Wireshark · Wireshark-users: Re: [Wireshark-users] 5G NR-RRC dissector issue

[Anders Broman <anders.broman@xxxxxxxxxxxx>]

Hi,

> I tried MAC and PDCP over UDP and it worked

That’s because someone invented a pseudo protocol to transport RRC over UDP and Wireshark has the ability to dissect that protocol As far as I know nothing similar

Exists for NR-RRC. But I presume you have some program producing the NR-RRC over UDP you could change that program to use Exported PDU otherwise you

Would have to write your own dissector to dissect your NR-RRC enveloped in UDP packet.

Best regards

Anders

 

 

From: Keval Malde <kevalmalde@xxxxxxxxxxxxx>
Sent: den 25 oktober 2019 12:18
To: Community support list for Wireshark <wireshark-users@xxxxxxxxxxxxx>
Cc: Anders Broman <anders.broman@xxxxxxxxxxxx>; pascal@xxxxxxxxxxxxx
Subject: Re: [Wireshark-users] 5G NR-RRC dissector issue

 

Hello Anders, 

 

The method which you describe is working perfectly ( for Wireshark version 3.1.0 ), I want to know why RRC dissector is not called when I transmit the packet over UDP, earlier I tried MAC and PDCP over UDP and it worked. Is there any method to decode RRC message over UDP as I want to test 5G NR RRC other messages also.

Thanks for the help

 

On Fri, Oct 25, 2019 at 1:05 PM Anders Broman via Wireshark-users <wireshark-users@xxxxxxxxxxxxx> wrote:

Hi,

The NR-RRC messages has to be dissected by calling dissector by name. Currently “MIB” is not handled but I have amended the code to expose it.

Instead of building a UDP packet with the MIB Octets as data you can create an “Exported PDU” by using text2pcap

text2pcap.exe -l 252 MIB.txt mib.pcapng

 

The code change can be followed here https://code.wireshark.org/review/#/c/34852/

Dissection result:

Regards

Anders

 

 

From: Wireshark-users <wireshark-users-bounces@xxxxxxxxxxxxx> On Behalf Of Keval Malde
Sent: den 25 oktober 2019 04:24
To: Community support list for Wireshark <wireshark-users@xxxxxxxxxxxxx>
Subject: Re: [Wireshark-users] 5G NR-RRC dissector issue

 

No In wireshark there is no such seperate NR RRC over UDP option. But then if not UDP then how am I supposed to send and receive packet ?

 

On Fri, 25 Oct, 2019, 2:05 AM Guy Harris, <guy@xxxxxxxxxxxx> wrote:

On Oct 24, 2019, at 11:29 AM, Keval Malde <kevalmalde@xxxxxxxxxxxxx> wrote:

> I am trying to dissect 5G NR RRC MIB paket but it is not working, any possible help would be appreciated. Please find the attachment below.

What is the payload of that UDP packet supposed to be?

Is there some "NR RRC over UDP protocol" being used?
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe

 

--

Thanks and Regards

Keval Malde

Project Associate

IIT Hyderabad

Attachment: smime.p7s
Description: S/MIME cryptographic signature