3 ISUP messages in one packet

  • retag add tags

Hi.

This packet was captured with Netscout. Wireshark shows 3 ISUP messages in one packet. The source is shown as Rockford MSC but only REL is from that MSC, RLC and CPG are from other MSCs. Sometimes there are even more messages of this sort in one packet. Is this a Wireshark bug?

No.     Time                       Source        Destination      Protocol   Length 
      1 2019-03-19 10:29:12.321244 Rockford_MSC  Schaumburg_MGCF  ISUP(ANSI) 250    RLC (CIC 5410) CPG (CIC 1655) REL (CIC 2135)
Maruf's avatar
1
Maruf
asked 2019-03-21 08:12:20 +0000
grahamb's avatar
23.8k
grahamb
updated 2019-03-21 09:03:21 +0000
edit flag offensive 0 remove flag close merge delete

Comments

Providing a link to the capture would help immensely with diagnosis.

grahamb's avatar grahamb (2019-03-21 09:03:45 +0000) edit
more
  • delete

Agreed. Or at least a dump of the decode.

I assume the Source & Destination fields are (resolved) IP addresses? Or are they a different field (like OPC and DPC)? I'm wondering if the source (IP) is actually an STP which has bundled these messages together.

JeffMorriss's avatar JeffMorriss (2019-03-22 15:08:21 +0000) edit
more
  • delete
add a comment see more comments