| blob | 55eb8ca0d549cf6abb7904bf10cc1aa60899330b |
1 /* packet-gtp.c
2 *
3 * Routines for GTP dissection
4 * Copyright 2001, Michal Melerowicz <michal.melerowicz@nokia.com>
5 * Nicolas Balkota <balkota@mac.com>
6 *
7 * Updates and corrections:
8 * Copyright 2006 - 2009, Anders Broman <anders.broman@ericsson.com>
9 *
10 * Added Bearer control mode dissection:
11 * Copyright 2011, Grzegorz Szczytowski <grzegorz.szczytowski@gmail.com>
12 *
13 * Updates and corrections:
14 * Copyright 2011-2013, Anders Broman <anders.broman@ericsson.com>
15 *
16 * PDCP PDU number extension header support added by Martin Isaksson <martin.isaksson@ericsson.com>
17 *
18 * Control Plane Request-Response tracking code Largely based on similar routines in
19 * packet-ldap.c by Ronnie Sahlberg
20 * Added by Kari Tiirikainen <kari.tiirikainen@nsn.com>
21 *
22 * Wireshark - Network traffic analyzer
23 * By Gerald Combs <gerald@wireshark.org>
24 * Copyright 1998 Gerald Combs
25 *
26 * SPDX-License-Identifier: GPL-2.0-or-later
27 *
28 * GTP v0: 3GPP TS 09.60
29 *
30 * http://www.3gpp.org/ftp/Specs/html-info/0960.htm
31 *
32 * GTP v1: 3GPP TS 29.060
33 *
34 * http://www.3gpp.org/ftp/Specs/html-info/29060.htm
35 *
36 * GTP': 3GPP TS 32.295
37 *
38 * http://www.3gpp.org/ftp/Specs/html-info/32295.htm
39 */
43 #include <math.h>
45 #include <epan/packet.h>
46 #include <epan/conversation.h>
47 #include <epan/prefs.h>
48 #include <epan/expert.h>
49 #include <epan/sminmpec.h>
50 #include <epan/addr_resolv.h>
51 #include <epan/asn1.h>
52 #include <epan/tap.h>
53 #include <epan/srt_table.h>
54 #include <epan/to_str.h>
55 #include <epan/uat.h>
56 #include <epan/proto_data.h>
57 #include <epan/etypes.h>
58 #include <epan/tfs.h>
59 #include <epan/unit_strings.h>
86 #define GTPv0_PORT 3386
90 #define GTPv0_HDR_LENGTH 20
91 #define GTPv1_HDR_LENGTH 12
92 #define GTP_PRIME_HDR_LENGTH 6
94 /* to check compliance with ETSI */
95 #define GTP_MANDATORY 1
96 #define GTP_OPTIONAL 2
97 #define GTP_CONDITIONAL 4
99 #define GTP_TPDU_AS_NONE -1
100 #define GTP_TPDU_AS_TPDU_HEUR 0
101 #define GTP_TPDU_AS_PDCP_LTE 1
102 #define GTP_TPDU_AS_PDCP_NR 2
103 #define GTP_TPDU_AS_SYNC 3
104 #define GTP_TPDU_AS_ETHERNET 4
105 #define GTP_TPDU_AS_CUSTOM 5
119 /*KTi*/
430 /* Generated from convert_proto_tree_add_text.pl */
496 /* Initialize the subtree pointers */
564 };
567 /* NRUP - TS 38.425 */
568 /* NR-U RAN Container */
628 {
629 gtp_private_data_t *gtp_data = (gtp_private_data_t*)p_get_proto_data(wmem_file_scope(), pinfo, proto_gtp, 0);
635 }
637 }
639 /* --- PDCP DECODE ADDITIONS --- */
640 static bool
641 pdcp_uat_fld_ip_chk_cb(void* r _U_, const char* ipaddr, unsigned len _U_, const void* u1 _U_, const void* u2 _U_, char** err)
642 {
643 ws_in4_addr ip4_addr;
644 ws_in6_addr ip6_addr;
646 /* Check for a valid IPv4 or IPv6 address */
652 }
656 }
660 static bool
661 pdcp_uat_fld_teid_chk_cb(void* r _U_, const char* teid, unsigned len _U_, const void* u1 _U_, const void* u2 _U_, char** err)
662 {
666 /* Check if it is a wildcard TEID */
670 }
671 /* Check if it is a valid 32bits unsigned integer */
675 }
676 }
680 }
684 address ip_address;
693 //unsigned rohc_mode;
695 /* One approach would be to just use the TEID, but it is 32 bits and would need to be
696 * truncated to (ultimately) 16 bits to be used as a UEId for PDCP */
701 /* N.B. this is an array/table of the struct above, where IP address + TEID is the key */
705 {
707 ws_in4_addr ip4_addr;
708 ws_in6_addr ip6_addr;
719 }
723 alloc_address_wmem(wmem_epan_scope(), &rec->ip_address, AT_IPv6, sizeof(ws_in6_addr), &ip6_addr);
725 alloc_address_wmem(wmem_epan_scope(), &rec->ip_address, AT_IPv4, sizeof(ws_in4_addr), &ip4_addr);
730 }
732 /* Range-check rb */
737 }
739 /* Range-check ueid */
744 }
748 }
751 {
755 /* Copy UAT fields */
764 //new_rec->rohc_mode = old_rec->rohc_mode;
772 }
775 {
781 }
791 };
793 /* Struct for saving PDCP-NR information about specific TEID */
796 address ip_address;
801 /* PDCP_NR_(U|D)L_sdap_hdr_PRESENT bitmask */
807 //unsigned rohc_mode;
809 /* One approach would be to just use the TEID, but it is 32 bits and would need to be
810 * truncated to (ultimately) 16 bits to be used as a UEId for PDCP */
815 /* N.B. this is an array/table of the struct above, where IP address + TEID is the key */
820 ws_in4_addr ip4_addr;
821 ws_in6_addr ip6_addr;
832 }
836 alloc_address_wmem(wmem_epan_scope(), &rec->ip_address, AT_IPv6, sizeof(ws_in6_addr), &ip6_addr);
838 alloc_address_wmem(wmem_epan_scope(), &rec->ip_address, AT_IPv4, sizeof(ws_in4_addr), &ip4_addr);
843 }
845 /* Range-check rb */
850 }
852 /* Range-check ueid */
857 }
860 }
866 /* Copy UAT fields */
876 //new_rec->rohc_mode = old_rec->rohc_mode;
884 }
887 {
893 }
901 };
903 /* Value sets for each drop-down list in the GUI */
905 #define PDCP_NR_SDAP_HEADER_NOT_PRESENT 0
906 #define PDCP_NR_SDAP_HEADER_PRESENT 1
911 };
915 #define PDCP_LTE_HEADER_NOT_PRESENT 0
916 #define PDCP_LTE_HEADER_PRESENT 1
922 };
931 };
939 };
945 };
952 };
954 //#define ROHC_MODE_NOT_SET_STR "Mode not set"
955 //static const value_string vs_rohc_mode[] = {
956 // { MODE_NOT_SET, ROHC_MODE_NOT_SET_STR },
957 // { UNIDIRECTIONAL, "Unidirectional" },
958 // { OPTIMISTIC_BIDIRECTIONAL, "Optimistic bidirectional" },
959 // { RELIABLE_BIDIRECTIONAL, "Reliable bidirectional" },
960 // { 0, NULL }
961 //};
972 };
974 /* Entries added by UAT */
978 /* Default values for a TEID entry */
981 UAT_VS_DEF(pdcp_nr_users, direction, uat_pdcp_nr_keys_record_t, unsigned, PDCP_NR_DIRECTION_UPLINK, PDCP_DIRECTION_UPLINK_STR)
982 UAT_VS_DEF(pdcp_nr_users, sdap_header_present, uat_pdcp_nr_keys_record_t, unsigned, PDCP_NR_SDAP_HEADER_NOT_PRESENT, PDCP_NR_SDAP_HEADER_NOT_PRESENT_STR)
983 UAT_VS_DEF(pdcp_nr_users, mac_i_present, uat_pdcp_nr_keys_record_t, unsigned, false, MAC_I_PRESENT_FALSE_STR)
984 UAT_VS_DEF(pdcp_nr_users, plane, uat_pdcp_nr_keys_record_t, enum pdcp_nr_plane, NR_USER_PLANE, USER_PLANE_STR)
985 UAT_VS_DEF(pdcp_nr_users, pdcp_nr_sn_length, uat_pdcp_nr_keys_record_t, unsigned, PDCP_NR_SN_LENGTH_12_BITS, PDCP_SN_LENGTH_12_BITS_STR)
986 UAT_VS_DEF(pdcp_nr_users, rohc_compression, uat_pdcp_nr_keys_record_t, unsigned, false, ROHC_COMPRESSION_FALSE_STR)
987 //UAT_VS_DEF(pdcp_nr_users, rohc_mode, uat_pdcp_nr_keys_record_t, unsigned, MODE_NOT_SET, ROHC_MODE_NOT_SET_STR)
988 UAT_VS_DEF(pdcp_nr_users, rohc_profile, uat_pdcp_nr_keys_record_t, unsigned, ROHC_PROFILE_UNCOMPRESSED, ROHC_PROFILE_UNCOMPRESSED_STR)
992 static uat_pdcp_nr_keys_record_t* look_up_pdcp_nr_keys_record(packet_info *pinfo, uint32_t teidn)
993 {
996 /* Look up UAT entries. N.B. linear search... */
1002 }
1003 }
1005 /* No match at all - return NULL */
1007 }
1009 /* Entries added by UAT */
1013 /* Default values for a TEID entry */
1016 UAT_VS_DEF(pdcp_lte_users, direction, uat_pdcp_lte_keys_record_t, unsigned, PDCP_NR_DIRECTION_UPLINK, PDCP_DIRECTION_UPLINK_STR)
1017 UAT_VS_DEF(pdcp_lte_users, header_present, uat_pdcp_lte_keys_record_t, unsigned, PDCP_LTE_HEADER_PRESENT, PDCP_LTE_HEADER_PRESENT_STR)
1018 UAT_VS_DEF(pdcp_lte_users, plane, uat_pdcp_lte_keys_record_t, enum pdcp_plane, USER_PLANE, USER_PLANE_STR)
1019 UAT_VS_DEF(pdcp_lte_users, lte_sn_length, uat_pdcp_lte_keys_record_t, unsigned, PDCP_NR_SN_LENGTH_12_BITS, PDCP_SN_LENGTH_12_BITS_STR)
1020 UAT_VS_DEF(pdcp_lte_users, rohc_compression, uat_pdcp_lte_keys_record_t, unsigned, false, ROHC_COMPRESSION_FALSE_STR)
1021 //UAT_VS_DEF(pdcp_lte_users, rohc_mode, uat_pdcp_lte_keys_record_t, unsigned, MODE_NOT_SET, ROHC_MODE_NOT_SET_STR)
1022 UAT_VS_DEF(pdcp_lte_users, rohc_profile, uat_pdcp_lte_keys_record_t, unsigned, ROHC_PROFILE_UNCOMPRESSED, ROHC_PROFILE_UNCOMPRESSED_STR)
1026 static uat_pdcp_lte_keys_record_t* look_up_pdcp_lte_keys_record(packet_info *pinfo, uint32_t teidn)
1027 {
1030 /* Look up UAT entries. N.B. linear search... */
1036 }
1037 }
1039 /* No match at all - return NULL */
1041 }
1043 /* --- END PDCP NR DECODE ADDITIONS --- */
1057 };
1063 /* Definition of flags masks */
1064 #define GTP_VER_MASK 0xE0
1068 "20-Octet Header"
1069 };
1081 };
1087 };
1089 #define GTP_PT_MASK 0x10
1090 #define GTP_SPARE1_MASK 0x0E
1091 #define GTP_SPARE2_MASK 0x08
1092 #define GTP_E_MASK 0x04
1093 #define GTP_S_MASK 0x02
1094 #define GTP_SNN_MASK 0x01
1095 #define GTP_PN_MASK 0x01
1097 #define GTP_EXT_HDR_NO_MORE_EXT_HDRS 0x00
1098 #define GTP_EXT_HDR_MBMS_SUPPORT_IND 0x01
1099 #define GTP_EXT_HDR_MS_INFO_CHG_REP_SUPP_IND 0x02
1102 #define GTP_EXT_HDR_UDP_PORT 0x40
1103 #define GTP_EXT_HDR_RAN_CONT 0x81
1104 #define GTP_EXT_HDR_LONG_PDCP_PDU 0x82
1105 #define GTP_EXT_HDR_XW_RAN_CONT 0x83
1106 #define GTP_EXT_HDR_NR_RAN_CONT 0x84
1107 #define GTP_EXT_HDR_PDU_SESSION_CONT 0x85
1108 #define GTP_EXT_HDR_PDCP_SN 0xC0
1109 #define GTP_EXT_HDR_SUSPEND_REQ 0xC1
1110 #define GTP_EXT_HDR_SUSPEND_RESP 0xC2
1128 };
1130 /* Definition of 3G charging characteristics masks */
1131 #define GTP_MASK_CHRG_CHAR_S 0xF000
1132 #define GTP_MASK_CHRG_CHAR_N 0x0800
1133 #define GTP_MASK_CHRG_CHAR_P 0x0400
1134 #define GTP_MASK_CHRG_CHAR_F 0x0200
1135 #define GTP_MASK_CHRG_CHAR_H 0x0100
1136 #define GTP_MASK_CHRG_CHAR_R 0x00FF
1138 /* Definition of GSN Address masks */
1139 #define GTP_EXT_GSN_ADDR_TYPE_MASK 0xC0
1140 #define GTP_EXT_GSN_ADDR_LEN_MASK 0x3F
1142 /* Definition of QoS masks */
1143 #define GTP_EXT_QOS_SPARE1_MASK 0xC0
1144 #define GTP_EXT_QOS_DELAY_MASK 0x38
1145 #define GTP_EXT_QOS_RELIABILITY_MASK 0x07
1146 #define GTP_EXT_QOS_PEAK_MASK 0xF0
1147 #define GTP_EXT_QOS_SPARE2_MASK 0x08
1148 #define GTP_EXT_QOS_PRECEDENCE_MASK 0x07
1149 #define GTP_EXT_QOS_SPARE3_MASK 0xE0
1150 #define GTP_EXT_QOS_MEAN_MASK 0x1F
1151 #define GTP_EXT_QOS_TRAF_CLASS_MASK 0xE0
1152 #define GTP_EXT_QOS_DEL_ORDER_MASK 0x18
1153 #define GTP_EXT_QOS_DEL_ERR_SDU_MASK 0x07
1154 #define GTP_EXT_QOS_RES_BER_MASK 0xF0
1155 #define GTP_EXT_QOS_SDU_ERR_RATIO_MASK 0x0F
1156 #define GTP_EXT_QOS_TRANS_DELAY_MASK 0xFC
1157 #define GTP_EXT_QOS_TRAF_HANDL_PRIORITY_MASK 0x03
1158 #define GTP_EXT_QOS_SPARE4_MASK 0xE0
1159 #define GTP_EXT_QOS_SIG_IND_MASK 0x10
1160 #define GTP_EXT_QOS_SRC_STAT_DESC_MASK 0x0F
1162 /* Definition of Radio Priority's masks */
1163 #define GTPv1_EXT_RP_NSAPI_MASK 0xF0
1164 #define GTPv1_EXT_RP_SPARE_MASK 0x08
1165 #define GTPv1_EXT_RP_MASK 0x07
1167 #define NR_UP_DL_USER_DATA 0
1168 #define NR_UP_DL_DATA_DELIVERY_STATUS 1
1169 #define NR_UP_ASSISTANCE_INFORMATION_DATA 2
1176 };
1189 };
1194 "Frame is not final"
1195 };
1207 /*
1208 * 8-15 For future use. Shall not be sent. If received,
1209 * shall be treated as an Unknown message.
1210 */
1211 #if 0
1220 #endif
1229 /*
1230 * 24-25 For future use. Shall not be sent. If received,
1231 * shall be treated as an Unknown message.
1232 */
1247 /* 38-47 For future use. Shall not be sent. If received,
1248 * shall be treated as an Unknown message.
1249 */
1250 #if 0
1261 #endif
1277 /* 63-69 For future use. Shall not be sent. If received,
1278 * shall be treated as an Unknown message.
1279 */
1280 #if 0
1288 #endif
1290 /* 71-95 For future use. Shall not be sent. If received,
1291 * shall be treated as an Unknown message.
1292 */
1293 #if 0
1319 #endif
1330 /* 106 - 111 For future use. Shall not be sent. If received,
1331 * shall be treated as an Unknown message.
1332 */
1333 #if 0
1340 #endif
1351 /* 122-127 For future use. Shall not be sent.
1352 * If received, shall be treated as an Unknown message.
1353 */
1354 #if 0
1361 #endif
1364 /* 130-239 For future use. Shall not be sent. If received,
1365 * shall be treated as an Unknown message.
1366 */
1367 #if 0
1398 #endif
1401 /* 242-253 For future use. Shall not be sent. If received,
1402 * shall be treated as an Unknown message.
1403 */
1404 #if 0
1417 #endif
1421 };
1424 /* definitions of fields in extension header */
1425 #define GTP_EXT_CAUSE 0x01
1426 #define GTP_EXT_IMSI 0x02
1427 #define GTP_EXT_RAI 0x03
1428 #define GTP_EXT_TLLI 0x04
1429 #define GTP_EXT_PTMSI 0x05
1430 #define GTP_EXT_QOS_GPRS 0x06
1431 #define GTP_EXT_REORDER 0x08
1432 #define GTP_EXT_AUTH_TRI 0x09
1433 #define GTP_EXT_MAP_CAUSE 0x0B
1434 #define GTP_EXT_PTMSI_SIG 0x0C
1435 #define GTP_EXT_MS_VALID 0x0D
1436 #define GTP_EXT_RECOVER 0x0E
1437 #define GTP_EXT_SEL_MODE 0x0F
1439 #define GTP_EXT_16 0x10
1440 #define GTP_EXT_FLOW_LABEL 0x10
1443 #define GTP_EXT_17 0x11
1444 #define GTP_EXT_FLOW_SIG 0x11
1447 #define GTP_EXT_18 0x12
1448 #define GTP_EXT_FLOW_II 0x12
1465 /* 117-126 Reserved for the GPRS charging protocol (see GTP' in 3GPP TS 32.295 [33]) */
1468 #define GTP_EXT_USER_ADDR 0x80
1469 #define GTP_EXT_MM_CNTXT 0x81
1470 #define GTP_EXT_PDP_CNTXT 0x82
1471 #define GTP_EXT_APN 0x83
1472 #define GTP_EXT_PROTO_CONF 0x84
1473 #define GTP_EXT_GSN_ADDR 0x85
1474 #define GTP_EXT_MSISDN 0x86
1486 #define GTP_EXT_ADD_RAB_SETUP_INF 0x92 /* 3G 146 TLV Additional RAB Setup Information 7.7.45A */
1495 #define GTP_EXT_CAMEL_CHG_INF_CON 0x9B /* 3G 155 TLV CAMEL Charging Information Container 7.7.54 */
1499 #define GTP_EXT_MBMS_PROT_CONF_OPT 0x9F /* 3G 159 TLV MBMS Protocol Configuration Options 7.7.58 */
1510 #define GTP_EXT_MBMS_SES_ID_REP_NO 0xAA /* 3G 170 TLV MBMS Session Identity Repetition Number 7.7.69 */
1517 #define GTP_EXT_REQ_MBMS_BEARER_CAP 0xB1 /* 3G 177 TLV Required MBMS bearer capabilities 7.7.76 */
1518 #define GTP_EXT_RIM_ROUTING_ADDR_DISC 0xB2 /* 3G 178 TLV RIM Routing Address Discriminator 7.7.77 */
1521 #define GTP_EXT_MS_INF_CHG_REP_ACT 0xB5 /* 3G 181 TLV MS Info Change Reporting Action 7.7.80 */
1528 #define GTP_EXT_RELIABLE_IRAT_HO_INF 0xBC /* 3G 188 TLV Reliable INTER RAT HANDOVER INFO 7.7.87 */
1531 #define GTP_EXT_EVO_ALLO_RETE_P1 0xBF /* 3G 191 TLV Evolved Allocation/Retention Priority I 7.7.91 */
1532 #define GTP_EXT_EVO_ALLO_RETE_P2 0xC0 /* 3G 192 TLV Evolved Allocation/Retention Priority II 7.7.92 */
1544 #define GTP_EXT_SIG_PRI_IND_W_NSAPI 0xCC /* 3G 204 TLV Signalling Priority Indication with NSAPI 7.7.104 */
1545 #define GTP_EXT_HIGHER_BR_16MB_FLG 0xCD /* 3G 205 TLV Higher bitrates than 16 Mbps flag 7.7.105 */
1555 #define GTP_EXT_LHN_ID_W_SAPI 0xD7 /* 3G 215 TLV Local Home Network ID (LHN-ID) with NSAPI 7.7.115 */
1560 #define GTP_EXT_CIOT_OPT_SUP_IND 0xDC /* 3G 220 TLV CIoT Optimizations Support Indication 7.7.120 */
1564 #define GTP_EXT_UP_FUN_SEL_IND_FLAGS 0xE0 /* 3G 224 TLV UP Function Selection Indication Flags 7.7.124 */
1567 /* 225-238 TLV Spare. For future use. */
1569 /* 239-250 Reserved for the GPRS charging protocol (see GTP' in 3GPP TS 32.295 [33])*/
1571 #define GTP_EXT_C1 0xC1
1572 #define GTP_EXT_C2 0xC2
1576 /* 252-254 Reserved for the GPRS charging protocol (see GTP' in 3GPP TS 32.295 [33])*/
1580 #define GTP_EXT_PRIV_EXT 0xFF
1589 /* 6-7 Spare */
1592 /* 10 Spare */
1604 /* ??? {GTP_EXT_FLOW_SIG, "Flow label signalling"}, */
1608 /* ??? {GTP_EXT_FLOW_II, "Flow label data II"}, */
1612 /* ??? {GTP_EXT_MS_REASON, "MS not reachable reason"}, */
1625 /* 117-126 Reserved for the GPRS charging protocol (see GTP' in 3GPP TS 32.295 [33]) */
1706 /* 204 */ {GTP_EXT_SIG_PRI_IND_W_NSAPI, "Signalling Priority Indication with NSAPI"}, /* 7.7.104 */
1726 /* 224 */ {GTP_EXT_UP_FUN_SEL_IND_FLAGS, "UP Function Selection Indication Flags" }, /* 7.7.124 */
1729 /* 225-238 TLV Spare. For future use. */
1730 /* 239-250 Reserved for the GPRS charging protocol (see GTP' in 3GPP TS 32.295 [33]) */
1734 /* 252-254 Reserved for the GPRS charging protocol (see GTP' in 3GPP TS 32.295 [33]) */
1740 };
1743 /* It seems like some IE's are renamed in gtpv1 at least reading
1744 * 3GPP TS 29.060 version 6.11.0 Release 6
1745 */
1753 /* 6-7 Spare */
1757 /* 10 Spare */
1779 /* 117-126 Reserved for the GPRS charging protocol (see GTP' in 3GPP TS 32.295 [33]) */
1826 /* 170 */ {GTP_EXT_MBMS_SES_ID_REP_NO, "MBMS Session Identity Repetition Number"}, /* 7.7.69 */
1881 /* 224 */ {GTP_EXT_UP_FUN_SEL_IND_FLAGS, "UP Function Selection Indication Flags" }, /* 7.7.124 */
1883 /* 225-238 TLV Spare. For future use. */
1884 /* 239-250 Reserved for the GPRS charging protocol (see GTP' in 3GPP TS 32.295 [33]) */
1888 /* 252-254 Reserved for the GPRS charging protocol (see GTP' in 3GPP TS 32.295 [33]) */
1895 };
1898 /* GPRS: 9.60 v7.6.0, page 37
1899 * UMTS: 29.060 v4.0, page 45
1900 * ETSI TS 129 060 V9.4.0 (2010-10) Ch 7.7.1
1901 */
1911 /* For future use 8-48 */
1912 /* Cause values reserved for GPRS charging
1913 * protocol use (see GTP' in 3GPP TS 32.295 [33])
1914 * 49-63
1915 */
1921 /* For future use 64-127 */
1925 /* For future use 131-176 */
1926 /* Cause values reserved for GPRS charging
1927 * protocol use (see GTP' in 3GPP TS 32.295 [33])
1928 * 177-191
1929 */
1974 /* For future use -240 */
1975 /* Cause values reserved for GPRS charging
1976 * protocol use (see GTP' in 3GPP TS 32.295 [33])
1977 * 241-255
1978 */
1984 };
1987 /* GPRS: 9.02 v7.7.0
1988 * UMTS: 29.002 v4.2.1, chapter 17.5, page 268
1989 * Imported gsm_old_GSMMAPLocalErrorcode_vals from gsm_map from gsm_map
1990 */
1996 };
2006 };
2012 };
2022 };
2033 };
2046 /* QoS Peak throughput classes from 0x0A to 0x0F (from 10 to 15) are subscribed */
2054 };
2063 };
2085 /* QoS Mean throughput classes from 0x13 to 0x1E (from 19 to 30) are subscribed */
2100 };
2110 };
2118 };
2128 };
2132 /* For values from 0x01 to 0x96 (from 1 to 150), use a granularity of 10 octets */
2137 };
2141 /* For values from 0x01 to 0x3F (from 1 to 63), use a granularity of 1 kbps */
2142 /* For values from 0x40 to 0x7F, value = 64 kbps + (value - 0x40) * 8 kbps */
2143 /* For values from 0x80 to 0xFE, value = 576 kbps + (value - 0x80) * 64 kbps */
2146 };
2150 /* For values from 0x01 to 0x3F (from 1 to 63), use a granularity of 1 kbps */
2151 /* For values from 0x40 to 0x7F, value = 64 kbps + (value - 0x40) * 8 kbps */
2152 /* For values from 0x80 to 0xFE, value = 576 kbps + (value - 0x80) * 64 kbps */
2155 };
2170 };
2183 };
2191 };
2226 {0x20, "1000 ms"}, /* For values from 0x20 to 0x3E, value = 1000 ms + (value - 0x20) * 100 ms */
2259 };
2264 /* For values from 0x01 to 0x3F (from 1 to 63), use a granularity of 1 kbps */
2265 /* For values from 0x40 to 0x7F, value = 64 kbps + (value - 0x40) * 8 kbps */
2266 /* For values from 0x80 to 0xFE, value = 576 kbps + (value - 0x80) * 64 kbps */
2269 };
2275 };
2280 "Not optimised for signalling traffic"
2281 };
2285 /* For values from 0x01 to 0x3F (from 1 to 63), use a granularity of 1 kbps */
2286 /* For values from 0x40 to 0x7F, value = 64 kbps + (value - 0x40) * 8 kbps */
2287 /* For values from 0x80 to 0xFE, value = 576 kbps + (value - 0x80) * 64 kbps */
2290 };
2296 {3, "For future use (Network provided APN, subscription not verified"}, /* Shall not be sent. If received, shall be sent as value 2 */
2298 };
2306 };
2308 /*
2309 * UMTS: 23.040 v14.0.0, chapter 3.3.2
2310 */
2327 };
2329 /* UMTS: 25.413 v3.4.0, chapter 9.2.1.4, page 80
2330 */
2332 /* Radio Network Layer Cause (1-->64) */
2397 /* Transport Layer Cause (65-->80) */
2400 /* NAS Cause (81-->96) */
2404 /* Protocol Cause (97-->112) */
2411 /* Miscellaneous Cause (113-->128) */
2416 /* Non-standard Cause (129-->255) */
2418 /* ranap_CauseRadioNetworkExtension ??
