This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Unable to see ROHC decoded message in pdcp-lte message

0

I am not able to see any ROHC fields on applying filter pdcp-lte. I tried the filter pdcp-lte.rohc but no messages showed up on applying this filter. Is there any separate dissector for ROHC decoding, apart from the standard pdcp-lte package? I am using wireshark verion 1.4.0 on linux.

asked 22 Feb '13, 06:33

dr1's gravatar image

dr1
11112
accept rate: 0%

You should probably try a development release or at least 1.8

(22 Feb '13, 08:37) Anders ♦

One Answer:

0

PDCP LTE dissector did include some ROHC dissection in Wireshark 1.4.0 (while starting from Wireshark 1.8.0, ROHC is a separate dissector), but you must activate ROHC options in PDCP-LTE preferences.

answered 23 Feb '13, 02:31

Pascal%20Quantin's gravatar image

Pascal Quantin
5.5k1060
accept rate: 30%

any idea how to activate the ROHC options in 1.4.0??

(27 Feb '13, 02:31) dr1

Edit -> Preferences -> Protocols -> PDCP-LTE -> Attempt to decode ROHC data. Note that ROHC support is only partial.

(27 Feb '13, 08:49) Pascal Quantin

I already enabled this preference but I still cant see the ROHC message. (Though it is a compressed profile 1 packet)

(27 Feb '13, 21:57) dr1

Is there any tweaking required in the wireshark code?

(27 Feb '13, 21:57) dr1

According to the source code of 1.4.0, the PDCP LTE dissector is just able to identify that it is a type 1 packet without dissecting it. And it will only work if the PDCP LTE dissector is called from the DCT2000 dissector so as to set the PDCP info structure. By using Wireshark development version (https://www.wireshark.org/download/automated/) you will be able to perform a better dissection, especially if your capture contains the IR packet. Profiles supported are uncompressed, RTP/UDP/IP and UDP/IP. If you can share your pcap file, it would allow to enhance the ROHC dissection if needed.

(27 Feb '13, 22:18) Pascal Quantin