3 ISUP messages in one packet

asked 2019-03-21 08:12:20 +0000

Maruf gravatar image

updated 2019-03-21 09:03:21 +0000

grahamb gravatar image


This packet was captured with Netscout. Wireshark shows 3 ISUP messages in one packet. The source is shown as Rockford MSC but only REL is from that MSC, RLC and CPG are from other MSCs. Sometimes there are even more messages of this sort in one packet. Is this a Wireshark bug?

No.     Time                       Source        Destination      Protocol   Length 
      1 2019-03-19 10:29:12.321244 Rockford_MSC  Schaumburg_MGCF  ISUP(ANSI) 250    RLC (CIC 5410) CPG (CIC 1655) REL (CIC 2135)
edit retag flag offensive close merge delete


Providing a link to the capture would help immensely with diagnosis.

grahamb gravatar imagegrahamb ( 2019-03-21 09:03:45 +0000 )edit

Agreed. Or at least a dump of the decode.

I assume the Source & Destination fields are (resolved) IP addresses? Or are they a different field (like OPC and DPC)? I'm wondering if the source (IP) is actually an STP which has bundled these messages together.

JeffMorriss gravatar imageJeffMorriss ( 2019-03-22 15:08:21 +0000 )edit