Hi!
I am using wire shark version 1.4.6 and i am trying to send encoded PCAP (Positioning Calculation Application Part) packet (POSITION INITIATION REQUEST message) over SUA (SS7 SCCP-User Adaptation Layer) between a Radio Network Controller (RNC) and the Stand-Alone SMLC (SAS) accordance with 3GPP standart. But when i send it wireshark is unable to recognize the PCAP protocol and it displays: Protocol is SUA (RFC 3868) and info is CORE. However PCAP packet is correctly decoded.
Could some one please help me on this or have a SUA trace whith PCAP message?
Thanks.
No. Time Source Destination Protocol Info
323 46.555464 10.1.1.204 10.1.1.191 SUA (RFC 3868) CORE
Stream Control Transmission Protocol, Src Port: 40000 (40000), Dst Port: 20000 (20000)
Source port: 40000
Destination port: 20000
Verification tag: 0x3f59bad4
Checksum: 0x1f9809b6 (not verified)
DATA chunk(unordered, complete segment, TSN: 1527587857, SID: 0, SSN: 0, PPID: 4, payload length: 168 bytes)
Chunk type: DATA (0)
0… …. = Bit: Stop processing of the packet
.0.. …. = Bit: Do not report
Chunk flags: 0x07
…. …1 = E-Bit: Last segment
…. ..1. = B-Bit: First segment
…. .1.. = U-Bit: Unordered delivery
…. 0… = I-Bit: Possibly delay SACK
Chunk length: 184
TSN: 1527587857
Stream Identifier: 0x0000
Stream sequence number: 0
Payload protocol identifier: SUA (4)
SS7 SCCP-User Adaptation Layer
Version: Release 1 (1)
Reserved: 00
Message Class: Connection-Oriented messages (8)
Message Type: Connection Request (CORE) (1)
Message Length: 168
Routing context (1 context)
Parameter Tag: Routing context (0x0006)
Parameter Length: 8
Routing context: 1
Protocol class (2)
Parameter Tag: Protocol class (0x0115)
Parameter Length: 8
Reserved: 000000
Protocol Class
0… …. = Return On Error Bit: No Special Options
.000 0010 = Protocol Class: 2
Source reference number (1)
Parameter Tag: Source reference number (0x0104)
Parameter Length: 8
Source Reference Number: 1
Destination address
Parameter Tag: Destination address (0x0103)
Parameter Length: 24
Routing Indicator: Route on SSN + IP Address (4)
Address Indicator
0000 0000 0000 0… = Reserved Bits: 0
…. …. …. .0.. = Include GT: False
…. …. …. ..0. = Include PC: False
…. …. …. …1 = Include SSN: True
Subsystem number (249)
Parameter Tag: Subsystem number (0x8003)
Parameter Length: 8
Reserved: 000000
Subsystem Number: 249
IPv4 address (10.1.1.191)
Parameter Tag: IPv4 address (0x8004)
Parameter Length: 8
IP Version 4 address: 10.1.1.191 (10.1.1.191)
Sequence control (1)
Parameter Tag: Sequence control (0x0116)
Parameter Length: 8
Sequence Control: 1
Source address
Parameter Tag: Source address (0x0102)
Parameter Length: 24
Routing Indicator: Route on SSN + IP Address (4)
Address Indicator
0000 0000 0000 0… = Reserved Bits: 0
…. …. …. .0.. = Include GT: False
…. …. …. ..0. = Include PC: False
…. …. …. …1 = Include SSN: True
Subsystem number (250)
Parameter Tag: Subsystem number (0x8003)
Parameter Length: 8
Reserved: 000000
Subsystem Number: 250
IPv4 address (10.1.1.204)
Parameter Tag: IPv4 address (0x8004)
Parameter Length: 8
IP Version 4 address: 10.1.1.204 (10.1.1.204)
SS7 hop counter (15)
Parameter Tag: SS7 hop counter (0x0101)
Parameter Length: 8
Reserved: 000000
SS7 Hop Counter: 15
Importance (5)
Parameter Tag: Importance (0x0113)
Parameter Length: 8
Reserved: 000000
Importance: 5
Data (SS7 message of 58 bytes)
Parameter Tag: Data (0x010b)
Parameter Length: 62
Data: 0001404035000003001c000260b6001d0002518000420022…
Padding: 0000
Data (58 bytes)
Data: 0001404035000003001c000260b6001d0002518000420022…
[Length: 58]
asked 18 Nov ‘11, 07:58
sifu
31●3●3●7
accept rate: 0%
edited 18 Nov ‘11, 10:28
Guy Harris ♦♦
17.4k●3●35●196
Thank you i had not set the pcap preferences, now i see the correct pcap packet