Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 3495] New: New protocols: UMTS RLC (ETSI TS 125 322), UMTS

Date: Wed, 27 May 2009 11:12:12 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3495

           Summary: New protocols: UMTS RLC (ETSI TS 125 322), UMTS MAC
                    (ETSI TS 125 321)
           Product: Wireshark
           Version: SVN
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: Enhancement
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: witek@xxxxxx


Build Information:
wireshark 1.0.3

Copyright 1998-2008 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.14.4, with GLib 2.18.2, with libpcap 0.9.8, with libz
1.2.3.3, with POSIX capabilities (Linux), with libpcre 7.6, without SMI, with
ADNS, with Lua 5.1, with GnuTLS 2.4.1, with Gcrypt 1.4.1, with MIT Kerberos,
with PortAudio V19-devel (built Mar 12 2008), without AirPcap.

Running on Linux 2.6.27-11-generic, with libpcap version 0.9.8.

Built using gcc 4.3.2.

--
Hi community,

the attached patches add the following protocols to Wireshark: UMTS RLC (ETSI
TS 125 322), UMTS MAC (ETSI TS 125 321), FP Hint and Meta (the latter two are
customly defined protocols that add information that is required to correctly
decode UMTS FP, UMTS MAC and UMTS RLC data).

The patches have been created against the current SVN trunk (revision 28502).

Fuzz-Tests have been conducted on all protocols (I am not able to provide any
sample traces though... my apologies).

The dissectors have been written specifically with the IuB interface in mind
and all tests have been conducted with data from such an interface.

checkAPIs.pl test has been performed.

I hope that I have not overlooked anything while creating the patches. If
anything is missing or there's anything else that is required to get the code
accepted to the Wireshark SVN (cleanup, restructuring, ...), please inform me
so that I can provide whatever is missing.

In some detail, the changes are:

* packet-rlc.c/.h: added RLC protocol (FDD only, 7 Bit LI only, reassembly for
TM, UM and AM, but only very limited reordering capabilities)
* packet-umts_mac.c/.h: added UMTS MAC protocol (FDD only)
* packet-umts_fp.c: added code for further dissection of content (UMTS MAC)
* epan/frame_data.h: added 'subnum' to frame data to be able to distinguish
multiple FP transport blocks within a single packet (maybe this is not the
optimal solution? I was unable to come up with anything better)
* packet-fp_hint.c: customly defined protocol for adding information required
to correctly dissect UMTS FP frames to a packet (description of the protocol
can be published, if required)
* packet-meta.c/.h: add metadata to a packet (also provides some information
required to correctly dissect UMTS FP frames); a description of this protocol
has already been submitted to tcpdump-workers to be accepted as a DLT value,
but the request is still pending at the time of writing
* asn1/rrc/packet-rrc-template.c/.h: added code to actually do dissecting
* packet-erf.c: added code to correctly dissect AAL2 extension header (CID) and
removed setting of ATM type (so that lower-layer dissectors can set the type
correctly - see fp_hint)

Hopefully, these patches give a little bit back of all the times that Wireshark
made my life substantially easier :-) 

Again, if this code requires any reworking to be acceptable for you, please
tell me, and I will incorporate whatever changes are necessary.

Best regards,

Tobias


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.