I am using Wireshark version 1.10.0rc2. In my SGsAP Status message the Erroneous message IE showing as extraneous data. Though by looking at the hex values i think the IE in the packet is right. It is like - 1b 0b XX XX XX XX XX XX XX XX XX XX XX asked 05 Jul '13, 00:32  swap |
One Answer:
Can you upload the packet in its full context (upload and post URL from: http://cloudshark.org/)? My interpretation of the spec (Table 9.3.1, 3GPP TS 29.118 R9.8.0) would decode that as the "Erroneous message" IE as you say. After those two bytes, your X's should immediately continue with the Message Type field from table 9.2.1, followed by the message in question. edit: I did look for this in the bug tracker, but can't seem to find anything on this at the moment unless the search engine has failed me. answered 05 Jul '13, 09:21  Quadratic edited 05 Jul '13, 09:49 |
