tshark: RRC container in F1ap message not decoded [closed]
tshark -v -> 4.2.5
RRC container in the UE context release command not decoded (prints just the hex string)
tshark -r test.pcap -Y "f1ap.procedureCode == 6" -Y "frame.number ==58" -V
Item 3: id-RRCContainer
ProtocolIE-Field
id: id-RRCContainer (50)
criticality: ignore (1)
value
RRCContainer: 000610002e7167cb
Can you provide a capture file or hexdump of the full packet?
As Chuckc stated, we need the full F1AP message to check what's going on. The dissection of the RRCContainer opaque object depends on the F1AP message type, procedure code and SRBID field value.
How can I share the dump?
@Pascal It was working previously when the order of the IE was srb Id followed by rrc container. Now after correcting the order to rrc container - srb Id, it doesn't decode as expected
Place it on a public file share (Dropbox, Google, Microsoft, ...) and update the question with a link to it.