Hi, I am sending Tracking Area Identity List IE with multiple Partial Tracking Area Identity List in NAS Attach Accept message. Wireshark is decoding only first Partial Tracking Area Identity List and showing Extraneous data for rest of the Partial Lists. Kindly provide your inputs. asked 18 Aug '16, 09:57 waniakshay edited 19 Aug '16, 08:49 grahamb ♦ |
One Answer:
This is a bug in Wireshark. I have a fix for this, but it would be great if you could share your NAS Attach Accept message so that I can test my patch. Edit: the fix is now merged and will be part of Wireshark 2.0.6 and 2.2 when they will be released. You can also grab an automated nightly build. It would still be useful that you share an example or test the fix and report that it works as expected now. answered 18 Aug '16, 10:51 Pascal Quantin edited 18 Aug '16, 23:45 |
Please find below the hex dump of Attach Accept message -
0000 27 d1 c6 3e 2e 01 07 42 01 24 0e 22 00 f1 10 31 0010 32 01 00 f1 10 00 64 2b 6a 00 2a 52 01 c1 01 05 0020 05 04 61 70 6e 31 05 01 c0 10 00 0f 5d 01 00 30 0030 10 0b 52 1f 73 8c fe 56 76 4b 56 56 00 6c 00 6c 0040 00 5e 02 01 01 50 0b f6 00 f1 10 00 02 01 00 00 0050 00 1e 53 12 17 22
Please let me know if it works. Thanks.
Tested with latest automated build. It works perfectly. Thanks a lot.
Thanks for confirming. If my answer solved your issue, please consider accepting it by clicking on the check mark next to the answer.