| blob | 1af655dc1ff6ad3ea472bca4e7acb79436b8e6c5 |
1 /* packet-gtp.c
2 *
3 * Routines for GTP dissection
4 * Copyright 2001, Michal Melerowicz <michal.melerowicz@nokia.com>
5 * Nicolas Balkota <balkota@mac.com>
6 *
7 * Updates and corrections:
8 * Copyright 2006 - 2009, Anders Broman <anders.broman@ericsson.com>
9 *
10 * Added Bearer control mode dissection:
11 * Copyright 2011, Grzegorz Szczytowski <grzegorz.szczytowski@gmail.com>
12 *
13 * Updates and corrections:
14 * Copyright 2011-2013, Anders Broman <anders.broman@ericsson.com>
15 *
16 * PDCP PDU number extension header support added by Martin Isaksson <martin.isaksson@ericsson.com>
17 *
18 * Control Plane Request-Response tracking code Largely based on similar routines in
19 * packet-ldap.c by Ronnie Sahlberg
20 * Added by Kari Tiirikainen <kari.tiirikainen@nsn.com>
21 *
22 * Wireshark - Network traffic analyzer
23 * By Gerald Combs <gerald@wireshark.org>
24 * Copyright 1998 Gerald Combs
25 *
26 * SPDX-License-Identifier: GPL-2.0-or-later
27 *
28 * GTP v0: 3GPP TS 09.60
29 *
30 * http://www.3gpp.org/ftp/Specs/html-info/0960.htm
31 *
32 * GTP v1: 3GPP TS 29.060
33 *
34 * http://www.3gpp.org/ftp/Specs/html-info/29060.htm
35 *
36 * GTP': 3GPP TS 32.295
37 *
38 * http://www.3gpp.org/ftp/Specs/html-info/32295.htm
39 */
43 #include <math.h>
45 #include <epan/packet.h>
46 #include <epan/conversation.h>
47 #include <epan/prefs.h>
48 #include <epan/expert.h>
49 #include <epan/sminmpec.h>
50 #include <epan/addr_resolv.h>
51 #include <epan/asn1.h>
52 #include <epan/tap.h>
53 #include <epan/srt_table.h>
54 #include <epan/to_str.h>
55 #include <epan/uat.h>
56 #include <epan/proto_data.h>
57 #include <epan/etypes.h>
58 #include <epan/tfs.h>
59 #include <epan/unit_strings.h>
86 #define GTPv0_PORT 3386
90 #define GTPv0_HDR_LENGTH 20
91 #define GTPv1_HDR_LENGTH 12
92 #define GTP_PRIME_HDR_LENGTH 6
94 /* to check compliance with ETSI */
95 #define GTP_MANDATORY 1
96 #define GTP_OPTIONAL 2
97 #define GTP_CONDITIONAL 4
99 #define GTP_TPDU_AS_NONE -1
100 #define GTP_TPDU_AS_TPDU_HEUR 0
101 #define GTP_TPDU_AS_PDCP_LTE 1
102 #define GTP_TPDU_AS_PDCP_NR 2
103 #define GTP_TPDU_AS_SYNC 3
104 #define GTP_TPDU_AS_ETHERNET 4
105 #define GTP_TPDU_AS_CUSTOM 5
119 /*KTi*/
430 /* Generated from convert_proto_tree_add_text.pl */
496 /* Initialize the subtree pointers */
564 };
567 /* NRUP - TS 38.425 */
568 /* NR-U RAN Container */
628 {
629 gtp_private_data_t *gtp_data = (gtp_private_data_t*)p_get_proto_data(wmem_file_scope(), pinfo, proto_gtp, 0);
635 }
637 }
639 /* --- PDCP DECODE ADDITIONS --- */
640 static bool
641 pdcp_uat_fld_ip_chk_cb(void* r _U_, const char* ipaddr, unsigned len _U_, const void* u1 _U_, const void* u2 _U_, char** err)
642 {
643 ws_in4_addr ip4_addr;
644 ws_in6_addr ip6_addr;
646 /* Check for a valid IPv4 or IPv6 address */
652 }
656 }
660 static bool
661 pdcp_uat_fld_teid_chk_cb(void* r _U_, const char* teid, unsigned len _U_, const void* u1 _U_, const void* u2 _U_, char** err)
662 {
666 /* Check if it is a wildcard TEID */
670 }
671 /* Check if it is a valid 32bits unsigned integer */
675 }
676 }
680 }
684 address ip_address;
693 //unsigned rohc_mode;
695 /* One approach would be to just use the TEID, but it is 32 bits and would need to be
696 * truncated to (ultimately) 16 bits to be used as a UEId for PDCP */
701 /* N.B. this is an array/table of the struct above, where IP address + TEID is the key */
705 {
707 ws_in4_addr ip4_addr;
708 ws_in6_addr ip6_addr;
719 }
723 alloc_address_wmem(wmem_epan_scope(), &rec->ip_address, AT_IPv6, sizeof(ws_in6_addr), &ip6_addr);
725 alloc_address_wmem(wmem_epan_scope(), &rec->ip_address, AT_IPv4, sizeof(ws_in4_addr), &ip4_addr);
730 }
732 /* Range-check rb */
737 }
739 /* Range-check ueid */
744 }
748 }
751 {
755 /* Copy UAT fields */
764 //new_rec->rohc_mode = old_rec->rohc_mode;
772 }
775 {
781 }
791 };
793 /* Struct for saving PDCP-NR information about specific TEID */
796 address ip_address;
801 /* PDCP_NR_(U|D)L_sdap_hdr_PRESENT bitmask */
807 //unsigned rohc_mode;
809 /* One approach would be to just use the TEID, but it is 32 bits and would need to be
810 * truncated to (ultimately) 16 bits to be used as a UEId for PDCP */
815 /* N.B. this is an array/table of the struct above, where IP address + TEID is the key */
820 ws_in4_addr ip4_addr;
821 ws_in6_addr ip6_addr;
832 }
836 alloc_address_wmem(wmem_epan_scope(), &rec->ip_address, AT_IPv6, sizeof(ws_in6_addr), &ip6_addr);
838 alloc_address_wmem(wmem_epan_scope(), &rec->ip_address, AT_IPv4, sizeof(ws_in4_addr), &ip4_addr);
843 }
845 /* Range-check rb */
850 }
852 /* Range-check ueid */
857 }
860 }
866 /* Copy UAT fields */
876 //new_rec->rohc_mode = old_rec->rohc_mode;
884 }
887 {
893 }
901 };
903 /* Value sets for each drop-down list in the GUI */
905 #define PDCP_NR_SDAP_HEADER_NOT_PRESENT 0
906 #define PDCP_NR_SDAP_HEADER_PRESENT 1
911 };
915 #define PDCP_LTE_HEADER_NOT_PRESENT 0
916 #define PDCP_LTE_HEADER_PRESENT 1
922 };
931 };
939 };
945 };
952 };
954 //#define ROHC_MODE_NOT_SET_STR "Mode not set"
955 //static const value_string vs_rohc_mode[] = {
956 // { MODE_NOT_SET, ROHC_MODE_NOT_SET_STR },
957 // { UNIDIRECTIONAL, "Unidirectional" },
958 // { OPTIMISTIC_BIDIRECTIONAL, "Optimistic bidirectional" },
959 // { RELIABLE_BIDIRECTIONAL, "Reliable bidirectional" },
960 // { 0, NULL }
961 //};
972 };
974 /* Entries added by UAT */
978 /* Default values for a TEID entry */
