Diameter Rx Interface - PS_TO_CS_Handover - Abort Session Request Abort Case 3 decodes as Unknown(3).

Question

Greetings,

Seems Wireshark Version 1.12.4 has issue decoding Abort Session Request Abort Cause (Rx Reference Point).

How to Fix?

Decode: AVP: Abort-Cause(500) l=16 f=VM- vnd=TGPP val=Unknown (3)

Value 3 is:

PS_TO_CS_HANDOVER (3) This value is used when the bearer has been deactivated due to PS to CS handover.

Reference: ETSI TS 129 214 V11.10.0 (2013-09) 5.3.1 Abort-Cause AVP

The Abort-Cause AVP (AVP code 500) is of type Enumerated, and determines the cause of an abort session request (ASR) or of a RAR indicating a bearer release. The following values are defined:

BEARER_RELEASED (0) This value is used when the bearer has been deactivated as a result from normal signalling handling. For GPRS the bearer refers to the PDP Context.

INSUFFICIENT_SERVER_RESOURCES (1) This value is used to indicate that the server is overloaded and needs to abort the session.

INSUFFICIENT_BEARER_RESOURCES (2) This value is used when the bearer has been deactivated due to insufficient bearer resources at a transport gateway (e.g. GGSN for GPRS).

PS_TO_CS_HANDOVER (3) This value is used when the bearer has been deactivated due to PS to CS handover.

SPONSORED_DATA_CONNECTIVITY_ DISALLOWED (4) This value is used in the ASR when the PCRF needs to initiates the AF session termination due to the operator policy (e.g. disallowing the UE accessing the sponsored data connectivity in the roaming case).

Accepted Answer

1

Hi, The file diameter/TGPP.xml needs to be updated with the new enum values, only 0 - 2 is currently defined. Depending on your Wireshark version 3GPP AVP 500 might be located in a different file as the structure has been changed (dictionary.xml?).

answered 28 Apr '15, 00:43

Anders ♦
4.6k●9●52
accept rate: 17%

Updated the xml file in master https://code.wireshark.org/review/#/c/8216/

(28 Apr '15, 01:04) Anders ♦

Thanks for the hit.

AVP 500 is in gqpolicy.xml (Wireshark Version 1.12.5 - windows)

updated:

avp name="Abort-Cause" code="500" mandatory="must" vendor-bit="must" may-encrypt="yes" vendor-id="TGPP" type type-name="Enumerated"/

enum name="BEARER_RELEASED" code="0"/
enum name="INSUFFICIENT_SERVER_RESOURCES" code="1"/
enum name="INSUFFICIENT_BEARER_RESOURCES" code="2"/
enum name="PS_TO_CS_HANDOVER" code="3"/
enum name="SPONSORED_DATA_CONNECTIVITY_ DISALLOWED" code="4"/

/avp

Now STR decodes as:

Abort-Cause: PS_TO_CS_HANDOVER (3)

Thanks.

(18 May '15, 04:24) DazzaS