of the SCCP packet is no longer all zeros. Cisco is now populating these bits, so Wireshark and other tools don't recognize them anymore. I have just recently gotten confirmation from a Cisco TAC engineer that this is a permanent change to the protocol, so hopefully Wireshark will be able to recognize these packets eventually.

permanent link

answered 28 Apr '11, 07:24

robrien's gravatar image

accept rate: 0%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 31 Jan '11, 08:07

question was seen: 7,718 times

last updated: 28 Apr '11, 07:24

p​o​w​e​r​e​d by O​S​Q​A