[prev in list] [next in list] [prev in thread] [next in thread] 

List:       wireshark-users
Subject:    Re: [Wireshark-users] why there is a malformed?
From:       Pascal Quantin <pascal.quantin () gmail ! com>
Date:       2014-02-23 19:26:15
Message-ID: CAGka-81SK6WQu0Ui9eAoUZG0inJqEbqm_40hso84TbGnnES3hw () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/related)]

[Attachment #4 (multipart/alternative)]


2014-02-23 20:24 GMT+01:00 Pascal Quantin <pascal.quantin@gmail.com>:

> 2014-02-23 9:26 GMT+01:00 damker <damker@sina.com>:
>
>
>> the attachment file is a sample file for lte rrc message(pls set user_dlt
>> 147 as lte-rrc.ul.dcch ), there is a malformed error,
>> as shown below, is the red mark should be decoded as "ultraTDD128"?
>>
>
> Hi,
>
> the packet is malformed and Wireshark decoding correct:
> - the UE Capability RAT container has a size of only 12 bytes and the
> interRAT parameters IE already reaches the last byte of the container
> - the interRAT-Parameters IE indicates that only utraFDD optional IE is
> present
> You can check it yourself by activating the PER internal debug output by
> ticking Preferences -> Protocols -> PER -> "Display the internal PER fields
> in the tree".
> I also checked the encoding of the UE EUTRA Capability IE and it also
> complains about a size too short.
>
>
I meant that I checked the encoding with another tool than Wireshark and it
also complains.


> Best regards,
> Pascal.
>

[Attachment #7 (text/html)]

<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">2014-02-23 20:24 \
GMT+01:00 Pascal Quantin <span dir="ltr">&lt;<a \
href="mailto:pascal.quantin@gmail.com" \
target="_blank">pascal.quantin@gmail.com</a>&gt;</span>:<br>

<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc \
solid;padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><div \
class="gmail_quote">2014-02-23 9:26 GMT+01:00 damker <span dir="ltr">&lt;<a \
href="mailto:damker@sina.com" target="_blank">damker@sina.com</a>&gt;</span>:<div \
class="">

<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc \
solid;padding-left:1ex"> <u></u>





<br><div style="MARGIN:10px">
<div>the attachment file is a sample file for lte rrc message(pls set 
user_dlt 147 as lte-rrc.ul.dcch ), there is a malformed error, </div>
<div>as shown below, is the red mark should be decoded 
as &quot;ultraTDD128&quot;?</div>
<div><img src="cid:_Foxmail.0@62FB6BF7-DFAB-401F-A246-ACEE65AF0923"></div></div></blockquote><div><br></div></div><div>Hi,<br><br>the \
packet is malformed and Wireshark decoding correct:<br></div><div>- the UE Capability \
RAT container has a size of only 12 bytes and the interRAT parameters IE already \
reaches the last byte of the container<br>


</div><div>- the interRAT-Parameters IE indicates that only utraFDD optional IE is \
present<br></div><div>You can check it yourself by activating the PER internal debug \
output by ticking Preferences -&gt; Protocols -&gt; PER -&gt; &quot;Display the \
internal PER fields in the tree&quot;.<br>


</div><div>I also checked the encoding of the UE EUTRA Capability IE and it also \
complains about a size too short.<br><br></div></div></div></div></blockquote><div> \
</div><div>I meant that I checked the encoding with another tool than Wireshark and \
it also complains.<br>

 <br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px \
#ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><div \
class="gmail_quote"><div></div><div>Best regards,<br>Pascal.<br>

</div></div></div></div>
</blockquote></div><br></div></div>

--089e016282365bd2d904f317d555--


["Catch.jpg" (image/jpeg)]

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@wireshark.org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@wireshark.org?subject=unsubscribe

[prev in list] [next in list] [prev in thread] [next in thread]