Wireshark-bugs: [Wireshark-bugs] [Bug 12276] tshark crashes when trying to export to pdml
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 24 Mar 2016 11:25:23 +0000

Comment # 7 on bug 12276 from 
Hi again,

After applying patch, I have an issue with a specific S1AP message. To be more
precise, it seems that tshark doesn't decode properly and thus, it's displaying
the following "unknown" field:

<field name="" show="Item 7: unknown (195)" size="5" pos="294"
value="00c3400164">
                <field name="s1ap.ProtocolIE_Field_element"
showname="ProtocolIE-Field" size="5" pos="294" show="" value="">
                  <field name="s1ap.id" showname="id: Unknown (195)" size="2"
pos="294" show="195" value="00c3"/>
                  <field name="per.enum_index" showname="Enumerated Index: 1"
hide="yes" size="1" pos="296" show="1" value="40"/>
                  <field name="s1ap.criticality" showname="criticality: ignore
(1)" size="1" pos="296" show="1" value="40"/>
                  <field name="per.open_type_length" showname="Open Type
Length: 1" hide="yes" size="1" pos="297" show="1" value="01"/>
                  <field name="s1ap.value_element" showname="value" size="1"
pos="298" show="" value=""/>
                </field>
              </field>

Is there any way to come around this? I had the same issue with some diameter
messages but after tweeking dictionary.xml, it worked!

Br,
Sotiris

You are receiving this mail because:
  • You are watching all bug changes.