Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 6364] New: One of radius avp attributes is not decoded correctly by Wireshark

[bugzilla-daemon@xxxxxxxxxxxxx]

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6364

           Summary: One of radius avp attributes is not decoded correctly
                    by Wireshark .
           Product: Wireshark
           Version: 1.6.2
          Platform: Other
        OS/Version: Windows XP
            Status: NEW
          Severity: Major
          Priority: Low
         Component: Wireshark
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: huang.ting1@xxxxxxxxxx


Created an attachment (id=7055)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=7055)
the packet

Build Information:
Version 1.6.2 (SVN Rev 38931 from /trunk-1.6)

Copyright 1998-2011 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with GTK+ 2.22.1, with GLib 2.26.1, with WinPcap (version
unknown), with libz 1.2.5, without POSIX capabilities, without libpcre, with
SMI
0.4.8, with c-ares 1.7.1, with Lua 5.1, without Python, with GnuTLS 2.10.3,
with
Gcrypt 1.4.6, with MIT Kerberos, with GeoIP, with PortAudio V19-devel (built
Sep
 7 2011), with AirPcap.

Running on Windows XP Service Pack 3, build 2600, with WinPcap version 4.1.2
(packet.dll version 4.1.0.2001), based on libpcap version 1.0 branch 1_0_rel0b
(20091008), GnuTLS 2.10.3, Gcrypt 1.4.6, without AirPcap.

Built using Microsoft Visual C++ 9.0 build 21022

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
Radius 3GPP-GPRS Negotiated QoS profile avp is decoded as GTP QOS of Service by
wireshark.But the two attributes are different.The definetion is shown below.

The definetion of Radius 3GPP-GPRS Negotiated QoS profile.Defined in 3GPP TS
29.061 V6.9.0 (2006-09).
        Bits
Octets        8    7    6    5    4    3    2    1
1        3GPP type = 5
2        3GPP Length= L
3 - L        UTF-8 encoded QoS profile

3GPP Type: 5
Length: For GGSN, L  37 (release 7 or higher) or L  33 (release 6 or release
5) or L  27 (release 4 or release 99) or L = 11 (release 98). For P-GW, the
length varies depending on the value of QCI. See below for details.
QoS profile value: Text type
UTF-8 encoded QoS profile syntax:
"<Release indicator> – <release specific QoS IE UTF-8 encoding>"
<Release indicator> = UTF-8 encoded number (two characters) :
    For GGSN:
"98" = Release 98
"99"= Release 99 or release 4
"05"= Release 5 or release 6
"07"= Release 7 or higher
For P-GW:
"08"= Release 8 or higher
   <release specific QoS profile UTF-8 encoding> = UTF-8 encoded QoS profile
for the release indicated by             the release indicator.
    The UTF-8 encoding of a QoS IE is defined as follows: each octet is
described by 2 UTF-8 encoded characters, defining its hexadecimal
representation. 
    For GGSN:
    The QoS profile definition is in 3GPP TS 24.008 [54].
        The release 98 QoS profile data is 3 octets long, which then results in
a 6 octets UTF-8 encoded string.
        The release 99 and release 4 QoS profile data is 11 octets long, which
results in a 22 octets UTF-8 encoded string. 
    The release 5 and release 6 QoS profile data is 14 octets long, which
results in a 28 octets UTF-8 encoded string.
    The release 7 (and higher) QoS profile data is 16 octets long, which
results in a 32 octets UTF-8 encoded string.
For P-GW: 
    It contains the following QoS parameters associated with the EPS bearer: 
-    QCI
-    ARP
-    GBR QoS information (UL/DL MBR, UL/DL GBR) or UL/DL APN-AMBR. In other
words if the value of QCI indicates a GBR bearer, the GBR QoS information shall
be present. If the value of QCI indicates a non-GBR bearer, the APN-AMBR
information shall be present.  
The encoding of the EPS bearer QoS profile parameters is specified in 3GPP TS
29.274 [81]: ARP is specified in Bearer QoS IE; QCI, UL MBR, DL MBR, UL MBR and
DL MBR are specified in Flow QoS IE; UL APN-AMBR and DL APN-AMBR are specified
in AMBR IE.
For GBR QCIs, the encoding of UTF-8 encoded QoS Profile field shall be as
follows: 
1-3        <Release indicator> -" = "08-" (UTF-8 encoded)
4-5        ARP (UTF-8 encoded)
6-7        QCI (UTF-8 encoded)
8-m        UL MBR (UTF-8 encoded)
(m+1)-n        DL MBR (UTF-8 encoded)
(n+1)-o        UL GBR (UTF-8 encoded)
(o+1)-p        DL GBR (UTF-8 encoded)
                            GBR Bearer
For non-GBR QCIs, the UL/DL MBR and UL/DL GBR fields shall not be present; UL
APN-AMBR and DL APN-AMBR fields shall be encoded (in UTF-8 encoded format)
respectively after the QCI field.
1-3        <Release indicator> -" = "08-" (UTF-8 encoded)
4-5        ARP (UTF-8 encoded)
6-7        QCI (UTF-8 encoded)
8-m        UL  APN-MBR (UTF-8 encoded)
(m+1)-n        DL APN-MBR (UTF-8 encoded)
                 Non-GBR Bearer
For example,the length of the Negotiated QoS profile is 23 octects form the
version field.If the radius QoS profile is decoded as GTP Qos attribute,the
length which is form the version field requires 25 octects at least.So the
error occures.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.