Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 5264] New: [NAS EPS] Add dissection of EPS network feature support IE

[bugzilla-daemon@xxxxxxxxxxxxx]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5264

           Summary: [NAS EPS] Add dissection of EPS network feature
                    support IE
           Product: Wireshark
           Version: 1.5.x (Experimental)
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: Enhancement
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: pascal.quantin@xxxxxxxxx


Pascal Quantin <pascal.quantin@xxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #5230|                            |review_for_checkin?
               Flag|                            |

Created an attachment (id=5230)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=5230)
EPS network feature support IE dissection

Build Information:
Version 1.5.0 (SVN Rev 34278 from /trunk)

Copyright 1998-2010 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.12.12, (32-bit) with GLib 2.16.6, with libpcap 1.0.0, with
libz 1.2.3.3, without POSIX capabilities, without libpcre, without SMI, without
c-ares, without ADNS, without Lua, without Python, with GnuTLS 2.4.2, with
Gcrypt 1.4.1, with MIT Kerberos, without GeoIP, without PortAudio, without
AirPcap.

Running on Linux 2.6.26-2-686-bigmem, with libpcap version 1.0.0, with libz
1.2.3.3, GnuTLS 2.4.2, Gcrypt 1.4.1.

Built using gcc 4.3.2.

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
The attached patch adds the ability to dissect the EPS network feature support
IE as specified in 3GPP 24.301 release 9.4.0 chapter 9.9.3.12a.
Here is a decoding example:
27 5b fa 95 48 01 07 42 01 e0 06 00 00 f1 10 00 01 00 18 52 01 c1 09 09 40 40
40 40 00 00 00 00 04 03 61 70 6e 05 01 01 02 01 01 50 0b f6 00 f1 10 80 01 01
12 34 56 78 64 01 01
Non-Access-Stratum (NAS)PDU
    0010 .... = Security header type: Integrity protected and ciphered (2)
    .... 0111 = Protocol discriminator: EPS mobility management messages (7)
    Message authentication code: 0x5bfa9548
    Sequence number: 1
    0000 .... = Security header type: Plain NAS message, not security protected
(0)
    .... 0111 = Protocol discriminator: EPS mobility management messages (7)
    NAS EPS Mobility Management Message Type: Attach accept (0x42)
    0000 .... = Spare half octet: 0
    .... 0... = Spare bit(s): 0x00
    .... .001 = Attach result: EPS only (1)
    GPRS Timer: timer is deactivated
    GPRS Timer: 0 min
        111. .... = Unit: value indicates that the timer is deactivated (7)
        ...0 0000 = Timer value: 0
    Tracking area identity list - TAI list
        Length: 6
        0... .... = Spare bit(s): 0x00
        .00. .... = Type of list: list of TACs belonging to one PLMN, with
non-consecutive TAC values (0)
        ...0 0000 = Number of elements: 0 [+1 = 1 element(s)]
        Mobile Country Code (MCC): Unknown (1)
        Mobile Network Code (MNC): Unknown (01)
        Tracking area code(TAC): 0x0001
    ESM message container
        Length: 24
        ESM message container contents:
5201c109094040404000000000040361706e050101020101
            0101 .... = EPS bearer identity: 0x05
            .... 0010 = Protocol discriminator: EPS session management messages
(2)
            Procedure transaction identity: 1
            NAS EPS session management messages: Activate default EPS bearer
context request (0xc1)
            EPS quality of service
                Length: 9
                Quality of Service Class Identifier (QCI): QCI 9 (9)
                Maximum bit rate for uplink : 64 kbps
                Maximum bit rate for downlink : 64 kbps
                Guaranteed bit rate for uplink : 64 kbps
                Guaranteed bit rate for downlink : 64 kbps
                Use the value indicated by the maximum bit rate for uplink in
octet 4.
                Use the value indicated by the maximum bit rate for downlink in
octet 5.
                Use the value indicated by the Guaranteed bit rate for uplink
in octet 6.
                Use the value indicated by the Guaranteed bit rate for downlink
in octet 7.
            Access Point Name
                Length: 4
                APN: apn 
            PDN address
                Length: 5
                0000 0... = Spare bit(s): 0x00
                PDN type: IPv4 (1)
                PDN IPv4: 1.2.1.1 (1.2.1.1)
    EPS mobile identity - GUTI
        Element ID: 80
        Length: 11
        .... 0... = odd/even indic: 0
        .... .110 = Type of identity: GUTI (6)
        Mobile Country Code (MCC): Unknown (1)
        Mobile Network Code (MNC): Unknown (01)
        MME Group ID: 32769
        MME Code: 1
        M-TMSI: 0x12345678
    EPS network feature support
        Element ID: 100
        Length: 1
        000. .... = Spare bit(s): 0x00
        ...0 0... = CS-LCS: no information about support of location services
via CS domain is available (0)
        .... .0.. = EPC-LCS: location services via EPC not supported
        .... ..0. = EMC BS: emergency bearer services in S1 mode not supported
        .... ...1 = IMS VoPS: IMS voice over PS session in S1 mode supported

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.