Wireshark-bugs: [Wireshark-bugs] [Bug 13086] MSISDN not populated/decoded in JSON GTP-C decoding
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 03 Nov 2016 21:59:03 +0000

changed bug 13086


What Removed Added
Status UNCONFIRMED CONFIRMED
CC   pascal.quantin@gmail.com
Ever confirmed   1

Comment # 1 on bug 13086 from 
The issue is that e212.msidn is both a field with an associated value, and an
item with a subtree(for the e164.country_code field). But JSON does not allow
to define both at the same time (as far as I know).
As a workaround, I propose to put the value in the field, and create a new
entry with a suffix _tree for the sub items. FOr the attached packet, this
gives:

[
  {
    "_index": "packets-2016-11-03",
    "_type": "pcap_file",
    "_score": null,
    "_source": {
      "layers": {
        "frame": {
          "frame.encap_type": "1",
          "frame.time": "Feb 25, 2010 10:57:56.294807000 CET",
          "frame.offset_shift": "0.000000000",
          "frame.time_epoch": "1267091876.294807000",
          "frame.time_delta": "0.000000000",
          "frame.time_delta_displayed": "0.000000000",
          "frame.time_relative": "0.000000000",
          "frame.number": "1",
          "frame.len": "187",
          "frame.cap_len": "187",
          "frame.marked": "0",
          "frame.ignored": "0",
          "frame.protocols": "eth:ethertype:ip:udp:gtp:ipcp",
          "frame.coloring_rule.name": "UDP",
          "frame.coloring_rule.string": "udp"
        },
        "eth": {
          "eth.dst": "00:05:85:a6:54:5f",
          "eth.dst_tree": {
            "eth.dst_resolved": "JuniperN_a6:54:5f",
            "eth.addr": "00:05:85:a6:54:5f",
            "eth.addr_resolved": "JuniperN_a6:54:5f",
            "eth.lg": "0",
            "eth.ig": "0"
          },
          "eth.src": "00:1e:df:2d:82:8e",
          "eth.src_tree": {
            "eth.src_resolved": "MasterIn_2d:82:8e",
            "eth.addr": "00:1e:df:2d:82:8e",
            "eth.addr_resolved": "MasterIn_2d:82:8e",
            "eth.lg": "0",
            "eth.ig": "0"
          },
          "eth.type": "0x00000800"
        },
        "ip": {
          "ip.version": "4",
          "ip.hdr_len": "20",
          "ip.dsfield": "0x00000000",
          "ip.dsfield_tree": {
            "ip.dsfield.dscp": "0",
            "ip.dsfield.ecn": "0"
          },
          "ip.len": "173",
          "ip.id": "0x000013ae",
          "ip.flags": "0x00000002",
          "ip.flags_tree": {
            "ip.flags.rb": "0",
            "ip.flags.df": "1",
            "ip.flags.mf": "0"
          },
          "ip.frag_offset": "0",
          "ip.ttl": "63",
          "ip.proto": "17",
          "ip.checksum": "0x00003062",
          "ip.checksum.status": "2",
          "ip.src": "192.169.100.1",
          "ip.addr": "192.169.100.1",
          "ip.src_host": "192.169.100.1",
          "ip.host": "192.169.100.1",
          "ip.dst": "10.100.200.33",
          "ip.addr": "10.100.200.33",
          "ip.dst_host": "10.100.200.33",
          "ip.host": "10.100.200.33",
          "Source GeoIP: United States": {
            "ip.geoip.src_country": "United States",
            "ip.geoip.country": "United States"
          },
          "Destination GeoIP: Unknown": ""
        },
        "udp": {
          "udp.srcport": "34273",
          "udp.dstport": "2123",
          "udp.port": "34273",
          "udp.port": "2123",
          "udp.length": "153",
          "udp.checksum": "0x0000c6b3",
          "udp.checksum.status": "2",
          "udp.stream": "0"
        },
        "gtp": {
          "gtp.flags": "0x00000032",
          "gtp.flags_tree": {
            "gtp.flags.version": "1",
            "gtp.flags.payload": "1",
            "gtp.flags.reserved": "0",
            "gtp.flags.e": "0",
            "gtp.flags.s": "1",
            "gtp.flags.pn": "0"
          },
          "gtp.message": "16",
          "gtp.length": "137",
          "gtp.teid": "0x00000000",
          "gtp.seq_number": "0x0000130b",
          "e212.imsi": "460004100000101",
          "e212.imsi_tree": {
            "e212.mcc": "460",
            "e212.mnc": "0"