981 UAT_VS_DEF(pdcp_nr_users, direction, uat_pdcp_nr_keys_record_t, unsigned, PDCP_NR_DIRECTION_UPLINK, PDCP_DIRECTION_UPLINK_STR)
982 UAT_VS_DEF(pdcp_nr_users, sdap_header_present, uat_pdcp_nr_keys_record_t, unsigned, PDCP_NR_SDAP_HEADER_NOT_PRESENT, PDCP_NR_SDAP_HEADER_NOT_PRESENT_STR)
983 UAT_VS_DEF(pdcp_nr_users, mac_i_present, uat_pdcp_nr_keys_record_t, unsigned, false, MAC_I_PRESENT_FALSE_STR)
984 UAT_VS_DEF(pdcp_nr_users, plane, uat_pdcp_nr_keys_record_t, enum pdcp_nr_plane, NR_USER_PLANE, USER_PLANE_STR)
985 UAT_VS_DEF(pdcp_nr_users, pdcp_nr_sn_length, uat_pdcp_nr_keys_record_t, unsigned, PDCP_NR_SN_LENGTH_12_BITS, PDCP_SN_LENGTH_12_BITS_STR)
986 UAT_VS_DEF(pdcp_nr_users, rohc_compression, uat_pdcp_nr_keys_record_t, unsigned, false, ROHC_COMPRESSION_FALSE_STR)
987 //UAT_VS_DEF(pdcp_nr_users, rohc_mode, uat_pdcp_nr_keys_record_t, unsigned, MODE_NOT_SET, ROHC_MODE_NOT_SET_STR)
988 UAT_VS_DEF(pdcp_nr_users, rohc_profile, uat_pdcp_nr_keys_record_t, unsigned, ROHC_PROFILE_UNCOMPRESSED, ROHC_PROFILE_UNCOMPRESSED_STR)
992 static uat_pdcp_nr_keys_record_t* look_up_pdcp_nr_keys_record(packet_info *pinfo, uint32_t teidn)
993 {
996 /* Look up UAT entries. N.B. linear search... */
1002 }
1003 }
1005 /* No match at all - return NULL */
1007 }
1009 /* Entries added by UAT */
1013 /* Default values for a TEID entry */
1016 UAT_VS_DEF(pdcp_lte_users, direction, uat_pdcp_lte_keys_record_t, unsigned, PDCP_NR_DIRECTION_UPLINK, PDCP_DIRECTION_UPLINK_STR)
1017 UAT_VS_DEF(pdcp_lte_users, header_present, uat_pdcp_lte_keys_record_t, unsigned, PDCP_LTE_HEADER_PRESENT, PDCP_LTE_HEADER_PRESENT_STR)
1018 UAT_VS_DEF(pdcp_lte_users, plane, uat_pdcp_lte_keys_record_t, enum pdcp_plane, USER_PLANE, USER_PLANE_STR)
1019 UAT_VS_DEF(pdcp_lte_users, lte_sn_length, uat_pdcp_lte_keys_record_t, unsigned, PDCP_NR_SN_LENGTH_12_BITS, PDCP_SN_LENGTH_12_BITS_STR)
1020 UAT_VS_DEF(pdcp_lte_users, rohc_compression, uat_pdcp_lte_keys_record_t, unsigned, false, ROHC_COMPRESSION_FALSE_STR)
1021 //UAT_VS_DEF(pdcp_lte_users, rohc_mode, uat_pdcp_lte_keys_record_t, unsigned, MODE_NOT_SET, ROHC_MODE_NOT_SET_STR)
1022 UAT_VS_DEF(pdcp_lte_users, rohc_profile, uat_pdcp_lte_keys_record_t, unsigned, ROHC_PROFILE_UNCOMPRESSED, ROHC_PROFILE_UNCOMPRESSED_STR)
1026 static uat_pdcp_lte_keys_record_t* look_up_pdcp_lte_keys_record(packet_info *pinfo, uint32_t teidn)
1027 {
1030 /* Look up UAT entries. N.B. linear search... */
1036 }
1037 }
1039 /* No match at all - return NULL */
1041 }
1043 /* --- END PDCP NR DECODE ADDITIONS --- */
1057 };
1063 /* Definition of flags masks */
1064 #define GTP_VER_MASK 0xE0
1068 "20-Octet Header"
1069 };
1081 };
1087 };
1089 #define GTP_PT_MASK 0x10
1090 #define GTP_SPARE1_MASK 0x0E
1091 #define GTP_SPARE2_MASK 0x08
1092 #define GTP_E_MASK 0x04
1093 #define GTP_S_MASK 0x02
1094 #define GTP_SNN_MASK 0x01
1095 #define GTP_PN_MASK 0x01
1097 #define GTP_EXT_HDR_NO_MORE_EXT_HDRS 0x00
1098 #define GTP_EXT_HDR_MBMS_SUPPORT_IND 0x01
1099 #define GTP_EXT_HDR_MS_INFO_CHG_REP_SUPP_IND 0x02
1102 #define GTP_EXT_HDR_UDP_PORT 0x40
1103 #define GTP_EXT_HDR_RAN_CONT 0x81
1104 #define GTP_EXT_HDR_LONG_PDCP_PDU 0x82
1105 #define GTP_EXT_HDR_XW_RAN_CONT 0x83
1106 #define GTP_EXT_HDR_NR_RAN_CONT 0x84
1107 #define GTP_EXT_HDR_PDU_SESSION_CONT 0x85
1108 #define GTP_EXT_HDR_PDCP_SN 0xC0
1109 #define GTP_EXT_HDR_SUSPEND_REQ 0xC1
1110 #define GTP_EXT_HDR_SUSPEND_RESP 0xC2
1128 };
1130 /* Definition of 3G charging characteristics masks */
1131 #define GTP_MASK_CHRG_CHAR_S 0xF000
1132 #define GTP_MASK_CHRG_CHAR_N 0x0800
1133 #define GTP_MASK_CHRG_CHAR_P 0x0400
1134 #define GTP_MASK_CHRG_CHAR_F 0x0200
1135 #define GTP_MASK_CHRG_CHAR_H 0x0100
1136 #define GTP_MASK_CHRG_CHAR_R 0x00FF
1138 /* Definition of GSN Address masks */
1139 #define GTP_EXT_GSN_ADDR_TYPE_MASK 0xC0
1140 #define GTP_EXT_GSN_ADDR_LEN_MASK 0x3F
1142 /* Definition of QoS masks */
1143 #define GTP_EXT_QOS_SPARE1_MASK 0xC0
1144 #define GTP_EXT_QOS_DELAY_MASK 0x38
1145 #define GTP_EXT_QOS_RELIABILITY_MASK 0x07
1146 #define GTP_EXT_QOS_PEAK_MASK 0xF0
1147 #define GTP_EXT_QOS_SPARE2_MASK 0x08
1148 #define GTP_EXT_QOS_PRECEDENCE_MASK 0x07
1149 #define GTP_EXT_QOS_SPARE3_MASK 0xE0
1150 #define GTP_EXT_QOS_MEAN_MASK 0x1F
1151 #define GTP_EXT_QOS_TRAF_CLASS_MASK 0xE0
1152 #define GTP_EXT_QOS_DEL_ORDER_MASK 0x18
1153 #define GTP_EXT_QOS_DEL_ERR_SDU_MASK 0x07
1154 #define GTP_EXT_QOS_RES_BER_MASK 0xF0
1155 #define GTP_EXT_QOS_SDU_ERR_RATIO_MASK 0x0F
1156 #define GTP_EXT_QOS_TRANS_DELAY_MASK 0xFC
1157 #define GTP_EXT_QOS_TRAF_HANDL_PRIORITY_MASK 0x03
1158 #define GTP_EXT_QOS_SPARE4_MASK 0xE0
1159 #define GTP_EXT_QOS_SIG_IND_MASK 0x10
1160 #define GTP_EXT_QOS_SRC_STAT_DESC_MASK 0x0F
1162 /* Definition of Radio Priority's masks */
1163 #define GTPv1_EXT_RP_NSAPI_MASK 0xF0
1164 #define GTPv1_EXT_RP_SPARE_MASK 0x08
1165 #define GTPv1_EXT_RP_MASK 0x07
1167 #define NR_UP_DL_USER_DATA 0
1168 #define NR_UP_DL_DATA_DELIVERY_STATUS 1
1169 #define NR_UP_ASSISTANCE_INFORMATION_DATA 2
1176 };
1189 };
1194 "Frame is not final"
1195 };
1207 /*
1208 * 8-15 For future use. Shall not be sent. If received,
1209 * shall be treated as an Unknown message.
1210 */
1211 #if 0
1220 #endif
1229 /*
1230 * 24-25 For future use. Shall not be sent. If received,
1231 * shall be treated as an Unknown message.
1232 */
1247 /* 38-47 For future use. Shall not be sent. If received,
1248 * shall be treated as an Unknown message.
1249 */
1250 #if 0
1261 #endif
1277 /* 63-69 For future use. Shall not be sent. If received,
1278 * shall be treated as an Unknown message.
