This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

3GPP PCAP over SUA (SS7 SCCP-User Adaptation Layer)

0

Hi!

I am using wire shark version 1.4.6 and i am trying to send encoded PCAP (Positioning Calculation Application Part) packet (POSITION INITIATION REQUEST message) over SUA (SS7 SCCP-User Adaptation Layer) between a Radio Network Controller (RNC) and the Stand-Alone SMLC (SAS) accordance with 3GPP standart. But when i send it wireshark is unable to recognize the PCAP protocol and it displays: Protocol is SUA (RFC 3868) and info is CORE. However PCAP packet is correctly decoded.

Could some one please help me on this or have a SUA trace whith PCAP message?

Thanks.

No.     Time        Source                Destination           Protocol Info
    323 46.555464   10.1.1.204            10.1.1.191            SUA (RFC 3868) CORE

Stream Control Transmission Protocol, Src Port: 40000 (40000), Dst Port: 20000 (20000) Source port: 40000 Destination port: 20000 Verification tag: 0x3f59bad4 Checksum: 0x1f9809b6 (not verified) DATA chunk(unordered, complete segment, TSN: 1527587857, SID: 0, SSN: 0, PPID: 4, payload length: 168 bytes) Chunk type: DATA (0) 0… …. = Bit: Stop processing of the packet .0.. …. = Bit: Do not report Chunk flags: 0x07 …. …1 = E-Bit: Last segment …. ..1. = B-Bit: First segment …. .1.. = U-Bit: Unordered delivery …. 0… = I-Bit: Possibly delay SACK Chunk length: 184 TSN: 1527587857 Stream Identifier: 0x0000 Stream sequence number: 0 Payload protocol identifier: SUA (4) SS7 SCCP-User Adaptation Layer Version: Release 1 (1) Reserved: 00 Message Class: Connection-Oriented messages (8) Message Type: Connection Request (CORE) (1) Message Length: 168 Routing context (1 context) Parameter Tag: Routing context (0x0006) Parameter Length: 8 Routing context: 1 Protocol class (2) Parameter Tag: Protocol class (0x0115) Parameter Length: 8 Reserved: 000000 Protocol Class 0… …. = Return On Error Bit: No Special Options .000 0010 = Protocol Class: 2 Source reference number (1) Parameter Tag: Source reference number (0x0104) Parameter Length: 8 Source Reference Number: 1 Destination address Parameter Tag: Destination address (0x0103) Parameter Length: 24 Routing Indicator: Route on SSN + IP Address (4) Address Indicator 0000 0000 0000 0… = Reserved Bits: 0 …. …. …. .0.. = Include GT: False …. …. …. ..0. = Include PC: False …. …. …. …1 = Include SSN: True Subsystem number (249) Parameter Tag: Subsystem number (0x8003) Parameter Length: 8 Reserved: 000000 Subsystem Number: 249 IPv4 address (10.1.1.191) Parameter Tag: IPv4 address (0x8004) Parameter Length: 8 IP Version 4 address: 10.1.1.191 (10.1.1.191) Sequence control (1) Parameter Tag: Sequence control (0x0116) Parameter Length: 8 Sequence Control: 1 Source address Parameter Tag: Source address (0x0102) Parameter Length: 24 Routing Indicator: Route on SSN + IP Address (4) Address Indicator 0000 0000 0000 0… = Reserved Bits: 0 …. …. …. .0.. = Include GT: False …. …. …. ..0. = Include PC: False …. …. …. …1 = Include SSN: True Subsystem number (250) Parameter Tag: Subsystem number (0x8003) Parameter Length: 8 Reserved: 000000 Subsystem Number: 250 IPv4 address (10.1.1.204) Parameter Tag: IPv4 address (0x8004) Parameter Length: 8 IP Version 4 address: 10.1.1.204 (10.1.1.204) SS7 hop counter (15) Parameter Tag: SS7 hop counter (0x0101) Parameter Length: 8 Reserved: 000000 SS7 Hop Counter: 15 Importance (5) Parameter Tag: Importance (0x0113) Parameter Length: 8 Reserved: 000000 Importance: 5 Data (SS7 message of 58 bytes) Parameter Tag: Data (0x010b) Parameter Length: 62 Data: 0001404035000003001c000260b6001d0002518000420022… Padding: 0000 Data (58 bytes) Data: 0001404035000003001c000260b6001d0002518000420022… [Length: 58]

asked 18 Nov ‘11, 07:58

sifu's gravatar image

sifu
31337
accept rate: 0%

edited 18 Nov ‘11, 10:28

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196


One Answer:

0

Try setting the PCAP preference (Edit->Preferences->Protocols->PCAP) for the SSNs to 249 and/or 250.

answered 18 Nov '11, 11:39

JeffMorriss's gravatar image

JeffMorriss ♦
6.2k572
accept rate: 27%

Thank you i had not set the pcap preferences, now i see the correct pcap packet

(20 Nov '11, 23:09) sifu