Re: Issue with dissecting NR-RRC messages

[Pascal Quantin <pascal () wireshark org>]

Hi Revathi,

Le jeu. 28 nov. 2019 à 07:51, Revathi Grandhi <revathi.grandhi9 () gmail com>
a écrit :

> Hi all,
>
> I was trying to dissect NR-RRC messages ( eg: MIB, SIB1..). I found in the
> mailing list to dissect MIB by forming "exported PDU" from a text to pcap
> conversion. suggested by   @anders.
>      1.what data should append to RRC message additionally?
>          eg: if my pdu for mib is 0D E5 A8. how to add additional data to
> dissect it as MIB?

You need to follow the payload format described here:
https://code.wireshark.org/review/gitweb?p=wireshark.git;a=blob;f=epan/exported_pdu.h;hb=refs/heads/master


>       2.can we amend code to dissect other messages also ( eg: SIB1, rrc
> request etc..)? If yes, how to do that?

All the NR RRC registered dissectors can be found here:
https://code.wireshark.org/review/gitweb?p=wireshark.git;a=blob;f=epan/dissectors/packet-nr-rrc.c;hb=HEAD#l57732

See the attached mib.pcap that contains your MID data for an example.

Best regards,
Pascal.

Attachment: mib.pcap
Description:

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe