Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 5704] New: [NAS EPS] Fix display of Authentication (Failure) Parameter IEs

[bugzilla-daemon@xxxxxxxxxxxxx]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5704

           Summary: [NAS EPS] Fix display of Authentication (Failure)
                    Parameter IEs
           Product: Wireshark
           Version: SVN
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: Trivial
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: pascal.quantin@xxxxxxxxx


Created an attachment (id=5953)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=5953)
Fix Authentication (Failure) Parameter IE display

Build Information:
Version 1.5.1 (SVN Rev 35997 from /trunk)

Copyright 1998-2011 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with GTK+ 2.12.12, with GLib 2.16.6, with libpcap 1.0.0, with
libz 1.2.3.3, without POSIX capabilities, without libpcre, without SMI, without
c-ares, without ADNS, without Lua, without Python, with GnuTLS 2.4.2, with
Gcrypt 1.4.1, with MIT Kerberos, without GeoIP, without PortAudio, without
AirPcap.

Running on Linux 2.6.26-2-686-bigmem, with libpcap version 1.0.0, with libz
1.2.3.3, GnuTLS 2.4.2, Gcrypt 1.4.1.

Built using gcc 4.3.2.

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
The current source code assumes that the Authentication Parameter and
Authentication Failure Parameter IEs are UMTS only, whereas it's no more the
case with LTE.
The attached patch fix the display so as to reflect this change in the
specification. Once applied, the following NAS EPS Authentication Failure
message will be displayed as:
07 5c 15 30 0e e4 a9 88 06 da 8a 0f 91 f2 3a 0f a2 7b 96
Non-Access-Stratum (NAS)PDU
    0000 .... = Security header type: Plain NAS message, not security protected
(0)
    .... 0111 = Protocol discriminator: EPS mobility management messages (7)
    NAS EPS Mobility Management Message Type: Authentication failure (0x5c)
    EMM cause
        Cause: Synch failure (21)
    Authentication Failure Parameter (UMTS and EPS authentication challenge)
        Element ID: 48
        Length: 14
        AUTS value: e4a98806da8a0f91f23a0fa27b96
            SQN_MS xor AK: e4a98806da8a
            MAC-S: 0f91f23a0fa27b96

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.