https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16686
Bug ID: 16686
Summary: nas_5gs_sm.mapd is not decoded correctly
Product: Wireshark
Version: 3.2.5
Hardware: x86
OS: Windows 10
Status: UNCONFIRMED
Severity: Major
Priority: Low
Component: Dissection engine (libwireshark)
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: ---
Created attachment 17878
--> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=17878&action=edit
mapped EPS bearer IEI is not decoded
Build Information:
Version 3.2.5 (v3.2.5-0-ged20ddea8138)
Copyright 1998-2020 Gerald Combs <[email protected]> and contributors.
License GPLv2+: GNU GPL version 2 or later
<https://www.gnu.org/licenses/gpl-2.0.html> This is free software; see the
source for copying conditions. There is NO warranty; not even for
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (32-bit) with Qt 5.12.8, with WinPcap SDK (WpdPack) 4.1.2, with GLib
2.52.3, with zlib 1.2.11, with SMI 0.4.8, with c-ares 1.15.0, with Lua 5.2.4,
with GnuTLS 3.6.3 and PKCS #11 support, with Gcrypt 1.8.3, with MIT Kerberos,
with MaxMind DB resolver, with nghttp2 1.39.2, with brotli, with LZ4, with
Zstandard, with Snappy, with libxml2 2.9.9, with QtMultimedia, with automatic
updates using WinSparkle 0.5.7, with AirPcap, with SpeexDSP (using bundled
resampler), with SBC, with SpanDSP, with bcg729.
Running on 64-bit Windows 10 (1809), build 17763, with Intel(R) Core(TM)
i7-6600U CPU @ 2.60GHz (with SSE4.2), with 8084 MB of physical memory, with
locale English_United States.1252, with light display mode, without HiDPI, with
Npcap version 0.9994, based on libpcap version 1.9.1, with GnuTLS 3.6.3, with
Gcrypt 1.8.3, with brotli 1.0.2, without AirPcap, binary plugins supported (19
loaded). Built using Microsoft Visual Studio 2019 (VC++ 14.26, build 28806).
--
nas_5gs_sm.mapd IEs are not correctly decoded.
I tried with both NAS5G 24.501_15.2.0 spec and NAS5G 24.501_15.4.0, mapped EPS
bearer IEI is not decoded.
Please find the packet capture attached.
Frame 48: 226 bytes on wire (1808 bits), 226 bytes captured (1808 bits)
Ethernet II, Src: fa:16:3e:c9:37:eb (fa:16:3e:c9:37:eb), Dst: fa:16:3e:a1:bc:16
(fa:16:3e:a1:bc:16)
Internet Protocol Version 4, Src: 10.202.100.1, Dst: 10.202.1.1
Stream Control Transmission Protocol, Src Port: 36412 (36412), Dst Port: 36412
(36412)
NG Application Protocol
NGAP-PDU: initiatingMessage (0)
initiatingMessage
procedureCode: id-PDUSessionResourceSetup (29)
criticality: reject (0)
value
PDUSessionResourceSetupRequest
protocolIEs: 3 items
Item 0: id-AMF-UE-NGAP-ID
ProtocolIE-Field
id: id-AMF-UE-NGAP-ID (10)
criticality: reject (0)
value
AMF-UE-NGAP-ID: 100663296
Item 1: id-RAN-UE-NGAP-ID
ProtocolIE-Field
id: id-RAN-UE-NGAP-ID (85)
criticality: reject (0)
value
RAN-UE-NGAP-ID: 1593835520
Item 2: id-PDUSessionResourceSetupListSUReq
ProtocolIE-Field
id: id-PDUSessionResourceSetupListSUReq (74)
criticality: reject (0)
value
PDUSessionResourceSetupListSUReq: 1 item
Item 0
PDUSessionResourceSetupItemSUReq
pDUSessionID: 6
pDUSessionNAS-PDU:
7e023b69abc9037e00680100422e0601c211000901000631…
Non-Access-Stratum 5GS
(NAS)PDU
Security protected NAS
5GS message
Extended protocol
discriminator: 5G mobility management messages (126)
0000 .... = Spare
Half Octet: 0
.... 0010 =
Security header type: Integrity protected and ciphered (2)
Message
authentication code: 0x3b69abc9
Sequence number: 3
Plain NAS 5GS Message
Extended protocol
discriminator: 5G mobility management messages (126)
0000 .... = Spare
Half Octet: 0
.... 0000 =
Security header type: Plain NAS message, not security protected (0)
Message type: DL
NAS transport (0x68)
0000 .... = Spare
Half Octet: 0
Payload container
type
.... 0001 =
Payload container type: N1 SM information (1)
Payload container
Length: 66
Plain NAS 5GS
Message
Extended
protocol discriminator: 5G session management messages (46)
PDU session
identity: PDU session identity value 6 (6)
Procedure
transaction identity: 1
Message
type: PDU session establishment accept (0xc2)
0001 .... =
Selected SSC mode: SSC mode 1 (1)
PDU session
type - Selected PDU session type
....
