https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14129
Bug ID: 14129
Summary: RLC reassembly doesn't work for RLC over UDP heuristic
dissector
Product: Wireshark
Version: 2.4.0
Hardware: x86-64
OS: Windows 10
Status: UNCONFIRMED
Severity: Normal
Priority: Low
Component: Dissection engine (libwireshark)
Assignee: bugzilla-ad...@wireshark.org
Reporter: cusn...@mail.com
Target Milestone: ---
Created attachment 15888
--> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=15888&action=edit
RLC over UDP
Build Information:
Version 2.4.0 (v2.4.0-0-g9be0fa500d)
Copyright 1998-2017 Gerald Combs <ger...@wireshark.org> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (64-bit) with Qt 5.9.1, with WinPcap (4_1_3), with GLib 2.42.0, with
zlib 1.2.8, with SMI 0.4.8, with c-ares 1.12.0, with Lua 5.2.4, with GnuTLS
3.4.11, with Gcrypt 1.7.6, with MIT Kerberos, with GeoIP, with nghttp2 1.14.0,
with LZ4, with Snappy, with libxml2 2.9.4, with QtMultimedia, with AirPcap,
with
SBC, with SpanDSP.
Running on 64-bit Windows 10, build 15063, with Intel(R) Core(TM) i7-6700 CPU @
3.40GHz (with SSE4.2), with 8128 MB of physical memory, with locale
English_United States.1252, with WinPcap version 4.1.3 (packet.dll version
4.1.0.2980), based on libpcap version 1.0 branch 1_0_rel0b (20091008), with
GnuTLS 3.4.11, with Gcrypt 1.7.6, without AirPcap.
Built using Microsoft Visual C++ 14.0 build 24215
Wireshark is Open Source Software released under the GNU General Public
License.
Check the man page and http://www.wireshark.org for more information.
--
In the attached capture messages aren't reassembled for AM/UM RLC types
for instance, packets #20 and #21 should have shown a reassembled RRC payload.
The issue is the UE-ID value is 0 and the 'reassembly context' can not be found
for this id as it is treated as 'empty UE-ID'.
The origin of the value is the heuristic "RLC over UDP" dissector which
includes several optional tags before the RLC packet - one of them is 'URNTI'
which should be stored as the UE-ID. When this tag is not included in the
packet (i.e. the program generating the traffic did not include the URNTI tag)
the UE-ID stays 0.
Note that this issue does not affect the regular (non heuristic) RLC dissector.
--
You are receiving this mail because:
You are watching all bug changes.___________________________________________________________________________
Sent via: Wireshark-bugs mailing list <wireshark-bugs@wireshark.org>
Archives: https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
