Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 5304] New: [NAS EPS] Enhance dissection of APN-AMBR IE

[bugzilla-daemon@xxxxxxxxxxxxx]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5304

           Summary: [NAS EPS] Enhance dissection of APN-AMBR IE
           Product: Wireshark
           Version: SVN
          Platform: Other
        OS/Version: Windows XP
            Status: NEW
          Severity: Minor
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: pascal.quantin@xxxxxxxxx


Pascal Quantin <pascal.quantin@xxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #5317|                            |review_for_checkin?
               Flag|                            |

Created an attachment (id=5317)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=5317)
APN-AMBR dissection enhancement

Build Information:
Version 1.5.0 (SVN Rev 34529 from /trunk)

Copyright 1998-2010 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.16.6, (32-bit) with GLib 2.24.2, with WinPcap (version
unknown), with libz 1.2.3, without POSIX capabilities, without libpcre, with
SMI
0.4.8, with c-ares 1.7.1, with Lua 5.1, without Python, with GnuTLS 2.8.5, with
Gcrypt 1.4.5, with MIT Kerberos, with GeoIP, with PortAudio V19-devel (built
Oct
14 2010), with AirPcap.

Running on Windows XP Service Pack 3, build 2600, with WinPcap version 4.1.2
(packet.dll version 4.1.0.2001), based on libpcap version 1.0 branch 1_0_rel0b
(20091008), GnuTLS 2.8.5, Gcrypt 1.4.5, without AirPcap.

Built using Microsoft Visual C++ 9.0 build 30729

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
The attached patch enhances the dissection of the APN-AMBR IE by displaying the
total APN-AMBR as specified in 3GPP 24.301 chapter 9.9.4.2.

Here is an example of the output once applied:
Non-Access-Stratum (NAS)PDU
    0000 .... = Security header type: Plain NAS message, not security protected
(0)
    .... 0111 = Protocol discriminator: EPS mobility management messages (7)
    NAS EPS Mobility Management Message Type: Attach accept (0x42)
    0000 .... = Spare half octet: 0
    .... 0... = Spare bit(s): 0x00
    .... .001 = Attach result: EPS only (1)
    GPRS Timer: 10 sec
        000. .... = Unit: value is incremented in multiples of 2 seconds (0)
        ...0 0101 = Timer value: 5
    Tracking area identity list - TAI list
        Length: 6
        0... .... = Spare bit(s): 0x00
        .01. .... = Type of list: list of TACs belonging to one PLMN, with
consecutive TAC values (1)
        ...0 0000 = Number of elements: 0 [+1 = 1 element(s)]
        Mobile Country Code (MCC): Unknown (588)
        Mobile Network Code (MNC): Unknown (71)
        Tracking area code(TAC): 0x007b
    ESM message container
        Length: 87
        ESM message container contents:
5201c105070000000022046767736e056e6f6b696103636f...
            0101 .... = EPS bearer identity: 0x05
            .... 0010 = Protocol discriminator: EPS session management messages
(2)
            Procedure transaction identity: 1
            NAS EPS session management messages: Activate default EPS bearer
context request (0xc1)
            EPS quality of service
                Length: 5
                Quality of Service Class Identifier (QCI): QCI 7 (7)
                UE->NW Subscribed maximum bit rate for uplink/ NW->UE Reserved
                UE->NW Subscribed maximum bit rate for downlink/ NW->UE
Reserved
                Guaranteed bit rate for uplink : 0 kbps
                Guaranteed bit rate for downlink : 0 kbps
            Access Point Name
                Length: 34
                APN: ggsn.nokia.com.mnc071.mcc588.gprs
            PDN address
                Length: 5
                0000 0... = Spare bit(s): 0x00
                PDN type: IPv4 (1)
                PDN IPv4: 10.106.208.114 (10.106.208.114)
            APN aggregate maximum bit rate
                Element ID: 94
                Length: 6
                APN-AMBR for downlink : 8640 kbps
                APN-AMBR for uplink : 8640 kbps
                APN-AMBR for downlink (extended) : 64 Mbps
                APN-AMBR for uplink (extended) : 48 Mbps
                APN-AMBR for downlink (extended-2) : 39936 Mbps
                Total APN-AMBR for downlink: 40008.640 Mbps
                APN-AMBR for uplink (extended-2) : 29952 Mbps
                Total APN-AMBR for uplink : 30008.640 Mbps
            Protocol Configuration Options
                Element ID: 39
                Length: 27
                1... .... = Ext: 0x01
                Configuration Protocol: PPP(0)
                Protocol: IP Control Protocol (32801)
                Length: 0x0a (10)
                PPP IP Control Protocol
                    Code: Configuration Ack(0x02)
                    Identifier: 0x00
                    Length: 10
                    Options: (6 bytes)
                        Primary DNS server IP address: 172.28.30.48
                Protocol: IP Control Protocol (32801)
                Length: 0x0a (10)
                PPP IP Control Protocol
                    Code: Configuration Ack(0x02)
                    Identifier: 0x00
                    Length: 10
                    Options: (6 bytes)
                        Secondary DNS server IP address: 172.28.30.49
    EPS mobile identity - GUTI
        Element ID: 80
        Length: 11
        .... 0... = odd/even indic: 0
        .... .110 = Type of identity: GUTI (6)
        Mobile Country Code (MCC): Unknown (588)
        Mobile Network Code (MNC): Unknown (71)
        MME Group ID: 100
        MME Code: 255
        M-TMSI: 0x00000002
    GPRS Timer - T3402 value
        Element ID: 23
        GPRS Timer: 12 min
            001. .... = Unit: value is incremented in multiples of 1 minute (1)
            ...0 1100 = Timer value: 12
    GPRS Timer - T3423 value
        Element ID: 89
        GPRS Timer: 54 min
            010. .... = Unit: value is incremented in multiples of decihours
(2)
            ...0 1001 = Timer value: 9

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.