This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Add new field to 3GPP ASN1 dissector to show message

0

Hi

Some dissectors for 3GPP ASN1 protocols, such as S1AP, will show the name of the decoded message in a dedicated field (s1ap.procedureCode: id-UEContextReleaseRequest (18), and others will not such as LTE RRC.

I was wondering if you find it useful to add a field "message" to each 3GPP ASN1 protocol to show the text decoded message name: - s1ap.message = "UEContextReleaseRequest" - lte-rrc.message = "rrcConnectionReconfigurationComplete"

Even if this additional field is not part of ASN1 grammar of the protocol, it is useful information and simplifies analysis of decode results.

Thanks for sharing your thought.

Cyril Deubel

asked 29 Nov '16, 05:25

CyrilDeubel's gravatar image

CyrilDeubel
6112
accept rate: 0%


One Answer:

0

You should file this as an enhancement request on the Wireshark Bugzilla.

answered 29 Nov '16, 14:54

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%

Hi Guy

Thanks for the suggestion. I'll do that, and even try to propos an implementation for one of the protocols

(30 Nov '16, 01:49) CyrilDeubel

If an answer has solved your issue, please accept the answer for the benefit of other users by clicking the checkmark icon next to the answer. Please read the FAQ for more information.

(30 Nov '16, 02:44) grahamb ♦