1279 */
1280 #if 0
1288 #endif
1290 /* 71-95 For future use. Shall not be sent. If received,
1291 * shall be treated as an Unknown message.
1292 */
1293 #if 0
1319 #endif
1330 /* 106 - 111 For future use. Shall not be sent. If received,
1331 * shall be treated as an Unknown message.
1332 */
1333 #if 0
1340 #endif
1351 /* 122-127 For future use. Shall not be sent.
1352 * If received, shall be treated as an Unknown message.
1353 */
1354 #if 0
1361 #endif
1364 /* 130-239 For future use. Shall not be sent. If received,
1365 * shall be treated as an Unknown message.
1366 */
1367 #if 0
1398 #endif
1401 /* 242-253 For future use. Shall not be sent. If received,
1402 * shall be treated as an Unknown message.
1403 */
1404 #if 0
1417 #endif
1421 };
1424 /* definitions of fields in extension header */
1425 #define GTP_EXT_CAUSE 0x01
1426 #define GTP_EXT_IMSI 0x02
1427 #define GTP_EXT_RAI 0x03
1428 #define GTP_EXT_TLLI 0x04
1429 #define GTP_EXT_PTMSI 0x05
1430 #define GTP_EXT_QOS_GPRS 0x06
1431 #define GTP_EXT_REORDER 0x08
1432 #define GTP_EXT_AUTH_TRI 0x09
1433 #define GTP_EXT_MAP_CAUSE 0x0B
1434 #define GTP_EXT_PTMSI_SIG 0x0C
1435 #define GTP_EXT_MS_VALID 0x0D
1436 #define GTP_EXT_RECOVER 0x0E
1437 #define GTP_EXT_SEL_MODE 0x0F
1439 #define GTP_EXT_16 0x10
1440 #define GTP_EXT_FLOW_LABEL 0x10
1443 #define GTP_EXT_17 0x11
1444 #define GTP_EXT_FLOW_SIG 0x11
1447 #define GTP_EXT_18 0x12
1448 #define GTP_EXT_FLOW_II 0x12
1465 /* 117-126 Reserved for the GPRS charging protocol (see GTP' in 3GPP TS 32.295 [33]) */
1468 #define GTP_EXT_USER_ADDR 0x80
1469 #define GTP_EXT_MM_CNTXT 0x81
1470 #define GTP_EXT_PDP_CNTXT 0x82
1471 #define GTP_EXT_APN 0x83
1472 #define GTP_EXT_PROTO_CONF 0x84
1473 #define GTP_EXT_GSN_ADDR 0x85
1474 #define GTP_EXT_MSISDN 0x86
1486 #define GTP_EXT_ADD_RAB_SETUP_INF 0x92 /* 3G 146 TLV Additional RAB Setup Information 7.7.45A */
1495 #define GTP_EXT_CAMEL_CHG_INF_CON 0x9B /* 3G 155 TLV CAMEL Charging Information Container 7.7.54 */
1499 #define GTP_EXT_MBMS_PROT_CONF_OPT 0x9F /* 3G 159 TLV MBMS Protocol Configuration Options 7.7.58 */
1510 #define GTP_EXT_MBMS_SES_ID_REP_NO 0xAA /* 3G 170 TLV MBMS Session Identity Repetition Number 7.7.69 */
1517 #define GTP_EXT_REQ_MBMS_BEARER_CAP 0xB1 /* 3G 177 TLV Required MBMS bearer capabilities 7.7.76 */
1518 #define GTP_EXT_RIM_ROUTING_ADDR_DISC 0xB2 /* 3G 178 TLV RIM Routing Address Discriminator 7.7.77 */
1521 #define GTP_EXT_MS_INF_CHG_REP_ACT 0xB5 /* 3G 181 TLV MS Info Change Reporting Action 7.7.80 */
1528 #define GTP_EXT_RELIABLE_IRAT_HO_INF 0xBC /* 3G 188 TLV Reliable INTER RAT HANDOVER INFO 7.7.87 */
1531 #define GTP_EXT_EVO_ALLO_RETE_P1 0xBF /* 3G 191 TLV Evolved Allocation/Retention Priority I 7.7.91 */
1532 #define GTP_EXT_EVO_ALLO_RETE_P2 0xC0 /* 3G 192 TLV Evolved Allocation/Retention Priority II 7.7.92 */
1544 #define GTP_EXT_SIG_PRI_IND_W_NSAPI 0xCC /* 3G 204 TLV Signalling Priority Indication with NSAPI 7.7.104 */
1545 #define GTP_EXT_HIGHER_BR_16MB_FLG 0xCD /* 3G 205 TLV Higher bitrates than 16 Mbps flag 7.7.105 */
1555 #define GTP_EXT_LHN_ID_W_SAPI 0xD7 /* 3G 215 TLV Local Home Network ID (LHN-ID) with NSAPI 7.7.115 */
1560 #define GTP_EXT_CIOT_OPT_SUP_IND 0xDC /* 3G 220 TLV CIoT Optimizations Support Indication 7.7.120 */
1564 #define GTP_EXT_UP_FUN_SEL_IND_FLAGS 0xE0 /* 3G 224 TLV UP Function Selection Indication Flags 7.7.124 */
1567 /* 225-238 TLV Spare. For future use. */
1569 /* 239-250 Reserved for the GPRS charging protocol (see GTP' in 3GPP TS 32.295 [33])*/
1571 #define GTP_EXT_C1 0xC1
1572 #define GTP_EXT_C2 0xC2
1576 /* 252-254 Reserved for the GPRS charging protocol (see GTP' in 3GPP TS 32.295 [33])*/
1580 #define GTP_EXT_PRIV_EXT 0xFF
1589 /* 6-7 Spare */
1592 /* 10 Spare */
1604 /* ??? {GTP_EXT_FLOW_SIG, "Flow label signalling"}, */
1608 /* ??? {GTP_EXT_FLOW_II, "Flow label data II"}, */
1612 /* ??? {GTP_EXT_MS_REASON, "MS not reachable reason"}, */
1625 /* 117-126 Reserved for the GPRS charging protocol (see GTP' in 3GPP TS 32.295 [33]) */
1706 /* 204 */ {GTP_EXT_SIG_PRI_IND_W_NSAPI, "Signalling Priority Indication with NSAPI"}, /* 7.7.104 */
1726 /* 224 */ {GTP_EXT_UP_FUN_SEL_IND_FLAGS, "UP Function Selection Indication Flags" }, /* 7.7.124 */
1729 /* 225-238 TLV Spare. For future use. */
1730 /* 239-250 Reserved for the GPRS charging protocol (see GTP' in 3GPP TS 32.295 [33]) */
1734 /* 252-254 Reserved for the GPRS charging protocol (see GTP' in 3GPP TS 32.295 [33]) */
1740 };
1743 /* It seems like some IE's are renamed in gtpv1 at least reading
1744 * 3GPP TS 29.060 version 6.11.0 Release 6
1745 */
1753 /* 6-7 Spare */
1757 /* 10 Spare */
1779 /* 117-126 Reserved for the GPRS charging protocol (see GTP' in 3GPP TS 32.295 [33]) */
1826 /* 170 */ {GTP_EXT_MBMS_SES_ID_REP_NO, "MBMS Session Identity Repetition Number"}, /* 7.7.69 */
1881 /* 224 */ {GTP_EXT_UP_FUN_SEL_IND_FLAGS, "UP Function Selection Indication Flags" }, /* 7.7.124 */
1883 /* 225-238 TLV Spare. For future use. */
1884 /* 239-250 Reserved for the GPRS charging protocol (see GTP' in 3GPP TS 32.295 [33]) */
1888 /* 252-254 Reserved for the GPRS charging protocol (see GTP' in 3GPP TS 32.295 [33]) */
1895 };
1898 /* GPRS: 9.60 v7.6.0, page 37
1899 * UMTS: 29.060 v4.0, page 45
1900 * ETSI TS 129 060 V9.4.0 (2010-10) Ch 7.7.1
1901 */
1911 /* For future use 8-48 */
1912 /* Cause values reserved for GPRS charging
1913 * protocol use (see GTP' in 3GPP TS 32.295 [33])
1914 * 49-63
1915 */
1921 /* For future use 64-127 */
1925 /* For future use 131-176 */
1926 /* Cause values reserved for GPRS charging
1927 * protocol use (see GTP' in 3GPP TS 32.295 [33])
1928 * 177-191
1929 */
1974 /* For future use -240 */
