Wireshark-bugs: [Wireshark-bugs] [Bug 13086] MSISDN not populated/decoded in JSON GTP-C decoding
Date: Thu, 03 Nov 2016 21:59:03 +0000
Pascal Quantin changed bug 13086
What | Removed | Added |
---|---|---|
Status | UNCONFIRMED | CONFIRMED |
CC | [email protected] | |
Ever confirmed | 1 |
Comment # 1
on bug 13086
from Pascal Quantin
The issue is that e212.msidn is both a field with an associated value, and an item with a subtree(for the e164.country_code field). But JSON does not allow to define both at the same time (as far as I know). As a workaround, I propose to put the value in the field, and create a new entry with a suffix _tree for the sub items. FOr the attached packet, this gives: [ { "_index": "packets-2016-11-03", "_type": "pcap_file", "_score": null, "_source": { "layers": { "frame": { "frame.encap_type": "1", "frame.time": "Feb 25, 2010 10:57:56.294807000 CET", "frame.offset_shift": "0.000000000", "frame.time_epoch": "1267091876.294807000", "frame.time_delta": "0.000000000", "frame.time_delta_displayed": "0.000000000", "frame.time_relative": "0.000000000", "frame.number": "1", "frame.len": "187", "frame.cap_len": "187", "frame.marked": "0", "frame.ignored": "0", "frame.protocols": "eth:ethertype:ip:udp:gtp:ipcp", "frame.coloring_rule.name": "UDP", "frame.coloring_rule.string": "udp" }, "eth": { "eth.dst": "00:05:85:a6:54:5f", "eth.dst_tree": { "eth.dst_resolved": "JuniperN_a6:54:5f", "eth.addr": "00:05:85:a6:54:5f", "eth.addr_resolved": "JuniperN_a6:54:5f", "eth.lg": "0", "eth.ig": "0" }, "eth.src": "00:1e:df:2d:82:8e", "eth.src_tree": { "eth.src_resolved": "MasterIn_2d:82:8e", "eth.addr": "00:1e:df:2d:82:8e", "eth.addr_resolved": "MasterIn_2d:82:8e", "eth.lg": "0", "eth.ig": "0" }, "eth.type": "0x00000800" }, "ip": { "ip.version": "4", "ip.hdr_len": "20", "ip.dsfield": "0x00000000", "ip.dsfield_tree": { "ip.dsfield.dscp": "0", "ip.dsfield.ecn": "0" }, "ip.len": "173", "ip.id": "0x000013ae", "ip.flags": "0x00000002", "ip.flags_tree": { "ip.flags.rb": "0", "ip.flags.df": "1", "ip.flags.mf": "0" }, "ip.frag_offset": "0", "ip.ttl": "63", "ip.proto": "17", "ip.checksum": "0x00003062", "ip.checksum.status": "2", "ip.src": "192.169.100.1", "ip.addr": "192.169.100.1", "ip.src_host": "192.169.100.1", "ip.host": "192.169.100.1", "ip.dst": "10.100.200.33", "ip.addr": "10.100.200.33", "ip.dst_host": "10.100.200.33", "ip.host": "10.100.200.33", "Source GeoIP: United States": { "ip.geoip.src_country": "United States", "ip.geoip.country": "United States" }, "Destination GeoIP: Unknown": "" }, "udp": { "udp.srcport": "34273", "udp.dstport": "2123", "udp.port": "34273", "udp.port": "2123", "udp.length": "153", "udp.checksum": "0x0000c6b3", "udp.checksum.status": "2", "udp.stream": "0" }, "gtp": { "gtp.flags": "0x00000032", "gtp.flags_tree": { "gtp.flags.version": "1", "gtp.flags.payload": "1", "gtp.flags.reserved": "0", "gtp.flags.e": "0", "gtp.flags.s": "1", "gtp.flags.pn": "0" }, "gtp.message": "16", "gtp.length": "137", "gtp.teid": "0x00000000", "gtp.seq_number": "0x0000130b", "e212.imsi": "460004100000101", "e212.imsi_tree": { "e212.mcc": "460", "e212.mnc": "0" }, "Routing Area