2419 { 257, "iP-multicast-address-and-APN-not-valid" },
2420 { 258, "mBMS-de-registration-rejected-due-to-implicit-registration" },
2421 { 259, "mBMS-request-superseded" },
2422 { 260, "mBMS-de-registration-during-session-not-allowed" },
2423 { 261, "mBMS-no-data-bearer-necessary" },
2424 */
2427 };
2436 };
2448 };
2460 };
2466 };
2473 /* reserved for future used (3-->127) */
2474 /* values below used by Radius */
2487 /* reserved for future used (140-->255) */
2489 };
2495 };
2498 #define MM_PROTO_GROUP_CALL_CONTROL 0x00
2499 #define MM_PROTO_BROADCAST_CALL_CONTROL 0x01
2500 #define MM_PROTO_PDSS1 0x02
2501 #define MM_PROTO_CALL_CONTROL 0x03
2502 #define MM_PROTO_PDSS2 0x04
2503 #define MM_PROTO_MM_NON_GPRS 0x05
2504 #define MM_PROTO_RR_MGMT 0x06
2505 #define MM_PROTO_MM_GPRS 0x08
2506 #define MM_PROTO_SMS 0x09
2507 #define MM_PROTO_SESSION_MGMT 0x0A
2508 #define MM_PROTO_NON_CALL_RELATED 0x0B
2512 static void
2514 {
2517 }
2521 }
2523 static tap_packet_status
2524 gtpstat_packet(void *pss, packet_info *pinfo, epan_dissect_t *edt _U_, const void *prv, tap_flags_t flags _U_)
2525 {
2532 /* we are only interested in reply packets */
2535 }
2536 /* if we have not seen the request, just ignore it */
2539 }
2541 /* Redoing the message indexing is bit redundant (and keeps us from
2542 * passing in the filter "gtp.message" in init_srt_table above),
2543 * but using message type as such would yield a long gtp_srt_table.
2544 */
2548 idx = GPOINTER_TO_UINT(g_hash_table_lookup(gtpstat_msg_idx_hash, GUINT_TO_POINTER(gtp->msgtype)));
2550 /* Store the value incremented by 1 to avoid confusing index 0 with NULL */
2553 g_hash_table_insert(gtpstat_msg_idx_hash, GUINT_TO_POINTER(gtp->msgtype), GUINT_TO_POINTER(idx + 1));
2554 init_srt_table_row(gtp_srt_table, idx, val_to_str_ext_const(gtp->msgtype, >p_message_type_ext, "Unknown"));
2557 }
2562 }
2583 /* Relation between frame -> session */
2585 /* Relation between <teid,ip> -> frame */
2590 address addr;
2593 static unsigned
2595 {
2598 /* The TEID is likely unique, so just use it. */
2600 }
2602 static gboolean
2604 {
2609 }
2611 /* GTP Session funcs*/
2612 uint32_t
2614 gtp_info_t info;
2623 }
2625 }
2627 static gboolean
2632 }
2634 void
2636 /* XXX: This iterates through the entire map and it is slow if done
2637 * often. For large files with lots of removals, there are better
2638 * alternatives, e.g. marking sessions as expired and then periodically
2639 * removing all expired sessions from the map, or using a bijective
2640 * map to coordinate removals.
2641 */
2643 }
2645 void
2649 }
2651 bool
2662 }
2664 }
2666 bool
2677 }
2679 }
2682 /* wmem_map_foreach() callback used in fill_map() */
2683 static void
2689 /* If it's the session we are looking for, we remove all the frame information */
2692 }
2693 }
2695 void
2702 /* XXX: This adds all combinations of addresses and TEIDs. It
2703 * should only add matching pairs for a F-TEID, though this is
2704 * difficult to determine for GTPv1 (especially if the check_etsi
2705 * preference is off) unlike with GTPv2.
2706 * It also should not add anything that uses the reserved TEID
2707 * (0), such as happens in GTPv2 on S11/S4 interfaces for the
2708 * PGW S5/S8 TEID on initial attach, etc.
2709 */
2713 /* We loop over the teid list */
2721 /* If the teid and ip already maps to a session, that means
2722 * that we need to remove old info about that session */
2723 /* We look for its session ID */
2726 /* If the msg has the same session ID and it's not the upd req we have to remove its info */
2728 }
2729 }
2732 }
2734 }
2735 }
2737 bool
2741 }
2744 }
2746 }
2748 static int decode_gtp_cause(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args);
2749 static int decode_gtp_imsi(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2750 static int decode_gtp_rai(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2751 static int decode_gtp_tlli(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2752 static int decode_gtp_ptmsi(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2753 static int decode_gtp_qos_gprs(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2754 static int decode_gtp_reorder(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2755 static int decode_gtp_auth_tri(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2756 static int decode_gtp_map_cause(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2757 static int decode_gtp_ptmsi_sig(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2758 static int decode_gtp_ms_valid(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2759 static int decode_gtp_recovery(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2760 static int decode_gtp_sel_mode(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2761 static int decode_gtp_16(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args);
2762 static int decode_gtp_17(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args);
2763 static int decode_gtp_18(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2764 static int decode_gtp_19(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2765 static int decode_gtp_nsapi(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2766 static int decode_gtp_ranap_cause(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2767 static int decode_gtp_rab_cntxt(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2768 static int decode_gtp_rp_sms(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2769 static int decode_gtp_rp(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2770 static int decode_gtp_pkt_flow_id(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2771 static int decode_gtp_chrg_char(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2772 static int decode_gtp_trace_ref(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2773 static int decode_gtp_trace_type(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2774 static int decode_gtp_ms_reason(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2775 static int decode_gtp_tr_comm(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2776 static int decode_gtp_chrg_id(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2777 static int decode_gtp_user_addr(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2778 static int decode_gtp_mm_cntxt(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2779 static int decode_gtp_pdp_cntxt(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2780 static int decode_gtp_apn(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2781 static int decode_gtp_gsn_addr_common(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args, const char * tree_name, int hf_ipv4, int hf_ipv6);
2782 static int decode_gtp_gsn_addr(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args);
2783 static int decode_gtp_sgsn_addr_for_control_plane(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args);
2784 static int decode_gtp_sgsn_addr_for_user_plane(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args);
2785 static int decode_gtp_ggsn_addr_for_control_plane(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args);
2786 static int decode_gtp_ggsn_addr_for_user_plane(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args);
2787 static int decode_gtp_proto_conf(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2788 static int decode_gtp_msisdn(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2789 static int decode_gtp_qos_umts(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2790 static int decode_gtp_auth_qui(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2791 static int decode_gtp_tft(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2792 static int decode_gtp_target_id(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2793 static int decode_gtp_utran_cont(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2794 static int decode_gtp_rab_setup(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2795 static int decode_gtp_hdr_list(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2796 static int decode_gtp_trigger_id(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2797 static int decode_gtp_omc_id(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2799 static int decode_gtp_ran_tr_cont(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2800 static int decode_gtp_pdp_cont_prio(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2801 static int decode_gtp_add_rab_setup_inf(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2802 static int decode_gtp_sgsn_no(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2803 static int decode_gtp_common_flgs(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2804 static int decode_gtp_apn_res(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2805 static int decode_gtp_ra_prio_lcs(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2806 static int decode_gtp_rat_type(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2807 static int decode_gtp_usr_loc_inf(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2808 static int decode_gtp_ms_time_zone(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2809 static int decode_gtp_imeisv(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2810 static int decode_gtp_camel_chg_inf_con(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2811 static int decode_gtp_mbms_ue_ctx(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2812 static int decode_gtp_tmgi(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2813 static int decode_gtp_rim_ra(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2814 static int decode_gtp_mbms_prot_conf_opt(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2815 static int decode_gtp_mbms_sa(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2816 static int decode_gtp_src_rnc_pdp_ctx_inf(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2817 static int decode_gtp_add_trs_inf(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2818 static int decode_gtp_hop_count(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2819 static int decode_gtp_sel_plmn_id(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2820 static int decode_gtp_mbms_ses_id(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2821 static int decode_gtp_mbms_2g_3g_ind(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2822 static int decode_gtp_enh_nsapi(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2823 static int decode_gtp_mbms_ses_dur(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2824 static int decode_gtp_add_mbms_trs_inf(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2825 static int decode_gtp_mbms_ses_id_rep_no(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2826 static int decode_gtp_mbms_time_to_data_tr(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2827 static int decode_gtp_ps_ho_req_ctx(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2828 static int decode_gtp_bss_cont(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2829 static int decode_gtp_cell_id(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2830 static int decode_gtp_pdu_no(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2831 static int decode_gtp_bssgp_cause(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2832 static int decode_gtp_mbms_bearer_cap(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2833 static int decode_gtp_rim_ra_disc(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2834 static int decode_gtp_lst_set_up_pfc(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2835 static int decode_gtp_ps_handover_xid(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2836 static int decode_gtp_direct_tnl_flg(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2837 static int decode_gtp_ms_inf_chg_rep_act(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2838 static int decode_gtp_corrl_id(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2839 static int decode_gtp_fqdn(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2840 static int decode_gtp_evolved_allc_rtn_p1(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2841 static int decode_gtp_evolved_allc_rtn_p2(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2842 static int decode_gtp_extended_common_flgs(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2843 static int decode_gtp_uci(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2844 static int decode_gtp_csg_inf_rep_act(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2845 static int decode_gtp_csg_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2846 static int decode_gtp_cmi(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2847 static int decode_gtp_apn_ambr(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2848 static int decode_gtp_ue_network_cap(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2849 static int decode_gtp_ue_ambr(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2850 static int decode_gtp_apn_ambr_with_nsapi(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2851 static int decode_gtp_ggsn_back_off_time(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2852 static int decode_gtp_sig_pri_ind(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2853 static int decode_gtp_sig_pri_ind_w_nsapi(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2854 static int decode_gtp_higher_br_16mb_flg(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2855 static int decode_gtp_max_mbr_apn_ambr(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2856 static int decode_gtp_add_mm_ctx_srvcc(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2857 static int decode_gtp_add_flgs_srvcc(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2858 static int decode_gtp_stn_sr(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2859 static int decode_gtp_c_msisdn(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2860 static int decode_gtp_ext_ranap_cause(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2861 static int decode_gtp_ext_enodeb_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2862 static int decode_gtp_ext_sel_mode_w_nsapi(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2863 static int decode_gtp_ext_uli_timestamp(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2864 static int decode_gtp_ext_lhn_id_w_sapi(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2865 static int decode_gtp_ext_cn_op_sel_entity(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2866 static int decode_gtp_ue_usage_type(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2867 static int decode_gtp_extended_common_flgs_II(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2868 static int decode_gtp_ext_node_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2869 static int decode_gtp_ciot_opt_sup_ind(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2870 static int decode_gtp_scef_pdn_conn(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2871 static int decode_gtp_iov_updates_counter(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2872 static int decode_gtp_mapped_ue_usage_type(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2873 static int decode_gtp_up_fun_sel_ind_flags(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2875 static int decode_gtp_bearer_cntrl_mod(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2876 static int decode_gtp_mbms_flow_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2877 static int decode_gtp_mbms_ip_mcast_dist(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2878 static int decode_gtp_mbms_dist_ack(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2879 static int decode_gtp_reliable_irat_ho_inf(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2880 static int decode_gtp_rfsp_index(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2882 static int decode_gtp_chrg_addr(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2883 static int decode_gtp_rel_pack(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2884 static int decode_gtp_can_pack(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2885 static int decode_gtp_data_req(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2886 static int decode_gtp_data_resp(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2887 static int decode_gtp_node_addr(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2888 static int decode_gtp_priv_ext(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2889 static int decode_gtp_unknown(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2903 /* 0x07 */
2906 /* 0x0a */
2945 /* TS 29 060 V6.11.0 */
3038 };
3040 #define NUM_GTP_IES 255
3045 #define BCD2CHAR(d) ((d) | 0x30)
3049 {
3061 else
3065 else
3067 }
3070 }
3073 /* Next definitions and function check_field_presence_and_decoder checks if given field
3074 * in GTP packet is compliant with ETSI
3075 */
3089 /* ---------------------
3090 * GPRS messages
3091 * ---------------------*/
3094 {
3095 GTP_MSG_ECHO_REQ, {
3098 }
3099 },
3100 {
3101 GTP_MSG_ECHO_RESP, {
3105 }
3106 },
3107 {
3108 GTP_MSG_VER_NOT_SUPP, {
3110 }
3111 },
3112 {
3113 GTP_MSG_NODE_ALIVE_REQ, {
3117 }
3118 },
3119 {
3120 GTP_MSG_NODE_ALIVE_RESP, {
3123 }
3124 },
3125 {
3126 GTP_MSG_REDIR_REQ, {
3131 }
3132 },
3133 {
3134 GTP_MSG_REDIR_RESP, {
3138 }
3139 },
3140 {
3141 GTP_MSG_CREATE_PDP_REQ, {
3155 }
3156 },
3157 {
3158 GTP_MSG_CREATE_PDP_RESP, {
3173 }
3174 },
3175 {
3176 GTP_MSG_UPDATE_PDP_REQ, {
3185 }
3186 },
3187 {
3188 GTP_MSG_UPDATE_PDP_RESP, {
3200 }
3201 },
3202 {
3203 GTP_MSG_DELETE_PDP_REQ, {
3206 }
3207 },
3208 {
3209 GTP_MSG_DELETE_PDP_RESP, {
3213 }
3214 },
3215 {
3216 GTP_MSG_INIT_PDP_CONTEXT_ACT_REQ, {
3229 }
3230 },
3231 {
3232 GTP_MSG_INIT_PDP_CONTEXT_ACT_RESP, {
3247 }
3248 },
3249 {
3250 GTP_MSG_DELETE_AA_PDP_REQ, {
3254 }
3255 },
3256 {
3257 GTP_MSG_DELETE_AA_PDP_RESP, {
3261 }
3262 },
3263 {
3264 GTP_MSG_ERR_IND, {
3267 }
3268 },
3269 {
3270 GTP_MSG_PDU_NOTIFY_REQ, {
3274 }
3275 },
3276 {
3277 GTP_MSG_PDU_NOTIFY_RESP, {
3281 }
3282 },
3283 {
3284 GTP_MSG_PDU_NOTIFY_REJ_REQ, {
3289 }
3290 },
3291 {
3292 GTP_MSG_PDU_NOTIFY_REJ_RESP, {
3296 }
3297 },
3298 {
3299 GTP_MSG_SEND_ROUT_INFO_REQ, {
3303 }
3304 },
3305 {
3306 GTP_MSG_SEND_ROUT_INFO_RESP, {
3314 }
3315 },
3316 {
3317 GTP_MSG_FAIL_REP_REQ, {
3321 }
3322 },
3323 {
3324 GTP_MSG_FAIL_REP_RESP, {
3329 }
3330 },
3331 {
3332 GTP_MSG_MS_PRESENT_REQ, {
3337 }
3338 },
3339 {
3340 GTP_MSG_MS_PRESENT_RESP, {
3344 }
3345 },
3346 {
3347 GTP_MSG_IDENT_REQ, {
3353 }
3354 },
3355 {
3356 GTP_MSG_IDENT_RESP, {
3363 }
3364 },
3365 {
3366 GTP_MSG_SGSN_CNTXT_REQ, {
3374 }
3375 },
3376 {
3377 GTP_MSG_SGSN_CNTXT_RESP, {
3385 }
3386 },
3387 {
3388 GTP_MSG_SGSN_CNTXT_ACK, {
3394 }
3395 },
3396 {
3397 GTP_MSG_DATA_TRANSF_REQ, {
3404 }
3405 },
3406 {
3407 GTP_MSG_DATA_TRANSF_RESP, {
3412 }
3413 },
3414 {
3417 }
3418 }
3419 };
3421 /* -----------------------------
3422 * UMTS messages
3423 * -----------------------------*/
3425 /* 7.2 Path Management Messages */
3426 {
3427 GTP_MSG_ECHO_REQ, {
3430 }
3431 },
3432 {
3433 GTP_MSG_ECHO_RESP, {
3437 }
3438 },
3439 {
3440 GTP_MSG_VER_NOT_SUPP, {
3442 }
3443 },
3444 {
3445 GTP_MSG_SUPP_EXT_HDR, {
3448 }
3449 },
3450 /* ??? */
3451 {
3452 GTP_MSG_NODE_ALIVE_REQ, {
3456 }
3457 },
3458 {
3459 GTP_MSG_NODE_ALIVE_RESP, {
3462 }
3463 },
3464 {
3465 GTP_MSG_REDIR_REQ, {
3470 }
3471 },
3472 {
3473 GTP_MSG_REDIR_REQ, {
3475 }
3476 },
3477 /* 7.3 Tunnel Management Messages */
3478 {
3479 GTP_MSG_CREATE_PDP_REQ, {
3481 /* RAI is in TS 29.060 V6.11.0 */
3510 /* Updated to TS 29.060 V16.0.0 */
3522 }
3523 },
3524 {
3525 GTP_MSG_CREATE_PDP_RESP, {
3537 {GTP_EXT_GSN_ADDR, GTP_CONDITIONAL, NULL}, /* Alternative GGSN Addresses for Control Plane 7.7.32 */
3538 {GTP_EXT_GSN_ADDR, GTP_CONDITIONAL, NULL}, /* Alternative GGSN Address for user traffic 7.7.32 */
3541 /* TS 29.060 V6.11.0 */
3542 {GTP_EXT_CHRG_ADDR, GTP_OPTIONAL, NULL}, /* Alternative Charging Gateway Address Optional 7.7.44 */
3555 }
3556 },
3558 GTP_MSG_UPDATE_PDP_REQ, {
3568 {GTP_EXT_GSN_ADDR, GTP_MANDATORY, decode_gtp_sgsn_addr_for_control_plane}, /* SGSN Address for Control Plane Mandatory GSN Address 7.7.32 */
3569 {GTP_EXT_GSN_ADDR, GTP_MANDATORY, decode_gtp_sgsn_addr_for_user_plane}, /* SGSN Address for User Traffic Mandatory GSN Address 7.7.32 */
3570 {GTP_EXT_GSN_ADDR, GTP_OPTIONAL, NULL}, /* Alternative SGSN Address for Control Plane Conditional GSN Address 7.7.32 */
3571 {GTP_EXT_GSN_ADDR, GTP_OPTIONAL, NULL}, /* Alternative SGSN Address for User Traffic Conditional GSN Address 7.7.32 */
3591 }
3592 },
3594 GTP_MSG_UPDATE_PDP_RESP, {
3603 {GTP_EXT_GSN_ADDR, GTP_CONDITIONAL, NULL}, /* Alternative GGSN Address for Control Plane Conditional GSN Address 7.7.32 */
3604 {GTP_EXT_GSN_ADDR, GTP_CONDITIONAL, NULL}, /* Alternative GGSN Address for User Traffic Conditional GSN Address 7.7.32 */
3607 {GTP_EXT_CHRG_ADDR, GTP_OPTIONAL, NULL}, /* Alternative Charging Gateway Address Optional 7.7.44 */
3617 }
3618 },
3619 {
3620 GTP_MSG_DELETE_PDP_REQ, {
3631 }
3632 },
3633 {
3634 GTP_MSG_DELETE_PDP_RESP, {
3642 }
3643 },
3644 {
3645 GTP_MSG_ERR_IND, {
3647 {GTP_EXT_GSN_ADDR, GTP_MANDATORY, decode_gtp_ggsn_addr_for_control_plane}, /* GSN Address Mandatory 7.7.32 */
3650 }
3651 },
3652 {
3653 GTP_MSG_PDU_NOTIFY_REQ, {
3662 }
3663 },
3664 {
3665 GTP_MSG_PDU_NOTIFY_RESP, {
3669 }
3670 },
3671 {
3672 GTP_MSG_PDU_NOTIFY_REJ_REQ, {
3680 }
3681 },
3682 {
3683 GTP_MSG_PDU_NOTIFY_REJ_RESP, {
3687 }
3688 },
3689 {
3690 GTP_MSG_INIT_PDP_CONTEXT_ACT_REQ, {
3698 }
3699 },
3700 {
3701 GTP_MSG_INIT_PDP_CONTEXT_ACT_RESP, {
3703 {GTP_EXT_PROTO_CONF, GTP_CONDITIONAL, NULL}, /* Protocol Configuration Options Conditional 7.7.31 */
3705 }
3706 },
3707 /* 7.4 Location Management Messages */
3708 {
3709 GTP_MSG_SEND_ROUT_INFO_REQ, {
3713 }
3714 },
3715 {
3716 GTP_MSG_SEND_ROUT_INFO_RESP, {
3724 }
3725 },
3726 {
3727 GTP_MSG_FAIL_REP_REQ, {
3731 }
3732 },
3733 {
3734 GTP_MSG_FAIL_REP_RESP, {
3739 }
3740 },
3741 {
3742 GTP_MSG_MS_PRESENT_REQ, {
3747 }
3748 },
3749 {
3750 GTP_MSG_MS_PRESENT_RESP, {
3754 }
3755 },
3756 /* 7.5 Mobility Management Messages */
3757 {
3758 GTP_MSG_IDENT_REQ, {
3762 {GTP_EXT_GSN_ADDR, GTP_OPTIONAL, decode_gtp_sgsn_addr_for_control_plane}, /* SGSN Address for Control Plane Optional 7.7.32 */
3766 }
3767 },
3768 {
3769 GTP_MSG_IDENT_RESP, {
3777 }
3778 },
3779 {
3780 GTP_MSG_SGSN_CNTXT_REQ, {
3789 {GTP_EXT_GSN_ADDR, GTP_OPTIONAL, decode_gtp_sgsn_addr_for_control_plane}, /* Alternative SGSN Address for Control Plane Optional 7.7.32 */
3795 }
3796 },
3797 {
3798 GTP_MSG_SGSN_CNTXT_RESP, {
3829 {GTP_EXT_GSN_ADDR, GTP_OPTIONAL, NULL}, /* Alternative GGSN Address for Control Plane 7.7.32 */
3833 }
3834 },
3835 {
3836 GTP_MSG_SGSN_CNTXT_ACK, {
3844 }
3845 },
3846 {
3847 GTP_MSG_FORW_RELOC_REQ, {
3848 {GTP_EXT_IMSI, GTP_CONDITIONAL, NULL}, /* The IMSI shall not be included in the message if the MS is emergency attached and the MS is UICCless */
3890 {GTP_EXT_GSN_ADDR, GTP_OPTIONAL, NULL}, /* Alternative GGSN Address for Control Plane 7.7.32 */
3894 }
3895 },
3896 {
3897 GTP_MSG_FORW_RELOC_RESP, {
3900 {GTP_EXT_TEID_II, GTP_CONDITIONAL, NULL}, /* Tunnel Endpoint Identifier Data II Optional 7.7.15 */
3903 {GTP_EXT_GSN_ADDR, GTP_OPTIONAL, NULL}, /* SGSN Address for User Traffic - cannot appear without above Address for Control plane */
3906 {GTP_EXT_ADD_RAB_SETUP_INF, GTP_CONDITIONAL, NULL}, /* Additional RAB Setup Information Conditional 7.7.45A */