1975 /* Cause values reserved for GPRS charging
1976 * protocol use (see GTP' in 3GPP TS 32.295 [33])
1977 * 241-255
1978 */
1984 };
1987 /* GPRS: 9.02 v7.7.0
1988 * UMTS: 29.002 v4.2.1, chapter 17.5, page 268
1989 * Imported gsm_old_GSMMAPLocalErrorcode_vals from gsm_map from gsm_map
1990 */
1996 };
2006 };
2012 };
2022 };
2033 };
2046 /* QoS Peak throughput classes from 0x0A to 0x0F (from 10 to 15) are subscribed */
2054 };
2063 };
2085 /* QoS Mean throughput classes from 0x13 to 0x1E (from 19 to 30) are subscribed */
2100 };
2110 };
2118 };
2128 };
2132 /* For values from 0x01 to 0x96 (from 1 to 150), use a granularity of 10 octets */
2137 };
2141 /* For values from 0x01 to 0x3F (from 1 to 63), use a granularity of 1 kbps */
2142 /* For values from 0x40 to 0x7F, value = 64 kbps + (value - 0x40) * 8 kbps */
2143 /* For values from 0x80 to 0xFE, value = 576 kbps + (value - 0x80) * 64 kbps */
2146 };
2150 /* For values from 0x01 to 0x3F (from 1 to 63), use a granularity of 1 kbps */
2151 /* For values from 0x40 to 0x7F, value = 64 kbps + (value - 0x40) * 8 kbps */
2152 /* For values from 0x80 to 0xFE, value = 576 kbps + (value - 0x80) * 64 kbps */
2155 };
2170 };
2183 };
2191 };
2226 {0x20, "1000 ms"}, /* For values from 0x20 to 0x3E, value = 1000 ms + (value - 0x20) * 100 ms */
2259 };
2264 /* For values from 0x01 to 0x3F (from 1 to 63), use a granularity of 1 kbps */
2265 /* For values from 0x40 to 0x7F, value = 64 kbps + (value - 0x40) * 8 kbps */
2266 /* For values from 0x80 to 0xFE, value = 576 kbps + (value - 0x80) * 64 kbps */
2269 };
2275 };
2280 "Not optimised for signalling traffic"
2281 };
2285 /* For values from 0x01 to 0x3F (from 1 to 63), use a granularity of 1 kbps */
2286 /* For values from 0x40 to 0x7F, value = 64 kbps + (value - 0x40) * 8 kbps */
2287 /* For values from 0x80 to 0xFE, value = 576 kbps + (value - 0x80) * 64 kbps */
2290 };
2296 {3, "For future use (Network provided APN, subscription not verified"}, /* Shall not be sent. If received, shall be sent as value 2 */
2298 };
2306 };
2308 /*
2309 * UMTS: 23.040 v14.0.0, chapter 3.3.2
2310 */
2327 };
2329 /* UMTS: 25.413 v3.4.0, chapter 9.2.1.4, page 80
2330 */
2332 /* Radio Network Layer Cause (1-->64) */
2397 /* Transport Layer Cause (65-->80) */
2400 /* NAS Cause (81-->96) */
2404 /* Protocol Cause (97-->112) */
2411 /* Miscellaneous Cause (113-->128) */
2416 /* Non-standard Cause (129-->255) */
2418 /* ranap_CauseRadioNetworkExtension ??
2419 { 257, "iP-multicast-address-and-APN-not-valid" },
2420 { 258, "mBMS-de-registration-rejected-due-to-implicit-registration" },
2421 { 259, "mBMS-request-superseded" },
2422 { 260, "mBMS-de-registration-during-session-not-allowed" },
2423 { 261, "mBMS-no-data-bearer-necessary" },
2424 */
2427 };
2436 };
2448 };
2460 };
2466 };
2473 /* reserved for future used (3-->127) */
2474 /* values below used by Radius */
2487 /* reserved for future used (140-->255) */
2489 };
2495 };
2498 #define MM_PROTO_GROUP_CALL_CONTROL 0x00
2499 #define MM_PROTO_BROADCAST_CALL_CONTROL 0x01
2500 #define MM_PROTO_PDSS1 0x02
2501 #define MM_PROTO_CALL_CONTROL 0x03
2502 #define MM_PROTO_PDSS2 0x04
2503 #define MM_PROTO_MM_NON_GPRS 0x05
2504 #define MM_PROTO_RR_MGMT 0x06
2505 #define MM_PROTO_MM_GPRS 0x08
2506 #define MM_PROTO_SMS 0x09
2507 #define MM_PROTO_SESSION_MGMT 0x0A
2508 #define MM_PROTO_NON_CALL_RELATED 0x0B
2512 static void
2514 {
2517 }
2521 }
2523 static tap_packet_status
2524 gtpstat_packet(void *pss, packet_info *pinfo, epan_dissect_t *edt _U_, const void *prv, tap_flags_t flags _U_)
2525 {
2532 /* we are only interested in reply packets */
2535 }
2536 /* if we have not seen the request, just ignore it */
2539 }
2541 /* Redoing the message indexing is bit redundant (and keeps us from
2542 * passing in the filter "gtp.message" in init_srt_table above),
2543 * but using message type as such would yield a long gtp_srt_table.
2544 */
2548 idx = GPOINTER_TO_UINT(g_hash_table_lookup(gtpstat_msg_idx_hash, GUINT_TO_POINTER(gtp->msgtype)));
2550 /* Store the value incremented by 1 to avoid confusing index 0 with NULL */
2553 g_hash_table_insert(gtpstat_msg_idx_hash, GUINT_TO_POINTER(gtp->msgtype), GUINT_TO_POINTER(idx + 1));
2554 init_srt_table_row(gtp_srt_table, idx, val_to_str_ext_const(gtp->msgtype, >p_message_type_ext, "Unknown"));
2557 }
2562 }
2583 /* Relation between frame -> session */
2585 /* Relation between <teid,ip> -> frame */
2590 address addr;
2593 static unsigned
2595 {
2598 /* The TEID is likely unique, so just use it. */
2600 }
2602 static gboolean
2604 {
2609 }
2611 /* GTP Session funcs*/
2612 uint32_t
2614 gtp_info_t info;
2623 }
2625 }
2627 static gboolean
2632 }
2634 void
2636 /* XXX: This iterates through the entire map and it is slow if done
2637 * often. For large files with lots of removals, there are better
2638 * alternatives, e.g. marking sessions as expired and then periodically
2639 * removing all expired sessions from the map, or using a bijective
2640 * map to coordinate removals.
2641 */
2643 }
2645 void
2649 }
2651 bool
2662 }
2664 }
2666 bool
2677 }
2679 }
2682 /* wmem_map_foreach() callback used in fill_map() */
2683 static void
2689 /* If it's the session we are looking for, we remove all the frame information */
2692 }
2693 }
2695 void
2702 /* XXX: This adds all combinations of addresses and TEIDs. It
2703 * should only add matching pairs for a F-TEID, though this is
2704 * difficult to determine for GTPv1 (especially if the check_etsi
2705 * preference is off) unlike with GTPv2.
2706 * It also should not add anything that uses the reserved TEID
2707 * (0), such as happens in GTPv2 on S11/S4 interfaces for the
2708 * PGW S5/S8 TEID on initial attach, etc.
