i have two "gsm_sms" packets in ss7 network. these packets contain two parts of a multipart SMS. in user data heaher (UDH) of these packets i saw Message parts =2 ,and other properties of first packet is : message part number =1 , message idendifier =35 and TP-MMS FLAG shows: more message are waiting for MS in this SC. properties of second packet is : message part number =2 , message idendifier =35 and TP-MMS FLAG shows: No more message are waiting for MS in this SC. in the wireshark these packets are reassembled, however TP-Originating Address of these packets are different. is it ok? asked 06 Apr '17, 04:10  ghader edited 06 Apr '17, 06:02  JeffMorriss ♦ |
One Answer:
it is a bug of wireshark (packet-gsm_sms.c). according to gsm 03.40 packets that have same message identifier and same TP-Originating Adresses and same Service center should be reassembled. however in packet-gsm_sms.c packets that have same message identifier are reassembled. This answer is marked "community wiki". answered 07 Apr '17, 08:21  hhw wikified 07 Apr '17, 08:32 |
