Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-dev: Re: [Wireshark-dev] [PATCH] UMTS Frame Protocol: more K12/K15 support, Spare Extension fields

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: Kriang Lerdsuwanakij <lerdsuwa@xxxxxxxxxxxxxxxxxxxxx>
Date: Sat, 05 May 2007 00:15:01 +0700

Martin Mathieson wrote:


One of the reasons I hadn't added Spare Extension before if that I've never seen it appear in frames in practice, and it sounds as though you had to fake it in order to test your patch? It'll be good to have it for completeness though! Do you happen to know of any equipment that does write out Spare Extension bytes?

I think this Spare Extension is useful to detect when there is a mismatch between the version of FP assumed by dissector and the version actually captured. Looking at Release 7 specification, for example, there is a new field Ext. Propagation Delay added to RACH DATA FRAME (TS 25.425 Figure 9). Using Release 6 dissector this should show up as Spare Extension. (This could be either mean that user hasn't upgrade Wireshark to latest version, or we haven't update FP dissector code to handle newer releases yet.) Such field is flagged as warning in expert information by the patch.

I am not aware of any equipment producing these right now. And yes, the test example
has been edited by hand. But it should be useful down the road.

Best regards

Kriang Lerdsuwanakij


  • References:
    • [Wireshark-dev] [PATCH] UMTS Frame Protocol: more K12/K15 support, Spare Extension fields
      • From: Kriang Lerdsuwanakij
    • Re: [Wireshark-dev] [PATCH] UMTS Frame Protocol: more K12/K15 support, Spare Extension fields
      • From: Martin Mathieson
  • Prev by Date: Re: [Wireshark-dev] Problems in display of RANAP messages
  • Next by Date: [Wireshark-dev] Extending IO Graphs
  • Previous by thread: Re: [Wireshark-dev] [PATCH] UMTS Frame Protocol: more K12/K15 support, Spare Extension fields
  • Next by thread: Re: [Wireshark-dev] Patch Netflow v9 to decode Netflow options, and other fixes
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation