This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

how to decode 3gpp lte messages using tshark/wireshark

0

i have a hex dump of lte signaling messages (including, lte-rrc, rlc-mac, nas etc) Want to decode these messages using wireshark gui or tshark. 1) In gui mode what all setting changes i need to do before uploading the hexdump (i have converted it to pcap format). Please specify the steps. 2) In Tshark please specify the command to decode these messages- for example to decode lte-rrc

asked 27 Nov '15, 09:42

Xiong%20jee's gravatar image

Xiong jee
0●1●1●3
accept rate: 0%

One Answer:

1

You can use 3GPP decoder front-end.

Alternatively look at this thread.

answered 29 Nov '15, 03:32

Pascal%20Quantin's gravatar image

Pascal Quantin
5.5k●10●60
accept rate: 30%

edited 29 Nov '15, 03:36

Hi Pascal,

Thank you. i used different user_dlts and able to decode the message names- but only message names, but not the content. say example rrcconnectionrequest- i am able to get that the message is rrcconnectionrequest- but no content is available. How to configure wireshark so that i get all the contents of the messages.

Thanks, Xiong

(30 Nov '15, 09:14) Xiong jee

Presumably you are talking about tshark, right? If yes please add the -V option. if not, please post a sample of what you are seeing, so that I can better understand what's happening.

(01 Dec '15, 05:13) Pascal Quantin