Bug #4869
openwireshark: Support dissecting LLC frames on top of RLCMAC (E)GPRS data blocks
0%
Description
Since recently wireshark is able to correctly identify rlcmac data payload (llc frames), and identify padding, spare bits, etc.
Next step is to call the LLC dissector to try to dissect the llc frames of:- GPRS UL data blocks
- GPRS DL data blocks
- EGPRS UL data blocks
- EGPRS DL data blocks
This will help in quickly finding out if data forwarded from/to RLCMAC has any issue.
I so far have a quick patch which already works for UL and DL GPRS data packets which don't need to be defragmented.
So work needs to be done to support fragmentation, and EGPRS as well.
Supporting fragmentation probably means we also need to identify TBFs by TFI or something similar, to be able to track the fragments.
Files
Related issues
Updated by pespin over 3 years ago
- File deleted (
0001-WIP-rlcmac-Support-dissecting-LLC-frames-in-rlcmac-d.patch)
Updated by pespin over 3 years ago
- File 0001-WIP-rlcmac-Support-dissecting-LLC-frames-in-rlcmac-d.patch 0001-WIP-rlcmac-Support-dissecting-LLC-frames-in-rlcmac-d.patch added
New version of the patch also with EGPRS dissect partial support, useful to at least see small GMM messages which usually fit into one rlcmac block.
Updated by pespin 10 months ago
In order to support reassemble of LLC on top of RLC/MAC we probably need some calls to fragment_add_check() wireshark API, similar to what's done in IPv4 reassembling.
See "Reassemble" option tick in wireshark in IPv4 dissector Preferences, which relates to ip_defragment global variable.
