https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5264
Summary: [NAS EPS] Add dissection of EPS network feature
support IE
Product: Wireshark
Version: 1.5.x (Experimental)
Platform: Other
OS/Version: All
Status: NEW
Severity: Enhancement
Priority: Low
Component: Wireshark
AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
ReportedBy: pascal.quantin@xxxxxxxxx
Pascal Quantin <pascal.quantin@xxxxxxxxx> changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #5230| |review_for_checkin?
Flag| |
Created an attachment (id=5230)
--> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=5230)
EPS network feature support IE dissection
Build Information:
Version 1.5.0 (SVN Rev 34278 from /trunk)
Copyright 1998-2010 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled with GTK+ 2.12.12, (32-bit) with GLib 2.16.6, with libpcap 1.0.0, with
libz 1.2.3.3, without POSIX capabilities, without libpcre, without SMI, without
c-ares, without ADNS, without Lua, without Python, with GnuTLS 2.4.2, with
Gcrypt 1.4.1, with MIT Kerberos, without GeoIP, without PortAudio, without
AirPcap.
Running on Linux 2.6.26-2-686-bigmem, with libpcap version 1.0.0, with libz
1.2.3.3, GnuTLS 2.4.2, Gcrypt 1.4.1.
Built using gcc 4.3.2.
Wireshark is Open Source Software released under the GNU General Public
License.
Check the man page and http://www.wireshark.org for more information.
--
The attached patch adds the ability to dissect the EPS network feature support
IE as specified in 3GPP 24.301 release 9.4.0 chapter 9.9.3.12a.
Here is a decoding example:
27 5b fa 95 48 01 07 42 01 e0 06 00 00 f1 10 00 01 00 18 52 01 c1 09 09 40 40
40 40 00 00 00 00 04 03 61 70 6e 05 01 01 02 01 01 50 0b f6 00 f1 10 80 01 01
12 34 56 78 64 01 01
Non-Access-Stratum (NAS)PDU
0010 .... = Security header type: Integrity protected and ciphered (2)
.... 0111 = Protocol discriminator: EPS mobility management messages (7)
Message authentication code: 0x5bfa9548
Sequence number: 1
0000 .... = Security header type: Plain NAS message, not security protected
(0)
.... 0111 = Protocol discriminator: EPS mobility management messages (7)
NAS EPS Mobility Management Message Type: Attach accept (0x42)
0000 .... = Spare half octet: 0
.... 0... = Spare bit(s): 0x00
.... .001 = Attach result: EPS only (1)
GPRS Timer: timer is deactivated
GPRS Timer: 0 min
111. .... = Unit: value indicates that the timer is deactivated (7)
...0 0000 = Timer value: 0
Tracking area identity list - TAI list
Length: 6
0... .... = Spare bit(s): 0x00
.00. .... = Type of list: list of TACs belonging to one PLMN, with
non-consecutive TAC values (0)
...0 0000 = Number of elements: 0 [+1 = 1 element(s)]
Mobile Country Code (MCC): Unknown (1)
Mobile Network Code (MNC): Unknown (01)
Tracking area code(TAC): 0x0001
ESM message container
Length: 24
ESM message container contents:
5201c109094040404000000000040361706e050101020101
0101 .... = EPS bearer identity: 0x05
.... 0010 = Protocol discriminator: EPS session management messages
(2)
Procedure transaction identity: 1
NAS EPS session management messages: Activate default EPS bearer
context request (0xc1)
EPS quality of service
Length: 9
Quality of Service Class Identifier (QCI): QCI 9 (9)
Maximum bit rate for uplink : 64 kbps
Maximum bit rate for downlink : 64 kbps
Guaranteed bit rate for uplink : 64 kbps
Guaranteed bit rate for downlink : 64 kbps
Use the value indicated by the maximum bit rate for uplink in
octet 4.
Use the value indicated by the maximum bit rate for downlink in
octet 5.
Use the value indicated by the Guaranteed bit rate for uplink
in octet 6.
Use the value indicated by the Guaranteed bit rate for downlink
in octet 7.
Access Point Name
Length: 4
APN: apn
PDN address
Length: 5
0000 0... = Spare bit(s): 0x00
PDN type: IPv4 (1)
PDN IPv4: 1.2.1.1 (1.2.1.1)
EPS mobile identity - GUTI
Element ID: 80
Length: 11
.... 0... = odd/even indic: 0
.... .110 = Type of identity: GUTI (6)
Mobile Country Code (MCC): Unknown (1)
Mobile Network Code (MNC): Unknown (01)
MME Group ID: 32769
MME Code: 1
M-TMSI: 0x12345678
EPS network feature support
Element ID: 100
Length: 1
000. .... = Spare bit(s): 0x00
...0 0... = CS-LCS: no information about support of location services
via CS domain is available (0)
.... .0.. = EPC-LCS: location services via EPC not supported
.... ..0. = EMC BS: emergency bearer services in S1 mode not supported
.... ...1 = IMS VoPS: IMS voice over PS session in S1 mode supported
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