          },
          "Routing Area Identity": {
            "e212.rai.mcc": "460",
            "e212.rai.mnc": "6",
            "gtp.lac": "65534",
            "gtp.rai_rac": "255"
          },
          "gtp.recovery": "176",
          "gtp.sel_mode": "1",
          "gtp.teid_data": "0x32f02bf9",
          "gtp.teid_cp": "0x32f02bf9",
          "NSAPI: 5": {
            "gtp.nsapi": "5"
          },
          "End user address (IETF\/IPv4)": {
            "gtp.length": "2",
            "gtp.user_addr_pdp_org": "1",
            "gtp.user_addr_pdp_type": "0x00000021"
          },
          "Access Point Name: eetest": {
            "gtp.apn_length": "7",
            "gtp.apn": "eetest"
          },
          "Protocol configuration options": {
            "gtp.length": "26",
            "gsm_a.gm.sm.link_dir": "0",
            "gsm_a.gm.sm.ext": "1",
            "gsm_a.gm.configuration_protocol": "0",
            "gsm_a.gm.sm.pco_pid": "32801",
            "gsm_a.gm.sm.pco_pid_tree": {
              "gsm_a.gm.sm.pco.length": "0x00000016",
              "ipcp": {
                "ppp.code": "1",
                "ppp.identifier": "1",
                "ppp.length": "22",
                "Options: (18 bytes), IP address, Primary DNS Server IP
Address, Secondary DNS Server IP Address": {
                  "IP address: 0.0.0.0": {
                    "ipcp.opt.type": "3",
                    "ipcp.opt.length": "6",
                    "ipcp.opt.ip_address": "0.0.0.0"
                  },
                  "Primary DNS Server IP Address: 0.0.0.0": {
                    "ipcp.opt.type": "129",
                    "ipcp.opt.length": "6",
                    "ipcp.opt.pri_dns_address": "0.0.0.0"
                  },
                  "Secondary DNS Server IP Address: 0.0.0.0": {
                    "ipcp.opt.type": "131",
                    "ipcp.opt.length": "6",
                    "ipcp.opt.sec_dns_address": "0.0.0.0"
                  }
                }
              }
            }
          },
          "GSN address : 192.169.100.1": {
            "gtp.gsn_address_length": "4",
            "gtp.gsn_ipv4": "192.169.100.1"
          },
          "GSN address : 192.169.100.1": {
            "gtp.gsn_address_length": "4",
            "gtp.gsn_ipv4": "192.169.100.1"
          },
          "MS international PSTN\/ISDN number": {
            "gtp.length": "8",
            "gsm_map.extension": "1",
            "gsm_map.nature_of_number": "1",
            "gsm_map.number_plan": "1",
            "e164.msisdn": "8615221000101",
            "e164.msisdn_tree": {
              "e164.country_code": "86"
            }
          },
          "Quality of Service": {
            "gtp.qos_umts_length": "12",
            "gtp.qos_al_ret_priority": "2",
            "gtp.qos_spare1": "0",
            "gtp.qos_delay": "3",
            "gtp.qos_reliability": "3",
            "gtp.qos_peak": "4",
            "gtp.qos_spare2": "0",
            "gtp.qos_precedence": "2",
            "gtp.qos_spare3": "0",
            "gtp.qos_mean": "31",
            "gtp.qos_traf_class": "3",
            "gtp.qos_del_order": "2",
            "gtp.qos_del_err_sdu": "3",
            "gtp.qos_max_sdu_size": "1400",
            "gtp.qos_max_ul": "64",
            "gtp.qos_max_dl": "64",
            "gtp.qos_res_ber": "7",
            "gtp.qos_sdu_err_ratio": "4",
            "gtp.qos_trans_delay": "18",
            "gtp.qos_traf_handl_prio": "3",
            "gtp.qos_guar_ul": "64",
            "gtp.qos_guar_dl": "64"
          },
          "RAT Type: GERAN": {
            "gtp.ext_length": "1",
            "gtp.ext_rat_type": "2"
          },
          "MS Time Zone: GMT + 8 hours 0 minutes": {
            "gtp.ext_length": "2",
            "gtp.timezone": "32",
            "gtp.timezone_dst": "0"
          },
          "Private Extension : Ericsson AB - Packet Core Networks (10923)": {
            "gtp.ext_length": "5",
            "gtp.ext_id": "10923",
            "gtp.ext_val": "02:01:03"
          }
        }
      }
    }
  }]


Would it be OK for everybody?

You are receiving this mail because:
  • You are watching all bug changes.