3915 }
3916 },
3917 {
3918 GTP_MSG_FORW_RELOC_COMP, {
3921 }
3922 },
3923 {
3924 GTP_MSG_RELOC_CANCEL_REQ, {
3925 {GTP_EXT_IMSI, GTP_CONDITIONAL, NULL}, /* If MS is emergency attached and the MS is UICCless, the IMSI cannot be included. */
3931 }
3932 },
3933 {
3934 GTP_MSG_RELOC_CANCEL_RESP, {
3938 }
3939 },
3940 {
3941 GTP_MSG_FORW_RELOC_ACK, {
3945 }
3946 },
3947 {
3948 GTP_MSG_FORW_SRNS_CNTXT_ACK, {
3952 }
3953 },
3954 {
3955 GTP_MSG_FORW_SRNS_CNTXT, {
3957 {GTP_EXT_SRC_RNC_PDP_CTX_INF, GTP_OPTIONAL, NULL}, /* Source RNC PDCP context info Optional 7.7.61 */
3961 }
3962 },
3964 /* 7.5.14 RAN Information Management Messages */
3965 {
3966 GTP_MSG_RAN_INFO_RELAY, {
3972 }
3973 },
3974 /* 7.5.15 UE Registration Query Request */
3975 {
3976 GTP_MSG_UE_REG_QUERY_REQ, {
3980 }
3981 },
3982 /* 7.5.16 UE Registration Query Response */
3983 {
3984 GTP_MSG_UE_REG_QUERY_RESP, {
3990 }
3991 },
3992 /* 7.5A MBMS Messages
3993 * 7.5A.1 UE Specific MBMS Messages
3994 */
3995 {
3996 GTP_MBMS_NOTIFY_REQ, {
3998 {GTP_EXT_TEID_CP, GTP_MANDATORY, NULL}, /* Tunnel Endpoint Identifier Control Plane Mandatory 7.7.14 */
4002 {GTP_EXT_GSN_ADDR, GTP_MANDATORY, decode_gtp_ggsn_addr_for_control_plane}, /* GGSN Address for Control Plane Mandatory 7.7.32 */
4003 {GTP_EXT_MBMS_PROT_CONF_OPT, GTP_OPTIONAL, NULL}, /* MBMS Protocol Configuration Options Optional 7.7.58 */
4006 }
4007 },
4008 {
4009 GTP_MBMS_NOTIFY_RES, {
4013 }
4014 },
4015 {
4016 GTP_MBMS_NOTIFY_REJ_REQ, {
4018 {GTP_EXT_TEID_CP, GTP_MANDATORY, NULL}, /* Tunnel Endpoint Identifier Control Plane Mandatory 7.7.14 */
4022 {GTP_EXT_GSN_ADDR, GTP_OPTIONAL, decode_gtp_sgsn_addr_for_control_plane}, /* SGSN Address for Control Plane Optional 7.7.32 */
4025 }
4026 },
4027 {
4028 GTP_MBMS_NOTIFY_REJ_RES, {
4032 }
4033 },
4034 {
4035 GTP_CREATE_MBMS_CNTXT_REQ, {
4040 {GTP_EXT_TEID_CP, GTP_CONDITIONAL, NULL}, /* Tunnel Endpoint Identifier Control Plane Conditional 7.7.14 */
4045 {GTP_EXT_GSN_ADDR, GTP_MANDATORY, decode_gtp_sgsn_addr_for_control_plane}, /* SGSN Address for signalling Mandatory GSN Address 7.7.32 */
4053 {GTP_EXT_MBMS_PROT_CONF_OPT, GTP_OPTIONAL, NULL}, /* MBMS Protocol Configuration Options Optional 7.7.58 */
4056 {GTP_EXT_ADD_MBMS_TRS_INF, GTP_OPTIONAL, NULL}, /* Additional MBMS Trace Info Optional 7.7.68 */
4059 }
4060 },
4061 {
4062 GTP_CREATE_MBMS_CNTXT_RES, {
4065 {GTP_EXT_TEID_CP, GTP_CONDITIONAL, NULL}, /* Tunnel Endpoint Identifier Control Plane Conditional 7.7.14 */
4067 {GTP_EXT_GSN_ADDR, GTP_CONDITIONAL, NULL}, /* GGSN Address for Control Plane Conditional GSN Address 7.7.32 */
4068 {GTP_EXT_GSN_ADDR, GTP_CONDITIONAL, NULL}, /* Alternative GGSN Address for Control Plane Conditional GSN Address 7.7.32 */
4070 {GTP_EXT_CHRG_ADDR, GTP_OPTIONAL, NULL}, /* Alternative Charging Gateway Address Optional 7.7.44 */
4071 {GTP_EXT_MBMS_PROT_CONF_OPT, GTP_OPTIONAL, NULL}, /* MBMS Protocol Configuration Options Optional 7.7.58 */
4074 }
4075 },
4076 {
4077 GTP_UPD_MBMS_CNTXT_REQ, {
4081 {GTP_EXT_TEID_CP, GTP_CONDITIONAL, NULL}, /* Tunnel Endpoint Identifier Control Plane Conditional 7.7.14 */
4084 {GTP_EXT_GSN_ADDR, GTP_MANDATORY, decode_gtp_sgsn_addr_for_control_plane}, /* SGSN Address for Control Plane Mandatory GSN Address 7.7.32 */
4085 {GTP_EXT_GSN_ADDR, GTP_CONDITIONAL, NULL}, /* Alternative SGSN Address for Control Plane Conditional GSN Address 7.7.32 */
4093 {GTP_EXT_ADD_MBMS_TRS_INF, GTP_OPTIONAL, NULL}, /* Additional MBMS Trace Info Optional 7.7.68 */
4096 }
4097 },
4098 {
4099 GTP_UPD_MBMS_CNTXT_RES, {
4102 {GTP_EXT_TEID_CP, GTP_MANDATORY, NULL}, /* Tunnel Endpoint Identifier Control Plane Conditional 7.7.14 */
4104 {GTP_EXT_GSN_ADDR, GTP_CONDITIONAL, NULL}, /* GGSN Address for Control Plane Conditional GSN Address 7.7.32 */
4105 {GTP_EXT_GSN_ADDR, GTP_CONDITIONAL, NULL}, /* Alternative GGSN Address for Control Plane Conditional GSN Address 7.7.32 */
4107 {GTP_EXT_CHRG_ADDR, GTP_OPTIONAL, NULL}, /* Alternative Charging Gateway Address Optional 7.7.44 */
4110 }
4111 },
4112 {
4113 GTP_DEL_MBMS_CNTXT_REQ, {
4115 {GTP_EXT_TEID_CP, GTP_MANDATORY, NULL}, /* Tunnel Endpoint Identifier Control Plane Conditional 7.7.14 */
4118 {GTP_EXT_MBMS_PROT_CONF_OPT, GTP_OPTIONAL, NULL}, /* MBMS Protocol Configuration Options Optional 7.7.58 */
4122 }
4123 },
4124 {
4125 GTP_DEL_MBMS_CNTXT_RES, {
4127 {GTP_EXT_MBMS_PROT_CONF_OPT, GTP_OPTIONAL, NULL}, /* MBMS Protocol Configuration Options Optional 7.7.58 */
4130 }
4131 },
4132 {
4133 GTP_MBMS_REG_REQ, {
4134 {GTP_EXT_TEID_CP, GTP_CONDITIONAL, NULL}, /* Tunnel Endpoint Identifier Control Plane Conditional 7.7.14 */
4137 {GTP_EXT_GSN_ADDR, GTP_CONDITIONAL, decode_gtp_sgsn_addr_for_control_plane}, /* SGSN Address for Control Plane GSN Address 7.7.32 */
4138 {GTP_EXT_GSN_ADDR, GTP_OPTIONAL, NULL}, /* Alternative SGSN Address for Control Plane GSN Address 7.7.32 */
4141 }
4142 },
4143 {
4144 GTP_MBMS_REG_RES, {
4146 {GTP_EXT_TEID_CP, GTP_CONDITIONAL, NULL}, /* Tunnel Endpoint Identifier Control Plane Conditional 7.7.14 */
4147 {GTP_EXT_GSN_ADDR, GTP_CONDITIONAL, NULL}, /* GGSN Address for Control Plane Conditional GSN Address 7.7.32 */
4148 {GTP_EXT_TMGI, GTP_CONDITIONAL, NULL}, /* Temporary Mobile Group Identity (TMGI) Conditional 7.7.56 */
4152 }
4153 },
4154 {
4155 GTP_MBMS_DE_REG_REQ, {
4160 }
4161 },
4162 {
4163 GTP_MBMS_DE_REG_RES, {
4167 }
4168 },
4169 {
4170 GTP_MBMS_SES_START_REQ, {
4172 {GTP_EXT_TEID_CP, GTP_CONDITIONAL, NULL}, /* Tunnel Endpoint Identifier Control Plane Conditional 7.7.14 */
4175 {GTP_EXT_GSN_ADDR, GTP_CONDITIONAL, NULL}, /* GGSN Address for Control Plane Conditional GSN Address 7.7.32 */
4176 {GTP_EXT_GSN_ADDR, GTP_OPTIONAL, NULL}, /* Alternative GGSN Address for Control Plane GSN Address 7.7.32 */
4179 {GTP_EXT_TMGI, GTP_MANDATORY, NULL}, /* Temporary Mobile Group Identity (TMGI) Mandatory 7.7.56 */
4183 {GTP_EXT_MBMS_SES_DUR, GTP_MANDATORY, NULL}, /* MBMS Session Duration Mandatory 7.7.59 */ /* V16.0.0 has it here. */
4184 {GTP_EXT_MBMS_SES_ID_REP_NO, GTP_OPTIONAL, NULL}, /* MBMS Session Identity Repetition Number Optional 7.7.69 */
4185 {GTP_EXT_MBMS_TIME_TO_DATA_TR, GTP_MANDATORY, NULL}, /* MBMS Time To Data Transfer Mandatory 7.7.70 */
4190 }
4191 },
4192 {
4193 GTP_MBMS_SES_START_RES, {
4196 {GTP_EXT_TEID, GTP_CONDITIONAL, NULL}, /* Tunnel Endpoint Identifier Data I Conditional 7.7.13 */
4197 {GTP_EXT_TEID_CP, GTP_CONDITIONAL, NULL}, /* Tunnel Endpoint Identifier Control Plane Conditional 7.7.14 */
4198 {GTP_EXT_GSN_ADDR, GTP_CONDITIONAL, NULL}, /* SGSN Address for Control Plane Conditional GSN Address 7.7.32 */
4199 {GTP_EXT_GSN_ADDR, GTP_CONDITIONAL, NULL}, /* SGSN Address for user traffic Conditional GSN Address 7.7.32 */
4200 {GTP_EXT_GSN_ADDR, GTP_OPTIONAL, NULL}, /* Alternative SGSN Address for user traffic GSN Address 7.7.32 */
4204 }
4205 },
4206 {
4207 GTP_MBMS_SES_STOP_REQ, {
4213 }
4214 },
4215 {
4216 GTP_MBMS_SES_STOP_RES, {
4220 }
4221 },
4222 {
4223 GTP_MBMS_SES_UPD_REQ, {
4227 {GTP_EXT_GSN_ADDR, GTP_OPTIONAL, NULL}, /* GGSN Address for Control Plane GSN Address 7.7.32 */
4228 {GTP_EXT_TMGI, GTP_MANDATORY, NULL}, /* Temporary Mobile Group Identity (TMGI) Mandatory 7.7.56 */
4229 {GTP_EXT_MBMS_SES_DUR, GTP_MANDATORY, NULL}, /* MBMS Session Duration Mandatory 7.7.59 */ /* V16.0.0 has it here. */
4232 {GTP_EXT_MBMS_SES_ID_REP_NO, GTP_OPTIONAL, NULL}, /* MBMS Session Identity Repetition Number Optional 7.7.69 */
4236 }
4237 },
4238 {
4239 GTP_MBMS_SES_UPD_RES, {
4244 {GTP_EXT_GSN_ADDR, GTP_OPTIONAL, NULL}, /* SGSN Address for Control Plane GSN Address 7.7.32 */
4247 }
4248 },
4249 {
4250 GTP_MS_INFO_CNG_NOT_REQ, {
4260 }
4261 },
4262 {
4263 GTP_MS_INFO_CNG_NOT_RES, {
4272 }
4273 },
4274 {
4277 }
4278 }
4279 };
4281 /* Data structure attached to a conversation,
4282 to keep track of request/response-pairs
4283 */
4289 static unsigned
4291 {
4295 }
4297 static int
4299 {
4303 nstime_t delta;
4307 }
4311 }
4318 }
4321 }
4323 static int
4325 {
4329 nstime_t delta;
4336 }
4339 }
4342 gtp_match_response(tvbuff_t * tvb, packet_info * pinfo, proto_tree * tree, int seq_nr, unsigned msgtype, gtp_conv_info_t *gtp_info, uint8_t last_cause)
4343 {
4382 }
4392 /*no match, let's try to make one*/
4408 }
4409 /* if we can't reuse the old one, grab a new chunk */
4412 }
4439 }
4440 }
4444 }
4445 }
4447 /* we have found a match */
4456 nstime_t ns;
4465 /* GTP session */
4466 /* If it does not have any session assigned yet */
4472 }
4473 }
4476 /* If the cause is not accepted then we have to remove all the session information about its corresponding request */
4478 }
4479 }
4480 }
4481 }
4482 }
4484 }
4487 static int
4488 check_field_presence_and_decoder(uint8_t message, uint8_t field, int *position, ie_decoder **alt_decoder)
4489 {
4503 }
4518 }
4519 }
4520 }
4522 }
4523 i++;
4524 }
4527 }
4529 /* Decoders of fields in extension headers, each function returns no of bytes from field */
4531 /* GPRS: 9.60 v7.6.0, chapter
4532 * UMTS: 29.060 v4.0, chapter
4533 * 7.7.1 Cause
4534 */
4535 static int
4536 decode_gtp_cause(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args)
4537 {
4543 }
4547 }
4549 /* GPRS: 9.60 v7.6.0, chapter 7.9.2
4550 * UMTS: 29.060 v4.0, chapter 7.7.2
4551 */
4552 static int
4553 decode_gtp_imsi(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
4554 {
4555 /* const char *imsi_str; */
4557 /* Octets 2 - 9 IMSI */
4561 }
4563 /* GPRS: 9.60 v7.6.0, chapter 7.9.3
4564 * UMTS: 29.060 v4.0, chapter 7.7.3 Routeing Area Identity (RAI)
4565 */
4566 static int
4567 decode_gtp_rai(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
4568 {
4580 }
4582 /* GPRS: 9.60 v7.6.0, chapter 7.9.4, page 39
4583 * UMTS: 29.060 v4.0, chapter 7.7.4 Temporary Logical Link Identity (TLLI)
4584 */
4585 static int
4586 decode_gtp_tlli(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
4587 {
4595 }
4597 /* GPRS: 9.60 v7.6.0, chapter 7.9.5, page 39
4598 * UMTS: 29.060 v4.0, chapter 7.7.5 Packet TMSI (P-TMSI)
4599 */
4600 static int
4601 decode_gtp_ptmsi(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
4602 {
4610 }
4612 /*
4613 * adjust - how many bytes before offset should be highlighted
4614 */
4615 static int
4616 decode_qos_gprs(tvbuff_t * tvb, int offset, proto_tree * tree, const char * qos_str, uint8_t adjust)
4617 {
4631 ext_tree_qos = proto_tree_add_subtree_format(tree, tvb, offset - adjust, 3 + adjust, ett_gtp_qos, NULL,
4644 }
4647 }
4649 /* GPRS: 9.60 v7.6.0, chapter 7.9.6, page 39
4650 * 4.08
4651 * 3.60
4652 * UMTS: not present
4653 * TODO: check if length is included: ETSI 4.08 vs 9.60
4654 */
4655 static int
4656 decode_gtp_qos_gprs(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
4657 {
4661 }
4663 /* GPRS: 9.60 v7.6.0, chapter 7.9.7, page 39
4664 * UMTS: 29.060 v4.0, chapter 7.7.6 Reordering Required
4665 */
4666 static int
4667 decode_gtp_reorder(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
4668 {
4676 }
4678 /* GPRS: 9.60 v7.6.0, chapter 7.9.8, page 40
4679 * 4.08 v7.1.2, chapter 10.5.3.1+
4680 * UMTS: 29.060 v4.0, chapter 7.7.7
4681 * TODO: Add blurb support by registering items in the protocol registration
4682 */
4683 static int
4684 decode_gtp_auth_tri(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
4685 {
4689 ext_tree_auth_tri = proto_tree_add_subtree(tree, tvb, offset, 29, ett_gtp_ies[GTP_EXT_AUTH_TRI], NULL,
4697 }
4699 /* GPRS: 9.60 v7.6.0, chapter 7.9.9, page 40
4700 * 9.02 v7.7.0, page 1090
4701 * UMTS: 29.060 v4.0, chapter 7.7.8, page 48
4702 * 29.002 v4.2.1, chapter 17.5, page 268
4703 */
4704 static int
4705 decode_gtp_map_cause(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
4706 {
4714 }
4716 /* GPRS: 9.60 v7.6.0, chapter 7.9.10, page 41
4717 * UMTS: 29.060 v4.0, chapter 7.7.9, page 48
4718 */
4719 static int
4720 decode_gtp_ptmsi_sig(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
4721 {
4729 }
4731 /* GPRS: 9.60 v7.6.0, chapter 7.9.11, page 41
4732 * UMTS: 29.060 v4.0, chapter 7.7.10, page 49
4733 */
4734 static int
4735 decode_gtp_ms_valid(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
4736 {
4744 }
4746 /* GPRS: 9.60 v7.6.0, chapter 7.9.12, page 41
4747 * UMTS: 29.060 v4.0, chapter 7.7.11 Recovery
4748 */
4749 static int
4750 decode_gtp_recovery(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
4751 {
4759 }
4761 /* GPRS: 9.60 v7.6.0, chapter 7.9.13, page 42
4762 * UMTS: 29.060 v4.0, chapter 7.7.12 Selection Mode
4763 */
4768 {
4771 /* Value in ASCII(UTF-8) */
4776 }
4778 static int
4779 decode_gtp_sel_mode(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
4780 {
4793 }
4795 /* GPRS: 9.60 v7.6.0, chapter 7.9.14, page 42
4796 * UMTS: 29.060 v4.0, chapter 7.7.13, page 50
4797 */
4798 static int
4799 decode_gtp_16(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args)
4800 {
4813 /* We save the teid_data so that we could assignate its corresponding session ID later */
4820 }
4821 }
4830 }
4831 }
4833 /* GPRS: 9.60 v7.6.0, chapter 7.9.15, page 42
4834 * UMTS: 29.060 v4.0, chapter 7.7.14, page 42
4835 */
4836 static int
4837 decode_gtp_17(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args)
4838 {
4848 proto_tree_add_item_ret_uint(tree, hf_gtp_teid_cp, tvb, offset+1 , 4, ENC_BIG_ENDIAN, &teid_cp);
4849 /* We save the teid_cp so that we could assignate its corresponding session ID later */
4855 }
4856 }
4862 }
4863 }
4865 /* GPRS: 9.60 v7.6.0, chapter 7.9.16, page 42
4866 * UMTS: 29.060 v4.0, chapter 7.7.15, page 51
4867 */
4868 static int
4869 decode_gtp_18(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
4870 {
4878 ext_tree_flow_ii = proto_tree_add_subtree(tree, tvb, offset, 4, ett_gtp_ies[GTP_EXT_FLOW_II], NULL,
4902 }
4903 }
4905 /* GPRS: 9.60 v7.6.0, chapter 7.9.16A, page 43
4906 * UMTS: 29.060 v4.0, chapter 7.7.16, page 51
4907 * Check if all ms_reason types are included
4908 */
4909 static int
4910 decode_gtp_19(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
4911 {
4928 }
4931 }
4933 /* GPRS: not present
4934 * UMTS: 29.060 v4.0, chapter 7.7.17, page 51
4935 */
4936 static int
4937 decode_gtp_nsapi(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
4938 {
4951 }
4953 /* GPRS: not present
4954 * UMTS: 29.060 v4.0, chapter 7.7.18, page 52
4955 */
4956 static int
4957 decode_gtp_ranap_cause(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
4958 {
5001 }
5003 /* GPRS: not present
5004 * UMTS: 29.060 v4.0, chapter 7.7.19, page 52
5005 */
5006 static int
5007 decode_gtp_rab_cntxt(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
5008 {
5011 ext_tree_rab_cntxt = proto_tree_add_subtree(tree, tvb, offset, 10, ett_gtp_ies[GTP_EXT_RAB_CNTXT], NULL,
5015 proto_tree_add_item(ext_tree_rab_cntxt, hf_gtp_rab_gtpu_dn, tvb, offset + 2, 2, ENC_BIG_ENDIAN);
5016 proto_tree_add_item(ext_tree_rab_cntxt, hf_gtp_rab_gtpu_up, tvb, offset + 4, 2, ENC_BIG_ENDIAN);
5017 proto_tree_add_item(ext_tree_rab_cntxt, hf_gtp_rab_pdu_dn, tvb, offset + 6, 2, ENC_BIG_ENDIAN);
5018 proto_tree_add_item(ext_tree_rab_cntxt, hf_gtp_rab_pdu_up, tvb, offset + 8, 2, ENC_BIG_ENDIAN);
5021 }
5024 /* GPRS: not present
5025 * UMTS: 29.060 v4.0, chapter 7.7.20, page 53
5026 */
5027 static int
5028 decode_gtp_rp_sms(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
5029 {
5037 }
5039 /* GPRS: not present
5040 * UMTS: 29.060 v4.0, chapter 7.7.21, page 53
5041 */
5042 static int
5043 decode_gtp_rp(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
5044 {
5053 /* TODO: shouldn't really use int item as tree root.. */
5054 te = proto_tree_add_uint_format(tree, hf_gtp_rp, tvb, offset, 2, rp, "Radio Priority for NSAPI(%u) : %u", nsapi, rp);
5062 }
5064 /* GPRS: not present
5065 * UMTS: 29.060 v4.0, chapter 7.7.22, page 53
5066 */
5067 static int
5068 decode_gtp_pkt_flow_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
5069 {
5078 te = proto_tree_add_uint_format(tree, hf_gtp_pkt_flow_id, tvb, offset, 3, pkt_flow_id, "Packet Flow ID for NSAPI(%u) : %u", nsapi, pkt_flow_id);
5083 offset + 2, 1, pkt_flow_id, "%s : %u", val_to_str_ext_const(GTP_EXT_PKT_FLOW_ID, >p_val_ext, "Unknown message"), pkt_flow_id);
5086 }
5088 /* GPRS: not present
5089 * UMTS: 29.060 v4.0, chapter 7.7.23, page 53
5090 * TODO: Differenciate these uints?
5091 */
5092 static int
5093 decode_gtp_chrg_char(tvbuff_t* tvb, int offset, packet_info* pinfo _U_, proto_tree* tree, session_args_t* args _U_)
5094 {
5103 NULL
5104 };
5106 proto_tree_add_bitmask(tree, tvb, offset + 1, hf_gtp_chrg_char, ett_gtp_ies[GTP_EXT_CHRG_CHAR], gtp_charg_flags, ENC_BIG_ENDIAN);
5109 }
5111 /* GPRS: not present
5112 * UMTS: 29.060 v4.0, chapter 7.7.24, page
5113 */
5114 static int
5115 decode_gtp_trace_ref(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
5116 {
5125 }
5127 /* GPRS: not present
5128 * UMTS: 29.060 v4.0, chapter 7.7.25, page
5129 */
5130 static int
5131 decode_gtp_trace_type(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
5132 {
5141 }
5143 /* GPRS: 9.60 v7.6.0, chapter 7.9.16A
5144 * UMTS: 29.060 v4.0, chapter 7.7.25A, page
5145 */
5146 static int
5147 decode_gtp_ms_reason(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
5148 {
5154 /* Reason for Absence is defined in 3GPP TS 23.040 */
5158 }
5160 /* GPRS: ?
5161 * UMTS: 29.060 v6.11.0, chapter 7.7.25B
5162 * Radio Priority LCS
5163 */
5164 static int
5165 decode_gtp_ra_prio_lcs(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
5166 {
5172 ext_tree = proto_tree_add_subtree_format(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_RA_PRIO_LCS], NULL,
5175 offset++;
5183 }
5185 /* GPRS: 12.15 v7.6.0, chapter 7.3.3, page 45
5186 * UMTS: 33.015
5187 */
5188 static int
5189 decode_gtp_tr_comm(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
5190 {
5199 }
5201 /* GPRS: 9.60 v7.6.0, chapter 7.9.17, page 43
5202 * UMTS: 29.060 v4.0, chapter 7.7.26, page 55
5203 */
5204 static int
5205 decode_gtp_chrg_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
5206 {
5214 }
5216 /* GPRS: 9.60 v7.6.0, chapter 7.9.18, page 43
5217 * UMTS: 29.060 v4.0, chapter 7.7.27, page 55
5218 */
5219 static int
5220 decode_gtp_user_addr(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
5221 {
5260 ws_in6_addr ipv6;
5263 proto_tree_add_ipv6_format_value(ext_tree_user, hf_gtp_user_ipv6, tvb, offset + 9, 0, &ipv6, "dynamic");
5266 proto_tree_add_ipv4_format_value(ext_tree_user, hf_gtp_user_ipv6, tvb, offset + 5, 0, 0, "dynamic");
5275 proto_tree_add_expert_format(ext_tree_user, pinfo, &ei_gtp_ext_length_mal, tvb, offset + 3, length, "Wrong length indicated. Expected 6, 18 or 22, got %u", length);
5276 }
5278 }
5283 }
5285 static int
5287 {
5293 ext_tree_trip = proto_tree_add_subtree_format(tree, tvb, offset + i * 28, 28, ett_gtp_trip, NULL, "Triplet no%x", i);
5298 }
5301 }
5303 /* adjust - how many bytes before quintuplet should be highlighted
5304 */
5305 static int
5307 {
5324 proto_tree_add_item(ext_tree_quint, hf_gtp_xres_length, tvb, offset + q_offset, 1, ENC_BIG_ENDIAN);
5325 q_offset++;
5328 proto_tree_add_item(ext_tree_quint, hf_gtp_quintuplet_ciphering_key, tvb, offset + q_offset, 16, ENC_NA);
5330 proto_tree_add_item(ext_tree_quint, hf_gtp_quintuplet_integrity_key, tvb, offset + q_offset, 16, ENC_NA);
5333 proto_tree_add_item(ext_tree_quint, hf_gtp_authentication_length, tvb, offset + q_offset, 1, ENC_BIG_ENDIAN);
5334 q_offset++;
5340 }
5343 }
5345 /* GPRS: 9.60 v7.6.0, chapter 7.9.19 page
5346 * UMTS: 29.060 v4.0, chapter 7.7.28 page 57
5347 * TODO: - check if for quintuplets first 2 bytes are length, according to AuthQuint
5348 * - finish displaying last 3 parameters
5349 */
5350 static int
5351 decode_gtp_mm_cntxt(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
5352 {
5359 ext_tree_mm = proto_tree_add_subtree(tree, tvb, offset, 1, ett_gtp_ies[GTP_EXT_MM_CNTXT], NULL,
5362 /* Octet 2 - 3 */
5367 /* Octet 4 (cksn)*/
5369 /* Octet 5 */
5386 proto_tree_add_item(ext_tree_mm, hf_gtp_quintuplets_length, tvb, offset + 37, 2, ENC_BIG_ENDIAN);
5410 proto_tree_add_item(ext_tree_mm, hf_gtp_quintuplets_length, tvb, offset + 37, 2, ENC_BIG_ENDIAN);
5421 proto_tree_add_item(ext_tree_mm, hf_gtp_quintuplets_length, tvb, offset + 13, 2, ENC_BIG_ENDIAN);
5428 }
5430 /*
5431 * 3GPP TS 24.008 10.5.5.6 ( see packet-gsm_a.c )
5432 */
5433 tf_tree = proto_tree_add_subtree(ext_tree_mm, tvb, offset, 2, ett_gtp_drx, NULL, "DRX Parameter");
5438 tf_tree = proto_tree_add_subtree(ext_tree_mm, tvb, offset, len + 1, ett_gtp_net_cap, NULL, "MS Network Capability");
5442 offset++;
5443 /*
5444 * GPP TS 24.008 10.5.5.12 ( see packet-gsm_a.c )
5445 */
5449 }
5451 /* 3GPP TS 29.060 version 9.4.0 Release 9
5452 * The two octets Container Length holds the length of the Container, excluding the Container Length octets.
5453 * Container contains one or several optional information elements as described in the clause "Overview", from the clause
5454 * "General message format and information elements coding" in 3GPP TS 24.008 [5]. For the definition of the IEI see
5455 * table 47a, "IEIs for information elements used in the container". The IMEISV shall, if available, be included in the
5456 * Container. The IMEISV is included in the Mobile identity IE. If Container is not included, its Length field value shall
5457 * be set to 0. If the MS is emergency attached and the MS is UICCless or the IMSI is unauthenticated, the International
5458 * Mobile Equipment Identity (IMEI) shall be used as the MS identity.
5459 *
5460 * Table 47A: IEIs for information elements used in the container
5461 * IEI Information element
5462 * 0x23 Mobile identity
5463 *
5464 * NOTE: In 3GPP TS 24.008 [5] the IEI definition is
5465 * message dependent. The table is added to
5466 * have a unique definition in the present
5467 * document for the used IEI in the MMcontext.
5468 */
5477 con_tree = proto_tree_add_subtree(ext_tree_mm, tvb, offset, con_len, ett_gtp_mm_cntxt, NULL, "Container");
5483 offset++;
5486 offset++;
5490 }
5491 }
5494 }
5496 /* Function to extract the value of an hexadecimal octet. Only the lower
5497 * nybble will be non-zero in the output.
5498 * */
5499 static uint8_t
5501 {
5502 /* XXX, ws_xton() */
5509 else
5512 }
5514 /* Wrapper function to add UTF-8 decoding for QoS attributes in
5515 * RADIUS messages.
5516 * */
5517 static uint8_t
5519 {
5522 else
5524 }
5526 /* WARNING : actually length is coded on 2 octets for QoS profile but on 1 octet for PDP Context!
5527 * so type means length of length :-)
5528 *
5529 * WARNING :) type does not mean length of length any more... see below for
5530 * type = 3!
5531 */
5532 int
5533 decode_qos_umts(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, const char * qos_str, uint8_t type)
5534 {
5540 uint8_t max_sdu_size, max_ul, max_dl, max_ul_ext, max_dl_ext, max_ul_ext2 = 0, max_dl_ext2 = 0;
5551 /* Will keep if the input is UTF-8 encoded (as in RADIUS messages).
5552 * If 1, input is *not* UTF-8 encoded (i.e. each input octet corresponds
5553 * to one byte to be dissected).
5554 * If 2, input is UTF-8 encoded (i.e. each *couple* of input octets
5555 * corresponds to one byte to be dissected)
5556 * */
5559 /* Will keep the release indicator as indicated in the RADIUS message */
5562 /* In RADIUS messages the QoS has a version field of two octets prepended.
5563 * As of 29.061 v.3.a.0, there is an hyphen between "Release Indicator" and
5564 * <release specific QoS IE UTF-8 encoding>. Even if it sounds rather
5565 * inconsistent and unuseful, I will check hyphen presence here and
5566 * will signal its presence.
