Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: Re: [Wireshark-users] Fw: I am not able to decode FP messages.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: "Martin Mathieson" <martin.r.mathieson@xxxxxxxxxxxxxx>
Date: Tue, 7 Aug 2007 14:01:41 +0100

> Hi,
>
> I only want to decode RRC or FP message , I do not want to decode RLC and
> MAC layer messages.
> But in over case FP over UDP not on ATM.
>
> Please tell how to configure FP over UDP then RRC.
>

You won't be able to decode the FP messages without supplying the
dissector with at least some of the extra information stored in this
structure (see packet-umts_fp.h) and attaching it to the packet, as
the DCT2000 and K12 dissectors do.

We could maybe add preferences to the FP dissector to set default
values for some of these in the absence of complete configuration...

enum fp_interface_type
{
    IuB_Interface,
    IuR_Interface
};

typedef struct fp_info
{
    enum fp_interface_type iface_type;
    guint8  release;                     /* e.g. 99, 4, 5, 6 */
    guint16 release_year;                /* e.g. 2001 */
    guint8  release_month;               /* e.g. 12 for December */
    gboolean is_uplink;
    gint channel;                       /* see definitions above */
    guint8  dch_crc_present;            /* 0=No, 1=Yes, 2=Unknown */
    gint paging_indications;
    gint num_chans;
#define MAX_FP_CHANS  64
    gint chan_tf_size[MAX_FP_CHANS];
    gint chan_num_tbs[MAX_FP_CHANS];

#define MAX_EDCH_DDIS 16
    gint   no_ddi_entries;
    guint8 edch_ddi[MAX_EDCH_DDIS];
    guint  edch_macd_pdu_size[MAX_EDCH_DDIS];
} fp_info;


... but I don't think you'll have RRC directly over FP, you'll have
MAC and RLC.  If you don't care about displaying their details, you
still need to understand them to skip their headers properly and
reassemble their data.

Martin

  • Follow-Ups:
    • Re: [Wireshark-users] Fw: I am not able to decode FP messages.
      • From: vaibhav . agarwal
  • References:
    • Re: [Wireshark-users] Fw: I am not decode the Nbap andsscopmessages.
      • From: Martin Mathieson
    • Re: [Wireshark-users] Fw: I am not able to decode FP messages.
      • From: vaibhav . agarwal
  • Prev by Date: Re: [Wireshark-users] Fw: I am not able to decode FP messages.
  • Next by Date: Re: [Wireshark-users] HTTP not captured
  • Previous by thread: Re: [Wireshark-users] Fw: I am not able to decode FP messages.
  • Next by thread: Re: [Wireshark-users] Fw: I am not able to decode FP messages.
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation