Wireshark-bugs: [Wireshark-bugs] [Bug 13153] New: "Create PDP Context response" message shows ba

Date: Fri, 18 Nov 2016 08:18:23 +0000
Bug ID 13153
Summary "Create PDP Context response" message shows back-off timer as malformed when included in the response
Product Wireshark
Version 2.0.2
Hardware x86-64
OS Ubuntu
Status UNCONFIRMED
Severity Major
Priority Low
Component Dissection engine (libwireshark)
Assignee [email protected]
Reporter [email protected]

Build Information:
Version 2.0.2 (SVN Rev Unknown from unknown)

Copyright 1998-2016 Gerald Combs <[email protected]> and contributors.
License GPLv2+: GNU GPL version 2 or later
<http://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with Qt 5.5.1, with libpcap, with POSIX capabilities (Linux),
with libnl 3, with libz 1.2.8, with GLib 2.48.0, with SMI 0.4.8, with c-ares
1.10.0, with Lua 5.2, with GnuTLS 3.4.10, with Gcrypt 1.6.5, with MIT Kerberos,
with GeoIP, with QtMultimedia, without AirPcap.

Running on Linux 4.4.0-47-generic, with locale C, with libpcap version 1.7.4,
with libz 1.2.8, with GnuTLS 3.4.10, with Gcrypt 1.6.5.
Intel(R) Core(TM) i5-4300M CPU @ 2.60GHz (with SSE4.2)

Built using gcc 5.3.1 20160407.

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
In "Create PDP Context response" message the gtp version 1 message appears as
malformed the "back-off timer" (used for apn congestion reasons) when the value
is included in the response message. The message analyzed in bytes in wireshark
seems to be ok although wireshark shows the message as malformed.

A typical example analyze of the bytes is the following:

ca 00 01 39

ca : 202 in decimal for the back-off timer
00 01 : is the length of the message
39 : is the unit (3 bits) and the value (5 bits) of the timer combined in one
byte

Thank you,
BR,
Vasilis


You are receiving this mail because:
  • You are watching all bug changes.