This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

NAS Tracking Area Identity List not properly dissected

0

Hi,

I am sending Tracking Area Identity List IE with multiple Partial Tracking Area Identity List in NAS Attach Accept message. Wireshark is decoding only first Partial Tracking Area Identity List and showing Extraneous data for rest of the Partial Lists. Kindly provide your inputs.

asked 18 Aug '16, 09:57

waniakshay's gravatar image

waniakshay
6113
accept rate: 0%

edited 19 Aug '16, 08:49

grahamb's gravatar image

grahamb ♦
19.8k330206


One Answer:

2

This is a bug in Wireshark.

I have a fix for this, but it would be great if you could share your NAS Attach Accept message so that I can test my patch.

Edit: the fix is now merged and will be part of Wireshark 2.0.6 and 2.2 when they will be released. You can also grab an automated nightly build. It would still be useful that you share an example or test the fix and report that it works as expected now.

answered 18 Aug '16, 10:51

Pascal%20Quantin's gravatar image

Pascal Quantin
5.5k1060
accept rate: 30%

edited 18 Aug '16, 23:45

Please find below the hex dump of Attach Accept message -

0000 27 d1 c6 3e 2e 01 07 42 01 24 0e 22 00 f1 10 31 0010 32 01 00 f1 10 00 64 2b 6a 00 2a 52 01 c1 01 05 0020 05 04 61 70 6e 31 05 01 c0 10 00 0f 5d 01 00 30 0030 10 0b 52 1f 73 8c fe 56 76 4b 56 56 00 6c 00 6c 0040 00 5e 02 01 01 50 0b f6 00 f1 10 00 02 01 00 00 0050 00 1e 53 12 17 22

Please let me know if it works. Thanks.

(18 Aug '16, 23:47) waniakshay

Tested with latest automated build. It works perfectly. Thanks a lot.

(19 Aug '16, 02:17) waniakshay

Thanks for confirming. If my answer solved your issue, please consider accepting it by clicking on the check mark next to the answer.

(19 Aug '16, 08:25) Pascal Quantin