Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 3974] wrong decoding of gtp.target identification

Date: Tue, 8 Sep 2009 08:44:07 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3974





--- Comment #5 from Anders Broman <anders.broman@xxxxxxxxxxxx>  2009-09-08 08:44:06 PDT ---
Hi,
The current Wireshark decoding IS wrong I agree but trying to fix it it still
decodes wrongly.
I have changed the code to use
PER encoded
TargetRNC-ID ::= SEQUENCE {
        lAI                             LAI,
        rAC                             RAC             OPTIONAL,
        rNC-ID                          RNC-ID,
        iE-Extensions                   ProtocolExtensionContainer {
{TargetRNC-ID-ExtIEs} } OPTIONAL
}

The Target identification ia octets are:
0000   8a 00 08 64 f0 00 a8 21 00 01 91                 ...d...!...

       8a        = 138 type
          00 08  = Length
The rest is Target RNC-ID
64 f0 00 a8 21 00 01 91                 ...d...!...
If encoded as 3GPP TS 25.413 that should be encoded in ASN1 PER right?
Then there is some ASN1 junk before PLMNidentity
With my patch
pLMNidentity: F000A8
0000   f0 00 a8                                         ...

Even if PLMId was "directly coded" the bytes should have been
64 00 f0 not 64 f0 00 a8 right?

Should the byte sequence be:
a8 64 00 f0 ???

Regards
Anders


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.