Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

How to Parse MAC-LTE to PDCP-LTE or HTTP package?

I got a pcap about mac-lte data, and set DLT_USER, DLT=147, Payload Protocol=mac-lte-framed. And it can parse some rrc package. But the user-plane packages parse fail, it also showed mac-lte and the SDU not parse to rlc/pdcp/(ip)http. How to set my wireshark to parse these infomations? Any help?

How to Parse MAC-LTE to PDCP-LTE or HTTP package?

I got a pcap about mac-lte data, and set DLT_USER, DLT=147, Payload Protocol=mac-lte-framed. And it can parse some rrc package. But the user-plane packages parse fail, it also showed mac-lte and the SDU not parse to rlc/pdcp/(ip)http. How to set my wireshark to parse these infomations? Any help?

For example:

Frame 44: 1999 bytes on wire (15992 bits), 1999 bytes captured (15992 bits)

DLT: 147, Payload: mac-lte-framed (mac-lte-framed) MAC-LTE DL-SCH: (SFN=0 , SF=3) UEId=1 (3:remainder) [Context (RNTI=2272)] MAC PDU Header (3:remainder) [1 subheaders] SDU (3, length=1979 bytes): 8cdc53e0817e4564053cc7994000350664e8174339e9c0a8…

0000   01 01 03 02 08 e0 03 00 01 04 00 03 07 01 0a 00   ................

0010 0f 00 01 03 8c dc 53 e0 81 7e 45 64 05 3c c7 99 ......S..~Ed.<.. 0020 40 00 35 06 64 e8 17 43 39 e9 c0 a8 02 02 00 50 @.5.d..C9......P 0030 bf a2 5b 32 6d 81 09 d6 7b 58 80 10 00 eb 40 98 ..[2m...{[email protected] 0040 00 00 01 01 08 0a 11 51 14 ee 65 da ae 28 48 54 .......Q..e..(HT 0050 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 TP/1.1 200 OK..C 0060 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 ontent-Type: app 0070 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 lication/octet-s 0080 74 72 65 61 6d 0d 0a 43 6f 6e 74 65 6e 74 2d 4c tream..Content-L 0090 65 6e 67 74 68 3a 20 31 32 30 33 37 0d 0a 53 65 ength: 12037..Se 00a0 72 76 65 72 3a 20 53 65 72 76 65 72 2f 32 2e 33 rver: Server/2.3 00b0 2e 32 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 .2..Last-Modifie 00c0 64 3a 20 4d 6f 6e 2c 20 31 39 20 4e 6f 76 20 32 d: Mon, 19 Nov 2 00d0 30 31 38 20 30 37 3a 31 36 3a 32 34 20 47 4d 56 018 07:16:24 GMV 00e0 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a ..Accept-Ranges: 00f0 20 62 79 74 65 73 0d 0a 58 2d 44 6f 77 6e 2d 48 bytes..X-Down-H 0100 61 73 68 3a 20 31 37 30 63 64 66 64 61 62 37 36 ash: 170cdfdab76 0110 37 31 36 62 63 33 38 65 37 66 66 32 32 62 34 34 716bc38e7ff22b44 0120 65 61 35 65 38 61 33 38 37 63 65 39 36 0d 0a 58 ea5e8a387ce96..X 0130 2d 44 6f 77 6e 2d 48 69 74 3a 20 63 33 2d 6d 69 -Down-Hit: c3-mi 0140 75 69 2d 66 73 2d 6d 69 64 30 32 2e 62 6a 0d 0a ui-fs-mid02.bj.. 0150 58 2d 43 61 63 68 65 64 3a 20 48 49 54 2c 20 63 X-Cached: HIT, c 0160 33 2d 6d 69 75 69 2d 66 73 2d 70 72 6f 78 79 30 3-miui-fs-proxy0 0170 38 2e 62 6a 2c 20 57 65 64 6e 65 73 64 61 79 2c 8.bj, Wednesday, ........

How to Parse MAC-LTE to PDCP-LTE or HTTP package?

I got a pcap about mac-lte data, and set DLT_USER, DLT=147, Payload Protocol=mac-lte-framed. And it can parse some rrc package. But the user-plane packages parse fail, it also showed mac-lte and the SDU not parse to rlc/pdcp/(ip)http. How to set my wireshark to parse these infomations? Any help?

For example:

Frame 44: 1999 bytes on wire (15992 bits), 1999 bytes captured (15992 bits)

DLT: 147, Payload: mac-lte-framed (mac-lte-framed) MAC-LTE DL-SCH: (SFN=0 , SF=3) UEId=1 (3:remainder) [Context (RNTI=2272)] MAC PDU Header (3:remainder) [1 subheaders] SDU (3, length=1979 bytes): 8cdc53e0817e4564053cc7994000350664e8174339e9c0a8…

8cdc53e0817e4564053cc7994000350664e8174339e9c0a8…


0000   01 01 03 02 08 e0 03 00 01 04 00 03 07 01 0a 00   ................

0010 0f 00 01 03 8c dc 53 e0 81 7e 45 64 05 3c c7 99 ......S..~Ed.<.. 0020 40 00 35 06 64 e8 17 43 39 e9 c0 a8 02 02 00 50 @.5.d..C9......P 0030 bf a2 5b 32 6d 81 09 d6 7b 58 80 10 00 eb 40 98 ..[2m...{[email protected] 0040 00 00 01 01 08 0a 11 51 14 ee 65 da ae 28 48 54 .......Q..e..(HT 0050 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 TP/1.1 200 OK..C 0060 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 ontent-Type: app 0070 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 lication/octet-s 0080 74 72 65 61 6d 0d 0a 43 6f 6e 74 65 6e 74 2d 4c tream..Content-L 0090 65 6e 67 74 68 3a 20 31 32 30 33 37 0d 0a 53 65 ength: 12037..Se 00a0 72 76 65 72 3a 20 53 65 72 76 65 72 2f 32 2e 33 rver: Server/2.3 00b0 2e 32 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 .2..Last-Modifie 00c0 64 3a 20 4d 6f 6e 2c 20 31 39 20 4e 6f 76 20 32 d: Mon, 19 Nov 2 00d0 30 31 38 20 30 37 3a 31 36 3a 32 34 20 47 4d 56 018 07:16:24 GMV 00e0 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a ..Accept-Ranges: 00f0 20 62 79 74 65 73 0d 0a 58 2d 44 6f 77 6e 2d 48 bytes..X-Down-H 0100 61 73 68 3a 20 31 37 30 63 64 66 64 61 62 37 36 ash: 170cdfdab76 0110 37 31 36 62 63 33 38 65 37 66 66 32 32 62 34 34 716bc38e7ff22b44 0120 65 61 35 65 38 61 33 38 37 63 65 39 36 0d 0a 58 ea5e8a387ce96..X 0130 2d 44 6f 77 6e 2d 48 69 74 3a 20 63 33 2d 6d 69 -Down-Hit: c3-mi 0140 75 69 2d 66 73 2d 6d 69 64 30 32 2e 62 6a 0d 0a ui-fs-mid02.bj.. 0150 58 2d 43 61 63 68 65 64 3a 20 48 49 54 2c 20 63 X-Cached: HIT, c 0160 33 2d 6d 69 75 69 2d 66 73 2d 70 72 6f 78 79 30 3-miui-fs-proxy0 0170 38 2e 62 6a 2c 20 57 65 64 6e 65 73 64 61 79 2c 8.bj, Wednesday, ........

........