Wireshark · Wireshark-users: Re: [Wireshark-users] Issue with dissecting NR-RRC messages

[Pascal Quantin <pascal@xxxxxxxxxxxxx>]

Hi Revathi,

Le jeu. 28 nov. 2019 à 07:51, Revathi Grandhi <revathi.grandhi9@xxxxxxxxx> a écrit :

Hi all,

I was trying to dissect NR-RRC messages ( eg: MIB, SIB1..). I found in the mailing list to dissect MIB by forming "exported PDU" from a text to pcap conversion. suggested by   @anders.

     1.what data should append to RRC message additionally? 

         eg: if my pdu for mib is 0D E5 A8. how to add additional data to dissect it as MIB? 

You need to follow the payload format described here: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=blob;f=epan/exported_pdu.h;hb=refs/heads/master

 

      2.can we amend code to dissect other messages also ( eg: SIB1, rrc request etc..)? If yes, how to do that?

All the NR RRC registered dissectors can be found here: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=blob;f=epan/dissectors/packet-nr-rrc.c;hb=HEAD#l57732

See the attached mib.pcap that contains your MID data for an example.

Best regards,

Pascal.

Attachment: mib.pcap
Description: application/vnd.tcpdump.pcap