2709 */
2713 /* We loop over the teid list */
2721 /* If the teid and ip already maps to a session, that means
2722 * that we need to remove old info about that session */
2723 /* We look for its session ID */
2726 /* If the msg has the same session ID and it's not the upd req we have to remove its info */
2728 }
2729 }
2732 }
2734 }
2735 }
2737 bool
2741 }
2744 }
2746 }
2748 static int decode_gtp_cause(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args);
2749 static int decode_gtp_imsi(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2750 static int decode_gtp_rai(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2751 static int decode_gtp_tlli(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2752 static int decode_gtp_ptmsi(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2753 static int decode_gtp_qos_gprs(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2754 static int decode_gtp_reorder(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2755 static int decode_gtp_auth_tri(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2756 static int decode_gtp_map_cause(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2757 static int decode_gtp_ptmsi_sig(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2758 static int decode_gtp_ms_valid(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2759 static int decode_gtp_recovery(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2760 static int decode_gtp_sel_mode(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2761 static int decode_gtp_16(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args);
2762 static int decode_gtp_17(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args);
2763 static int decode_gtp_18(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2764 static int decode_gtp_19(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2765 static int decode_gtp_nsapi(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2766 static int decode_gtp_ranap_cause(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2767 static int decode_gtp_rab_cntxt(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2768 static int decode_gtp_rp_sms(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2769 static int decode_gtp_rp(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2770 static int decode_gtp_pkt_flow_id(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2771 static int decode_gtp_chrg_char(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2772 static int decode_gtp_trace_ref(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2773 static int decode_gtp_trace_type(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2774 static int decode_gtp_ms_reason(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2775 static int decode_gtp_tr_comm(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2776 static int decode_gtp_chrg_id(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2777 static int decode_gtp_user_addr(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2778 static int decode_gtp_mm_cntxt(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2779 static int decode_gtp_pdp_cntxt(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2780 static int decode_gtp_apn(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2781 static int decode_gtp_gsn_addr_common(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args, const char * tree_name, int hf_ipv4, int hf_ipv6);
2782 static int decode_gtp_gsn_addr(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args);
2783 static int decode_gtp_sgsn_addr_for_control_plane(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args);
2784 static int decode_gtp_sgsn_addr_for_user_plane(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args);
2785 static int decode_gtp_ggsn_addr_for_control_plane(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args);
2786 static int decode_gtp_ggsn_addr_for_user_plane(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args);
2787 static int decode_gtp_proto_conf(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2788 static int decode_gtp_msisdn(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2789 static int decode_gtp_qos_umts(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2790 static int decode_gtp_auth_qui(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2791 static int decode_gtp_tft(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2792 static int decode_gtp_target_id(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2793 static int decode_gtp_utran_cont(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2794 static int decode_gtp_rab_setup(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2795 static int decode_gtp_hdr_list(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2796 static int decode_gtp_trigger_id(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2797 static int decode_gtp_omc_id(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2799 static int decode_gtp_ran_tr_cont(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2800 static int decode_gtp_pdp_cont_prio(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2801 static int decode_gtp_add_rab_setup_inf(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2802 static int decode_gtp_sgsn_no(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2803 static int decode_gtp_common_flgs(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2804 static int decode_gtp_apn_res(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2805 static int decode_gtp_ra_prio_lcs(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2806 static int decode_gtp_rat_type(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2807 static int decode_gtp_usr_loc_inf(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2808 static int decode_gtp_ms_time_zone(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2809 static int decode_gtp_imeisv(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2810 static int decode_gtp_camel_chg_inf_con(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2811 static int decode_gtp_mbms_ue_ctx(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2812 static int decode_gtp_tmgi(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2813 static int decode_gtp_rim_ra(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2814 static int decode_gtp_mbms_prot_conf_opt(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2815 static int decode_gtp_mbms_sa(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2816 static int decode_gtp_src_rnc_pdp_ctx_inf(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2817 static int decode_gtp_add_trs_inf(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2818 static int decode_gtp_hop_count(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2819 static int decode_gtp_sel_plmn_id(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2820 static int decode_gtp_mbms_ses_id(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2821 static int decode_gtp_mbms_2g_3g_ind(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2822 static int decode_gtp_enh_nsapi(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2823 static int decode_gtp_mbms_ses_dur(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2824 static int decode_gtp_add_mbms_trs_inf(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2825 