Wireshark-bugs: [Wireshark-bugs] [Bug 9466] New: RRC messages are not decoded for RLC AM DCCH in
Date: Thu, 21 Nov 2013 11:45:33 +0000
Bug ID 9466
Summary RRC messages are not decoded for RLC AM DCCH in version 1.10.3.
Classification Unclassified
Product Wireshark
Version 1.10.3
Hardware x86-64
OS Windows 7
Status UNCONFIRMED
Severity Major
Priority Low
Component Dissection engine (libwireshark)
Assignee bugzilla-admin@wireshark.org
Reporter euzunca@yahoo.com

Created attachment 12142 [details]
RRC trace that contains RLC AM messages, using RLC over UDP framing

Build Information:
Version 1.10.3 (SVN Rev 53022 from /trunk-1.10)

Copyright 1998-2013 Gerald Combs <gerald@wireshark.org> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GTK+ 2.24.14, with Cairo 1.10.2, with Pango 1.30.1, with
GLib 2.34.1, with WinPcap (4_1_3), with libz 1.2.5, without POSIX capabilities,
without libnl, with SMI 0.4.8, with c-ares 1.9.1, with Lua 5.1, without Python,
with GnuTLS 2.12.18, with Gcrypt 1.4.6, without Kerberos, with GeoIP, with
PortAudio V19-devel (built Nov  1 2013), with AirPcap.

Running on 64-bit Windows 7 Service Pack 1, build 7601, with WinPcap version
4.1.3 (packet.dll version 4.1.0.2980), based on libpcap version 1.0 branch
1_0_rel0b (20091008), GnuTLS 2.12.18, Gcrypt 1.4.6, without AirPcap.
       Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz, with 3979MB of physical
memory.


Built using Microsoft Visual C++ 10.0 build 40219

--
RRC messages carried over RLC AM (DCCH) are not decoded in version 1.10.3.
Version 1.8.4 can decode the messages correctly. I believe this is broken since
version 1.9.0. RLC over UDP Framing is used.

1.10.3:

/cygdrive/c/Program\ Files/Wireshark/tshark -C rrc -r rrc_sample.pcap 
  1 0.000000000 RRC 79 RRCConnectionRequest
  2 0.216000000 RRC 164 RRCConnectionSetup
  3 0.285000000 RLC 163 [RLC AM Fragment]  SN=1000 
  4 0.288000000 RLC 90 [RLC AM Fragment]  SN=1001 
  5 0.398000000 RLC 92 [RLC AM Fragment]  SN=1002 


1.8.4:
 /cygdrive/c/Program\ Files/Wireshark/tshark -C rrc -r rrc_sample.pcap
  1 0.000000000     10.1.1.1 -> 10.2.2.2     RRC 79 RRCConnectionRequest
  2 0.216000000     10.1.1.1 -> 10.2.2.2     RRC 164 RRCConnectionSetup
  3 0.285000000     10.1.1.1 -> 10.2.2.2     RRC 163 RRCConnectionSetupComplete
  4 0.288000000     10.1.1.1 -> 10.2.2.2     RRC 90 InitialDirectTransfer(DTAP)
(GMM) Service Request
  5 0.398000000     10.1.1.1 -> 10.2.2.2     RRC 92 ActiveSetUpdateComplete

Build information for 1.8.4: 

TShark 1.8.4 (SVN Rev 46250 from /trunk-1.8)

Copyright 1998-2012 Gerald Combs <gerald@wireshark.org> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GLib 2.32.2, with WinPcap (4_1_2), with libz 1.2.5,
without POSIX capabilities, with SMI 0.4.8, with c-ares 1.7.1, with Lua 5.1,
without Python, with GnuTLS 2.12.18, with Gcrypt 1.4.6, without Kerberos, with
GeoIP.

Running on 64-bit Windows 7 Service Pack 1, build 7601, with WinPcap version
4.1.3 (packet.dll version 4.1.0.2980), based on libpcap version 1.0 branch
1_0_rel0b (20091008).

Built using Microsoft Visual C++ 10.0 build 40219


You are receiving this mail because:
  • You are watching all bug changes.