This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Trying to trace US Number portability using wireshark but I am getting the following decode below :(

ANSI Transaction Capabilities Application Part
    response
        identifier: 2b40012a
        componentPortion: 1 item
            ComponentPDU: invokeLast (9)
                invokeLast
                    componentIDs: 0000
                    operationCode: national (16)
                        national: 1025
                            0... .... .... .... = Require Reply: False
                            .000 0100 .... .... = Family: Connection Control (4)
                            .... .... 0000 0001 = Specifier: 1 Connect
                    Dissector for ANSI TCAP NATIONAL code:0x401(Family 4, Specifier 1) 
not implemented. Contact Wireshark developers if you want this supported(Spec required)
                        [Expert Info (Warn/Undecoded): Dissector for ANSI TCAP NATIONAL code:0x401(Family 4, Specifier 1) 
not implemented. Contact Wireshark developers if you want this supported(Spec required)]
                            [Dissector for ANSI TCAP NATIONAL code:0x401(Family 4, Specifier 1) 
not implemented. Contact Wireshark developers if you want this supported(Spec required)]
                            [Severity level: Warn]
                            [Group: Undecoded]
                    BER Error: This field lies beyond the end of the known sequence definition.
                        [Expert Info (Warn/Malformed): BER Error: Unknown field in Sequence]
                            [BER Error: Unknown field in Sequence]
                            [Severity level: Warn]
                            [Group: Malformed]

asked 18 Jul '16, 11:14

Michael%20Pierotti's gravatar image

Michael Pier...
6335
accept rate: 0%

edited 18 Jul '16, 13:09

JeffMorriss's gravatar image

JeffMorriss ♦
6.2k572


As the printout says, a publicly available protocol specification is needed to write a dissector for the protocol. No dissector is currently available.

permanent link

answered 18 Jul '16, 12:25

Anders's gravatar image

Anders ♦
4.6k952
accept rate: 17%

Just to add to that: if you have a specification and a sample capture that you can share then open an enhancement request (and attach both to the request) asking for dissection support.

(18 Jul '16, 13:11) JeffMorriss ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×89
×32
×13
×3
×1

question asked: 18 Jul '16, 11:14

question was seen: 1,120 times

last updated: 18 Jul '16, 13:11

p​o​w​e​r​e​d by O​S​Q​A