[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ethereal-dev
Subject:    RE: [Ethereal-dev] bug report regatding GPRS GTPv1
From:       <Michal.Melerowicz () nokia ! com>
Date:       2002-10-28 10:00:44
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


You are right, bits 8765 in 3rd octet shouldn't be 0'd. I haven't noticed mistake due \
to one digit MNC I have used to test. Patch should be soon.   
Regards, Michal
 
 
-----Original Message-----
From: ext ETC WAJU [mailto:etcwaju@hotmail.com]
Sent: Monday, October 28, 2002 2:30 AM
To: ethereal-dev@ethereal.com; jmayer@loplof.de
Cc: etcwaju@hotmail.com
Subject: [Ethereal-dev] bug report regatding GPRS GTPv1


Dear developers
 
I am here to report a bug I found in Ethereal 0.9.7 regarding GTP v1.
The coding of Information Elemenent IMSI in GTP v1 according to 3GPP 29.060 is as \
follows:

bits                 8765 4321

Octects 1        type=2

            2~9       IMSI

The IMSI is TBCD-coded with a fixed length of 8 octets. Bits 8765 of octet n+1 \
encodes digit 2n, bits 4321 of octet n+1 encodes digit 2n-1. Unused half octets shall \
be coded as binary "1 1 1 1". Digits are packed contiguously with no internal \
padding.

So for string in the trace which I captured running on GTPv1 "02 13 20 06 02 22 22 00 \
F3"

the IMSI was wrongly decoded as 310060202222003, but it should be decoded as \
310260202222003

 

The coding of IMSI in GTPv0 according to GSM 03.60

bits                  8765                      4321

Octects 1        type=2

               2        MCC(digit 2)       MCC(digit1)

               3         1111                      MCC(digit3)

               4          MNC(digit 2)      MCC(digit1)

               5          MSN(digit 2)      MSN(digit1)

               6          MSN(digit 4)      MSN(digit3)

               7          MSN(digit 6)      MSN(digit5)

               8         MSN(digit 8)      MSN(digit7)

               9         MSN(digit 10)     MSN(digit9)

So apparently in the above example, GTPv0 decoding was wrongly used to decode IMSI in \
GTPv1 format.

Please feel free to contact me for any questions.

Thanks, JW


  _____  

Protect your PC - Click here <http://g.msn.com/8HMWEN/2024>  for McAfee.com VirusScan \
Online _______________________________________________ Ethereal-dev mailing list \
Ethereal-dev@ethereal.com http://www.ethereal.com/mailman/listinfo/ethereal-dev 


[Attachment #5 (text/html)]

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">


<META content="MSHTML 5.50.4611.1300" name=GENERATOR></HEAD>
<BODY>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=591065508-28102002>You 
are right, bits 8765 in 3rd octet shouldn't be 0'd. I haven't noticed mistake 
due to one digit MNC I have used to test. Patch should be soon. 
</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN 
class=591065508-28102002></SPAN></FONT>&nbsp;</DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN 
class=591065508-28102002>Regards, Michal</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN 
class=591065508-28102002></SPAN></FONT>&nbsp;</DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN 
class=591065508-28102002></SPAN></FONT>&nbsp;</DIV>
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma 
size=2>-----Original Message-----<BR><B>From:</B> ext ETC WAJU 
[mailto:etcwaju@hotmail.com]<BR><B>Sent:</B> Monday, October 28, 2002 2:30 
AM<BR><B>To:</B> ethereal-dev@ethereal.com; jmayer@loplof.de<BR><B>Cc:</B> 
etcwaju@hotmail.com<BR><B>Subject:</B> [Ethereal-dev] bug report regatding GPRS 
GTPv1<BR><BR></FONT></DIV>
<DIV>
<DIV>
<DIV>
<DIV>Dear developers</DIV>
<DIV>&nbsp;</DIV>
<DIV>I am here to report a bug I found in Ethereal 0.9.7 regarding GTP v1.</DIV>
<DIV><FONT size=2>
<P>The coding of Information Elemenent IMSI in GTP v1 according to 3GPP 29.060 
is as follows:</P>
<P>bits&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \
 8765 4321</P>
<P>Octects 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; type=2</P>
<P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
2~9&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;IMSI</P>
<P>The IMSI is TBCD-coded with a fixed length of 8 octets. Bits 8765 of octet 
n+1 encodes digit 2n, bits 4321 of octet n+1 encodes digit 2n-1. Unused half 
octets shall be coded as binary "1 1 1 1". Digits are packed contiguously with 
no internal padding.</P>
<P>So for string in the trace which I captured running on GTPv1 "02 13 20 06 02 
22 22 00 F3"</P>
<P>the IMSI was wrongly decoded as 310060202222003, but it should be decoded as 
310260202222003</P>
<P><FONT face=Arial color=#0000ff></FONT>&nbsp;</P>
<P>The coding of IMSI in GTPv0 according to GSM 03.60</P>
<P>bits&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \
 8765&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \
 4321</P>
<P>Octects 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; type=2</P>
<P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \
 2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MCC(digit 
2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MCC(digit1)</P>
<P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \
 3&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
1111&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \
 MCC(digit3)</P>
<P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \
 4&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MNC(digit 
2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MCC(digit1)</P>
<P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \
 5&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MSN(digit 
2)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;MSN(digit1)</P>
<P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \
 6&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MSN(digit 
4)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MSN(digit3)</P>
<P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \
 7&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MSN(digit 
6)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MSN(digit5)</P>
<P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \
 8&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;MSN(digit 
8)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;MSN(digit7)</P>
<P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; \
 9&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;MSN(digit 
10)&nbsp;&nbsp;&nbsp;&nbsp; MSN(digit9)</P>
<P>So apparently in the above example, GTPv0 decoding was wrongly used to decode 
IMSI in GTPv1 format.</P>
<P>Please feel free to contact me for any questions.</P>
<P>Thanks, JW</P></FONT></DIV></DIV></DIV></DIV><BR clear=all>
<HR>
Protect your PC - <A href="http://g.msn.com/8HMWEN/2024">Click here</A> for 
McAfee.com VirusScan Online _______________________________________________ 
Ethereal-dev mailing list Ethereal-dev@ethereal.com 
http://www.ethereal.com/mailman/listinfo/ethereal-dev </BODY></HTML>


_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@ethereal.com
http://www.ethereal.com/mailman/listinfo/ethereal-dev

[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic