["Tancredi, Anthony" <Anthony.Tancredi@xxxxxxxxxxx>]

Tamas,

 

Thanks a lot for the quick response. I upgraded to the latest version, and it works! I’ll let my team know, so we can plan the upgrade. Typically we only upgrade when we need to support a newer feature.

 

FYI – To decrypt the NGAP message, you may need to ensure the checkbox is checked.

 

 

Item 2: id-NAS-PDU

    ProtocolIE-Field

        id: id-NAS-PDU (38)

        criticality: reject (0)

        value

            NAS-PDU: 7e02b0073e4b050f8800

                Non-Access-Stratum 5GS (NAS)PDU

                    Security protected NAS 5GS message

                        Extended protocol discriminator: 5G mobility management messages (126)

                        0000 .... = Spare Half Octet: 0

                        .... 0010 = Security header type: Integrity protected and ciphered (2)

                        Message authentication code: 0xb0073e4b

                        Sequence number: 5

                    Plain NAS 5GS Message

                        Extended protocol discriminator: Tests procedures described in 3GPP TS 44.014, 3GPP TS 34.109 and 3GPP TS 36.509 (15)

                        GSM A-I/F DTAP - Reset UE Positioning Stored Information

                            Protocol Discriminator: Tests procedures described in 3GPP TS 44.014, 3GPP TS 34.109 and 3GPP TS 36.509 (15)

                                .... 1111 = Protocol discriminator: Tests procedures described in 3GPP TS 44.014, 3GPP TS 34.109 and 3GPP TS 36.509 (0xf)

                                0000 .... = Skip Indicator: No indication of selected PLMN (0)

                            DTAP Tests Procedures Message Type: Reset UE Positioning Stored Information (0x88)

                            UE Positioning Technology

                                0000 0000 = UE positioning technology: AGNSS (0)

 

Thanks,

Anthony

From: Tamás Regős <regost@xxxxxxxxx>
Sent: Saturday, February 15, 2025 11:57 AM
To: Community support list for Wireshark <wireshark-users@xxxxxxxxxxxxx>
Cc: Tancredi, Anthony <Anthony.Tancredi@xxxxxxxxxxx>; Pascal Quantin <pascal@xxxxxxxxxxxxx>
Subject: Re: [Wireshark-users] Re: LPP Release 17 Reset Positioning Information can not be decoded

 

[Warning] This email comes from an external source. Be careful of any embedded links and attachments.

Hi Anthony, This is a known bug which was fixed already. Please download and install the latest available WS version (You use 4. 2. 4). Please note, frame 5720 has Encrypted data. It works for me. (My previous reply has a screenshot in it but

Hi Anthony,

 

This is a known bug which was fixed already. Please download and install the latest available WS version (You use 4.2.4).

Please note, frame 5720 has Encrypted data.

It works for me.

 

(My previous reply has a screenshot in it but it's too big so it needs moderator approval first).

 

Regards,

Tamas

 

On Sat, 15 Feb 2025 at 23:55, Pascal Quantin via Wireshark-users <wireshark-users@xxxxxxxxxxxxx> wrote:

Hi Anthony,

I do not have a computer to open your pcap right now but in the screenshot you shared the NAS message seems to be ciphered, which would explain why Wireshark cannot decode it.

Best regards,
Pascal.

15 févr. 2025 17:47:37 Tancredi, Anthony via Wireshark-users <wireshark-users@xxxxxxxxxxxxx>:

Wireshark Support,

 

Is this a known issue that the LPP message Reset Positioning Information can not be decoded by the Wireshark Dissector. All other LPP messages can be decoded properly. When logging the LPP message in another tool such as Qualcomm QXDM, the message can be decoded successfully.

 

Fram 5720:

 

 

 

Version 4.2.4-01 (Git commit c966d79150b6).

 

Compiled (64-bit) using Microsoft Visual Studio 2019 (VC++ 14.29, build 30151),

with GLib 2.78.0, with Qt 6.5.3, with libpcap, with zlib 1.3.0, with PCRE2, with

Lua 5.2.4 (with UfW patches), with GnuTLS 3.8.3 and PKCS #11 support, with

Gcrypt 1.10.2-unknown, with Kerberos (MIT), with MaxMind, with nghttp2 1.57.0,

with nghttp3 1.0.0, with brotli, with LZ4, with Zstandard, with Snappy, with

libxml2 2.11.5, with libsmi 0.5.0, with QtMultimedia, with automatic updates

using WinSparkle 0.8.0, with AirPcap, with Minizip, with binary plugins.

 

Running on 64-bit Windows 10 (1809), build 17763, with Intel(R) Core(TM)

i7-4790S CPU @ 3.20GHz (with SSE4.2), with 6143 MB of physical memory, with GLib

2.78.0, with Qt 6.5.3, with Npcap version 1.78, based on libpcap version 1.10.4,

with PCRE2 10.42 2022-12-11, with c-ares 1.27.0, with GnuTLS 3.8.3, with Gcrypt

1.10.2-unknown, with nghttp2 1.57.0, with nghttp3 1.0.0, with brotli 1.0.9, with

LZ4 1.9.3, with Zstandard 1.5.2, without AirPcap, with light display mode, with

HiDPI, with QPA plugin "windows", with LC_TYPE=English_United States.utf8,

binary plugins supported.

 

Thanks,

Anthony

_______________________________________________
Wireshark-users mailing list -- wireshark-users@xxxxxxxxxxxxx
To unsubscribe send an email to wireshark-users-leave@xxxxxxxxxxxxx