Identity": { "e212.rai.mcc": "460", "e212.rai.mnc": "6", "gtp.lac": "65534", "gtp.rai_rac": "255" }, "gtp.recovery": "176", "gtp.sel_mode": "1", "gtp.teid_data": "0x32f02bf9", "gtp.teid_cp": "0x32f02bf9", "NSAPI: 5": { "gtp.nsapi": "5" }, "End user address (IETF\/IPv4)": { "gtp.length": "2", "gtp.user_addr_pdp_org": "1", "gtp.user_addr_pdp_type": "0x00000021" }, "Access Point Name: eetest": { "gtp.apn_length": "7", "gtp.apn": "eetest" }, "Protocol configuration options": { "gtp.length": "26", "gsm_a.gm.sm.link_dir": "0", "gsm_a.gm.sm.ext": "1", "gsm_a.gm.configuration_protocol": "0", "gsm_a.gm.sm.pco_pid": "32801", "gsm_a.gm.sm.pco_pid_tree": { "gsm_a.gm.sm.pco.length": "0x00000016", "ipcp": { "ppp.code": "1", "ppp.identifier": "1", "ppp.length": "22", "Options: (18 bytes), IP address, Primary DNS Server IP Address, Secondary DNS Server IP Address": { "IP address: 0.0.0.0": { "ipcp.opt.type": "3", "ipcp.opt.length": "6", "ipcp.opt.ip_address": "0.0.0.0" }, "Primary DNS Server IP Address: 0.0.0.0": { "ipcp.opt.type": "129", "ipcp.opt.length": "6", "ipcp.opt.pri_dns_address": "0.0.0.0" }, "Secondary DNS Server IP Address: 0.0.0.0": { "ipcp.opt.type": "131", "ipcp.opt.length": "6", "ipcp.opt.sec_dns_address": "0.0.0.0" } } } } }, "GSN address : 192.169.100.1": { "gtp.gsn_address_length": "4", "gtp.gsn_ipv4": "192.169.100.1" }, "GSN address : 192.169.100.1": { "gtp.gsn_address_length": "4", "gtp.gsn_ipv4": "192.169.100.1" }, "MS international PSTN\/ISDN number": { "gtp.length": "8", "gsm_map.extension": "1", "gsm_map.nature_of_number": "1", "gsm_map.number_plan": "1", "e164.msisdn": "8615221000101", "e164.msisdn_tree": { "e164.country_code": "86" } }, "Quality of Service": { "gtp.qos_umts_length": "12", "gtp.qos_al_ret_priority": "2", "gtp.qos_spare1": "0", "gtp.qos_delay": "3", "gtp.qos_reliability": "3", "gtp.qos_peak": "4", "gtp.qos_spare2": "0", "gtp.qos_precedence": "2", "gtp.qos_spare3": "0", "gtp.qos_mean": "31", "gtp.qos_traf_class": "3", "gtp.qos_del_order": "2", "gtp.qos_del_err_sdu": "3", "gtp.qos_max_sdu_size": "1400", "gtp.qos_max_ul": "64", "gtp.qos_max_dl": "64", "gtp.qos_res_ber": "7", "gtp.qos_sdu_err_ratio": "4", "gtp.qos_trans_delay": "18", "gtp.qos_traf_handl_prio": "3", "gtp.qos_guar_ul": "64", "gtp.qos_guar_dl": "64" }, "RAT Type: GERAN": { "gtp.ext_length": "1", "gtp.ext_rat_type": "2" }, "MS Time Zone: GMT + 8 hours 0 minutes": { "gtp.ext_length": "2", "gtp.timezone": "32", "gtp.timezone_dst": "0" }, "Private Extension : Ericsson AB - Packet Core Networks (10923)": { "gtp.ext_length": "5", "gtp.ext_id": "10923", "gtp.ext_val": "02:01:03" } } } } }] Would it be OK for everybody?
You are receiving this mail because:
- You are watching all bug changes.
- References:
- [Wireshark-bugs] [Bug 13086] New: MSISDN not populated/decoded in JSON GTP-C decoding
- From: bugzilla-daemon
- [Wireshark-bugs] [Bug 13086] New: MSISDN not populated/decoded in JSON GTP-C decoding
- Prev by Date: [Wireshark-bugs] [Bug 13049] Buildbot crash output: fuzz-2016-10-24-11612.pcap
- Next by Date: [Wireshark-bugs] [Bug 13086] MSISDN not populated/decoded in JSON GTP-C decoding
- Previous by thread: [Wireshark-bugs] [Bug 13086] MSISDN not populated/decoded in JSON GTP-C decoding
- Next by thread: [Wireshark-bugs] [Bug 13086] MSISDN not populated/decoded in JSON GTP-C decoding
- Index(es):