static int decode_gtp_mbms_ses_id_rep_no(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2826 static int decode_gtp_mbms_time_to_data_tr(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2827 static int decode_gtp_ps_ho_req_ctx(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2828 static int decode_gtp_bss_cont(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2829 static int decode_gtp_cell_id(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2830 static int decode_gtp_pdu_no(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2831 static int decode_gtp_bssgp_cause(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2832 static int decode_gtp_mbms_bearer_cap(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2833 static int decode_gtp_rim_ra_disc(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2834 static int decode_gtp_lst_set_up_pfc(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2835 static int decode_gtp_ps_handover_xid(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2836 static int decode_gtp_direct_tnl_flg(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2837 static int decode_gtp_ms_inf_chg_rep_act(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2838 static int decode_gtp_corrl_id(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2839 static int decode_gtp_fqdn(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2840 static int decode_gtp_evolved_allc_rtn_p1(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2841 static int decode_gtp_evolved_allc_rtn_p2(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2842 static int decode_gtp_extended_common_flgs(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2843 static int decode_gtp_uci(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2844 static int decode_gtp_csg_inf_rep_act(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2845 static int decode_gtp_csg_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2846 static int decode_gtp_cmi(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2847 static int decode_gtp_apn_ambr(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2848 static int decode_gtp_ue_network_cap(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2849 static int decode_gtp_ue_ambr(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2850 static int decode_gtp_apn_ambr_with_nsapi(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2851 static int decode_gtp_ggsn_back_off_time(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2852 static int decode_gtp_sig_pri_ind(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2853 static int decode_gtp_sig_pri_ind_w_nsapi(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2854 static int decode_gtp_higher_br_16mb_flg(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2855 static int decode_gtp_max_mbr_apn_ambr(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2856 static int decode_gtp_add_mm_ctx_srvcc(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2857 static int decode_gtp_add_flgs_srvcc(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2858 static int decode_gtp_stn_sr(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2859 static int decode_gtp_c_msisdn(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2860 static int decode_gtp_ext_ranap_cause(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2861 static int decode_gtp_ext_enodeb_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2862 static int decode_gtp_ext_sel_mode_w_nsapi(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2863 static int decode_gtp_ext_uli_timestamp(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2864 static int decode_gtp_ext_lhn_id_w_sapi(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2865 static int decode_gtp_ext_cn_op_sel_entity(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2866 static int decode_gtp_ue_usage_type(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2867 static int decode_gtp_extended_common_flgs_II(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2868 static int decode_gtp_ext_node_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2869 static int decode_gtp_ciot_opt_sup_ind(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2870 static int decode_gtp_scef_pdn_conn(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2871 static int decode_gtp_iov_updates_counter(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2872 static int decode_gtp_mapped_ue_usage_type(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2873 static int decode_gtp_up_fun_sel_ind_flags(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2875 static int decode_gtp_bearer_cntrl_mod(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2876 static int decode_gtp_mbms_flow_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2877 static int decode_gtp_mbms_ip_mcast_dist(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2878 static int decode_gtp_mbms_dist_ack(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2879 static int decode_gtp_reliable_irat_ho_inf(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2880 static int decode_gtp_rfsp_index(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_);
2882 static int decode_gtp_chrg_addr(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2883 static int decode_gtp_rel_pack(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2884 static int decode_gtp_can_pack(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2885 static int decode_gtp_data_req(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2886 static int decode_gtp_data_resp(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2887 static int decode_gtp_node_addr(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2888 static int decode_gtp_priv_ext(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2889 static int decode_gtp_unknown(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_);
2903 /* 0x07 */
2906 /* 0x0a */
2945 /* TS 29 060 V6.11.0 */
3038 };
3040 #define NUM_GTP_IES 255
3045 #define BCD2CHAR(d) ((d) | 0x30)
3049 {
3061 else
3065 else
3067 }
3070 }
3073 /* Next definitions and function check_field_presence_and_decoder checks if given field
3074 * in GTP packet is compliant with ETSI
3075 */
3089 /* ---------------------
3090 * GPRS messages
3091 * ---------------------*/
3094 {
3095 GTP_MSG_ECHO_REQ, {
3098 }
3099 },
3100 {
3101 GTP_MSG_ECHO_RESP, {
3105 }
3106 },
3107 {
3108 GTP_MSG_VER_NOT_SUPP, {
3110 }
3111 },
3112 {
3113 GTP_MSG_NODE_ALIVE_REQ, {
3117 }
3118 },
3119 {
3120 GTP_MSG_NODE_ALIVE_RESP, {
3123 }
3124 },
3125 {
3126 GTP_MSG_REDIR_REQ, {
3131 }
3132 },
3133 {
3134 GTP_MSG_REDIR_RESP, {
3138 }
3139 },
3140 {
3141 GTP_MSG_CREATE_PDP_REQ, {
3155 }
3156 },
3157 {
3158 GTP_MSG_CREATE_PDP_RESP, {
3173 }
3174 },
3175 {
3176 GTP_MSG_UPDATE_PDP_REQ, {
3185 }
3186 },
3187 {
3188 GTP_MSG_UPDATE_PDP_RESP, {
3200 }
3201 },
3202 {
3203 GTP_MSG_DELETE_PDP_REQ, {
3206 }
3207 },
3208 {
3209 GTP_MSG_DELETE_PDP_RESP, {
3213 }
3214 },
3215 {
3216 GTP_MSG_INIT_PDP_CONTEXT_ACT_REQ, {
3229 }
3230 },
3231 {
3232 GTP_MSG_INIT_PDP_CONTEXT_ACT_RESP, {
3247 }
3248 },
3249 {
3250 GTP_MSG_DELETE_AA_PDP_REQ, {
3254 }
3255 },
3256 {
3257 GTP_MSG_DELETE_AA_PDP_RESP, {
3261 }
3262 },
3263 {
3264 GTP_MSG_ERR_IND, {
3267 }
3268 },
3269 {