5567 * */
5570 /* Will keep the value that will be returned
5571 * */
5576 /* For QoS inside GPRS-CDR messages from GGSN/P-GW */
5580 /* QoS inside GPRS-CDR has no length octet, so no extra offset needed */
5585 ext_tree_qos = proto_tree_add_subtree(tree, tvb, offset, length + 1, ett_gtp_qos, NULL, qos_str);
5587 offset++;
5592 ext_tree_qos = proto_tree_add_subtree(tree, tvb, offset, length + 3, ett_gtp_qos, NULL, qos_str);
5598 /* For QoS inside RADIUS Client messages from GGSN/P-GW */
5601 /* The field in the RADIUS message is the length of the tvb we were given */
5608 /* Hyphen handling */
5611 /* Hyphen is present, put in protocol tree */
5614 }
5616 /* Now, we modify offset here and in order to use type later
5617 * effectively.*/
5618 offset++;
5623 /* Fake the length of the IE including the IE id and length octets
5624 * we are actually using it to determine presence of Octet n as counted
5625 * in TS 24.008
5626 */
5631 /* XXX - what should we do with the length here? */
5636 }
5639 /* Release 8 or higher P-GW QoS profile */
5644 NULL
5645 };
5647 offset++;
5657 /* GBR QCI */
5686 /* non GBR QCI */
5698 }
5700 }
5702 /* In RADIUS messages there is no allocation-retention priority
5703 * so I don't need to wrap the following call to tvb_get_uint8
5704 * */
5707 /* All calls are wrapped to take into account the possibility that the
5708 * input is UTF-8 encoded. If utf8_type is equal to 1, the final value
5709 * of the offset will be the same as in the previous version of this
5710 * dissector, and the wrapped function will serve as a dumb wrapper;
5711 * otherwise, if utf_8_type is 2, the offset is correctly shifted by
5712 * two bytes for needed shift, and the wrapped function will unencode
5713 * two values from the input.
5714 * */
5715 spare1 = wrapped_tvb_get_uint8(tvb, offset + (1 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_SPARE1_MASK;
5716 delay = wrapped_tvb_get_uint8(tvb, offset + (1 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_DELAY_MASK;
5717 reliability = wrapped_tvb_get_uint8(tvb, offset + (1 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_RELIABILITY_MASK;
5718 peak = wrapped_tvb_get_uint8(tvb, offset + (2 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_PEAK_MASK;
5719 spare2 = wrapped_tvb_get_uint8(tvb, offset + (2 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_SPARE2_MASK;
5720 precedence = wrapped_tvb_get_uint8(tvb, offset + (2 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_PRECEDENCE_MASK;
5721 spare3 = wrapped_tvb_get_uint8(tvb, offset + (3 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_SPARE3_MASK;
5722 mean = wrapped_tvb_get_uint8(tvb, offset + (3 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_MEAN_MASK;
5724 /* In RADIUS messages there is no allocation-retention priority */
5726 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_al_ret_priority, tvb, offset, 1, al_ret_priority);
5728 /* Add an octet to the binary data length to account for the
5729 * missing ARP so that the length tests below are correct.
5730 */
5732 }
5734 /* All additions must take care of the fact that QoS fields in RADIUS
5735 * messages are UTF-8 encoded, so we have to use the same trick as above.
5736 * */
5737 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_spare1, tvb, offset + (1 - 1) * utf8_type + 1, utf8_type, spare1);
5738 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_delay, tvb, offset + (1 - 1) * utf8_type + 1, utf8_type, delay);
5739 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_reliability, tvb, offset + (1 - 1) * utf8_type + 1, utf8_type, reliability);
5740 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_peak, tvb, offset + (2 - 1) * utf8_type + 1, utf8_type, peak);
5741 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_spare2, tvb, offset + (2 - 1) * utf8_type + 1, utf8_type, spare2);
5742 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_precedence, tvb, offset + (2 - 1) * utf8_type + 1, utf8_type, precedence);
5743 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_spare3, tvb, offset + (3 - 1) * utf8_type + 1, utf8_type, spare3);
5744 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_mean, tvb, offset + (3 - 1) * utf8_type + 1, utf8_type, mean);
5746 /* TS 24.008 V 7.8.0 10.5.6.5 Quality of service
5747 * The quality of service is a type 4 information element with a minimum length of 14 octets and a maximum length of 18
5748 * octets. The QoS requested by the MS shall be encoded both in the QoS attributes specified in octets 3-5 and in the QoS
5749 * attributes specified in octets 6-14.
5750 * In the MS to network direction and in the network to MS direction the following applies:
5751 * - Octets 15-18 are optional. If octet 15 is included, then octet 16 shall also be included, and octets 17 and 18 may
5752 * be included.
5753 * - If octet 17 is included, then octet 18 shall also be included.
5754 * - A QoS IE received without octets 6-18, without octets 14-18, without octets 15-18, or without octets 17-18 shall
5755 * be accepted by the receiving entity.
5756 */
5760 /* See above for the need of wrapping
5761 *
5762 */
5763 /* Octet 6 */
5764 traf_class = wrapped_tvb_get_uint8(tvb, offset + (4 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_TRAF_CLASS_MASK;
5765 del_order = wrapped_tvb_get_uint8(tvb, offset + (4 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_DEL_ORDER_MASK;
5766 del_err_sdu = wrapped_tvb_get_uint8(tvb, offset + (4 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_DEL_ERR_SDU_MASK;
5770 res_ber = wrapped_tvb_get_uint8(tvb, offset + (8 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_RES_BER_MASK;
5771 sdu_err_ratio = wrapped_tvb_get_uint8(tvb, offset + (8 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_SDU_ERR_RATIO_MASK;
5772 trans_delay = wrapped_tvb_get_uint8(tvb, offset + (9 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_TRANS_DELAY_MASK;
5773 traf_handl_prio = wrapped_tvb_get_uint8(tvb, offset + (9 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_TRAF_HANDL_PRIORITY_MASK;
5775 /* Octet 13 */
5787 spare4 = wrapped_tvb_get_uint8(tvb, offset + (12 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_SPARE4_MASK;
5788 sig_ind = wrapped_tvb_get_uint8(tvb, offset + (12 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_SIG_IND_MASK;
5789 src_stat_desc = wrapped_tvb_get_uint8(tvb, offset + (12 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_SRC_STAT_DESC_MASK;
5790 }
5794 }
5798 }
5802 }
5806 }
5808 /*
5809 * See above comments for the changes
5810 */
5811 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_traf_class, tvb, offset + (4 - 1) * utf8_type + 1, utf8_type, traf_class);
5812 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_del_order, tvb, offset + (4 - 1) * utf8_type + 1, utf8_type, del_order);
5813 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_del_err_sdu, tvb, offset + (4 - 1) * utf8_type + 1, utf8_type, del_err_sdu);
5815 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_max_sdu_size, tvb, offset + (5 - 1) * utf8_type + 1, utf8_type, max_sdu_size);
5818 proto_tree_add_uint_format_value(ext_tree_qos, hf_gtp_qos_max_sdu_size, tvb, offset + (5 - 1) * utf8_type + 1, utf8_type, mss,
5820 }
5823 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_max_ul, tvb, offset + (6 - 1) * utf8_type + 1, utf8_type, max_ul);
5825 proto_tree_add_uint_format_value(ext_tree_qos, hf_gtp_qos_max_ul, tvb, offset + (6 - 1) * utf8_type + 1, utf8_type, max_ul,
5829 proto_tree_add_uint_format_value(ext_tree_qos, hf_gtp_qos_max_ul, tvb, offset + (6 - 1) * utf8_type + 1, utf8_type, mu,
5831 }
5835 proto_tree_add_uint_format_value(ext_tree_qos, hf_gtp_qos_max_ul, tvb, offset + (6 - 1) * utf8_type + 1, utf8_type, mu,
5837 }
5840 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_max_dl, tvb, offset + (7 - 1) * utf8_type + 1, utf8_type, max_dl);
5842 proto_tree_add_uint_format_value(ext_tree_qos, hf_gtp_qos_max_dl, tvb, offset + (7 - 1) * utf8_type + 1, utf8_type, max_dl,
5846 proto_tree_add_uint_format_value(ext_tree_qos, hf_gtp_qos_max_dl, tvb, offset + (7 - 1) * utf8_type + 1, utf8_type, md,
5848 }
5851 proto_tree_add_uint_format_value(ext_tree_qos, hf_gtp_qos_max_dl, tvb, offset + (7 - 1) * utf8_type + 1, utf8_type, md,
5853 }
5855 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_res_ber, tvb, offset + (8 - 1) * utf8_type + 1, utf8_type, res_ber);
5856 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_sdu_err_ratio, tvb, offset + (8 - 1) * utf8_type + 1, utf8_type, sdu_err_ratio);
5857 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_trans_delay, tvb, offset + (9 - 1) * utf8_type + 1, utf8_type, trans_delay);
5858 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_traf_handl_prio, tvb, offset + (9 - 1) * utf8_type + 1, utf8_type, traf_handl_prio);
5861 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_guar_ul, tvb, offset + (10 - 1) * utf8_type + 1, utf8_type, guar_ul);
5863 proto_tree_add_uint_format_value(ext_tree_qos, hf_gtp_qos_guar_ul, tvb, offset + (10 - 1) * utf8_type + 1, utf8_type, guar_ul,
5867 proto_tree_add_uint_format_value(ext_tree_qos, hf_gtp_qos_guar_ul, tvb, offset + (10 - 1) * utf8_type + 1, utf8_type, gu,
5869 }
5872 proto_tree_add_uint_format_value(ext_tree_qos, hf_gtp_qos_guar_ul, tvb, offset + (10 - 1) * utf8_type + 1, utf8_type, gu,
5874 }
5876 /* Octet 13 */
5878 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_guar_dl, tvb, offset + (11 - 1) * utf8_type + 1, utf8_type, guar_dl);
5880 proto_tree_add_uint_format_value(ext_tree_qos, hf_gtp_qos_guar_dl, tvb, offset + (11 - 1) * utf8_type + 1, utf8_type, guar_dl,
5884 proto_tree_add_uint_format_value(ext_tree_qos, hf_gtp_qos_guar_dl, tvb, offset + (11 - 1) * utf8_type + 1, utf8_type, gd,
5886 }
5889 proto_tree_add_uint_format_value(ext_tree_qos, hf_gtp_qos_guar_dl, tvb, offset + (11 - 1) * utf8_type + 1, utf8_type, gd,
5891 }
5894 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_spare4, tvb, offset + (12 - 1) * utf8_type + 1, utf8_type, spare4);
5895 proto_tree_add_boolean(ext_tree_qos, hf_gtp_qos_sig_ind, tvb, offset + (12 - 1) * utf8_type + 1, utf8_type, sig_ind);
5896 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_src_stat_desc, tvb, offset + (12 - 1) * utf8_type + 1, utf8_type, src_stat_desc);
5897 }
5901 /* Octet 15 */
5903 proto_tree_add_expert_format(ext_tree_qos, pinfo, &ei_gtp_max_bit_rate_value, tvb, offset + (13 - 1) * utf8_type + 1, utf8_type,
5907 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_max_dl, tvb, offset + (13 - 1) * utf8_type + 1, utf8_type, md,
5909 }
5912 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_max_dl, tvb, offset + (13 - 1) * utf8_type + 1, utf8_type, md,
5914 }
5917 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_max_dl, tvb, offset + (13 - 1) * utf8_type + 1, utf8_type, md,
5919 }
5920 /* Octet 16 */
5922 proto_tree_add_expert_format(ext_tree_qos, pinfo, &ei_gtp_guaranteed_bit_rate_value, tvb, offset + (14 - 1) * utf8_type + 1, utf8_type,
5926 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_guar_dl, tvb, offset + (14 - 1) * utf8_type + 1, utf8_type, gd,
5928 }
5931 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_guar_dl, tvb, offset + (14 - 1) * utf8_type + 1, utf8_type, gd,
5933 }
5936 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_guar_dl, tvb, offset + (14 - 1) * utf8_type + 1, utf8_type, gd,
5938 }
5940 }
5942 /* Octet 17
5943 * This field is an extension of the Maximum bit rate for uplink in octet 8. The coding is identical to that of the Maximum bit
5944 * rate for downlink (extended).
5945 */
5947 proto_tree_add_expert_format(ext_tree_qos, pinfo, &ei_gtp_max_bit_rate_value, tvb, offset + (15 - 1) * utf8_type + 1, utf8_type,
5951 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_max_ul, tvb, offset + (15 - 1) * utf8_type + 1, utf8_type, md,
5953 }
5956 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_max_ul, tvb, offset + (15 - 1) * utf8_type + 1, utf8_type, md,
5958 }
5961 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_max_ul, tvb, offset + (15 - 1) * utf8_type + 1, utf8_type, md,
5963 }
5964 /* Octet 18 */
5966 proto_tree_add_expert_format(ext_tree_qos, pinfo, &ei_gtp_guaranteed_bit_rate_value, tvb, offset + (16 - 1) * utf8_type + 1, utf8_type,
5970 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_guar_ul, tvb, offset + (16 - 1) * utf8_type + 1, utf8_type, gd,
5972 }
5975 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_guar_ul, tvb, offset + (16 - 1) * utf8_type + 1, utf8_type, gd,
5977 }
5980 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_guar_ul, tvb, offset + (16 - 1) * utf8_type + 1, utf8_type, gd,
5982 }
5983 }
5986 /* Octet 19 Maximum bit rate for downlink (extended-2)
5987 * This field is an extension of the Maximum bit rate for uplink in octet 8. The coding is identical to that of the Maximum bit
5988 * rate for downlink (extended).
5989 */
5991 proto_tree_add_expert_format(ext_tree_qos, pinfo, &ei_gtp_max_bit_rate_value, tvb, offset + (17 - 1) * utf8_type + 1, utf8_type,
5996 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_max_ul, tvb, offset + (15 - 1) * utf8_type + 1, utf8_type, md,
5998 }
6001 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_max_ul, tvb, offset + (15 - 1) * utf8_type + 1, utf8_type, md,
6003 }
6006 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_max_ul, tvb, offset + (15 - 1) * utf8_type + 1, utf8_type, md,
6008 }
6009 /* Octet 20 Guaranteed bit rate for downlink (extended-2) */
6011 proto_tree_add_expert_format(ext_tree_qos, pinfo, &ei_gtp_max_bit_rate_value, tvb, offset + (16 - 1) * utf8_type + 1, utf8_type,
6015 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_guar_ul, tvb, offset + (16 - 1) * utf8_type + 1, utf8_type, gd,
6017 }
6020 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_guar_ul, tvb, offset + (16 - 1) * utf8_type + 1, utf8_type, gd,
6022 }
6025 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_guar_ul, tvb, offset + (16 - 1) * utf8_type + 1, utf8_type, gd,
6027 }
6028 }
6031 /* Maximum bit rate for uplink (extended-2), octet 21
6032 * This field is an extension of the Maximum bit rate for uplink in octet 8. The coding is identical to that of the Maximum bit
6033 * rate for downlink (extended).
6034 */
6036 proto_tree_add_expert_format(ext_tree_qos, pinfo, &ei_gtp_max_bit_rate_value, tvb, offset + (17 - 1) * utf8_type + 1, utf8_type,
6041 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_max_ul, tvb, offset + (15 - 1) * utf8_type + 1, utf8_type, md,
6043 }
6046 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_max_ul, tvb, offset + (15 - 1) * utf8_type + 1, utf8_type, md,
6048 }
6051 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_max_ul, tvb, offset + (15 - 1) * utf8_type + 1, utf8_type, md,
6053 }
6054 /* Guaranteed bit rate for uplink (extended-2), octet 22 */
6056 proto_tree_add_expert_format(ext_tree_qos, pinfo, &ei_gtp_max_bit_rate_value, tvb, offset + (16 - 1) * utf8_type + 1, utf8_type,
6060 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_guar_ul, tvb, offset + (16 - 1) * utf8_type + 1, utf8_type, gd,
6062 }
6065 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_guar_ul, tvb, offset + (16 - 1) * utf8_type + 1, utf8_type, gd,
6067 }
6070 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_guar_ul, tvb, offset + (16 - 1) * utf8_type + 1, utf8_type, gd,
6072 }
6073 }
6074 }
6077 }
6079 /* Diameter 3GPP AVP Code: 5 3GPP-GPRS Negotiated QoS profile */
6080 static int
6081 dissect_diameter_3gpp_qosprofile(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data _U_) {
6085 }
6089 {
6092 }
6094 static void
6095 decode_apn(packet_info *pinfo, tvbuff_t * tvb, int offset, uint16_t length, proto_tree * tree, proto_item *item)
6096 {
6099 /*
6100 * This is "a domain name represented as a sequence of labels, where
6101 * each label consists of a length octet followed by that number of
6102 * octets.", DNS-style.
6103 *
6104 * XXX - does it involve compression?
6105 */
6107 /* Highlight bytes including the first length byte */
6108 proto_tree_add_item_ret_string(tree, hf_gtp_apn, tvb, offset, length, ENC_APN_STR, pinfo->pool, &apn);
6111 }
6113 }
6115 static void
6116 decode_fqdn(tvbuff_t * tvb, int offset, uint16_t length, proto_tree * tree, session_args_t * args _U_)
6117 {
6120 /* "The FQDN field encoding shall be identical to the encoding of a FQDN
6121 * within a DNS message of clause 3.1 of IETF RFC 1035 [45] but excluding
6122 * the trailing zero byte"
6123 *
6124 * XXX: is compression possible?
6125 */
6129 /* "NOTE 1: The FQDN field in the IE is not encoded as a dotted string"
6130 * but if the first byte is large (in the letter range or higher),
6131 * assume that it is so encoded incorrectly.
6132 */
6137 }
6138 }
6140 /*
6141 * GPRS: 9.60 v7.6.0, chapter 7.9.20
6142 * UMTS: 29.060 v4.0, chapter 7.7.29 PDP Context
6143 * TODO: unify addr functions
6144 */
6145 static int
6146 decode_gtp_pdp_cntxt(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
6147 {
6156 ext_tree_pdp = proto_tree_add_subtree(tree, tvb, offset, length + 3, ett_gtp_ies[GTP_EXT_PDP_CNTXT], NULL,
6161 proto_tree_add_item(ext_tree_pdp, hf_gtp_extended_end_user_address, tvb, offset + 3, 1, ENC_NA);
6163 proto_tree_add_item(ext_tree_pdp, hf_gtp_activity_status_indicator, tvb, offset + 3, 1, ENC_NA);
6183 }
6185 proto_tree_add_item(ext_tree_pdp, hf_gtp_sequence_number_down, tvb, offset, 2, ENC_BIG_ENDIAN);
6186 proto_tree_add_item(ext_tree_pdp, hf_gtp_sequence_number_up, tvb, offset + 2, 2, ENC_BIG_ENDIAN);
6187 proto_tree_add_item(ext_tree_pdp, hf_gtp_send_n_pdu_number, tvb, offset + 4, 1, ENC_BIG_ENDIAN);
6188 proto_tree_add_item(ext_tree_pdp, hf_gtp_receive_n_pdu_number, tvb, offset + 5, 1, ENC_BIG_ENDIAN);
6192 proto_tree_add_item(ext_tree_pdp, hf_gtp_uplink_flow_label_signalling, tvb, offset + 6, 2, ENC_BIG_ENDIAN);
6197 proto_tree_add_item(ext_tree_pdp, hf_gtp_uplink_teid_data, tvb, offset + 10, 4, ENC_BIG_ENDIAN);
6198 proto_tree_add_item(ext_tree_pdp, hf_gtp_pdp_context_identifier, tvb, offset + 14, 1, ENC_BIG_ENDIAN);
6203 }
6210 proto_tree_add_item(ext_tree_pdp, hf_gtp_pdp_address_length, tvb, offset + 2, 1, ENC_BIG_ENDIAN);
6215 proto_tree_add_item(ext_tree_pdp, hf_gtp_pdp_address_ipv4, tvb, offset + 3, 4, ENC_BIG_ENDIAN);
6222 }
6223 }
6232 proto_tree_add_item(ext_tree_pdp, hf_gtp_ggsn_address_for_control_plane_ipv4, tvb, offset + 1, 4, ENC_BIG_ENDIAN);
6235 proto_tree_add_item(ext_tree_pdp, hf_gtp_ggsn_address_for_control_plane_ipv6, tvb, offset + 1, 16, ENC_NA);
6239 }
6250 proto_tree_add_item(ext_tree_pdp, hf_gtp_ggsn_address_for_user_traffic_ipv4, tvb, offset + 1, 4, ENC_BIG_ENDIAN);
6253 proto_tree_add_item(ext_tree_pdp, hf_gtp_ggsn_address_for_user_traffic_ipv6, tvb, offset + 1, 16, ENC_NA);
6257 }
6260 }
6267 /*
6268 * The Transaction Identifier is the 4 or 12 bit Transaction Identifier used in the 3GPP TS 24.008 [5] Session Management
6269 * messages which control this PDP Context. If the length of the Transaction Identifier is 4 bit, the second octet shall be
6270 * set to all zeros. The encoding is defined in 3GPP TS 24.007 [3]. The latest Transaction Identifier sent from SGSN to
6271 * MS is stored in the PDP context IE.
6272 * NOTE: Bit 5-8 of the first octet in the encoding defined in 3GPP TS 24.007 [3] is mapped into bit 1-4 of the first
6273 * octet in this field.
6274 */
6284 proto_tree_add_item(ext_tree_pdp, hf_gtp_pdp_address_length, tvb, offset + 1, 1, ENC_BIG_ENDIAN);
6296 }
6297 }
6298 }
6301 }
6303 /* GPRS: 9.60, v7.6.0, chapter 7.9.21
6304 * UMTS: 29.060, v4.0, chapter 7.7.30
6305 */
6306 static int
6307 decode_gtp_apn(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
6308 {
6316 ext_tree_apn = proto_tree_add_subtree(tree, tvb, offset, length + 3, ett_gtp_ies[GTP_EXT_APN], &te,
6323 }
6325 /* GPRS: 9.60 v7.6.0, chapter 7.9.22
6326 * 4.08 v. 7.1.2, chapter 10.5.6.3 (p.580)
6327 * UMTS: 29.060 v4.0, chapter 7.7.31 Protocol Configuration Options
6328 * 24.008, v4.2, chapter 10.5.6.3
6329 */
6330 int
6331 decode_gtp_proto_conf(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
6332 {
6341 ett_gtp_proto, NULL, val_to_str_ext_const(GTP_EXT_PROTO_CONF, >p_val_ext, "Unknown message"));
6348 /* The Protocol Configuration Options contains external network protocol options that may be necessary to transfer
6349 * between the GGSN and the MS. The content and the coding of the Protocol Configuration are defined in octet 3-z of the
6350 * Protocol Configuration Options in3GPP TS 24.008 [5].
6351 */
6356 }
6358 /* GPRS: 9.60 v7.6.0, chapter 7.9.23
6359 * UMTS: 29.060 v4.0, chapter 7.7.32
6360 */
6361 static int
6362 decode_gtp_gsn_addr_common(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args, const char * tree_name, int hf_ipv4, int hf_ipv6)
6363 {
6373 ext_tree_gsn_addr = proto_tree_add_subtree_format(tree, tvb, offset, 3 + length, ett_gtp_gsn_addr, &te, "%s : ", tree_name);
6377 proto_tree_add_item(ext_tree_gsn_addr, hf_gtp_gsn_address_length, tvb, offset + 1, 2, ENC_BIG_ENDIAN);
6380 proto_item_set_hidden(proto_tree_add_item(ext_tree_gsn_addr, hf_gtp_gsn_ipv4, tvb, offset + 3, 4, ENC_BIG_ENDIAN));
6385 proto_tree_add_item(ext_tree_gsn_addr, hf_gtp_gsn_address_information_element_length, tvb, offset + 1, 2, ENC_BIG_ENDIAN);
6392 proto_item_set_hidden(proto_tree_add_item(ext_tree_gsn_addr, hf_gtp_gsn_ipv4, tvb, offset + 4, 4, ENC_BIG_ENDIAN));
6397 proto_tree_add_item(ext_tree_gsn_addr, hf_gtp_gsn_address_length, tvb, offset + 1, 2, ENC_BIG_ENDIAN);
6400 proto_item_set_hidden(proto_tree_add_item(ext_tree_gsn_addr, hf_gtp_gsn_ipv6, tvb, offset + 3, 16, ENC_NA));
6405 proto_tree_add_item(ext_tree_gsn_addr, hf_gtp_gsn_address_information_element_length, tvb, offset + 1, 2, ENC_BIG_ENDIAN);
6413 proto_item_set_hidden(proto_tree_add_item(ext_tree_gsn_addr, hf_gtp_gsn_ipv6, tvb, offset + 4, 16, ENC_NA));
6419 }
6425 }
6426 }
6428 }
6430 static int
6431 decode_gtp_gsn_addr(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args) {
6432 return decode_gtp_gsn_addr_common(tvb, offset, pinfo, tree, args, "GSN address", hf_gtp_gsn_ipv4, hf_gtp_gsn_ipv6);
6433 }
6435 static int
6436 decode_gtp_sgsn_addr_for_control_plane(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args)
6437 {
6439 "SGSN Address for control plane", hf_gtp_sgsn_address_for_control_plane_ipv4, hf_gtp_sgsn_address_for_control_plane_ipv6);
6440 }
6442 static int
6443 decode_gtp_sgsn_addr_for_user_plane(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args)
6444 {
6446 "SGSN Address for user traffic", hf_gtp_sgsn_address_for_user_traffic_ipv4, hf_gtp_sgsn_address_for_user_traffic_ipv6);
6447 }
6449 static int
6450 decode_gtp_ggsn_addr_for_control_plane(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args)
6451 {
6453 "GGSN Address for control plane", hf_gtp_ggsn_address_for_control_plane_ipv4, hf_gtp_ggsn_address_for_control_plane_ipv6);
6454 }
6456 static int
6457 decode_gtp_ggsn_addr_for_user_plane(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args)
6458 {
6460 "GGSN Address for user traffic", hf_gtp_ggsn_address_for_user_traffic_ipv4, hf_gtp_ggsn_address_for_user_traffic_ipv6);
6461 }
6463 /* GPRS: 9.60 v7.6.0, chapter 7.9.24
6464 * UMTS: 29.060 v4.0, chapter 7.7.33
6465 */
6466 static int
6467 decode_gtp_msisdn(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
6468 {
6489 }
6491 /* GPRS: not present
6492 * UMTS: 29.060 v4.0, chapter 7.7.34
6493 * 24.008 v4.2, chapter 10.5.6.5
6494 */
6495 static int
6496 decode_gtp_qos_umts(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
6497 {
6500 }
6502 /* GPRS: not present
6503 * UMTS: 29.060 v4.0, chapter 7.7.35
6504 */
6505 static int
6506 decode_gtp_auth_qui(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
6507 {
6516 ext_tree = proto_tree_add_subtree(tree, tvb, offset, length + 1, ett_gtp_quint, NULL, "Quintuplet");
6517 offset++;
6526 offset++;
6535 offset++;
6540 }
6542 /* GPRS: not present
6543 * UMTS: 29.060 v4.0, chapter 7.7.36
6544 * 24.008 v4.2, chapter 10.5.6.12
6545 */
6546 static int
6547 decode_gtp_tft(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
6548 {
6554 ext_tree_tft = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_tft, NULL, "Traffic flow template");
6557 /* The detailed coding of Traffic Flow Template
6558 * Description is specified in 3GPP TS 24.008 [5] ,
6559 * clause 10.5.6.12, beginning with octet 3..
6560 * Use the decoding in packet-gsm_a_gm.c
6561 */
6565 }
6567 /* GPRS: not present
6568 * UMTS: 3GPP TS 29.060 version 10.4.0 Release 10, chapter 7.7.37
6569 * Type = 138 (Decimal)
6570 * 25.413(RANAP) TargetID
6571 * There are several CRs to this IE make sure to check with a recent spec if dissection is questioned.
