Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] [Wireshark-commits] rev 39384: /trunk/epan/dissectors/ /trun

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Wed, 12 Oct 2011 10:42:49 -0700
(Paging LTE experts here....)

On Oct 12, 2011, at 8:02 AM, wmeier@xxxxxxxxxxxxx wrote:

> http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=39384
> 
> User: wmeier
> Date: 2011/10/12 08:02 AM
> 
> Log:
> Fix a benign bug: Use correct proto_tree_add_item() encoding arg.

At least as I read RFC 3095:

   UOR-2-TS

     0   1   2   3   4   5   6   7
   +---+---+---+---+---+---+---+---+
   | 1   1   0 |        TS         |
   +===+===+===+===+===+===+===+===+
   |T=1| M |          SN           |
   +---+---+---+---+---+---+---+---+
   | X |            CRC            |
   +---+---+---+---+---+---+---+---+

neither the old code nor the new code are correct - the "M" bit is in the octet after the TS field.

I don't see anything obvious in 3GPP TS 36.323 itself that says the format is different; does something in a later RFC specify something different?