This is our old Q&A Site. Please post any new questions and answers at

i have a hex dump of lte signaling messages (including, lte-rrc, rlc-mac, nas etc) Want to decode these messages using wireshark gui or tshark. 1) In gui mode what all setting changes i need to do before uploading the hexdump (i have converted it to pcap format). Please specify the steps. 2) In Tshark please specify the command to decode these messages- for example to decode lte-rrc

asked 27 Nov '15, 09:42

Xiong%20jee's gravatar image

Xiong jee
accept rate: 0%

You can use 3GPP decoder front-end.

Alternatively look at this thread.

permanent link

answered 29 Nov '15, 03:32

Pascal%20Quantin's gravatar image

Pascal Quantin
accept rate: 30%

edited 29 Nov '15, 03:36

Hi Pascal,

Thank you. i used different user_dlts and able to decode the message names- but only message names, but not the content. say example rrcconnectionrequest- i am able to get that the message is rrcconnectionrequest- but no content is available. How to configure wireshark so that i get all the contents of the messages.

Thanks, Xiong

(30 Nov '15, 09:14) Xiong jee

Presumably you are talking about tshark, right? If yes please add the -V option. if not, please post a sample of what you are seeing, so that I can better understand what's happening.

(01 Dec '15, 05:13) Pascal Quantin
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 27 Nov '15, 09:42

question was seen: 5,070 times

last updated: 01 Dec '15, 05:13

p​o​w​e​r​e​d by O​S​Q​A