This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Using the gsm_rlcmac dissector

0

Hi, im trying to use the gsm_rlcmac dissector, but if i run wireshark, select a packet and the "decode as..." option, i cant find it in the list. If i type gsm_rlcmac on the filter place, it turns green, so the dissector is up and running. I also tried to make my own dissector, that calls the gsm_rlcmac, but it wont work, the

find_dissector("gsm_rlcmac")

returns NULL.

What am i doing wrong? Thanks in advance

asked 29 Aug '14, 08:55

ingcpt's gravatar image

ingcpt
1●3●3●5
accept rate: 0%

One Answer:

1

The gsm_rlcmac registers twice, as gsm_rlcmac_ul and gsm_rlcmac_dl, try using one of those in the find_dissector call.

answered 29 Aug '14, 09:34

grahamb's gravatar image

grahamb ♦
19.8k●3●30●206
accept rate: 22%

I.e., there are separate dissectors for the uplink and downlink, so either you have to choose one of the dissectors or, if this is some protocol that encapsulates GSM RLC MAC messages, that protocol needs to have some extra field indicating whether the traffic is uplink or downlink traffic, in which case that protocol needs a new dissector that looks at that field and calls the uplink or downlink dissector.

(30 Aug '14, 14:43) Guy Harris ♦♦