lte_rrc ue capability not getting decoded though this is decoded in s1ap

asked 2020-01-06 12:28:54 +0000

Akhila gravatar image

updated 2020-01-06 14:16:07 +0000

cmaynard gravatar image

below is the wireshark capture captured on udp port 9999 with lua file enabled

0a 38 01 08
0030   9b ed db 80 51 33 0c a8 04 0c 08 40 c1 c5 91 24
0040   4c da 54 c9 d6 af 7e 4e 9f ff ff 97 ff f4 ff ff
0050   fc bf ff a7 ff ff e5 ff fd 3f ff ff 2f ff e9 ff
0060   ff f9 7f ff 4f ff ff cb ff fa 7f ff fe 5f ff d3
0070   ff ff f2 ff fe 9f ff ff 97 ff f4 ff ff fc bf ff
0080   a7 ff ff e5 ff fd 3f ff ff 2f ff e9 ff ff f9 7f
0090   ff 4f ff ff cb ff fa 7f ff fe 5f ff d3 ff ff f2
00a0   ff fe 9f ff ff 97 ff f4 ff ff fc bf ff a7 ff ff
00b0   e5 ff fd 3f ff ff 2f ff df f3 ff ff a3 86 00 90
00c0   e1 94 e9 50 20 02 04 00 49 5f fc 09 07 e0 00 00
00d0   00 18 3f ef ff ff 68 00 00 00 38 4f f9 ff ff d8
00e0   00 00 00 0b d3 00 00 10 13 be 00 00 00 05 ff 20
00f0   05 00 30 02 00 08 01 82 10 41 08 08 20 0c 10 06
0100   08 03 04 01 82 00 c1 00 60 80 30 40 18 21 0c 10
0110   86 08 43 04 21 82 10 c1 00 60 80 30 40 18 20 0c
0120   10 86 08 41 04 20 08 21 04 10 80 82 10 c0 0c 00
0130   c3 08 40 18 61 08 03 0c 21 00 61 04 20 84 10 82
0140   20 00 00 06 20 00 00 06 20 00 00 06 18 40 00 43
0150   08 00 08 61 00 03 0c 20 00 61 84 00 0c 30 80 01
0160   86 10 00 30 c2 00 06 10 40 08 41 00 21 04 00 84
0170   10 02 10 40 08 41 00 21 04 00 84 10 02 10 40 08
0180   41 00 21 04 00 84 10 02 10 40 08 41 00 21 84 01
0190   0c 30 80 21 86 10 04 30 82 00 c2 08 03 08 20 0c
01a0   20 80 30 82 00 c2 08 03 08 20 0c 20 80 30 82 00
01b0   c1 08 20 84 10 42 08 21 04 30 00 01 86 00 00 30
01c0   c0 00 06 18 00 00 84 20 00 30 80 00 c2 00 03 08
01d0   00 0c 20 00 30 80 00 88 40 00 61 00 01 84 00 06
01e0   10 00 18 40 00 61 00 01 10 80 10 96 87 c4 06 98
01f0   00 00 7f 03 30 ...
(more)
edit retag flag offensive close merge delete

Comments

Hi Akhila,

There is no known issue with S1AP decoding in Wireshark.

So what is supposed to be this payload? This is not a S1AP UE Capability Info Indication message. And what is doing your Lua dissector?

Pascal Quantin gravatar imagePascal Quantin ( 2020-01-06 14:12:16 +0000 )edit