Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 2618] New: GPRS Tunnel Protocoll GTP Version 1 does not decode MS Time Zone Pa

[bugzilla-daemon@xxxxxxxxxxxxx]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2618

           Summary: GPRS Tunnel Protocoll GTP Version 1 does not decode MS
                    Time Zone Parameter
           Product: Wireshark
           Version: 1.0.0
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Enhancement
          Priority: Medium
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: frank.maerz@xxxxxxxxxxx
                CC: anders.broman@xxxxxxxxxxxx


Created an attachment (id=1874)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=1874)
Example Create PDP Context Request with includes MS Time Zone Parameter

Build Information:
Problem see on all version up to 1.0.0

>>wireshark -v
wireshark 0.99.7
Copyright 1998-2007 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors. This
is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.4.13, with GLib 2.4.7, with libpcap 0.8.3, with libz
1.2.1.2, without libpcre, without SMI, without ADNS, without Lua, without
GnuTLS, without Gcrypt, with MIT Kerberos, without PortAudio, without AirPcap.
NOTE: this build doesn't support the "matches" operator for Wireshark filter
syntax.
Running on Linux 2.6.9-42.0.10.ELsmp, with libpcap version 0.8.3.
Built using gcc 3.4.6 20060404 (Red Hat 3.4.6-3)

--
Mobile Operators start using additional optimal parameters in the GTP version 1
protocol. Wireshark fails to decode the parameter MS Time Zone. Can somebody
with coding knowledge please updated the GTP module for Wireshark. 

Details can be found in 3GPP 29.060.

7.7.52  MS Time Zone
The ' MS Time Zone' IE is used to indicate the offset between universal time
and local time in steps of 15 minutes of where the MS currently resides. The
'Time Zone' field uses the same format as the 'Time Zone' IE in 3GPP TS 24.008
[5].

                Bits

        Octets  8       7       6       5       4       3       2       1       
        1       Type = 153 (Decimal)    
        2-3     Length  
        4       Time Zone       
        5       Spare   Spare   Spare   Spare   Spare   Spare   Daylight Saving
Time    

Figure 7.7.52.1: MS Time Zone IE
Table 7.7.52A Possible values for the "Daylight Saving Time" field and their
meanings.
Daylight Saving Time    Value (binary)
        Bit 2   Bit 1
No adjustment for Daylight Saving Time  0       0
+1 hour adjustment for Daylight Saving Time     0       1
+2 hours adjustment for Daylight Saving Time    1       0
Reserved        1       1

I will attach a pcap file with a single GTP Created PDP Context Request.

GPRS Tunneling Protocol
    Flags: 0x32
    Message Type: Create PDP context request (0x10)
    Length: 151
    TEID: 0x00000000
    Sequence number: 0x1b8b
    N-PDU Number: 0x00
    Next extension header type: 0x00
    [--- end of GTP header, beginning of extension headers ---]
    IMSI: 234308256005467
    Selection mode: MS or network provided APN, subscribed verified (0)
    TEID Data I: 0x3000852f
    TEID Control Plane: 0x809e7162
    NSAPI: 5
    Charging characteristics: 2048
    End user address (IETF/IPv4)
    Access Point Name
    Protocol configuration options
    GSN address : 193.254.140.17
    GSN address : 193.254.140.18
    MSISDN: +447932561023
    Quality of Service
    RAT Type
    User Location Information
    MS Time Zone : 
        Length: 2
        Data not decoded yet
    IMEI(SV)
    IMEI(SV): 3547930001142800

0000  00 08 7d ae d4 00 00 13 21 6b cc 50 08 00 45 00   ..}.....!k.P..E.
0010  00 bb ef 7a 00 00 f8 11 b9 b8 c1 fe 8c 11 95 fe   ...z............
0020  34 f0 08 4b 08 4b 00 a7 3d 44 32 10 00 97 00 00   4..K.K..=D2.....
0030  00 00 1b 8b 00 00 02 32 34 80 52 06 50 64 f7 0f   .......24.R.Pd..
0040  fc 10 30 00 85 2f 11 80 9e 71 62 14 05 1a 08 00   ..0../...qb.....
0050  80 00 02 f1 21 83 00 14 07 47 45 4e 45 52 41 4c   ....!....GENERAL
0060  08 54 2d 4d 4f 42 49 4c 45 02 55 4b 84 00 14 80   .T-MOBILE.UK....
0070  80 21 10 01 00 00 10 81 06 00 00 00 00 83 06 00   .!..............
0080  00 00 00 85 00 04 c1 fe 8c 11 85 00 04 c1 fe 8c   ................
0090  12 86 00 07 91 44 97 23 65 01 32 87 00 0c 01 0b   .....D.#e.2.....
00a0  61 1f 71 96 40 68 74 01 00 00 97 00 01 01 98 00   a.q.@ht.........
00b0  08 01 62 f2 10 11 f8 c7 15 99 00 02 40 01 9a 00   ..b.........@...
00c0  08 53 74 39 00 10 41 82 00                        .St9..A..


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.