6572 */
6573 static int
6574 decode_gtp_target_id(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
6575 {
6583 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_TARGET_ID], NULL, "Target Identification");
6589 }
6591 /* Quote from specification:
6592 * The Target Identification information element contains the identification of a target RNC. Octets 4-n shall contain a
6593 * non-transparent copy of the corresponding IEs (see subclause 7.7.2) and be encoded as specified in Figure 51 below.
6594 * The "Target RNC-ID" part of the "Target ID" parameter is specified in 3GPP TS 25.413 [7].
6595 * NOTE 1: The ASN.1 parameter "Target ID" is forwarded non-transparently in order to maintain backward compatibility.
6596 * NOTE 2: The preamble of the "Target RNC-ID" (numerical value of e.g. 0x20) however shall not be included in
6597 * octets 4-n. Also the optional "iE-Extensions" parameter shall not be included into the GTP IE.
6598 */
6599 /* Octet 4-6 MCC + MNC */
6601 /* Patch for systems still not following NOTE 2 */
6602 proto_tree_add_expert_format(ext_tree, pinfo, &ei_gtp_undecoded, tvb, offset, 1, "Not Compliant with 3GPP TS 29.060 7.7.37: The preamble of the \"Target RNC-ID\" (numerical value of e.g. 0x20) however shall not be included in octets 4-n.");
6606 /* Following Standards */
6608 }
6611 /* Octet 7-8 LAC */
6614 /* Octet 9 RAC */
6616 offset++;
6617 /* Octet 10-11 RNC-ID*/
6620 /* If the optional Extended RNC-ID is not included, then the length variable 'n' = 8 and the overall length of the IE is 11
6621 * octets. Otherwise, 'n' = 10 and the overall length of the IE is 13 octets
6622 */
6625 }
6628 }
6631 /* GPRS: not present
6632 * UMTS: 29.060 v4.0, chapter 7.7.38
6633 */
6634 static int
6635 decode_gtp_utran_cont(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
6636 {
6645 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_UTRAN_CONT], NULL, "UTRAN transparent Container");
6653 }
6657 sub_tree = proto_tree_add_subtree(ext_tree, tvb, offset, length, ett_gtp_utran_cont, NULL, "Source RNC to Target RNC Transparent Container");
6662 sub_tree = proto_tree_add_subtree(ext_tree, tvb, offset, length, ett_gtp_utran_cont, NULL, "Target RNC to Source RNC Transparent Container");
6668 }
6672 }
6675 /* GPRS: not present
6676 * UMTS: 29.060 v4.0, chapter 7.7.39
6677 */
6678 static int
6679 decode_gtp_rab_setup(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
6680 {
6688 ext_tree_rab_setup = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_rab_setup, NULL, "Radio Access Bearer Setup Information");
6690 proto_tree_add_item(ext_tree_rab_setup, hf_gtp_rab_setup_length, tvb, offset + 1, 2, ENC_BIG_ENDIAN);
6708 }
6709 }
6712 }
6715 /* GPRS: not present
6716 * UMTS: 29.060 v4.0, chapter 7.7.40
6717 */
6718 static int
6719 decode_gtp_hdr_list(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
6720 {
6728 ext_tree_hdr_list = proto_tree_add_subtree(tree, tvb, offset, 2 + length, ett_gtp_hdr_list, NULL,
6736 proto_tree_add_uint_format(ext_tree_hdr_list, hf_gtp_ext_hdr_type, tvb, offset + 2 + i, 1, hdr, "No. %u --> Extension Header Type value : %s (0x%02x)", i + 1,
6738 }
6741 }
6743 /* GPRS: not present
6744 * UMTS: 29.060 v4.0, chapter 7.7.41
6745 * TODO: find TriggerID description
6746 */
6747 static int
6748 decode_gtp_trigger_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
6749 {
6755 ti = proto_tree_add_uint_format(tree, hf_gtp_ext_length, tvb, offset, 2, length, "%s length : %u",
6761 }
6763 /* GPRS: not present
6764 * UMTS: 29.060 v4.0, chapter 7.7.42
6765 * TODO: find OMC-ID description
6766 */
6767 static int
6768 decode_gtp_omc_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
6769 {
6775 ti = proto_tree_add_uint_format(tree, hf_gtp_ext_length, tvb, offset, 2, length, "%s length : %u",
6781 }
6783 /* GPRS: 9.60 v7.6.0, chapter 7.9.25
6784 * UMTS: 29.060 v6.11.0, chapter 7.7.44 Charging Gateway Address
6785 */
6786 static int
6787 decode_gtp_chrg_addr(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
6788 {
6796 ext_tree_chrg_addr = proto_tree_add_subtree_format(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_CHRG_ADDR], &te,
6814 }
6817 }
6819 /* GPRS: ?
6820 * UMTS: 29.060 V9.4.0, chapter 7.7.43 RAN Transparent Container
6821 * The information in the value part of the RAN Transparent Container IE contains all information elements (starting with
6822 * and including the BSSGP "PDU Type") in either of the RAN INFORMATION, RAN INFORMATION REQUEST,
6823 * RAN INFORMATION ACK or RAN INFORMATION ERROR messages respectively as specified in 3GPP TS 48.018
6824 */
6825 static int
6826 decode_gtp_ran_tr_cont(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
6827 {
6834 ext_tree = proto_tree_add_subtree_format(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_RAN_TR_CONT], NULL,
6837 offset++;
6843 #if 0
6845 #endif
6847 }
6851 }
6853 /* GPRS: ?
6854 * UMTS: 29.060 v6.11.0, chapter 7.7.45 PDP Context Prioritization
6855 */
6856 static int
6857 decode_gtp_pdp_cont_prio(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
6858 {
6864 ext_tree = proto_tree_add_subtree_format(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_PDP_CONT_PRIO], NULL,
6869 }
6871 offset++;
6874 /* TODO add decoding of data */
6879 }
6881 /* GPRS: ?
6882 * UMTS: 29.060 v6.11.0, chapter 7.7.45A Additional RAB Setup Information
6883 */
6884 static int
6885 decode_gtp_add_rab_setup_inf(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
6886 {
6892 ext_tree = proto_tree_add_subtree_format(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_ADD_RAB_SETUP_INF], NULL,
6895 offset++;
6903 offset++;
6908 /* RNC IP address IPv4*/
6911 /* RNC IP address IPv6*/
6913 }
6918 }
6921 /* GPRS: ?
6922 * UMTS: 29.060 v6.11.0, chapter 7.7.47 SGSN Number
6923 */
6924 static int
6925 decode_gtp_sgsn_no(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
6926 {
6933 ext_tree = proto_tree_add_subtree_format(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_SGSN_NO], NULL,
6937 offset++;
6946 }
6948 /* GPRS: ?
6949 * UMTS: 3GPP TS 29.060 version 7.8.0 Release 7, chapter 7.7.48 Common Flags
6950 */
6951 static int
6952 decode_gtp_common_flgs(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
6953 {
6959 ext_tree = proto_tree_add_subtree_format(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_COMMON_FLGS], NULL,
6962 offset++;
6965 /* Dual Address Bearer Flag */
6966 proto_tree_add_item(ext_tree, hf_gtp_cmn_flg_dual_addr_bearer_flg, tvb, offset, 1, ENC_BIG_ENDIAN);
6967 /* Upgrade QoS Supported */
6969 /* NRSN bit field */
6971 /* No QoS negotiation */
6973 /* MBMS Counting Information bi */
6975 /* RAN Procedures Ready */
6977 /* MBMS Service Type */
6979 /* Prohibit Payload Compression */
6984 }
6986 /* GPRS: ?
6987 * UMTS: 29.060 v6.11.0, chapter 7.7.49
6988 */
6989 static int
6990 decode_gtp_apn_res(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
6991 {
6997 ext_tree_apn_res = proto_tree_add_subtree_format(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_APN_RES], NULL,
7000 offset++;
7004 /* Restriction Type value */
7006 proto_tree_add_expert_format(tree, pinfo, &ei_gtp_ext_length_mal, tvb, 0, length, "Wrong length indicated. Expected 1, got %u", length);
7008 }
7010 proto_tree_add_item(ext_tree_apn_res, hf_gtp_ext_apn_res, tvb, offset, length, ENC_BIG_ENDIAN);
7012 }
7014 /* GPRS: ?
7015 * UMTS: 29.060 v6.11.0, chapter 7.7.50 RAT Type
7016 * RAT Type
7017 * Type = 151 (Decimal)
7018 */
7020 static int
7021 decode_gtp_rat_type(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
7022 {
7029 ext_tree_rat_type = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_RAT_TYPE], &te,
7032 offset++;
7036 /* RAT Type value */
7038 proto_tree_add_expert_format(tree, pinfo, &ei_gtp_ext_length_mal, tvb, 0, length, "Wrong length indicated. Expected 1, got %u", length);
7040 }
7042 proto_tree_add_item(ext_tree_rat_type, hf_gtp_ext_rat_type, tvb, offset, length, ENC_BIG_ENDIAN);
7043 proto_item_append_text(te, ": %s", val_to_str_const(tvb_get_uint8(tvb,offset), gtp_ext_rat_type_vals, "Unknown"));
7046 }
7048 /*
7049 * 7.7.51 User Location Information
7050 */
7052 void
7053 dissect_gtp_uli(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
7054 {
7058 /* Geographic Location Type */
7062 offset++;
7066 /* Geographic Location field included and it holds the Cell Global
7067 * Identification (CGI) of where the user currently is registered.
7068 * CGI is defined in sub-clause 4.3.1 of 3GPP TS 23.003 [2].
7069 */
7074 /* The CI is of fixed length with 2 octets and it can be coded using a full hexadecimal representation */
7078 /* Geographic Location field included and it holds the Service
7079 * Area Identity (SAI) of where the user currently is registered.
7080 * SAI is defined in sub-clause 9.2.3.9 of 3GPP TS 25.413 [7].
7081 */
7089 /* Geographic Location field included and it holds the Routing
7090 * Area Identification (RAI) of where the user currently is
7091 * registered. RAI is defined in sub-clause 4.2 of 3GPP TS 23.003
7092 * [2].
7093 *
7094 * The routing area code consists of 2 octets and is found in octet
7095 * 10 and octet 11. Only the first octet (10) contains the RAC and
7096 * the second octet (11) is coded as "11111111".
7097 */
7107 }
7108 }
7110 static int
7111 decode_gtp_usr_loc_inf(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
7112 {
7118 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_USR_LOC_INF], NULL,
7121 offset++;
7128 }
7136 };
7138 /* GPRS: ?
7139 * UMTS: 29.060 v6.11.0, chapter 7.7.52
7140 * MS Time Zone
7141 * Type = 153 (Decimal)
7142 * The ' MS Time Zone' IE is used to indicate the offset between universal time and local time
7143 * in steps of 15 minutes of where the MS currently resides. The 'Time Zone' field uses the same
7144 * format as the 'Time Zone' IE in 3GPP TS 24.008 (10.5.3.8)
7145 * its value shall be set as defined in 3GPP TS 22.042
7146 */
7147 static int
7148 decode_gtp_ms_time_zone(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7149 {
7158 ext_tree = proto_tree_add_subtree_format(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MS_TIME_ZONE], &te,
7161 offset++;
7165 /* 3GPP TS 23.040 version 6.6.0 Release 6
7166 * 9.2.3.11 TP-Service-Centre-Time-Stamp (TP-SCTS)
7167 * :
7168 * The Time Zone indicates the difference, expressed in quarters of an hour,
7169 * between the local time and GMT. In the first of the two semi-octets,
7170 * the first bit (bit 3 of the seventh octet of the TP-Service-Centre-Time-Stamp field)
7171 * represents the algebraic sign of this difference (0: positive, 1: negative).
7172 */
7178 proto_tree_add_uint_format_value(ext_tree, hf_gtp_timezone, tvb, offset, 1, data, "GMT %c %d hours %d minutes", sign, data / 4, data % 4 * 15);
7180 offset++;
7186 }
7188 /* GPRS: ?
7189 * UMTS: 29.060 v6.11.0, chapter 7.7.53
7190 * International Mobile Equipment Identity (and Software Version) (IMEI(SV))
7191 * Type = 154 (Decimal)
7192 */
7193 static int
7194 decode_gtp_imeisv(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
7195 {
7204 ext_imeisv = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_IMEISV], &te,
7207 offset++;
7211 /* IMEI(SV)
7212 * The structure of the IMEI and IMEISV are defined in sub-clause 6.2 of 3GPP TS 23.003 [2].
7213 * The 'IMEI(SV)' field shall contain the IMEISV if it is available. If only the IMEI is available,
7214 * then the IMEI shall be placed in the IMEI(SV) field and the last semi-octet of octet 11 shall be
7215 * set to '1111'. Both IMEI and IMEISV are BCD encoded.
7216 */
7218 proto_tree_add_item_ret_display_string(ext_imeisv, hf_gtp_ext_imeisv, next_tvb, 0, -1, ENC_BCD_DIGITS_0_9|ENC_LITTLE_ENDIAN, pinfo->pool, &digit_str);
7222 }
7224 /* GPRS: ?
7225 * UMTS: 29.060 v6.11.0, chapter 7.7.54
7226 * CAMEL Charging Information Container
7227 * Type = 155 (Decimal)
7228 */
7229 static int
7230 decode_gtp_camel_chg_inf_con(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7231 {
7237 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_CAMEL_CHG_INF_CON], NULL,
7240 offset++;
7243 dissect_gprscdr_CAMELInformationPDP_PDU(tvb_new_subset_length(tvb, offset, length), pinfo, ext_tree, NULL);
7247 }
7249 /* GPRS: ?
7250 * UMTS: 29.060 v6.11.0, chapter 7.7.55
7251 * MBMS UE Context
7252 */
7253 static int
7254 decode_gtp_mbms_ue_ctx(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7255 {
7263 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MBMS_UE_CTX], NULL,
7266 offset++;
7270 offset++;
7275 proto_tree_add_uint_format_value(ext_tree, hf_gtp_enh_nsapi, tvb, offset, 1, enh_nsapi, "Reserved");
7278 }
7279 offset++;
7281 offset++;
7282 proto_tree_add_item_ret_uint(ext_tree, hf_gtp_pdp_type, tvb, offset, 1, ENC_BIG_ENDIAN, &pdp_type_num);
7283 offset++;
7284 proto_tree_add_item_ret_uint(ext_tree, hf_gtp_pdp_address_length, tvb, offset, 1, ENC_BIG_ENDIAN, &pdp_addr_len);
7285 offset++;
7296 }
7298 }
7299 proto_tree_add_item_ret_uint(ext_tree, hf_gtp_ggsn_address_length, tvb, offset, 1, ENC_BIG_ENDIAN, &ggsn_addr_len);
7300 offset++;
7304 proto_tree_add_item(ext_tree, hf_gtp_ggsn_address_for_control_plane_ipv4, tvb, offset, 4, ENC_BIG_ENDIAN);
7307 proto_tree_add_item(ext_tree, hf_gtp_ggsn_address_for_control_plane_ipv6, tvb, offset, 16, ENC_NA);
7310 /* XXX: Expert info? */
7312 }
7315 proto_tree_add_item_ret_uint(ext_tree, hf_gtp_apn_length, tvb, offset, 1, ENC_BIG_ENDIAN, &apn_len);
7316 offset++;
7319 /*
7320 * The Transaction Identifier is the 4 or 12 bit Transaction Identifier used in the 3GPP TS 24.008 [5] Session Management
7321 * messages which control this PDP Context. If the length of the Transaction Identifier is 4 bit, the second octet shall be
7322 * set to all zeros. The encoding is defined in 3GPP TS 24.007 [3]. The latest Transaction Identifier sent from SGSN to
7323 * MS is stored in the MBMS context IE.
7324 * NOTE: Bit 5-8 of the first octet in the encoding defined in 3GPP TS 24.007 [3] is mapped into bit 1-4 of the first
7325 * octet in this field.
7326 */
7332 }
7334 /* GPRS: ?
7335 * UMTS: 3GPP TS 29.060 version 7.8.0 Release 7, chapter 7.7.56
7336 * Temporary Mobile Group Identity (TMGI)
7337 * The Temporary Mobile Group Identity (TMGI) information element contains
7338 * a TMGI allocated by the BM-SC. It is coded as in the value part defined
7339 * in 3GPP T S 24.008 [5] (i.e. the IEI and octet length indicator are not included).
7340 */
7342 static int
7343 decode_gtp_tmgi(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
7344 {
7352 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_TMGI], NULL,
7355 offset++;
7366 }
7368 /* GPRS: ?
7369 * UMTS: 29.060 v6.11.0, chapter 7.7.57
7370 * RIM Routing Address
7371 */
7372 static int
7373 decode_gtp_rim_ra(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
7374 {
7381 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_RIM_RA], NULL,
7384 offset++;
7387 /* To dissect the Address the Routing Address discriminator must be known */
7388 /*
7389 * Octets 4-n are coded according to 3GPP TS 48.018 [20] 11.3.77 RIM Routing Information IE octets 4-n.
7390 */
7409 }
7410 }
7414 }
7416 /* GPRS: ?
7417 * UMTS: 29.060 v6.11.0, chapter 7.7.58
7418 * MBMS Protocol Configuration Options
7419 */
7420 static int
7421 decode_gtp_mbms_prot_conf_opt(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7422 {
7429 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MBMS_PROT_CONF_OPT], NULL,
7432 offset++;
7435 /* The MBMS Protocol Configuration Options contains protocol options
7436 * associated with an MBMS context, that may be necessary to transfer
7437 * between the GGSN and the MS. The content and the coding of the MBMS
7438 * Protocol Configuration Options are defined in octets 3-z of the MBMS
7439 * Protocol Configuration Options in 3GPP TS 24.008 [5].
7440 */
7446 }
7448 /* GPRS: ?
7449 * UMTS: 3GPP TS 29.060 version 7.8.0 Release 7, chapter 7.7.59
7450 * MBMS Session Duration
7451 */
7452 /* Used for Diameter */
7453 static int
7454 dissect_gtp_mbms_ses_dur(tvbuff_t * tvb, packet_info * pinfo _U_, proto_tree * tree, void *data _U_)
7455 {
7464 }
7466 static int
7467 decode_gtp_mbms_ses_dur(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7468 {
7474 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MBMS_SES_DUR], NULL,
7477 offset++;
7480 /* The MBMS Session Duration is defined in 3GPP TS 23.246 [26].
7481 * The MBMS Session Duration information element indicates the estimated
7482 * session duration of the MBMS service data transmission if available.
7483 * The payload shall be encoded as per the MBMS-Session-Duration AVP defined
7484 * in 3GPP TS 29.061 [27], excluding the AVP Header fields
7485 * (as defined in IETF RFC 3588 [36], section 4.1).
7486 */
7487 /* The MBMS-Session-Duration AVP (AVP code 904) is of type OctetString
7488 * with a length of three octets and indicates the estimated session duration
7489 * (MBMS Service data transmission). Bits 0 to 16 (17 bits) express seconds, for which the
7490 * maximum allowed value is 86400 seconds. Bits 17 to 23 (7 bits) express days,
7491 * for which the maximum allowed value is 18 days. For the whole session duration the seconds
7492 * and days are added together and the maximum session duration is 19 days.
7493 */
7499 }
7501 /* GPRS: ?
7502 * UMTS: 3GPP TS 29.060 version 7.8.0 Release 7, chapter 7.7.60
7503 * MBMS Service Area
7504 */
7505 static int
7506 dissect_gtp_3gpp_mbms_service_area(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void *data _U_) {
7512 /* The MBMS Service Area is defined in 3GPP TS 23.246 [26].
7513 * The MBMS Service Area information element indicates the area over
7514 * which the Multimedia Broadcast/Multicast Service is to be distributed.
7515 * The payload shall be encoded as per the MBMS-Service-Area AVP defined
7516 * in 3GPP TS 29.061 [27], excluding the AVP Header fields (as defined in
7517 * IETF RFC 3588 [36], section 4.1).
7518 */
7519 /* Number N of MBMS service area codes coded as:
7520 * 1 binary value is '00000000'
7521 * ... ...
7522 * 256 binary value is '11111111'
7523 */
7526 offset++;
7527 /* A consecutive list of N MBMS service area codes
7528 * The MBMS Service Area Identity and its semantics are defined in 3GPP TS 23.003
7529 * The length of an MBMS service area code is 2 octets.
7530 */
7534 }
7537 }
7539 static int
7540 decode_gtp_mbms_sa(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
7541 {
7548 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MBMS_SA], NULL,
7551 offset++;
7559 }
7561 /* GPRS: ?
7562 * UMTS: 29.060 v6.11.0, chapter 7.7.61
7563 * Source RNC PDCP context info
7564 */
7565 static int
7566 decode_gtp_src_rnc_pdp_ctx_inf(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7567 {
7573 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_SRC_RNC_PDP_CTX_INF], NULL,
7576 offset++;
7580 sub_tree = proto_tree_add_subtree(ext_tree, tvb, offset, length, ett_gtp_rrc_cont, NULL, "Source RNC to Target RNC Transparent Container");
7584 }
7586 /* GPRS: ?
7587 * UMTS: 29.060 v6.11.0, chapter 7.7.62
7588 * Additional Trace Info
7589 */
7599 };
7605 };
7607 static int
7608 decode_gtp_add_trs_inf(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7609 {
7617 NULL
7618 };
7624 NULL
7625 };
7628 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_ADD_TRS_INF], NULL,
7631 offset++;
7638 proto_tree_add_bitmask(ext_tree, tvb, offset, hf_gtp_trace_triggers_ggsn, ett_gtp_trace_triggers_ggsn, trigger_flags, ENC_BIG_ENDIAN);
7639 offset++;
7641 offset++;
7642 proto_tree_add_bitmask(ext_tree, tvb, offset, hf_gtp_trace_loi_ggsn, ett_gtp_trace_loi_ggsn, loi_flags, ENC_BIG_ENDIAN);
7643 offset++;
7648 }
7650 /* GPRS: ?
7651 * UMTS: 29.060 v6.11.0, chapter 7.7.63
7652 * Hop Counter
7653 */
7654 static int
7655 decode_gtp_hop_count(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7656 {
7662 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_HOP_COUNT], NULL,
7665 offset++;
7672 }
7674 /* GPRS: ?
7675 * UMTS: 29.060 v6.11.0, chapter 7.7.64
7676 * Selected PLMN ID
7677 */
7678 static int
7679 decode_gtp_sel_plmn_id(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
7680 {
7686 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MBMS_SES_ID], NULL,
7689 offset++;
7696 }
7698 /* GPRS: ?
7699 * UMTS: 29.060 v6.11.0, chapter 7.7.65
7700 * MBMS Session Identifier
7701 */
7702 static int
7703 decode_gtp_mbms_ses_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7704 {
7710 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MBMS_SES_ID], NULL, val_to_str_ext_const(GTP_EXT_MBMS_SES_ID, >p_val_ext, "Unknown"));
7712 offset++;
7715 /* TODO add decoding of data */
7720 }
7722 /* GPRS: ?
7723 * UMTS: 29.060 v6.11.0, chapter 7.7.66
7724 * MBMS 2G/3G Indicator
7725 */
7731 };
7733 static int
7734 decode_gtp_mbms_2g_3g_ind(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7735 {
7741 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MBMS_2G_3G_IND], NULL,
7744 offset++;
7747 /* MBMS 2G/3G Indicator */
7752 }
7754 /* GPRS: ?
7755 * UMTS: 29.060 v6.11.0, chapter 7.7.67
7756 * Enhanced NSAPI
7757 */
7758 static int
7759 decode_gtp_enh_nsapi(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7760 {
7767 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_ENH_NSAPI], NULL, val_to_str_ext_const(GTP_EXT_ENH_NSAPI, >pv1_val_ext, "Unknown"));
7769 offset++;
7774 proto_tree_add_uint_format_value(ext_tree, hf_gtp_enh_nsapi, tvb, offset, 1, enh_nsapi, "Reserved");
7777 }
7781 }
7783 /* GPRS: ?
7784 * UMTS: 29.060 v6.11.0, chapter 7.7.68
7785 * Additional MBMS Trace Info
7786 */
7787 static int
7788 decode_gtp_add_mbms_trs_inf(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7789 {
7796 NULL
7797 };
7801 NULL
7802 };
7805 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_ADD_MBMS_TRS_INF], NULL,
7808 offset++;
7811 /* XXX: There is clearly an error in TS 29.060 V17.1.0 and earlier.
7812 * In Figure 7.7.68.1 the octet column has a gap and is not aligned,
7813 * octets 7-8 should be for the Trace Recording Session Reference, other
7814 * values should be moved up a row, and there should be a value for
7815 * the Trace Activity Control as octet 12, making the IE length 9,
7816 * as with 7.7.62 Additional Trace Info.
7817 * Unfortunately the mistake is carried over into the the length field
7818 * elsewhere in the spec, such as in Table 37.
7819 */
7824 proto_tree_add_bitmask(ext_tree, tvb, offset, hf_gtp_trace_triggers_bm_sc, ett_gtp_trace_triggers_bm_sc, trigger_flags, ENC_BIG_ENDIAN);
7825 offset++;
7827 offset++;
7828 proto_tree_add_bitmask(ext_tree, tvb, offset, hf_gtp_trace_loi_bm_sc, ett_gtp_trace_loi_bm_sc, loi_flags, ENC_BIG_ENDIAN);
7830 offset++;
7832 }
7836 }
7838 /* GPRS: ?
7839 * UMTS: 29.060 v6.11.0, chapter 7.7.69
7840 * MBMS Session Identity Repetition Number
7841 */
7842 static int
7843 decode_gtp_mbms_ses_id_rep_no(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7844 {
7850 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MBMS_SES_ID_REP_NO], NULL,
7853 offset++;
7856 /* TODO add decoding of data */
7861 }
7863 /* GPRS: ?
7864 * UMTS: 3GPP TS 29.060 version 7.8.0 Release 7
7865 * MBMS Time To Data Transfer
7866 */
7867 /* Used for Diameter */
7868 static int
7869 dissect_gtp_mbms_time_to_data_tr(tvbuff_t * tvb, packet_info * pinfo _U_, proto_tree * tree, void *data _U_)
7870 {
7880 }
7882 static int
7883 decode_gtp_mbms_time_to_data_tr(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7884 {
7891 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MBMS_TIME_TO_DATA_TR], NULL,
7894 offset++;
7897 /* TODO add decoding of data
7898 * The MBMS Time To Data Transfer is defined in 3GPP TS 23.246 [26].
7899 * The MBMS Time To Data Transfer information element contains a
7900 * MBMS Time To Data Transfer allocated by the BM-SC.
7901 * The payload shall be encoded as per the MBMS-Time-To-Data-Transfer AVP
7902 * defined in 3GPP TS 29.061 [27], excluding the AVP Header fields
7903 * (as defined in IETF RFC 3588 [36], section 4.1).
7904 */
7905 /* The coding is specified as per the Time to MBMS Data Transfer Value Part Coding
7906 * of the Time to MBMS Data Transfer IE in 3GPP TS 48.018
7907 * Bits
7908 * 8 7 6 5 4 3 2 1
7909 * 0 0 0 0 0 0 0 0 1s
7910 * 0 0 0 0 0 0 0 1 2s
7911 * 0 0 0 0 0 0 1 0 3s
7912 * :
7913 * 1 1 1 1 1 1 1 1 256s
7914 */
7920 }
7922 /* GPRS: ?