0001 = PDU session type: IPv4 (1)
QoS rules -
Authorized QoS rules
Length:
9
QoS
rule 1
QoS
rule identifier: 1
Length: 6
001. .... = Rule operation code: Create new QoS rule (1)
...1 .... = DQR: The QoS rule is the default QoS rule
.... 0001 = Number of packet filters: 1
Packet filter 1
..11 .... = Packet filter direction: Bidirectional (3)
.... 0000 = Packet filter identifier: 0
Length: 1
Packet filter component 1
Packet filter component type: Match-all type (1)
QoS
rule precedence: 255
0... .... = Spare: 0
.0.. .... = Spare: 0
..00 0001 = Qos flow identifier: 1
Session-AMBR
Length:
6
Unit
for Session-AMBR for downlink: value is incremented in multiples of 1 Kbps (1)
Session-AMBR for downlink: 1 Kbps (1)
Unit
for Session-AMBR for uplink: value is incremented in multiples of 1 Kbps (1)
Session-AMBR for uplink: 1 Kbps (1)
PDU address
Element
ID: 0x29
Length:
5
....
0001 = PDU session type: IPv4 (1)
PDU
address information: 88.0.0.2
S-NSSAI
Element
ID: 0x22
Length:
1
Slice/service type (SST): 1
QoS flow
descriptions - Authorized
Element
ID: 0x79
Length:
3
QoS
flow description 1
..00 0001 = Qos flow identifier: 1
001. .... = Operation code: Create new QoS flow description (1)
.0.. .... = E bit: 0
..00 0000 = Number of parameters: 0
Extraneous
Data, dissector bug or later version spec(report to wireshark.org)
[Expert
Info (Note/Protocol): Extraneous Data, dissector bug or later version
spec(report to wireshark.org)]
[Extraneous Data, dissector bug or later version spec(report to wireshark.org)]
[Severity level: Note]
[Group: Protocol]
PDU session
identity 2 - PDU session ID
Element ID:
0x12
PDU session
identity: PDU session identity value 6 (6)
s-NSSAI
sST: 01
pDUSessionResourceSetupRequestTransfer:
000004008200060403e81003e8008b000a01f00aca010700…
PDUSessionResourceSetupRequestTransfer
protocolIEs: 4 items
Item 0:
id-PDUSessionAggregateMaximumBitRate
ProtocolIE-Field
id:
id-PDUSessionAggregateMaximumBitRate (130)
criticality: reject (0)
value
PDUSessionAggregateMaximumBitRate
pDUSessionAggregateMaximumBitRateDL: 1000bits/s
pDUSessionAggregateMaximumBitRateUL: 1000bits/s
Item 1:
id-UL-NGU-UP-TNLInformation
ProtocolIE-Field
id:
id-UL-NGU-UP-TNLInformation (139)
criticality: reject (0)
value
UPTransportLayerInformation: gTPTunnel (0)
gTPTunnel
transportLayerAddress: 0aca0107 [bit length 32, 0000 1010 1100 1010 0000 0001
0000 0111 decimal value 181010695]
TransportLayerAddress (IPv4): 10.202.1.7
gTP-TEID: 001e8481
Item 2:
id-PDUSessionType
ProtocolIE-Field
id:
id-PDUSessionType (134)
criticality: reject (0)
value
PDUSessionType: ipv4 (0)
Item 3:
id-QosFlowSetupRequestList
ProtocolIE-Field
id:
id-QosFlowSetupRequestList (136)
criticality: reject (0)
value
QosFlowSetupRequestList: 1 item
Item 0
QosFlowSetupRequestItem
qosFlowIdentifier: 1
qosFlowLevelQosParameters
qosCharacteristics: nonDynamic5QI (0)
nonDynamic5QI
fiveQI: 5
allocationAndRetentionPriority
priorityLevelARP: 1
pre-emptionCapability: shall-not-trigger-pre-emption (0)
pre-emptionVulnerability: not-pre-emptable (0)
e-RAB-ID: 6
--
You are receiving this mail because:
You are watching all bug changes.___________________________________________________________________________ Sent via: Wireshark-bugs mailing list <[email protected]> Archives: https://www.wireshark.org/lists/wireshark-bugs Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs mailto:[email protected]?subject=unsubscribe