3270 GTP_MSG_PDU_NOTIFY_REQ, {
3274 }
3275 },
3276 {
3277 GTP_MSG_PDU_NOTIFY_RESP, {
3281 }
3282 },
3283 {
3284 GTP_MSG_PDU_NOTIFY_REJ_REQ, {
3289 }
3290 },
3291 {
3292 GTP_MSG_PDU_NOTIFY_REJ_RESP, {
3296 }
3297 },
3298 {
3299 GTP_MSG_SEND_ROUT_INFO_REQ, {
3303 }
3304 },
3305 {
3306 GTP_MSG_SEND_ROUT_INFO_RESP, {
3314 }
3315 },
3316 {
3317 GTP_MSG_FAIL_REP_REQ, {
3321 }
3322 },
3323 {
3324 GTP_MSG_FAIL_REP_RESP, {
3329 }
3330 },
3331 {
3332 GTP_MSG_MS_PRESENT_REQ, {
3337 }
3338 },
3339 {
3340 GTP_MSG_MS_PRESENT_RESP, {
3344 }
3345 },
3346 {
3347 GTP_MSG_IDENT_REQ, {
3353 }
3354 },
3355 {
3356 GTP_MSG_IDENT_RESP, {
3363 }
3364 },
3365 {
3366 GTP_MSG_SGSN_CNTXT_REQ, {
3374 }
3375 },
3376 {
3377 GTP_MSG_SGSN_CNTXT_RESP, {
3385 }
3386 },
3387 {
3388 GTP_MSG_SGSN_CNTXT_ACK, {
3394 }
3395 },
3396 {
3397 GTP_MSG_DATA_TRANSF_REQ, {
3404 }
3405 },
3406 {
3407 GTP_MSG_DATA_TRANSF_RESP, {
3412 }
3413 },
3414 {
3417 }
3418 }
3419 };
3421 /* -----------------------------
3422 * UMTS messages
3423 * -----------------------------*/
3425 /* 7.2 Path Management Messages */
3426 {
3427 GTP_MSG_ECHO_REQ, {
3430 }
3431 },
3432 {
3433 GTP_MSG_ECHO_RESP, {
3437 }
3438 },
3439 {
3440 GTP_MSG_VER_NOT_SUPP, {
3442 }
3443 },
3444 {
3445 GTP_MSG_SUPP_EXT_HDR, {
3448 }
3449 },
3450 /* ??? */
3451 {
3452 GTP_MSG_NODE_ALIVE_REQ, {
3456 }
3457 },
3458 {
3459 GTP_MSG_NODE_ALIVE_RESP, {
3462 }
3463 },
3464 {
3465 GTP_MSG_REDIR_REQ, {
3470 }
3471 },
3472 {
3473 GTP_MSG_REDIR_REQ, {
3475 }
3476 },
3477 /* 7.3 Tunnel Management Messages */
3478 {
3479 GTP_MSG_CREATE_PDP_REQ, {
3481 /* RAI is in TS 29.060 V6.11.0 */
3510 /* Updated to TS 29.060 V16.0.0 */
3522 }
3523 },
3524 {
3525 GTP_MSG_CREATE_PDP_RESP, {
3537 {GTP_EXT_GSN_ADDR, GTP_CONDITIONAL, NULL}, /* Alternative GGSN Addresses for Control Plane 7.7.32 */
3538 {GTP_EXT_GSN_ADDR, GTP_CONDITIONAL, NULL}, /* Alternative GGSN Address for user traffic 7.7.32 */
3541 /* TS 29.060 V6.11.0 */
3542 {GTP_EXT_CHRG_ADDR, GTP_OPTIONAL, NULL}, /* Alternative Charging Gateway Address Optional 7.7.44 */
3555 }
3556 },
3558 GTP_MSG_UPDATE_PDP_REQ, {
3568 {GTP_EXT_GSN_ADDR, GTP_MANDATORY, decode_gtp_sgsn_addr_for_control_plane}, /* SGSN Address for Control Plane Mandatory GSN Address 7.7.32 */
3569 {GTP_EXT_GSN_ADDR, GTP_MANDATORY, decode_gtp_sgsn_addr_for_user_plane}, /* SGSN Address for User Traffic Mandatory GSN Address 7.7.32 */
3570 {GTP_EXT_GSN_ADDR, GTP_OPTIONAL, NULL}, /* Alternative SGSN Address for Control Plane Conditional GSN Address 7.7.32 */
3571 {GTP_EXT_GSN_ADDR, GTP_OPTIONAL, NULL}, /* Alternative SGSN Address for User Traffic Conditional GSN Address 7.7.32 */
3591 }
3592 },
3594 GTP_MSG_UPDATE_PDP_RESP, {
3603 {GTP_EXT_GSN_ADDR, GTP_CONDITIONAL, NULL}, /* Alternative GGSN Address for Control Plane Conditional GSN Address 7.7.32 */
3604 {GTP_EXT_GSN_ADDR, GTP_CONDITIONAL, NULL}, /* Alternative GGSN Address for User Traffic Conditional GSN Address 7.7.32 */
3607 {GTP_EXT_CHRG_ADDR, GTP_OPTIONAL, NULL}, /* Alternative Charging Gateway Address Optional 7.7.44 */
3617 }
3618 },
3619 {
3620 GTP_MSG_DELETE_PDP_REQ, {
3631 }
3632 },
3633 {
3634 GTP_MSG_DELETE_PDP_RESP, {
3642 }
3643 },
3644 {
3645 GTP_MSG_ERR_IND, {
3647 {GTP_EXT_GSN_ADDR, GTP_MANDATORY, decode_gtp_ggsn_addr_for_control_plane}, /* GSN Address Mandatory 7.7.32 */
3650 }
3651 },
3652 {
3653 GTP_MSG_PDU_NOTIFY_REQ, {
3662 }
3663 },
3664 {
3665 GTP_MSG_PDU_NOTIFY_RESP, {
3669 }
3670 },
3671 {
3672 GTP_MSG_PDU_NOTIFY_REJ_REQ, {
3680 }
3681 },
3682 {
3683 GTP_MSG_PDU_NOTIFY_REJ_RESP, {
3687 }
3688 },
3689 {
3690 GTP_MSG_INIT_PDP_CONTEXT_ACT_REQ, {
3698 }
3699 },
3700 {
3701 GTP_MSG_INIT_PDP_CONTEXT_ACT_RESP, {
3703 {GTP_EXT_PROTO_CONF, GTP_CONDITIONAL, NULL}, /* Protocol Configuration Options Conditional 7.7.31 */
3705 }
3706 },
3707 /* 7.4 Location Management Messages */
3708 {
3709 GTP_MSG_SEND_ROUT_INFO_REQ, {
3713 }
3714 },
3715 {
3716 GTP_MSG_SEND_ROUT_INFO_RESP, {
3724 }
3725 },
3726 {
3727 GTP_MSG_FAIL_REP_REQ, {
3731 }
3732 },
3733 {
3734 GTP_MSG_FAIL_REP_RESP, {
3739 }
3740 },
3741 {
3742 GTP_MSG_MS_PRESENT_REQ, {
3747 }
3748 },
3749 {
3750 GTP_MSG_MS_PRESENT_RESP, {
3754 }
3755 },
3756 /* 7.5 Mobility Management Messages */
3757 {
3758 GTP_MSG_IDENT_REQ, {
3762 {GTP_EXT_GSN_ADDR, GTP_OPTIONAL, decode_gtp_sgsn_addr_for_control_plane}, /* SGSN Address for Control Plane Optional 7.7.32 */
3766 }
3767 },
3768 {
3769 GTP_MSG_IDENT_RESP, {
3777 }
3778 },
3779 {
3780 GTP_MSG_SGSN_CNTXT_REQ, {
3789 {GTP_EXT_GSN_ADDR, GTP_OPTIONAL, decode_gtp_sgsn_addr_for_control_plane}, /* Alternative SGSN Address for Control Plane Optional 7.7.32 */
3795 }
3796 },
3797 {
3798 GTP_MSG_SGSN_CNTXT_RESP, {
3829 {GTP_EXT_GSN_ADDR, GTP_OPTIONAL, NULL}, /* Alternative GGSN Address for Control Plane 7.7.32 */
3833 }
3834 },
3835 {
3836 GTP_MSG_SGSN_CNTXT_ACK, {
3844 }
3845 },
3846 {
3847 GTP_MSG_FORW_RELOC_REQ, {
3848 {GTP_EXT_IMSI, GTP_CONDITIONAL, NULL}, /* The IMSI shall not be included in the message if the MS is emergency attached and the MS is UICCless */
3890 {GTP_EXT_GSN_ADDR, GTP_OPTIONAL, NULL}, /* Alternative GGSN Address for Control Plane 7.7.32 */
3894 }
3895 },
3896 {
3897 GTP_MSG_FORW_RELOC_RESP, {
3900 {GTP_EXT_TEID_II, GTP_CONDITIONAL, NULL}, /* Tunnel Endpoint Identifier Data II Optional 7.7.15 */
3903 {GTP_EXT_GSN_ADDR, GTP_OPTIONAL, NULL}, /* SGSN Address for User Traffic - cannot appear without above Address for Control plane */
3906 {GTP_EXT_ADD_RAB_SETUP_INF, GTP_CONDITIONAL, NULL}, /* Additional RAB Setup Information Conditional 7.7.45A */
3915 }
3916 },
3917 {
3918 GTP_MSG_FORW_RELOC_COMP, {
3921 }
3922 },
3923 {
3924 GTP_MSG_RELOC_CANCEL_REQ, {
3925 {GTP_EXT_IMSI, GTP_CONDITIONAL, NULL}, /* If MS is emergency attached and the MS is UICCless, the IMSI cannot be included. */
3931 }
3932 },
3933 {
3934 GTP_MSG_RELOC_CANCEL_RESP, {
3938 }
3939 },
3940 {
3941 GTP_MSG_FORW_RELOC_ACK, {
3945 }
3946 },
3947 {
3948 GTP_MSG_FORW_SRNS_CNTXT_ACK, {
3952 }
3953 },
3954 {
3955 GTP_MSG_FORW_SRNS_CNTXT, {
3957 {GTP_EXT_SRC_RNC_PDP_CTX_INF, GTP_OPTIONAL, NULL}, /* Source RNC PDCP context info Optional 7.7.61 */
3961 }
3962 },
3964 /* 7.5.14 RAN Information Management Messages */
3965 {
3966 GTP_MSG_RAN_INFO_RELAY, {
3972 }
3973 },
3974 /* 7.5.15 UE Registration Query Request */
3975 {
3976 GTP_MSG_UE_REG_QUERY_REQ, {
3980 }
3981 },
3982 /* 7.5.16 UE Registration Query Response */
3983 {
3984 GTP_MSG_UE_REG_QUERY_RESP, {
3990 }
3991 },
3992 /* 7.5A MBMS Messages
3993 * 7.5A.1 UE Specific MBMS Messages
3994 */
3995 {
3996 GTP_MBMS_NOTIFY_REQ, {
3998 {GTP_EXT_TEID_CP, GTP_MANDATORY, NULL}, /* Tunnel Endpoint Identifier Control Plane Mandatory 7.7.14 */
4002 {GTP_EXT_GSN_ADDR, GTP_MANDATORY, decode_gtp_ggsn_addr_for_control_plane}, /* GGSN Address for Control Plane Mandatory 7.7.32 */
4003 {GTP_EXT_MBMS_PROT_CONF_OPT, GTP_OPTIONAL, NULL}, /* MBMS Protocol Configuration Options Optional 7.7.58 */
4006 }
4007 },
4008 {
4009 GTP_MBMS_NOTIFY_RES, {
4013 }
4014 },
4015 {
4016 GTP_MBMS_NOTIFY_REJ_REQ, {
4018 {GTP_EXT_TEID_CP, GTP_MANDATORY, NULL}, /* Tunnel Endpoint Identifier Control Plane Mandatory 7.7.14 */
4022 {GTP_EXT_GSN_ADDR, GTP_OPTIONAL, decode_gtp_sgsn_addr_for_control_plane}, /* SGSN Address for Control Plane Optional 7.7.32 */
4025 }
4026 },
4027 {
4028 GTP_MBMS_NOTIFY_REJ_RES, {
4032 }
4033 },
4034 {
4035 GTP_CREATE_MBMS_CNTXT_REQ, {