7923 * UMTS: 29.060 v6.11.0, chapter 7.7.71
7924 * PS Handover Request Context
7925 */
7926 static int
7927 decode_gtp_ps_ho_req_ctx(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7928 {
7934 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_PS_HO_REQ_CTX], NULL,
7937 offset++;
7940 /* TODO add decoding of data */
7945 }
7947 /* GPRS: ?
7948 * UMTS: 29.060 v6.11.0, chapter 7.7.72
7949 * BSS Container
7950 */
7951 static int
7952 decode_gtp_bss_cont(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7953 {
7959 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_BSS_CONT], NULL,
7962 offset++;
7968 sub_tree = proto_tree_add_subtree(ext_tree, tvb, offset, length, ett_gtp_bss_cont, NULL, "Source BSS to Target BSS Transparent Container");
7972 sub_tree = proto_tree_add_subtree(ext_tree, tvb, offset, length, ett_gtp_bss_cont, NULL, "Target BSS to Source BSS Transparent Container");
7977 }
7978 /*
7979 * The content of this container is defined in 3GPP TS 48.018
7980 */
7984 }
7986 /* GPRS: ?
7987 * UMTS: 29.060 v6.11.0, chapter 7.7.73
7988 * Cell Identification
7989 */
7994 };
7996 static int
7997 decode_gtp_cell_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7998 {
8005 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_CELL_ID], NULL,
8008 offset++;
8012 /*
8013 * for PS handover from A/Gb mode, the identification of a target cell (Cell ID 1) and the identification of the
8014 * source cell (Cell ID 2) as defined in 3GPP TS 48.018 [20].
8015 *
8016 * for PS handover from Iu mode, the identification of a target cell (Cell ID 1)) and the identification of the
8017 * source RNC (RNC-ID) as defined in 3GPP TS 48.018
8018 *
8019 * for PS handover from S1 mode, the identification of a target cell (Target Cell ID) as defined in 3GPP TS 48.018.
8020 * Octet 12 shall be set to "Source Cell ID" and octets 13-20 shall be encoded as all zero.
8021 *
8022 * 3GPP TS 48.018 defines Target and Source Cell ID to use the Cell
8023 * Identifier IE, encoded as 6 octets of the value part of the RAI IE
8024 * followed by 2 octets of the value of the Cell Identity IE, both defined
8025 * in 3GPP TS 24.008. The 3GPP TS 48.018 RNC-ID IE is similar, with the 6
8026 * octet RAI as in 3GPP TS 24.008 followed by two octets of the RNC-ID.
8027 * (Or Extended RNC-ID, but the RNC-ID is presented in network byte order
8028 * with the most significant bits of octet 9 set to "0000", so there is
8029 * no need to distinguish be RNC-ID and Extended RNC-ID.)
8030 */
8039 proto_tree_add_item_ret_uint(ext_tree, hf_gtp_source_type, tvb, offset, 1, ENC_NA, &source_type);
8040 offset++;
8063 }
8067 }
8069 /* GPRS: ?
8070 * UMTS: 29.060 v6.11.0, chapter 7.7.74
8071 * PDU Numbers
8072 */
8073 static int
8074 decode_gtp_pdu_no(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8075 {
8081 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_PDU_NO], NULL,
8084 offset++;
8089 offset++;
8095 /* The Send N-PDU Number is used only when acknowledged peer-to-peer LLC
8096 * operation is used for the PDP context. Send N-PDU Number is the N-PDU
8097 * number to be assigned by SNDCP to the next down link N-PDU received from
8098 * the GGSN.
8099 *
8100 * The Receive N-PDU Number is used only when acknowledged peer-to-peer LLC
8101 * operation is used for the PDP context. The Receive N-PDU Number is the
8102 * N-PDU number expected by SNDCP from the next up link N-PDU to be
8103 * received from the MS.
8104 *
8105 * XXX: For some reason, 2 octets are reserved for each the Send and
8106 * Receive N-PDU numbers, even though an N-PDU number in acknowledged
8107 * mode only has values 0-255 (see 3GPP TS 44.065) and is in a one
8108 * octet field in the PDP Context IE (7.7.29). Assume, in the lack
8109 * of other guidance, that the first octet will be zero and the value
8110 * will be in the second octet.
8111 * Cf. 7.7.51 ULI, where there is an explicit note in TS 29.060 that only
8112 * the first octet contains the RAC and the second octet is filler.
8113 */
8120 }
8122 /* GPRS: ?
8123 * UMTS: 29.060 v6.11.0, chapter 7.7.75
8124 * BSSGP Cause
8125 */
8126 static int
8127 decode_gtp_bssgp_cause(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8128 {
8134 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_BSSGP_CAUSE], NULL,
8137 offset++;
8141 /*
8142 * The BSSGP Cause information element contains the cause as defined in 3GPP TS 48.018
8143 */
8148 }
8150 /*
8151 * Required MBMS bearer capabilities 7.7.76
8152 */
8153 static int
8154 decode_gtp_mbms_bearer_cap(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8155 {
8160 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_REQ_MBMS_BEARER_CAP], NULL,
8163 offset++;
8167 #endif
8168 /* The payload shall be encoded as per the
8169 * Required-MBMS-Bearer-Capabilities AVP defined in 3GPP TS 29.061 [27],
8170 * excluding the AVP Header fields (as defined in IETF RFC 3588 [36], section 4.1).
8171 */
8172 /* TODO Add decoding (call Diameter dissector???) */
8174 }
8176 /*
8177 * RIM Routing Address Discriminator 7.7.77
8178 */
8185 };
8187 static int
8188 decode_gtp_rim_ra_disc(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
8189 {
8197 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_RIM_ROUTING_ADDR_DISC], NULL,
8200 offset++;
8203 /* Octet 4 bits 4 - 1 is coded according to 3GPP TS 48.018 [20]
8204 * RIM Routing Information IE octet 3 bits 4 - 1.
8205 * Bits 8 - 5 are coded "0000".
8206 */
8207 proto_tree_add_item_ret_uint(ext_tree, hf_gtp_bssgp_ra_discriminator, tvb, offset, 1, ENC_BIG_ENDIAN, &val);
8212 }
8213 /*
8214 * List of set-up PFCs 7.7.78
8215 */
8216 static int
8217 decode_gtp_lst_set_up_pfc(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8218 {
8224 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_LIST_OF_SETUP_PFCS], NULL,
8227 offset++;
8231 sub_tree = proto_tree_add_subtree(ext_tree, tvb, offset, length, ett_gtp_lst_set_up_pfc, NULL, "List of set-up PFCs");
8236 }
8237 /*
8238 * PS Handover XID Parameters 7.7.79
8239 */
8240 static int
8241 decode_gtp_ps_handover_xid(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
8242 {
8251 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_PS_HANDOVER_XIP_PAR], NULL,
8254 offset++;
8260 offset++;
8264 offset++;
8269 else
8274 }
8276 /*
8277 * MS Info Change Reporting Action 7.7.80
8278 */
8279 static int
8280 decode_gtp_ms_inf_chg_rep_act(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8281 {
8287 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MS_INF_CHG_REP_ACT], NULL,
8290 offset++;
8298 }
8299 /*
8300 * Direct Tunnel Flags 7.7.81
8301 */
8302 static int
8303 decode_gtp_direct_tnl_flg(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8304 {
8310 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_DIRECT_TUNNEL_FLGS], NULL,
8313 offset++;
8320 offset++;
8324 }
8329 }
8330 /*
8331 * Correlation-ID 7.7.82
8332 */
8333 static int
8334 decode_gtp_corrl_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8335 {
8341 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_CORRELATION_ID], NULL,
8344 offset++;
8352 }
8353 /*
8354 * Bearer Control Mode 7.7.83
8355 * version 10.0.0
8356 */
8361 };
8363 static int
8364 decode_gtp_bearer_cntrl_mod(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8365 {
8371 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_BEARER_CONTROL_MODE], NULL,
8376 offset++;
8384 }
8386 /*
8387 * 7.7.84 MBMS Flow Identifier
8388 */
8389 static int
8390 decode_gtp_mbms_flow_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8391 {
8396 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MBMS_FLOW_ID], NULL,
8400 offset++;
8404 /* 4-n MBMS Flow Identifier */
8409 }
8411 /*
8412 * 7.7.85 MBMS IP Multicast Distribution
8413 */
8415 static int
8416 decode_gtp_mbms_ip_mcast_dist(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8417 {
8422 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MBMS_IP_MCAST_DIST], NULL,
8426 offset++;
8433 }
8435 /*
8436 * 7.7.86 MBMS Distribution Acknowledgement
8437 */
8438 /* Table 7.7.86.1: Distribution Indication values */
8445 };
8446 static int
8447 decode_gtp_mbms_dist_ack(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8448 {
8453 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MBMS_DIST_ACK], NULL,
8457 offset++;
8461 /* Distribution Indication values */
8465 }
8467 /*
8468 * 7.7.87 Reliable INTER RAT HANDOVER INFO
8469 */
8470 static int
8471 decode_gtp_reliable_irat_ho_inf(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8472 {
8477 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_RELIABLE_IRAT_HO_INF], NULL,
8481 offset++;
8488 }
8490 /*
8491 * 7.7.88 RFSP Index
8492 */
8493 static int
8494 decode_gtp_rfsp_index(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8495 {
8500 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_RFSP_INDEX], NULL,
8504 offset++;
8511 }
8512 /*
8513 * 7.7.89 PDP Type
8514 */
8515 /*
8516 * 7.7.90 Fully Qualified Domain Name (FQDN)
8517 */
8518 static int
8519 decode_gtp_fqdn(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8520 {
8527 ext_tree = proto_tree_add_subtree(tree, tvb, offset, length + 3, ett_gtp_ies[GTP_EXT_FQDN], NULL,
8535 }
8537 /*
8538 * 7.7.91 Evolved Allocation/Retention Priority I
8539 */
8540 static int
8541 decode_gtp_evolved_allc_rtn_p1(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8542 {
8548 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_EVO_ALLO_RETE_P1], NULL,
8552 offset++;
8563 }
8565 /*
8566 * 7.7.92 Evolved Allocation/Retention Priority II
8567 */
8568 static int
8569 decode_gtp_evolved_allc_rtn_p2(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8570 {
8576 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_EVO_ALLO_RETE_P2], NULL,
8580 offset++;
8585 offset++;
8594 }
8596 /*
8597 * 7.7.93 Extended Common Flags
8598 */
8599 static int
8600 decode_gtp_extended_common_flgs(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8601 {
8606 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_EXTENDED_COMMON_FLGS], NULL,
8610 offset++;
8621 proto_tree_add_item(ext_tree, hf_gtp_ext_comm_flags_unauthenticated_imsi, tvb, offset, 1, ENC_BIG_ENDIAN);
8622 offset++;
8626 }
8629 }
8631 /*
8632 * 7.7.94 User CSG Information (UCI)
8633 */
8641 };
8643 static int
8644 decode_gtp_uci(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8645 {
8650 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_UCI], NULL,
8654 offset++;
8664 /* Due to a specification oversight, the CMI values ... are reversed from
8665 * the values of the CSG-Membership-Indication AVP in 3GPP TS 32.299 [56].
8666 * Therefore, when CMI values are sent over the charging interface, the
8667 * values are encoded as specified in 3GPP TS 32.299 [56]. Furthermore,
8668 * the encoding is different between GTPv1 and GTPv2.
8669 */
8673 }
8675 /*
8676 * 7.7.95 CSG Information Reporting Action
8677 */
8679 static int
8680 decode_gtp_csg_inf_rep_act(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8681 {
8689 NULL
8690 };
8693 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_CSG_INF_REP_ACT], NULL,
8697 offset++;
8704 }
8705 /*
8706 * 7.7.96 CSG ID
8707 */
8709 static int
8710 decode_gtp_csg_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8711 {
8716 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_CSG_ID], NULL,
8720 offset++;
8727 }
8728 /*
8729 * 7.7.97 CSG Membership Indication (CMI)
8730 */
8731 static int
8732 decode_gtp_cmi(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8733 {
8738 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_CMI], NULL,
8742 offset++;
8746 /* Due to a specification oversight, the CMI values ... are reversed from
8747 * the values of the CSG-Membership-Indication AVP in 3GPP TS 32.299 [56].
8748 * Therefore, when CMI values are sent over the charging interface, the
8749 * values are encoded as specified in 3GPP TS 32.299 [56].
8750 */
8754 }
8755 /*
8756 * 7.7.98 APN Aggregate Maximum Bit Rate (APN-AMBR)
8757 */
8758 static int
8759 decode_gtp_apn_ambr(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8760 {
8765 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_RELIABLE_IRAT_HO_INF], NULL,
8769 offset++;
8773 /* APN Aggregate Maximum Bit Rate (APN-AMBR) is defined in clause 9.9.4.2 of 3GPP TS 24.301 [42], but shall be
8774 * formatted as shown in Figure 7.7.98-1 as Unsigned32 binary integer values in kbps (1000 bits per second).
8775 */
8776 /* 4 to 7 APN-AMBR for Uplink */
8779 /* 8 to 11 APN-AMBR for Downlink */
8783 }
8784 /*
8785 * 7.7.99 UE Network Capability
8786 */
8787 static int
8788 decode_gtp_ue_network_cap(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
8789 {
8794 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_UE_NETWORK_CAP], NULL,
8797 offset++;
8804 }
8805 /*
8806 * 7.7.100 UE-AMBR
8807 */
8809 static int
8810 decode_gtp_ue_ambr(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8811 {
8816 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_UE_AMBR], NULL,
8820 offset++;
8824 /* 4 to 7 Subscribed UE-AMBR for Uplink */
8827 /* 8 to 11 Subscribed UE-AMBR for Downlink */
8831 /* Authorized UE-AMBR for Uplink and Downlink fields are present in the IE only if the sender has their valid values
8832 * available. Otherwise, the fields from m to (n+3) shall not be present.
8833 */
8835 /* m to (m+3) Authorized UE-AMBR for Uplink */
8839 /* (m+4) to (n+3) Authorized UE-AMBR for Downlink */
8842 }
8846 }
8849 }
8851 /*
8852 * 7.7.101 APN-AMBR with NSAPI
8853 */
8854 static int
8855 decode_gtp_apn_ambr_with_nsapi(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8856 {
8861 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_APN_AMBR_WITH_NSAPI], NULL,
8865 offset++;
8870 offset++;
8872 /* 5 to 8 Authorized APN-AMBR for Uplink */
8876 /* 9 to12 Authorized APN-AMBR for Downlink */
8880 }
8881 /*
8882 * 7.7.102 GGSN Back-Off Time
8883 */
8884 /* Table 7.7.102.1: GGSN Back-Off Time information element */
8893 };
8894 static int
8895 decode_gtp_ggsn_back_off_time(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8896 {
8901 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_GGSN_BACK_OFF_TIME], NULL,
8905 offset++;
8909 /* 4 Timer unit Timer value */
8910 proto_tree_add_item(ext_tree, hf_gtp_ext_ggsn_back_off_time_units, tvb, offset, 1, ENC_BIG_ENDIAN);
8914 }
8916 /*
8917 * 7.7.103 Signalling Priority Indication
8918 */
8921 "MS is not configured for NAS signalling low priority"
8922 };
8924 static int
8925 decode_gtp_sig_pri_ind(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8926 {
8931 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_SIG_PRI_IND], NULL,
8935 offset++;
8942 }
8943 /*
8944 * 7.7.104 Signalling Priority Indication with NSAPI
8945 */
8947 static int
8948 decode_gtp_sig_pri_ind_w_nsapi(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8949 {
8954 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_SIG_PRI_IND_W_NSAPI], NULL,
8958 offset++;
8963 offset++;
8968 }
8969 /*
8970 * 7.7.105 Higher bitrates than 16 Mbps flag
8971 */
8976 };
8978 static int
8979 decode_gtp_higher_br_16mb_flg(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8980 {
8985 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_HIGHER_BR_16MB_FLG], NULL,
8989 offset++;
8993 /* Higher bitrates than 16 Mbps flag */
8997 }
8998 /*
8999 * 7.7.106 Max MBR/APN-AMBR
9000 */
9002 static int
9003 decode_gtp_max_mbr_apn_ambr(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9004 {
9011 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MAX_MBR_APN_AMBR], NULL,
9015 offset++;
9019 /* Max MBR/APN-AMBR for uplink */
9021 proto_tree_add_uint_format_value(ext_tree, hf_gtp_max_mbr_apn_ambr_ul, tvb, offset, 4, max_ul, "%u %s",
9027 /* Max MBR/APN-AMBR for downlink */
9029 proto_tree_add_uint_format_value(ext_tree, hf_gtp_max_mbr_apn_ambr_dl, tvb, offset, 4, max_dl, "%u %s",
9034 }
9035 /*
9036 * 7.7.107 Additional MM context for SRVCC
9037 */
9039 static int
9040 decode_gtp_add_mm_ctx_srvcc(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
9041 {
9047 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_ADD_MM_CTX_SRVCC], NULL,
9051 offset++;
9055 /* Length of the Mobile Station Classmark 2 */
9056 proto_tree_add_item_ret_uint(ext_tree, hf_gtp_ms_cm_2_len, tvb, offset, 1, ENC_BIG_ENDIAN, &inf_len);
9057 offset++;
9060 }
9062 /* Length of the Mobile Station Classmark 3 */
9063 proto_tree_add_item_ret_uint(ext_tree, hf_gtp_ms_cm_3_len, tvb, offset, 1, ENC_BIG_ENDIAN, &inf_len);
9064 offset++;
9067 }
9069 /* Length of the Supported Codec List */
9070 proto_tree_add_item_ret_uint(ext_tree, hf_gtp_sup_codec_lst_len, tvb, offset, 1, ENC_BIG_ENDIAN, &inf_len);
9071 offset++;
9074 }
9077 }
9079 /*
9080 * 7.7.108 Additional flags for SRVCC
9081 */
9083 static int
9084 decode_gtp_add_flgs_srvcc(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9085 {
9090 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_ADD_FLGS_SRVCC], NULL,
9094 offset++;
9098 /* 4 Spare ICS */
9102 }
9103 /*
9104 * 7.7.109 STN-SR
9105 */
9106 static int
9107 decode_gtp_stn_sr(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9108 {
9113 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_STN_SR], NULL,
9117 offset++;
9124 }
9126 /*
9127 * 7.7.110 C-MSISDN
9128 */
9130 static int
9131 decode_gtp_c_msisdn(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9132 {
9137 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_C_MSISDN], NULL,
9141 offset++;
9148 }
9149 /*
9150 * 7.7.111 Extended RANAP Cause
9151 */
9152 static int
9153 decode_gtp_ext_ranap_cause(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
9154 {
9160 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_EXT_RANAP_CAUSE], NULL,
9164 offset++;
9173 }
9175 /*
9176 * 7.7.112 eNodeB ID
9177 */
9183 };
9185 static int
9186 decode_gtp_ext_enodeb_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9187 {
9193 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_ENODEB_ID], NULL,
9197 offset++;
9201 /* eNodeB Type */
9202 proto_tree_add_item_ret_uint(ext_tree, hf_gtp_ext_enb_type, tvb, offset, 1, ENC_BIG_ENDIAN, &enb_type);
9203 offset++;
9210 /* Macro eNodeB ID */
9216 /* Home eNodeB ID */
9224 }
9227 }
9229 /*
9230 * 7.7.113 Selection Mode with NSAPI
9231 */
9239 };
9241 static int
9242 decode_gtp_ext_sel_mode_w_nsapi(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9243 {
9248 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_SEL_MODE_W_NSAPI], NULL,
9252 offset++;
9257 offset++;
9263 }
9264 /*
9265 * 7.7.114 ULI Timestamp
9266 */
9267 static int
9268 decode_gtp_ext_uli_timestamp(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9269 {
9274 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_ULI_TIMESTAMP], NULL,
9278 offset++;
9282 proto_tree_add_item(ext_tree, hf_gtp_uli_timestamp, tvb, offset, 4, ENC_TIME_SECS_NTP|ENC_BIG_ENDIAN);
9285 }
9287 /*
9288 * 7.7.115 Local Home Network ID (LHN-ID) with NSAPI
9289 */
9290 static int
9291 decode_gtp_ext_lhn_id_w_sapi(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9292 {
9297 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_LHN_ID_W_SAPI], NULL,
9301 offset++;
9310 }
9311 /*
9312 * 7.7.116 CN Operator Selection Entity
9313 */
9320 };
9322 static int
9323 decode_gtp_ext_cn_op_sel_entity(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9324 {
9329 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_CN_OP_SEL_ENTITY], NULL,
9333 offset++;
9338 offset++;
9342 }
9344 }
9346 /*
9347 * 7.7.117 UE Usage Type
9348 */
9349 static int
9350 decode_gtp_ue_usage_type(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9351 {
9356 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_UE_USAGE_TYPE], NULL,
9360 offset++;
9369 }
9372 }
9374 /*
9375 * 7.7.118 Extended Common Flags II
9376 */
9377 static int
9378 decode_gtp_extended_common_flgs_II(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9379 {
9384 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_EXT_COMMON_FLGS_II], NULL,
9388 offset++;
9394 proto_tree_add_item(ext_tree, hf_gtp_ext_comm_flags_II_pmtsmi, tvb, offset, 1, ENC_BIG_ENDIAN);
9397 offset++;
9401 }
9404 }
9406 /*
9407 * 7.7.119 Node Identifier
9408 */
9409 static int
9410 decode_gtp_ext_node_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9411 {
9417 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_NODE_IDENTIFIER], NULL,
9421 offset++;
9425 /* The Node Name and Node Realm are Diameter Identities, which are
9426 * specified by RFC 6733 to be in ASCII for compatibility with DNS.
9427 */
9428 proto_tree_add_item_ret_length(ext_tree, hf_gtp_node_name, tvb, offset, 1, ENC_ASCII | ENC_NA, &item_len);
9430 proto_tree_add_item_ret_length(ext_tree, hf_gtp_node_realm, tvb, offset, 1, ENC_ASCII | ENC_NA, &item_len);
9433 }
9435 /*
9436 * 7.7.120 CIoT Optimizations Support Indication
9437 */
9438 static int
9439 decode_gtp_ciot_opt_sup_ind(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9440 {
9445 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_CIOT_OPT_SUP_IND], NULL,
9449 offset++;
9456 offset++;
9460 }
9463 }
9465 /*
9466 * 7.7.121 SCEF PDN Connection
9467 */
9468 static int
9469 decode_gtp_scef_pdn_conn(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
9470 {
9476 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_SCEF_PDN_CONNECTION], NULL,
9480 offset++;
9484 proto_tree_add_item_ret_uint(ext_tree, hf_gtp_apn_length, tvb, offset, 1, ENC_NA, &apn_length);
9490 offset++;
9492 proto_tree_add_item_ret_uint(ext_tree, hf_gtp_scef_id_length, tvb, offset, 2, ENC_BIG_ENDIAN, &scef_id_length);
9499 proto_tree_add_expert(ext_tree, pinfo, &ei_gtp_undecoded, tvb, offset, length - (4 + apn_length + scef_id_length));
9500 }
9503 }
9504 /*
9505 * 7.7.122 IOV_updates counter
9506 */
9507 static int
9508 decode_gtp_iov_updates_counter(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9509 {
9514 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_IOV_UPDATES_COUNTER], NULL,
9518 offset++;
9523 offset++;
9527 }
9530 }
9531 /*
9532 * 7.7.123 Mapped UE Usage Type
9533 */
9534 static int
9535 decode_gtp_mapped_ue_usage_type(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9536 {
9541 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MAPPED_UE_USAGE_TYPE], NULL,
9545 offset++;
9554 }
9557 }
9558 /*
9559 * 7.7.124 UP Function Selection Indication Flags
9560 */
9561 static int
9562 decode_gtp_up_fun_sel_ind_flags(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9563 {
9568 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_UP_FUN_SEL_IND_FLAGS], NULL,
9572 offset++;
9576 proto_tree_add_item(ext_tree, hf_gtp_up_fun_sel_ind_flags_dcnr, tvb, offset, 1, ENC_BIG_ENDIAN);
9577 proto_tree_add_item(ext_tree, hf_gtp_up_fun_sel_ind_flags_spare, tvb, offset, 1, ENC_BIG_ENDIAN);
9578 offset++;
9582 }
9585 }
9587 static int
9588 decode_gtp_rel_pack(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9589 {
9596 ext_tree_rel_pack = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_rel_pack, NULL,
9604 proto_tree_add_uint_format(ext_tree_rel_pack, hf_gtp_seq_num_released, tvb, offset + 3 + n, 2, number, "%u", number);
9607 }
9610 }
9612 /* GPRS: 12.15
9613 * UMTS: 33.015
9614 */
9615 static int
9616 decode_gtp_can_pack(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9617 {
9624 ext_tree_can_pack = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_can_pack, NULL,
9632 proto_tree_add_uint_format(ext_tree_can_pack, hf_gtp_seq_num_canceled, tvb, offset + 3 + n, 2, number, "%u", number);
9634 }
9637 }
9639 /* CDRs dissector
9640 * 3GPP TS 32.295 version 9.0.0 Release 9
9641 */
9649 };
9650 static int
9651 decode_gtp_data_req(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
9652 {
9663 offset++;
9671 }
9673 /* Octet 4 Number of Data Records */
9676 offset++;
9678 /* Octet 5 Data Record Format */
9680 fmt_item = proto_tree_add_item(ext_tree, hf_gtp_data_record_format, tvb, offset, 1, ENC_BIG_ENDIAN);
9681 offset++;
9682 /* The value range is 1-255 in decimal. The value '0' should not be used.
9683 * Only the values 1-10 and 51-255 can be used for standards purposes.
9684 * Values in the range of 11-50 are to be configured only by operators, and are not subject to standardization.
9685 */
9687 proto_item_append_text(fmt_item, " %s", val_to_str_const(format, gtp_cdr_fmt_vals, "Unknown"));
9688 /* Octet 6 -7 Data Record Format Version
9689 * 8 7 6 5 4 3 2 1
9690 * 6 Application Identifier Release Identifier
9691 * 7 Version Identifier
9692 *
9693 * New with Release 15 and higher:
9694 * 8 Release Identifier Extension
9695 * The Release Identifier indicates the TS release up to and including
9696 * 15. The Release Identifier Extension indicates TS releases above 15,
9697 * in this case the Release Identifier has a value of '0' (decimal)
9698 */
9706 }
9707 /* The second octet (#7 in Data Record Packet IE) identifies the version of the TS used to encode the CDR,
9708 * i.e. its value corresponds to the second digit of the version number of the document [51]
9709 * (as shown on the cover sheet), plus '1'.
9710 * E.g. for version 3.4.0, the Version Identifier would be "5".
9711 * In circumstances where the second digit is an alphabetical character, (e.g. 3.b.0), the corresponding ASCII value shall
9712 * be taken, e.g. the Version Identifier would be "66" (ASCII(b)).
9713 */
9716 /* XXX We don't handle ASCCI version */
9718 ver_tree = proto_tree_add_subtree_format(ext_tree, tvb, offset, (rel_id_zero || rel_id == 15) ? 3 : 2, ett_gtp_cdr_ver, NULL,
9722 offset++;
9724 offset++;
9726 /* The Release Identifier indicates the TS release up to and including 15.
9727 * The Release Identifier Extension indicates TS releases above 15,
9728 * in this case the Release Identifier has a value of '0' (decimal).
