Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 8303] New: NAS-EPS: wrong decoding of Protocol Configuration Options

[bugzilla-daemon@xxxxxxxxxxxxx]

Bug ID	8303
Summary	NAS-EPS: wrong decoding of Protocol Configuration Options
Classification	Unclassified
Product	Wireshark
Version	1.8.5
Hardware	x86
OS	Windows XP
Status	UNCONFIRMED
Severity	Major
Priority	Low
Component	Dissection engine (libwireshark)
Assignee	bugzilla-admin@wireshark.org
Reporter	jerome.coutant@stericsson.com

Build Information:

--
Hi

Sometimes the Protocol Configuration Options is wrongly decoded.

I attached 2 files:
- PCO_DecodingOK_RRCmessage.pcap: this is a lte-rrc.dl.dcch message with a NAS
EPS Mobility Management Message
    => this message is well decoded:

    [Protocols in frame: user_dlt:lte_rrc:nas-eps]
 DLT: 147, Payload: lte-rrc.dl.dcch (LTE Radio Resource Control (RRC) protocol)
c1: rrcConnectionReconfiguration (4)
 DedicatedInfoNAS: 27c7f79bfb02074201e1060000f110000b002bf201c10105...
    Protocol Configuration Options
        Element ID: 0x27
        Length: 17
        [Link direction: Network to MS (1)]
        1... .... = Ext: 0x01
        Configuration Protocol: PPP for use with IP PDP type or IP PDN type (0)
        Protocol or Container ID: Internet Protocol Control Protocol (0x8021)
   Length: 0x00 (0)
        Protocol or Container ID: DNS Server IPv4 Address (0x000d)
   Length: 0x04 (4)
   IPv4: 172.22.1.201
        Protocol or Container ID: Reserved (0x000a)
   Length: 0x00 (0)
        Protocol or Container ID: Selected Bearer Control Mode (0x0005)
   Length: 0x00 (0)


- PCO_WrongDecoding_AttachAccept.pcap: this is the same NAS message as above,
but decoded at NAS side _only_
    => this message is wrongly decoded:

    [Protocols in frame: user_dlt:nas-eps]
     NAS EPS Mobility Management Message Type: Attach accept (0x42)
     ESM message container
Length: 43
ESM message container contents:
f201c101050c037777770373746503636f6d0501c0a800f7...
    NAS EPS session management messages: Activate default EPS bearer context
request (0xc1)
    Protocol Configuration Options
        Element ID: 0x27
        Length: 17
        [Link direction: Network to MS (1)]
        1... .... = Ext: 0x01
        Configuration Protocol: PPP for use with IP PDP type or IP PDN type (0)
        Protocol or Container ID: Internet Protocol Control Protocol (0x8021)
   Length: 0x00 (0)
        Protocol or Container ID: DNS Server IPv4 Address (0x000d)
   Length: 0x04 (4)
   IPv4: 172.22.0.10
        Protocol or Container ID: Unknown (0x0000)
   Length: 0x05 (5)
 [Malformed Packet: NAS-EPS]
     [Expert Info (Error/Malformed): Malformed Packet (Exception occurred)]
[Message: Malformed Packet (Exception occurred)]
[Severity level: Error]
[Group: Malformed]

---

      You are receiving this mail because:

• You are watching all bug changes.