9729 */
9731 offset++;
9734 }
9735 }
9745 /* XXX this is for release 6, may not work for higher releases */
9751 }
9753 /* Do we have a dissector registering for this data format? */
9755 }
9758 }
9761 /* Proprietary CDR format */
9763 }
9768 }
9771 }
9773 /* GPRS: 12.15
9774 * UMTS: 33.015
9775 */
9776 static int
9777 decode_gtp_data_resp(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9778 {
9793 proto_tree_add_uint_format(ext_tree_data_resp, hf_gtp_requests_responded, tvb, offset + 3 + n, 2, number, "%u", number);
9796 }
9800 }
9802 /* GPRS: 12.15
9803 * UMTS: 33.015
9804 */
9805 static int
9806 decode_gtp_node_addr(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9807 {
9818 proto_tree_add_item(ext_tree_node_addr, hf_gtp_node_address_length, tvb, offset + 1, 2, ENC_BIG_ENDIAN);
9832 }
9836 }
9838 /* GPRS: 9.60 v7.6.0, chapter 7.9.26
9839 * UMTS: 29.060 v4.0, chapter 7.7.46 Private Extension
9840 *
9841 */
9843 static int
9844 decode_gtp_priv_ext(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
9845 {
9855 offset++;
9867 if(!dissector_try_uint(gtp_priv_ext_dissector_table, ext_id, next_tvb, pinfo, ext_tree_priv_ext)){
9869 }
9870 }
9871 }
9874 }
9876 static int
9877 decode_gtp_unknown(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
9878 {
9883 }
9885 static void
9886 track_gtp_session(tvbuff_t * tvb, packet_info * pinfo, proto_tree * tree, gtp_hdr_t * gtp_hdr, wmem_list_t *teid_list, wmem_list_t *ip_list, uint32_t last_teid, address last_ip)
9887 {
9891 /* GTP session */
9897 }
9898 }
9902 /* If the message does not have any session ID */
9905 /* If the message is not a CPDPCRES, CPDPCREQ, UPDPREQ, UPDPRES
9906 * then we remove its information from teid and ip lists
9907 * XXX: Wouldn't it be better not to insert this information
9908 * in the first place for other message types, instead of
9909 * inserting it and then immediately removing it?
9910 * At the very least, it would be faster to iterate through the
9911 * teid_list and ip_list and remove via keys rather than doing
9912 * removal through a reverse lookup.
9913 */
9914 if ((gtp_hdr->message != GTP_MSG_CREATE_PDP_RESP && gtp_hdr->message != GTP_MSG_CREATE_PDP_REQ && gtp_hdr->message != GTP_MSG_UPDATE_PDP_RESP
9916 /* If the lists are not empty*/
9919 }
9920 }
9923 /* If CPDPCREQ and not already in the list then we create a new session*/
9926 /* If this is an error indication then we have to check the session id that belongs to the message with the same data teid and ip */
9931 /* We add the corresponding session to the session list*/
9933 }
9934 }
9935 }
9937 /* We have to check if its teid == teid_cp and ip.dst == gsn_ipv4 from the lists, if that is the case then we have to assign
9938 the corresponding session ID */
9940 /* Then we have to set its session ID */
9943 /* We add the corresponding session to the list so that when a response came we can associate its session ID*/
9945 }
9946 }
9947 }
9948 }
9949 }
9950 }
9951 }
9953 static int
9956 {
9963 /* NRUP */
9967 /* Protocol subtree */
9972 proto_tree_add_item_ret_uint(nrup_ti, hf_nrup_pdu_type,tvb, offset, 1, ENC_BIG_ENDIAN, &pdu_type);
9976 {
9977 /* 5.5.2.1 */
9980 /* PDU Type (=0) Spare DL Discard Blocks DL Flush Report polling Octet 1*/
9982 proto_tree_add_item_ret_boolean(nrup_tree, hf_nrup_dl_discrd_blks, tvb, offset, 1, ENC_BIG_ENDIAN, &dl_disc_blk);
9983 proto_tree_add_item_ret_boolean(nrup_tree, hf_nrup_dl_flush, tvb, offset, 1, ENC_BIG_ENDIAN, &dl_flush);
9985 offset++;
9987 /* Spare Assistance Info. Report Polling Flag Retransmission flag*/
9989 proto_tree_add_item(nrup_tree, hf_nrup_request_out_of_seq_report, tvb, offset, 1, ENC_BIG_ENDIAN);
9990 proto_tree_add_item_ret_boolean(nrup_tree, hf_nrup_report_delivered, tvb, offset, 1, ENC_BIG_ENDIAN, &report_delivered);
9991 proto_tree_add_item(nrup_tree, hf_nrup_user_data_existence_flag, tvb, offset, 1, ENC_BIG_ENDIAN);
9994 offset++;
9996 /* NR-U Sequence NUmber */
10001 /* DL discard NR PDCP PDU SN */
10002 proto_tree_add_item(nrup_tree, hf_nrup_dl_disc_nr_pdcp_pdu_sn, tvb, offset, 3, ENC_BIG_ENDIAN);
10004 }
10005 /* Discarded blocks */
10007 /* DL discard Number of blocks */
10008 proto_tree_add_item_ret_uint(nrup_tree, hf_nrup_dl_disc_num_blks, tvb, offset, 1, ENC_BIG_ENDIAN, &dl_disc_num_blks);
10009 offset++;
10011 /* DL discard NR PDCP PDU SN start */
10012 proto_tree_add_item(nrup_tree, hf_nrup_dl_disc_nr_pdcp_pdu_sn_start, tvb, offset, 3, ENC_BIG_ENDIAN);
10015 /* Discarded Block size */
10017 offset++;
10018 dl_disc_num_blks--;
10019 }
10020 }
10023 /* DL report NR PDCP PDU SN */
10024 proto_tree_add_item(nrup_tree, hf_nrup_dl_report_nr_pdcp_pdu_sn, tvb, offset, 3, ENC_BIG_ENDIAN);
10026 }
10028 }
10031 {
10032 /* 5.5.2.2 */
10042 proto_tree_add_item_ret_boolean(nrup_tree, hf_nrup_high_tx_nr_pdcp_sn_ind ,tvb, offset,1, ENC_BIG_ENDIAN, &high_tx_nr_pdcp_sn_ind );
10043 proto_tree_add_item_ret_boolean(nrup_tree, hf_nrup_high_delivered_nr_pdcp_sn_ind ,tvb, offset,1, ENC_BIG_ENDIAN, &high_del_nr_pdcp_sn_ind );
10045 proto_tree_add_item_ret_boolean(nrup_tree, hf_nrup_lost_pkt_rpt,tvb, offset, 1, ENC_BIG_ENDIAN, &lost_packet_report);
10046 offset++;
10049 proto_tree_add_item(nrup_tree, hf_nrup_delivered_nr_pdcp_sn_range_ind ,tvb, offset,1, ENC_BIG_ENDIAN);
10050 proto_tree_add_item_ret_boolean(nrup_tree, hf_nrup_data_rate_ind,tvb, offset,1, ENC_BIG_ENDIAN, &data_rate_ind);
10051 proto_tree_add_item_ret_boolean(nrup_tree, hf_nrup_high_retx_nr_pdcp_sn_ind,tvb, offset,1, ENC_BIG_ENDIAN, &high_retx_nr_pdcp_sn_ind);
10052 proto_tree_add_item_ret_boolean(nrup_tree, hf_nrup_high_delivered_retx_nr_pdcp_sn_ind,tvb, offset,1, ENC_BIG_ENDIAN, &high_del_retx_nr_pdcp_sn_ind);
10053 proto_tree_add_item_ret_boolean(nrup_tree, hf_nrup_cause_rpt,tvb, offset,1, ENC_BIG_ENDIAN, &cause_rpt);
10054 offset++;
10056 proto_tree_add_item(nrup_tree, hf_nrup_desrd_buff_sz_data_radio_bearer,tvb, offset, 4, ENC_BIG_ENDIAN);
10062 }
10065 proto_tree_add_item_ret_uint(nrup_tree, hf_nrup_num_lost_nru_seq_num,tvb, offset, 1, ENC_BIG_ENDIAN, &lost_NR_U_SN_range);
10069 proto_tree_add_item(nrup_tree, hf_nrup_start_lost_nru_seq_num,tvb, offset, 3, ENC_BIG_ENDIAN);
10074 lost_NR_U_SN_range--;
10075 }
10076 }
10079 proto_tree_add_item(nrup_tree, hf_nrup_high_success_delivered_nr_pdcp_sn,tvb, offset, 3, ENC_BIG_ENDIAN);
10081 }
10086 }
10090 offset ++;
10091 }
10094 proto_tree_add_item(nrup_tree, hf_nrup_high_success_delivered_retx_nr_pdcp_sn,tvb, offset, 3, ENC_BIG_ENDIAN);
10096 }
10100 }
10103 }
10106 {
10107 /* 5.5.2.3 */
10114 /* Flags */
10115 proto_tree_add_item_ret_boolean(nrup_tree, hf_nrup_pdcp_duplication_ind, tvb, offset,1, ENC_BIG_ENDIAN, &pdcp_duplication_indication);
10116 proto_tree_add_item_ret_boolean(nrup_tree, hf_nrup_assistance_information_ind, tvb, offset,1, ENC_BIG_ENDIAN, &assistance_information_ind);
10117 proto_tree_add_item_ret_boolean(nrup_tree, hf_nrup_ul_delay_ind, tvb, offset,1, ENC_BIG_ENDIAN, &ul_delay_ind);
10118 proto_tree_add_item_ret_boolean(nrup_tree, hf_nrup_dl_delay_ind, tvb, offset,1, ENC_BIG_ENDIAN, &dl_delay_ind);
10119 offset++;
10123 offset++;
10125 /* Number of Assistance Information Fields */
10130 /* Number of assistance info fields */
10133 offset++;
10136 /* Assistance Information Type */
10139 offset++;
10140 /* Num octets in assistance info */
10143 offset++;
10144 /* Radio Quality Assistance info */
10148 }
10149 }
10151 /* UL Delay DU Result */
10155 }
10156 /* DL Delay DU Result */
10160 }
10162 }
10164 /* TODO: expert info error for unexpected PDU type? */
10166 }
10169 }
10171 /* TS 38.425 */
10172 static void
10173 addRANContParameter(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int offset, int length)
10174 {
10177 }
10179 static void
10180 dissect_gtp_tpdu_by_handle(dissector_handle_t handle, tvbuff_t * tvb, packet_info * pinfo, proto_tree * tree, int offset)
10181 {
10186 }
10188 static void
10189 dissect_gtp_tpdu_as_pdcp_lte_info(tvbuff_t * tvb, packet_info * pinfo, proto_tree * tree, gtp_hdr_t *gtp_hdr, int offset)
10190 {
10191 /* Check if we have info to call the PDCP dissector */
10197 /* Look for attached packet info! */
10198 p_pdcp_info = (struct pdcp_lte_info *)p_get_proto_data(wmem_file_scope(), pinfo, proto_pdcp_lte, 0);
10199 /* If we don't have the data, add it */
10202 /* Channel info is needed for RRC parsing */
10207 /*p_pdcp_info->BCCHTransport;*/
10209 /* Details of PDCP header */
10214 }
10218 /* RoHC settings */
10228 /* p_pdcp_info->is_retx;*/
10230 /* Used by heuristic dissector only */
10231 /*p_pdcp_info->pdu_length;*/
10233 }
10238 proto_tree_add_subtree(tree, tvb, offset, -1, ett_gtp_pdcp_no_conf, NULL, "[No PDCP-LTE Configuration data found]");
10240 }
10241 }
10243 static void
10244 dissect_gtp_tpsu_as_pdcp_nr_info(tvbuff_t * tvb, packet_info * pinfo, proto_tree * tree, gtp_hdr_t *gtp_hdr, int offset)
10245 {
10246 /*NR-U DUD or DDDS PDU
10247 * This is NR-U DUD/DDDS PDU. It contains PDCP
10248 * payload as per 3GPP TS 38.323
10249 */
10250 /* Check if we have info to call the PDCP dissector */
10259 /* Fill in pdcp_nr_info */
10262 /* Want to use same ueid as other PDCP config.. */
10264 /* Get this from table, may also be available from F1AP signalling... */
10267 /* Details of PDCP header */
10270 /* PDCP_NR_(U|D)L_sdap_hdr_PRESENT bitmask */
10276 }
10279 }
10280 /* Integrity MAC present? */
10283 /* RoHC settings */
10295 /* Used by heuristic dissector only */
10300 proto_tree_add_subtree(tree, tvb, offset, -1, ett_gtp_pdcp_no_conf, NULL, "[No PDCP-NR Configuration data found]");
10302 }
10303 }
10305 static int
10307 {
10329 /* Do we have enough bytes for the version and message type? */
10331 /* No - reject the packet. */
10333 }
10336 /* Version > 2; reject the packet */
10338 }
10341 /* Unknown message type; reject the packet */
10343 }
10345 /* Setting everything to 0, so that the TEID is 0 for GTP version 0
10346 * The magic number should perhaps be replaced.
10347 */
10350 /* Setting the TEID to -1 to say that the TEID is not valid for this packet */
10359 /* We create the auxiliary lists */
10362 }
10364 /*
10365 * Do we have a conversation for this connection?
10366 */
10369 /*
10370 * Do we already know this conversation?
10371 */
10374 /* No. Attach that information to the conversation, and add
10375 * it to the list of information structures.
10376 */
10378 /*Request/response matching tables*/
10383 }
10391 }
10403 }
10410 NULL
10411 };
10417 NULL
10418 };
10423 /* Octet 8 7 6 5 4 3 2 1
10424 * 1 Version | PT| Spare '1 1 1 '| ' 0/1 '
10425 */
10427 /* Bit 1 of octet 1 is not used in GTP' (except in v0), and it is marked '0'
10428 * in the GTP' header. It is in use in GTP' v0 and distinguishes the used header-length.
10429 * In the case of GTP' v0, this bit being marked one (1) indicates the usage of the 6
10430 * octets header. If the bit is set to '0' (usually the case) the 20-octet header is used.
10431 * For all other versions of GTP', this bit is not used and is set to '0'. However,
10432 * this does not suggest the use of the 20-octet header, rather a shorter 6-octet header.
10433 */
10440 }
10449 NULL
10450 };
10456 NULL
10457 };
10467 }
10468 }
10469 }
10470 offset++;
10473 /* Link direction is needed to properly dissect PCO */
10488 case GTP_MSG_FORW_RELOC_RESP: /* direction added for UTRAN Container & BSS Container decode */
10493 }
10494 col_set_str(pinfo->cinfo, COL_INFO, val_to_str_ext_const(gtp_hdr->message, >p_message_type_ext, "Unknown"));
10495 message_item = proto_tree_add_uint(gtp_tree, hf_gtp_message_type, tvb, offset, 1, gtp_hdr->message);
10496 offset++;
10498 proto_tree_add_item_ret_uint(gtp_tree, hf_gtp_length, tvb, 2, 2, ENC_BIG_ENDIAN, >p_hdr->length);
10501 /* We initialize the sequence number*/
10505 proto_tree_add_item_ret_uint(gtp_tree, hf_gtp_seq_number, tvb, offset, 2, ENC_BIG_ENDIAN, &seq_no);
10507 /* If GTP' version is 0 and bit 1 is 0 20 bytes header is used, dissect it */
10511 }
10518 proto_tree_add_item_ret_uint(gtp_tree, hf_gtp_seq_number, tvb, offset, 2, ENC_BIG_ENDIAN, &seq_no);
10521 proto_tree_add_item_ret_uint(gtp_tree, hf_gtp_flow_label, tvb, offset, 2, ENC_BIG_ENDIAN, &flow_label);
10541 /* Are sequence number/N-PDU Number/extension header present?
10542 See NOTE 5 of Figure 2 of 3GPP TS 29.060 version 4.3.0
10543 Release 4 - the Sequence Number, N-PDU Number, and
10544 Next Extension Header fields are present if any of
10545 GTP_E_MASK, GTP_S_MASK, or GTP_PN_MASK are set. */
10547 /* Those fields are only *interpreted* if the
10548 particular flag for the field is set. */
10551 proto_tree_add_item_ret_uint(gtp_tree, hf_gtp_seq_number, tvb, offset, 2, ENC_BIG_ENDIAN, &seq_no);
10552 }
10557 }
10558 offset++;
10562 hdr_ext_item = proto_tree_add_item_ret_uint(gtp_tree, hf_gtp_ext_hdr_next, tvb, offset, 1, ENC_NA, &next_hdr);
10563 offset++;
10564 /* Add each extension header found. */
10568 ext_hdr_len_item = proto_tree_add_item_ret_uint(ext_tree, hf_gtp_ext_hdr_length, tvb, offset, 1, ENC_NA, &ext_hdr_length);
10574 }
10575 offset++;
10576 proto_item_append_text(tf, " (%s)", val_to_str_const(next_hdr, next_extension_header_fieldvals, "Unknown"));
10581 /* UDP Port
10582 * 3GPP 29.281 v9.0.0, 5.2.2.1 UDP Port
10583 * "This extension header may be transmitted in
10584 * Error Indication messages to provide the UDP
10585 * Source Port of the G-PDU that triggered the
10586 * Error Indication. It is 4 octets long, and
10587 * therefore the Length field has value 1"
10588 */
10590 /* UDP Port of source */
10593 /* Bad length */
10594 expert_add_info_format(pinfo, ext_tree, &ei_gtp_ext_length_warn, "The length field for the UDP Port Extension header should be 1.");
10595 }
10599 /* RAN Container
10600 * 3GPP 29.281 v15.2.0, 5.2.2.4 RAN Container
10601 * This extension header may be transmitted in
10602 * a G-PDU over the X2 user plane interface
10603 * between the eNBs. The RAN Container has a
10604 * variable length and its content is specified
10605 * in 3GPP TS 36.425 [25]. A G-PDU message with
10606 * this extension header may be sent without a T-PDU.
10607 */
10608 proto_tree_add_item(ext_tree, hf_gtp_ext_hdr_ran_cont, tvb, offset, (4*ext_hdr_length)-1, ENC_NA);
10612 /* Long PDCP PDU Number
10613 * 3GPP 29.281 v15.2.0, 5.2.2.2A Long PDCP PDU Number
10614 * This extension header is used for direct X2 or
10615 * indirect S1 DL data forwarding during a Handover
10616 * procedure between two eNBs. The Long PDCP PDU number
10617 * extension header is 8 octets long, and therefore
10618 * the Length field has value 2.
10619 * The PDCP PDU number field of the Long PDCP PDU number
10620 * extension header has a maximum value which requires 18
10621 * bits (see 3GPP TS 36.323 [24]). Bit 2 of octet 2 is
10622 * the most significant bit and bit 1 of octet 4 is the
10623 * least significant bit, see Figure 5.2.2.2A-1. Bits 8 to
10624 * 3 of octet 2, and Bits 8 to 1 of octets 5 to 7 shall be
10625 * set to 0.
10626 * NOTE: A G-PDU which includes a PDCP PDU Number contains
10627 * either the extension header PDCP PDU Number or Long PDCP
10628 * PDU Number.
10629 */
10631 proto_tree_add_bits_item(ext_tree, hf_gtp_ext_hdr_spare_bits, tvb, offset<<3, 6, ENC_BIG_ENDIAN);
10635 expert_add_info_format(pinfo, ext_tree, &ei_gtp_ext_length_warn, "The length field for the Long PDCP SN Extension header should be 2.");
10636 }
10640 /* Xw RAN Container
10641 * 3GPP 29.281 v15.2.0, 5.2.2.5 Xw RAN Container
10642 * This extension header may be transmitted in a
10643 * G-PDU over the Xw user plane interface between
10644 * the eNB and the WLAN Termination (WT). The Xw
10645 * RAN Container has a variable length and its
10646 * content is specified in 3GPP TS 36.464 [27].
10647 * A G-PDU message with this extension header may
10648 * be sent without a T-PDU.
10649 */
10650 proto_tree_add_item(ext_tree, hf_gtp_ext_hdr_xw_ran_cont, tvb, offset, (4*ext_hdr_length)-1, ENC_NA);
10654 /* NR RAN Container
10655 * 3GPP 29.281 v15.2.0, 5.2.2.6 NR RAN Container
10656 * This extension header may be transmitted in a
10657 * G-PDU over the X2-U, Xn-U and F1-U user plane
10658 * interfaces, within NG-RAN and, for EN-DC, within
10659 * E-UTRAN. The NR RAN Container has a variable
10660 * length and its content is specified in 3GPP TS
10661 * 38.425 [30]. A G-PDU message with this extension
10662 * header may be sent without a T-PDU.
10663 */
10664 ran_cont_tree = proto_tree_add_subtree(ext_tree, tvb, offset, (ext_hdr_length * 4) - 1, ett_gtp_nr_ran_cont, NULL, "NR RAN Container");
10669 {
10670 /* PDU Session Container
10671 * 3GPP 29.281 v15.2.0, 5.2.2.7 PDU Session Container
10672 * This extension header may be transmitted in a G-PDU
10673 * over the N3 and N9 user plane interfaces, between
10674 * NG-RAN and UPF, or between two UPFs. The PDU Session
10675 * Container has a variable length and its content is
10676 * specified in 3GPP TS 38.415 [31].
10677 */
10683 NULL
10684 };
10690 NULL
10691 };
10696 NULL
10697 };
10701 NULL
10702 };
10707 NULL
10708 };
10718 NULL
10719 };
10723 NULL
10724 };
10731 pdu_ses_cont_tree = proto_tree_add_subtree(ext_tree, tvb, curr_offset, (ext_hdr_length * 4) - 1, ett_pdu_session_cont, NULL, "PDU Session Container");
10732 proto_tree_add_item_ret_uint(pdu_ses_cont_tree, hf_gtp_ext_hdr_pdu_ses_cont_pdu_type, tvb, curr_offset, 1, ENC_BIG_ENDIAN, &pdu_type);
10735 /* PDU Type: DL PDU SESSION INFORMATION (0) */
10736 /* PDU Type QMP SNP MSNP Spare */
10737 proto_tree_add_bitmask_list_ret_uint64(pdu_ses_cont_tree, tvb, curr_offset, 1, flags1_dl, ENC_BIG_ENDIAN, &flags1_val);
10738 curr_offset++;
10739 /* PPP RQI QoS Flow Identifier */
10740 proto_tree_add_bitmask_list_ret_uint64(pdu_ses_cont_tree, tvb, curr_offset, 1, flags2, ENC_BIG_ENDIAN, &flags2_val);
10741 curr_offset++;
10743 /* PPI Spare */
10745 curr_offset++;
10746 }
10748 proto_tree_add_item(pdu_ses_cont_tree, hf_gtp_ext_hdr_pdu_ses_cont_dl_send_time_stamp, tvb, curr_offset, 8, ENC_TIME_NTP|ENC_BIG_ENDIAN);
10750 }
10752 proto_tree_add_item(pdu_ses_cont_tree, hf_gtp_ext_hdr_pdu_ses_cont_dl_qfi_sn, tvb, curr_offset, 3, ENC_BIG_ENDIAN);
10754 }
10756 proto_tree_add_item(pdu_ses_cont_tree, hf_gtp_ext_hdr_pdu_ses_cont_dl_mbs_qfi_sn, tvb, curr_offset, 4, ENC_BIG_ENDIAN);
10757 //curr_offset += 4;
10758 }
10761 /* PDU Type: UL PDU SESSION INFORMATION (1)*/
10762 /* PDU Type QMP DL Delay Ind UL Delay Ind SNP */
10763 proto_tree_add_bitmask_list_ret_uint64(pdu_ses_cont_tree, tvb, curr_offset, 1, flags1_ul, ENC_BIG_ENDIAN, &flags1_val);
10764 curr_offset++;
10765 /* N3/N9 Delay ind New IE Flag QoS Flow Identifier */
10766 proto_tree_add_bitmask_list_ret_uint64(pdu_ses_cont_tree, tvb, curr_offset, 1, flags4, ENC_BIG_ENDIAN, &flags4_val);
10767 curr_offset++;
10769 proto_tree_add_item(pdu_ses_cont_tree, hf_gtp_ext_hdr_pdu_ses_cont_dl_send_time_stamp_repeat, tvb, curr_offset, 8, ENC_TIME_NTP|ENC_BIG_ENDIAN);
10771 proto_tree_add_item(pdu_ses_cont_tree, hf_gtp_ext_hdr_pdu_ses_cont_dl_recv_time_stamp, tvb, curr_offset, 8, ENC_TIME_NTP|ENC_BIG_ENDIAN);
10773 proto_tree_add_item(pdu_ses_cont_tree, hf_gtp_ext_hdr_pdu_ses_cont_ul_send_time_stamp, tvb, curr_offset, 8, ENC_TIME_NTP|ENC_BIG_ENDIAN);
10775 }
10777 proto_tree_add_item(pdu_ses_cont_tree, hf_gtp_ext_hdr_pdu_ses_cont_dl_delay_result, tvb, curr_offset, 4, ENC_BIG_ENDIAN);
10779 }
10781 proto_tree_add_item(pdu_ses_cont_tree, hf_gtp_ext_hdr_pdu_ses_cont_ul_delay_result, tvb, curr_offset, 4, ENC_BIG_ENDIAN);
10783 }
10785 proto_tree_add_item(pdu_ses_cont_tree, hf_gtp_ext_hdr_pdu_ses_cont_ul_qfi_sn, tvb, curr_offset, 3, ENC_BIG_ENDIAN);
10787 }
10789 proto_tree_add_item(pdu_ses_cont_tree, hf_gtp_ext_hdr_pdu_ses_cont_n3_n9_delay_result, tvb, curr_offset, 4, ENC_BIG_ENDIAN);
10791 }
10793 proto_tree_add_bitmask_list_ret_uint64(pdu_ses_cont_tree, tvb, curr_offset, 1, flags5, ENC_BIG_ENDIAN, &flags5_val);
10794 curr_offset++;
10797 //curr_offset++;
10798 }
10799 }
10802 proto_tree_add_expert(pdu_ses_cont_tree, pinfo, &ei_gtp_unknown_pdu_type, tvb, offset, (ext_hdr_length * 4) - 1);
10804 }
10805 }
10809 /* PDCP PDU
10810 * 3GPP 29.281 v9.0.0, 5.2.2.2 PDCP PDU Number
10811 *
10812 * "This extension header is transmitted, for
10813 * example in UTRAN, at SRNS relocation time,
10814 * to provide the PDCP sequence number of not
10815 * yet acknowledged N-PDUs. It is 4 octets long,
10816 * and therefore the Length field has value 1.
10817 *
10818 * When used during a handover procedure between
10819 * two eNBs at the X2 interface (direct DL data
10820 * forwarding) or via the S1 interface (indirect
10821 * DL data forwarding) in E-UTRAN, bit 8 of octet
10822 * 2 is spare and shall be set to zero.
10823 *
10824 * Wireshark Note: TS 29.060 does not define bit
10825 * 5-6 as spare, so no check is possible unless
10826 * a preference is used.
10827 */
10828 /* First byte is length (should be 1) */
10832 ext_item = proto_tree_add_item_ret_uint(ext_tree, hf_gtp_ext_hdr_pdcpsn, tvb, offset, 2, ENC_BIG_ENDIAN, &ext_hdr_pdcpsn);
10835 }
10837 expert_add_info_format(pinfo, ext_tree, &ei_gtp_ext_length_warn, "The length field for the PDCP SN Extension header should be 1.");
10838 }
10842 /* Suspend Request */
10846 /* Suspend Response */
10850 {
10852 gtp_hdr_ext_info_t gtp_hdr_ext_info;
10855 /* NOTE Type and length included in the call */
10857 dissector_try_uint_new(gtp_hdr_ext_dissector_table, next_hdr, ext_hdr_tvb, pinfo, ext_tree, false, >p_hdr_ext_info);
10859 }
10860 }
10862 hdr_ext_item = proto_tree_add_item_ret_uint(ext_tree, hf_gtp_ext_hdr_next, tvb, offset, 1, ENC_NA, &next_hdr);
10863 offset++;
10864 }
10866 offset++;
10867 }
10871 }
10872 }
10875 /* Dissect IEs */
10881 checked_field = check_field_presence_and_decoder(gtp_hdr->message, ext_hdr_val, &mandatory, &decoder);
10892 expert_add_info_format(pinfo, message_item, &ei_gtp_wrong_next_field, "[WARNING] wrong next field, should be: %s",
10895 }
10896 }
10904 }
10907 }
10910 /* We insert the lists inside the table*/
10912 }
10913 /*Use sequence number to track Req/Resp pairs*/
10918 }
10919 gcrp = gtp_match_response(tvb, pinfo, gtp_tree, seq_no, gtp_hdr->message, gtp_info, cause_aux);
10920 /*pass packet to tap for response time reporting*/
10923 }
10924 }
10925 }
10927 track_gtp_session(tvb, pinfo, gtp_tree, gtp_hdr, args->teid_list, args->ip_list, args->last_teid, args->last_ip);
10928 }
10936 if (dissector_try_heuristic(heur_subdissector_list, next_tvb, pinfo, tree, &hdtbl_entry, NULL)) {
10940 }
10942 }
10956 /* Call a custom dissector if available */
10962 }
10967 }
10968 }
10973 }
10975 static int
10978 {
10980 }
10982 static int
10985 {
10988 /*
10989 * Do we have enough data to check the first byte?
10990 */
10992 /* No. */
10994 }
10996 /*
10997 * If this is GTPv2-C call the gtpv2 dissector if present
10998 * Should this be moved to after the conversation stuff to retain that functionality for GTPv2 ???
10999 */
11002 /* Unknown version - reject the packet */
11004 }
11006 /* GTPv2-C 3GPP TS 29.274 */
11010 }
11011 }
11014 }
11016 // Very minimal heuristic dissector for ethernet that recognizes ethernet with a limited
11017 // set of protocols, optionally with a set of vlan tags.
11018 // This dissector is not implemented in the packet-eth.c file as it is too simplistic
11019 // for general purpose.
11020 static bool
11022 {
11028 }
11030 // skip both mac-addresses, no information to be gained from them
11037 {
11040 }
11044 }
11046 }
11048 {
11051 }
11054 }
11064 }
11067 }
11069 static void
11071 {
11073 }
11075 void
11077 {
11089 },
11094 },
11099 },
11104 },
11109 },
11114 },
11119 },
11124 },
11129 },
11134 },
11139 },
11144 },
11149 },
11154 },
11159 },
11164 },
11169 },
11174 },
11179 },
11184 },
11189 },
11194 },
11199 },
11204 },
11209 },
11214 },
11219 },
11225 },
11230 },
11235 },
11240 },
11245 },
11250 },
11255 },
11260 },
11265 },
11270 },
11275 },
11280 },
11285 },
11290 },
11295 },
11300 },
11305 },
11310 },
11315 },
11320 },
11325 },
11330 },
11335 },
11340 },
11345 },
11350 },
11355 },
11360 },
11365 },
11370 },
11375 },
11380 },
11386 },
11391 },
11396 },
11401 },
11406 },
11411 },
11416 },
11421 },
11426 },
11431 },
11436 },
11441 },
11446 },
11451 },
11456 },
11461 },
11466 },
11471 },
11476 },
11481 },
11486 },
11491 },
11496 },
11501 },
11506 },
11511 },
11516 },
11521 },
11526 },
11531 },
11536 },
11541 },
11546 },
11551 },
11556 },
11561 },
11566 },
11571 },
11576 },
11581 },
11586 },
11591 },
11596 },
11601 },
11606 },
11607 /* The SDU size and UL/DL bandwidth items take up one octet in the
11608 * frame, but are multiplied by various factors before being added
11609 * to the tree with proto_item_add_uint[_format_value].
11610 */
11615 },
11620 },
11625 },
11630 },
11634 NULL,
11635 HFILL}
11636 },
11641 },
11646 },
11651 },
11656 },
11661 },
11666 },
11671 },
11676 },
11681 },
11686 },
11691 },
11696 },
11701 },
11706 },
11711 },
11716 },
11721 },
11726 },
11731 },
11736 },
11741 },
11746 },
11751 },
11756 },
11761 },
11766 },
11771 },
11776 },
11781 },
11786 },
11791 },
11796 },
11801 },
11806 },
11811 },
11816 },
11821 },
11826 },
11831 },
11836 },
11841 },
11846 },
11851 },
11856 },
11861 },
11866 },
11871 },
11876 },
11881 },
11886 },
11891 },
11896 },
11901 },
11906 },
11911 },
11916 },
11921 },
11926 },
11931 },
11936 },
11941 },
11946 },
11951 },
11956 },
11961 },
11966 },
11971 },
11976 },
11981 },
11986 },
11991 },
11996 },
12001 },
12006 },
12011 },
12016 },
12021 },
12026 },
12031 },
12036 },
12041 },
12046 },
12051 },
12056 },
12061 },
12066 },
12071 },
12076 },
12081 },
12086 },
12091 },
12096 },
12101 },
12106 HFILL}
12107 },
12112 HFILL}
12113 },
12118 HFILL}
12119 },
12124 },
12129 },
12134 },
12139 },
12144 },
12149 },
12154 },
12159 },
12164 },
12169 },
12174 },
12179 },
12184 },
12189 },
12194 },
12199 },
12204 },
12209 },
12214 },
12219 },
12224 },
12229 },
12234 },
12239 },
12244 },
12249 },
12254 },
12260 },
12265 },
12270 },
12275 },
12280 },
12285 },
12290 },
12295 },
12300 },
12305 },
12310 },
12315 },
12320 },
12325 },
12330 },
12335 },
12340 },
12345 },
12350 },
12355 },
12360 },
12365 },
12370 },
12375 },
12380 },
12385 },
12390 },
12395 },
12400 },
12405 },
12410 },
12415 },
12420 },
12425 },
12430 },
12435 },
12440 },
12445 },
12450 },
12455 },
12460 },
12465 },
12470 },
12475 },
12480 },
12485 },
12490 },
12495 },
12500 },
12505 },
12510 },
12515 },
12520 },
12525 },
12530 },
12535 },
12540 },
12545 },
12550 },
12555 },
12560 { &hf_gtp_xres_length, { "XRES length", "gtp.xres_length", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12562 { &hf_gtp_quintuplet_ciphering_key, { "Quintuplet Ciphering Key", "gtp.quintuplet_ciphering_key", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12563 { &hf_gtp_quintuplet_integrity_key, { "Quintuplet Integrity Key", "gtp.quintuplet_integrity_key", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12564 { &hf_gtp_authentication_length, { "Authentication length", "gtp.authentication_length", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12566 { &hf_gtp_ciphering_key_ck, { "Ciphering key CK", "gtp.ciphering_key_ck", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12567 { &hf_gtp_integrity_key_ik, { "Integrity key IK", "gtp.integrity_key_ik", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12568 { &hf_gtp_quintuplets_length, { "Quintuplets length", "gtp.quintuplets_length", FT_UINT16, BASE_DEC_HEX, NULL, 0x0, NULL, HFILL }},
12569 { &hf_gtp_ciphering_key_kc, { "Ciphering key Kc", "gtp.ciphering_key_kc", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12570 { &hf_gtp_container_length, { "Container length", "gtp.container_length", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12571 { &hf_gtp_extended_end_user_address, { "Extended End User Address", "gtp.extended_end_user_address", FT_BOOLEAN, 8, TFS(&tfs_yes_no), 0x80, NULL, HFILL }},
12572 { &hf_gtp_vplmn_address_allowed, { "VPLMN address allowed", "gtp.vplmn_address_allowed", FT_BOOLEAN, 8, TFS(&tfs_yes_no), 0x40, NULL, HFILL }},
12573 { &hf_gtp_activity_status_indicator, { "Activity Status Indicator", "gtp.activity_status_indicator", FT_BOOLEAN, 8, TFS(&tfs_yes_no), 0x20, NULL, HFILL }},
12574 { &hf_gtp_reordering_required, { "Reordering required", "gtp.reordering_required", FT_BOOLEAN, 8, TFS(&tfs_yes_no), 0x10, NULL, HFILL }},
12575 { &hf_gtp_pdp_cntxt_sapi, { "SAPI", "gtp.pdp_cntxt.sapi", FT_UINT8, BASE_DEC, NULL, 0x0F, NULL, HFILL }},
12576 { &hf_gtp_sequence_number_down, { "Sequence number down", "gtp.sequence_number_down", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12577 { &hf_gtp_sequence_number_up, { "Sequence number up", "gtp.sequence_number_up", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12578 { &hf_gtp_send_n_pdu_number, { "Send N-PDU number", "gtp.send_n_pdu_number", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12579 { &hf_gtp_receive_n_pdu_number, { "Receive N-PDU number", "gtp.receive_n_pdu_number", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12580 { &hf_gtp_uplink_flow_label_signalling, { "Uplink flow label signalling", "gtp.uplink_flow_label_signalling", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12581 { &hf_gtp_pdp_context_identifier, { "PDP context identifier", "gtp.pdp_context_identifier", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12582 { &hf_gtp_pdp_organization, { "PDP organization", "gtp.pdp_organization", FT_UINT8, BASE_DEC, VALS(pdp_org_type), 0x0F, NULL, HFILL }},
12583 { &hf_gtp_pdp_type, { "PDP type", "gtp.pdp_type", FT_UINT8, BASE_DEC, VALS(pdp_type), 0x0, NULL, HFILL }},
12584 { &hf_gtp_pdp_address_length, { "PDP address length", "gtp.pdp_address_length", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12585 { &hf_gtp_pdp_address_ipv4, { "PDP address", "gtp.pdp_address.ipv4", FT_IPv4, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12586 { &hf_gtp_pdp_address_ipv6, { "PDP address", "gtp.pdp_address.ipv6", FT_IPv6, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12587 { &hf_gtp_sgsn_address_for_control_plane_ipv4, { "SGSN Address for control plane", "gtp.sgsn_address_for_control_plane.ipv4", FT_IPv4, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12588 { &hf_gtp_sgsn_address_for_control_plane_ipv6, { "SGSN Address for control plane", "gtp.sgsn_address_for_control_plane.ipv6", FT_IPv6, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12589 { &hf_gtp_sgsn_address_for_user_traffic_ipv4, { "SGSN Address for User Traffic", "gtp.sgsn_address_for_user_traffic.ipv4", FT_IPv4, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12590 { &hf_gtp_sgsn_address_for_user_traffic_ipv6, { "SGSN Address for User Traffic", "gtp.sgsn_address_for_user_traffic.ipv6", FT_IPv6, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12591 { &hf_gtp_ggsn_address_length, { "GGSN address length", "gtp.ggsn_address_length", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12592 { &hf_gtp_ggsn_address_for_control_plane_ipv4, { "GGSN Address for control plane", "gtp.ggsn_address_for_control_plane.ipv4", FT_IPv4, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12593 { &hf_gtp_ggsn_address_for_control_plane_ipv6, { "GGSN Address for control plane", "gtp.ggsn_address_for_control_plane.ipv6", FT_IPv6, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12594 { &hf_gtp_ggsn_address_for_user_traffic_ipv4, { "GGSN Address for User Traffic", "gtp.ggsn_address_for_user_traffic.ipv4", FT_IPv4, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12595 { &hf_gtp_ggsn_address_for_user_traffic_ipv6, { "GGSN Address for User Traffic", "gtp.ggsn_address_for_user_traffic.ipv6", FT_IPv6, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12596 { &hf_gtp_apn_length, { "APN length", "gtp.apn_length", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12597 { &hf_gtp_transaction_identifier, { "Transaction identifier", "gtp.transaction_identifier", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12598 { &hf_gtp_gsn_address_length, { "GSN address length", "gtp.gsn_address_length", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12599 { &hf_gtp_gsn_address_information_element_length, { "GSN address Information Element length", "gtp.gsn_address_information_element_length", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12600 { &hf_gtp_tft_length, { "TFT length", "gtp.tft_length", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12601 { &hf_gtp_rab_setup_length, { "RAB setup length", "gtp.rab_setup_length", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12602 { &hf_gtp_timezone, { "Timezone", "gtp.timezone", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12603 { &hf_gtp_timezone_dst, { "DST", "gtp.timezone_dst", FT_UINT8, BASE_DEC, VALS(daylight_saving_time_vals), 0x03, NULL, HFILL }},
12604 { &hf_gtp_rfsp_index, { "RFSP Index", "gtp.rfsp_index", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12605 { &hf_gtp_fqdn_length, { "FQDN length", "gtp.fqdn_length", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12606 { &hf_gtp_number_of_data_records, { "Number of data records", "gtp.number_of_data_records", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12607 { &hf_gtp_data_record_format, { "Data record format", "gtp.data_record_format", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12608 { &hf_gtp_node_address_length, { "Node address length", "gtp.node_address_length", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12609 { &hf_gtp_seq_num_released, { "Sequence number released", "gtp.seq_num_released", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12610 { &hf_gtp_seq_num_canceled, { "Sequence number cancelled", "gtp.seq_num_canceled", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12611 { &hf_gtp_requests_responded, { "Requests responded", "gtp.requests_responded", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12612 { &hf_gtp_hyphen_separator, { "Hyphen separator: -", "gtp.hyphen_separator", FT_NONE, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12613 { &hf_gtp_ms_network_cap_content_len, { "Length of MS network capability contents", "gtp.ms_network_cap_content_len", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12615 { &hf_gtp_iei_mobile_id_len, { "Length", "gtp.iei.mobile_id_len", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12616 { &hf_gtp_qos_umts_length, { "Length", "gtp.qos_umts_length", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12617 { &hf_gtp_num_ext_hdr_types, { "Number of Extension Header Types in list (i.e., length)", "gtp.num_ext_hdr_types", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12618 { &hf_gtp_ext_hdr_type, { "Extension Header Type", "gtp.ext_hdr_type", FT_UINT8, BASE_DEC, VALS(next_extension_header_fieldvals), 0x0, NULL, HFILL }},
12619 { &hf_gtp_tpdu_data, { "T-PDU Data", "gtp.tpdu_data", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL } },
12620 { &hf_gtp_ext_enb_type, { "enb_type", "gtp.enb_type", FT_UINT8, BASE_DEC, VALS(gtp_enb_type_vals), 0x0, NULL, HFILL } },
12625 },
12630 },
12635 },
12640 },
12645 },
12650 },
12655 },
12660 },
12665 },
12670 },
12675 },
12680 },
12685 },
12686 };
12690 {
12695 },
12700 },
12704 "Presence of DL discard Number of blocks, discard NR PDCP PDU SN start and Discarded Block size", HFILL}
12705 },
12710 },
12714 "Indicates that the node hosting the NR PDCP entity requests providing the downlink delivery status report", HFILL}
12715 },
12719 "Indicates whether the NR PDCP PDU is a retransmission NR-U packet sent by the node hosting the NR PDCP entity to the corresponding node", HFILL}
12720 },
12725 },
12730 },
12735 },
12741 },
12745 "Whether the node hosting the NR PDCP entity has some user data for the concerned data radio bearer", HFILL}
12746 },
12751 },
12756 },
12761 },
12766 },
12771 },
12776 },
12782 },
12787 },
12792 },
12797 },
12802 },
12807 },
12812 },
12817 },
12822 },
12824 { "Highest Delivered Retransmitted NR PDCP SN Ind", "nrup.high_delivered_retx_nr_pdcp_sn_ind",
12827 },
12832 },
12837 },
12842 },
12847 },
12852 },
12857 },
12862 },
12864 { "Highest Successfully Delivered Retransmitted NR PDCP SN", "nrup.high_success_delivered_retx_nr_pdcp_sn",
12867 },
12872 },
12878 },
12883 },
12888 },
12893 },
12898 },
12903 },
12908 },
12913 },
12915 { "Number of octets for Radio Quality Assistance Information Fields", "nrup.num_octets_radio_qa_info",
12918 },
12923 },
12928 },
12933 }
12934 };
12938 { &ei_gtp_ext_length_mal, { "gtp.ext_length.invalid", PI_MALFORMED, PI_ERROR, "Malformed length", EXPFILL }},
12939 { &ei_gtp_ext_hdr_pdcpsn, { "gtp.ext_hdr.pdcp_sn.non_zero", PI_PROTOCOL, PI_NOTE, "3GPP TS 29.281 v9.0.0: When used between two eNBs at the X2 interface in E-UTRAN, bit 8 of octet 2 is spare. The meaning of the spare bits shall be set to zero.", EXPFILL }},
12940 { &ei_gtp_ext_length_warn, { "gtp.ext_length.invalid", PI_PROTOCOL, PI_WARN, "Length warning", EXPFILL }},
12941 { &ei_gtp_undecoded, { "gtp.undecoded", PI_UNDECODED, PI_WARN, "Data not decoded yet", EXPFILL }},
12942 { &ei_gtp_message_not_found, { "gtp.message_not_found", PI_PROTOCOL, PI_WARN, "Message not found", EXPFILL }},
12943 { &ei_gtp_field_not_present, { "gtp.field_not_present", PI_PROTOCOL, PI_WARN, "Field not present", EXPFILL }},
12944 { &ei_gtp_wrong_next_field, { "gtp.wrong_next_field", PI_PROTOCOL, PI_WARN, "Wrong next field", EXPFILL }},
12945 { &ei_gtp_field_not_support_in_version, { "gtp.field_not_support_in_version", PI_PROTOCOL, PI_WARN, "GTP version not supported for field", EXPFILL }},
12946 { &ei_gtp_guaranteed_bit_rate_value, { "gtp.guaranteed_bit_rate_value", PI_PROTOCOL, PI_NOTE, "Use the value indicated by the Guaranteed bit rate", EXPFILL }},
12947 { &ei_gtp_max_bit_rate_value, { "gtp.max_bit_rate_value", PI_PROTOCOL, PI_NOTE, "Use the value indicated by the Maximum bit rate", EXPFILL }},
12948 { &ei_gtp_ext_geo_loc_type, { "gtp.ext_geo_loc_type.unknown", PI_PROTOCOL, PI_WARN, "Unknown Location type data", EXPFILL }},
12949 { &ei_gtp_iei, { "gtp.iei.unknown", PI_PROTOCOL, PI_WARN, "Unknown IEI - Later spec than TS 29.060 9.4.0 used?", EXPFILL }},
12950 { &ei_gtp_unknown_extension_header, { "gtp.unknown_extension_header", PI_PROTOCOL, PI_WARN, "Unknown extension header", EXPFILL }},
12951 { &ei_gtp_unknown_pdu_type, { "gtp.unknown_pdu_type", PI_PROTOCOL, PI_WARN, "Unknown PDU type", EXPFILL }},
12952 { &ei_gtp_source_type_unknown, { "gtp.source_type.unknown", PI_PROTOCOL, PI_WARN, "Unknown source type", EXPFILL }},
12953 { &ei_gtp_cdr_rel_ext_invalid, { "gtp.cdr_rel_ext.invalid", PI_PROTOCOL, PI_WARN, "If Release Identifier is 0, Release Identifier Extension must be >= 16", EXPFILL}},
12954 };
12956 /* Setup protocol subtree array */
12957 #define GTP_NUM_INDIVIDUAL_ELEMS 39
13003 {
13005 }
13009 proto_gtpprime = proto_register_protocol("GPRS Tunneling Protocol Prime", "GTP (Prime)", "gtpprime");
13021 /* For reading older preference files with "gtpv0." or "gtpv1." preferences */
13025 prefs_register_uint_preference(gtp_module, "v0_port", "GTPv0 and GTP' port", "GTPv0 and GTP' port (default 3386)", 10, &g_gtpv0_port);
13026 prefs_register_uint_preference(gtp_module, "v1c_port", "GTPv1 or GTPv2 control plane (GTP-C, GTPv2-C) port", "GTPv1 and GTPv2 control plane port (default 2123)", 10,
13028 prefs_register_uint_preference(gtp_module, "v1u_port", "GTPv1 user plane (GTP-U) port", "GTPv1 user plane port (default 2152)", 10,
13034 gtp_decode_tpdu_as,
13036 prefs_register_uint_preference(gtp_module, "pair_max_interval", "Max interval allowed in pair matching", "Request/reply pair matches only if their timestamps are closer than that value, in ms (default 0, i.e. don't use timestamps)", 10, &pref_pair_matching_max_interval_ms);
13041 prefs_register_bool_preference(gtp_module, "check_etsi", "Compare GTP order with ETSI", "GTP ETSI order", &g_gtp_etsi_order);
13045 /* This preference can be used to disable the dissection of GTP over TCP. Most of the Wireless operators uses GTP over UDP.
13046 * The preference is set to true by default forbackward compatibility
13047 */
13048 prefs_register_bool_preference(gtp_module, "dissect_gtp_over_tcp", "Dissect GTP over TCP", "Dissect GTP over TCP", &g_gtp_over_tcp);
13049 prefs_register_bool_preference(gtp_module, "track_gtp_session", "Track GTP session", "Track GTP session", &g_gtp_session);
13051 /* --- PDCP DECODE ADDITIONS --- */
13054 UAT_FLD_CSTRING_OTHER(pdcp_lte_users, ip_addr_str, "Dst IP address", pdcp_uat_fld_ip_chk_cb, "IPv4 or IPv6 address"),
13055 UAT_FLD_CSTRING_OTHER(pdcp_lte_users, teid_str, "TEID value or \"" PDCP_TEID_WILDCARD "\"", pdcp_uat_fld_teid_chk_cb, "Tunnel Endpoint Identifier"),
13057 UAT_FLD_VS(pdcp_lte_users, header_present, "Header present", vs_header_present, "Header present flag"),
13059 UAT_FLD_VS(pdcp_lte_users, lte_sn_length, "PDCP SN length", vs_pdcp_lte_sn_length, "Length of PDCP sequence number"),
13060 UAT_FLD_VS(pdcp_lte_users, rohc_compression, "ROHC compression", vs_rohc_compression, "Header compression"),
13061 //UAT_FLD_VS(pdcp_lte_users, rohc_mode, "ROHC mode", vs_rohc_mode, "ROHC mode"),
13065 UAT_END_FIELDS
13066 };
13088 pdcp_lte_keys_uat);
13091 UAT_FLD_CSTRING_OTHER(pdcp_nr_users, ip_addr_str, "Dst IP address", pdcp_uat_fld_ip_chk_cb, "IPv4 or IPv6 address"),
13092 UAT_FLD_CSTRING_OTHER(pdcp_nr_users, teid_str, "TEID value or \"" PDCP_TEID_WILDCARD "\"", pdcp_uat_fld_teid_chk_cb, "Tunnel Endpoint Identifier"),
13094 UAT_FLD_VS(pdcp_nr_users, sdap_header_present, "SDAP header present flag", vs_sdap_header_present, "SDAP header present flag"),
13095 UAT_FLD_VS(pdcp_nr_users, mac_i_present, "MAC-I present flag", vs_mac_i_present, "MAC-I present flag"),
13097 UAT_FLD_VS(pdcp_nr_users, pdcp_nr_sn_length, "PDCP SN length", vs_pdcp_nr_sn_length, "Length of PDCP sequence number"),
13098 UAT_FLD_VS(pdcp_nr_users, rohc_compression, "ROHC compression", vs_rohc_compression, "Header compression"),
13099 //UAT_FLD_VS(pdcp_nr_users, rohc_mode, "ROHC mode", vs_rohc_mode, "ROHC mode"),
13103 UAT_END_FIELDS
13104 };
13121 /* Set default values for new entries to this table. Choosing SRB-1 (DL) */
13122 /* N.B. currently doesn't seem to work.. */
13127 SIGNALING_PLANE_STR, PDCP_SN_LENGTH_12_BITS_STR, ROHC_COMPRESSION_FALSE_STR, ROHC_PROFILE_UNCOMPRESSED_STR,
13129 };
13137 pdcp_nr_keys_uat);
13139 /* --- END PDCP NR DECODE ADDITIONS ---*/
13145 gtp_priv_ext_dissector_table = register_dissector_table("gtp.priv_ext", "GTP Private Extension", proto_gtp, FT_UINT16, BASE_DEC);
13146 gtp_cdr_fmt_dissector_table = register_dissector_table("gtp.cdr_fmt", "GTP Data Record Type", proto_gtp, FT_UINT16, BASE_DEC);
13147 gtp_hdr_ext_dissector_table = register_dissector_table("gtp.hdr_ext", "GTP Header Extension", proto_gtp, FT_UINT16, BASE_DEC);
13149 session_table = wmem_map_new_autoreset(wmem_epan_scope(), wmem_file_scope(), g_direct_hash, g_direct_equal);
13150 frame_map = wmem_map_new_autoreset(wmem_epan_scope(), wmem_file_scope(), gtp_info_hash, gtp_info_equal);
13158 }
13159 /* TS 132 295 V9.0.0 (2010-02)
13160 * 5.1.3 Port usage
13161 * - The UDP Destination Port may be the server port number 3386 which has been reserved for GTP'.
13162 * Alternatively another port can be used, which has been configured by O&M, except Port Number 2123
13163 * which is used by GTPv2-C.
13164 * :
13165 * The TCP Destination Port may be the server port number 3386, which has been reserved for G-PDUs. Alternatively,
13166 * another port may be used as configured by O&M. Extra implementation-specific destination ports are possible but
13167 * all CGFs shall support the server port number.
13168 */
13170 void
13172 {
13198 /* AVP Code: 5 3GPP-GPRS Negotiated QoS profile */
13199 dissector_add_uint("diameter.3gpp", 5, create_dissector_handle(dissect_diameter_3gpp_qosprofile, proto_gtp));
13200 /* AVP Code: 903 MBMS-Service-Area */
13201 dissector_add_uint("diameter.3gpp", 903, create_dissector_handle(dissect_gtp_3gpp_mbms_service_area, proto_gtp));
13202 /* AVP Code: 904 MBMS-Session-Duration */
13203 dissector_add_uint("diameter.3gpp", 904, create_dissector_handle(dissect_gtp_mbms_ses_dur, proto_gtp));
13204 /* AVP Code: 911 MBMS-Time-To-Data-Transfer */
13205 dissector_add_uint("diameter.3gpp", 911, create_dissector_handle(dissect_gtp_mbms_time_to_data_tr, proto_gtp));
13207 // TPDU payload detection
13209 heur_dissector_add("gtp.tpdu", dissect_eth_heur, "Ethernet over GTP", "eth_gtp.tpdu", eth_proto_id, HEURISTIC_ENABLE);
13221 }
13222 }
13229 /* This doesn't use the "auto preference" API because the port
13230 description is too specific */
13236 /* This doesn't use the "auto preference" API because the port
13237 description is too specific */
13241 }
13242 }
13244 /*
13245 * Editor modelines - https://www.wireshark.org/tools/modelines.html
13246 *
13247 * Local variables:
13248 * c-basic-offset: 4
13249 * tab-width: 8
13250 * indent-tabs-mode: nil
13251 * End:
13252 *
13253 * vi: set shiftwidth=4 tabstop=8 expandtab:
13254 * :indentSize=4:tabSize=8:noTabs=true:
13255 */