4040 {GTP_EXT_TEID_CP, GTP_CONDITIONAL, NULL}, /* Tunnel Endpoint Identifier Control Plane Conditional 7.7.14 */
4045 {GTP_EXT_GSN_ADDR, GTP_MANDATORY, decode_gtp_sgsn_addr_for_control_plane}, /* SGSN Address for signalling Mandatory GSN Address 7.7.32 */
4053 {GTP_EXT_MBMS_PROT_CONF_OPT, GTP_OPTIONAL, NULL}, /* MBMS Protocol Configuration Options Optional 7.7.58 */
4056 {GTP_EXT_ADD_MBMS_TRS_INF, GTP_OPTIONAL, NULL}, /* Additional MBMS Trace Info Optional 7.7.68 */
4059 }
4060 },
4061 {
4062 GTP_CREATE_MBMS_CNTXT_RES, {
4065 {GTP_EXT_TEID_CP, GTP_CONDITIONAL, NULL}, /* Tunnel Endpoint Identifier Control Plane Conditional 7.7.14 */
4067 {GTP_EXT_GSN_ADDR, GTP_CONDITIONAL, NULL}, /* GGSN Address for Control Plane Conditional GSN Address 7.7.32 */
4068 {GTP_EXT_GSN_ADDR, GTP_CONDITIONAL, NULL}, /* Alternative GGSN Address for Control Plane Conditional GSN Address 7.7.32 */
4070 {GTP_EXT_CHRG_ADDR, GTP_OPTIONAL, NULL}, /* Alternative Charging Gateway Address Optional 7.7.44 */
4071 {GTP_EXT_MBMS_PROT_CONF_OPT, GTP_OPTIONAL, NULL}, /* MBMS Protocol Configuration Options Optional 7.7.58 */
4074 }
4075 },
4076 {
4077 GTP_UPD_MBMS_CNTXT_REQ, {
4081 {GTP_EXT_TEID_CP, GTP_CONDITIONAL, NULL}, /* Tunnel Endpoint Identifier Control Plane Conditional 7.7.14 */
4084 {GTP_EXT_GSN_ADDR, GTP_MANDATORY, decode_gtp_sgsn_addr_for_control_plane}, /* SGSN Address for Control Plane Mandatory GSN Address 7.7.32 */
4085 {GTP_EXT_GSN_ADDR, GTP_CONDITIONAL, NULL}, /* Alternative SGSN Address for Control Plane Conditional GSN Address 7.7.32 */
4093 {GTP_EXT_ADD_MBMS_TRS_INF, GTP_OPTIONAL, NULL}, /* Additional MBMS Trace Info Optional 7.7.68 */
4096 }
4097 },
4098 {
4099 GTP_UPD_MBMS_CNTXT_RES, {
4102 {GTP_EXT_TEID_CP, GTP_MANDATORY, NULL}, /* Tunnel Endpoint Identifier Control Plane Conditional 7.7.14 */
4104 {GTP_EXT_GSN_ADDR, GTP_CONDITIONAL, NULL}, /* GGSN Address for Control Plane Conditional GSN Address 7.7.32 */
4105 {GTP_EXT_GSN_ADDR, GTP_CONDITIONAL, NULL}, /* Alternative GGSN Address for Control Plane Conditional GSN Address 7.7.32 */
4107 {GTP_EXT_CHRG_ADDR, GTP_OPTIONAL, NULL}, /* Alternative Charging Gateway Address Optional 7.7.44 */
4110 }
4111 },
4112 {
4113 GTP_DEL_MBMS_CNTXT_REQ, {
4115 {GTP_EXT_TEID_CP, GTP_MANDATORY, NULL}, /* Tunnel Endpoint Identifier Control Plane Conditional 7.7.14 */
4118 {GTP_EXT_MBMS_PROT_CONF_OPT, GTP_OPTIONAL, NULL}, /* MBMS Protocol Configuration Options Optional 7.7.58 */
4122 }
4123 },
4124 {
4125 GTP_DEL_MBMS_CNTXT_RES, {
4127 {GTP_EXT_MBMS_PROT_CONF_OPT, GTP_OPTIONAL, NULL}, /* MBMS Protocol Configuration Options Optional 7.7.58 */
4130 }
4131 },
4132 {
4133 GTP_MBMS_REG_REQ, {
4134 {GTP_EXT_TEID_CP, GTP_CONDITIONAL, NULL}, /* Tunnel Endpoint Identifier Control Plane Conditional 7.7.14 */
4137 {GTP_EXT_GSN_ADDR, GTP_CONDITIONAL, decode_gtp_sgsn_addr_for_control_plane}, /* SGSN Address for Control Plane GSN Address 7.7.32 */
4138 {GTP_EXT_GSN_ADDR, GTP_OPTIONAL, NULL}, /* Alternative SGSN Address for Control Plane GSN Address 7.7.32 */
4141 }
4142 },
4143 {
4144 GTP_MBMS_REG_RES, {
4146 {GTP_EXT_TEID_CP, GTP_CONDITIONAL, NULL}, /* Tunnel Endpoint Identifier Control Plane Conditional 7.7.14 */
4147 {GTP_EXT_GSN_ADDR, GTP_CONDITIONAL, NULL}, /* GGSN Address for Control Plane Conditional GSN Address 7.7.32 */
4148 {GTP_EXT_TMGI, GTP_CONDITIONAL, NULL}, /* Temporary Mobile Group Identity (TMGI) Conditional 7.7.56 */
4152 }
4153 },
4154 {
4155 GTP_MBMS_DE_REG_REQ, {
4160 }
4161 },
4162 {
4163 GTP_MBMS_DE_REG_RES, {
4167 }
4168 },
4169 {
4170 GTP_MBMS_SES_START_REQ, {
4172 {GTP_EXT_TEID_CP, GTP_CONDITIONAL, NULL}, /* Tunnel Endpoint Identifier Control Plane Conditional 7.7.14 */
4175 {GTP_EXT_GSN_ADDR, GTP_CONDITIONAL, NULL}, /* GGSN Address for Control Plane Conditional GSN Address 7.7.32 */
4176 {GTP_EXT_GSN_ADDR, GTP_OPTIONAL, NULL}, /* Alternative GGSN Address for Control Plane GSN Address 7.7.32 */
4179 {GTP_EXT_TMGI, GTP_MANDATORY, NULL}, /* Temporary Mobile Group Identity (TMGI) Mandatory 7.7.56 */
4183 {GTP_EXT_MBMS_SES_DUR, GTP_MANDATORY, NULL}, /* MBMS Session Duration Mandatory 7.7.59 */ /* V16.0.0 has it here. */
4184 {GTP_EXT_MBMS_SES_ID_REP_NO, GTP_OPTIONAL, NULL}, /* MBMS Session Identity Repetition Number Optional 7.7.69 */
4185 {GTP_EXT_MBMS_TIME_TO_DATA_TR, GTP_MANDATORY, NULL}, /* MBMS Time To Data Transfer Mandatory 7.7.70 */
4190 }
4191 },
4192 {
4193 GTP_MBMS_SES_START_RES, {
4196 {GTP_EXT_TEID, GTP_CONDITIONAL, NULL}, /* Tunnel Endpoint Identifier Data I Conditional 7.7.13 */
4197 {GTP_EXT_TEID_CP, GTP_CONDITIONAL, NULL}, /* Tunnel Endpoint Identifier Control Plane Conditional 7.7.14 */
4198 {GTP_EXT_GSN_ADDR, GTP_CONDITIONAL, NULL}, /* SGSN Address for Control Plane Conditional GSN Address 7.7.32 */
4199 {GTP_EXT_GSN_ADDR, GTP_CONDITIONAL, NULL}, /* SGSN Address for user traffic Conditional GSN Address 7.7.32 */
4200 {GTP_EXT_GSN_ADDR, GTP_OPTIONAL, NULL}, /* Alternative SGSN Address for user traffic GSN Address 7.7.32 */
4204 }
4205 },
4206 {
4207 GTP_MBMS_SES_STOP_REQ, {
4213 }
4214 },
4215 {
4216 GTP_MBMS_SES_STOP_RES, {
4220 }
4221 },
4222 {
4223 GTP_MBMS_SES_UPD_REQ, {
4227 {GTP_EXT_GSN_ADDR, GTP_OPTIONAL, NULL}, /* GGSN Address for Control Plane GSN Address 7.7.32 */
4228 {GTP_EXT_TMGI, GTP_MANDATORY, NULL}, /* Temporary Mobile Group Identity (TMGI) Mandatory 7.7.56 */
4229 {GTP_EXT_MBMS_SES_DUR, GTP_MANDATORY, NULL}, /* MBMS Session Duration Mandatory 7.7.59 */ /* V16.0.0 has it here. */
4232 {GTP_EXT_MBMS_SES_ID_REP_NO, GTP_OPTIONAL, NULL}, /* MBMS Session Identity Repetition Number Optional 7.7.69 */
4236 }
4237 },
4238 {
4239 GTP_MBMS_SES_UPD_RES, {
4244 {GTP_EXT_GSN_ADDR, GTP_OPTIONAL, NULL}, /* SGSN Address for Control Plane GSN Address 7.7.32 */
4247 }
4248 },
4249 {
4250 GTP_MS_INFO_CNG_NOT_REQ, {
4260 }
4261 },
4262 {
4263 GTP_MS_INFO_CNG_NOT_RES, {
4272 }
4273 },
4274 {
4277 }
4278 }
4279 };
4281 /* Data structure attached to a conversation,
4282 to keep track of request/response-pairs
4283 */
4289 static unsigned
4291 {
4295 }
4297 static int
4299 {
4303 nstime_t delta;
4307 }
4311 }
4318 }
4321 }
4323 static int
4325 {
4329 nstime_t delta;
4336 }
4339 }
4343 {
4347 /* XXX - Note 3GPP TS 29.060 10.1 UDP/IP that the destination address
4348 * of the request and the source address of the response do NOT have
4349 * to match (unlike the source of request and destination of response,
4350 * and both sets of ports). So ideally this should be a conversation
4351 * that matches on three parameters but not all four. We might have to
4352 * use the msg_type to know whether it's a request or response, though,
4353 * which might mean doing this inside gtp_match_response.
4354 */
4356 }
4358 /*
4359 * Do we already know this conversation?
4360 */
4363 /* No. Attach that information to the conversation, and add
4364 * it to the list of information structures.
4365 */
4367 /*Request/response matching tables*/
4372 }
4375 }
4378 gtp_match_response(tvbuff_t * tvb, packet_info * pinfo, proto_tree * tree, int seq_nr, unsigned msgtype, gtp_conv_info_t *gtp_info, uint8_t last_cause)
4379 {
4418 }
4428 /*no match, let's try to make one*/
4444 }
4445 /* if we can't reuse the old one, grab a new chunk */
4448 }
4475 }
4476 }
4480 }
4481 }
4483 /* we have found a match */
4492 nstime_t ns;
4501 /* GTP session */
4502 /* If it does not have any session assigned yet */
4508 }
4509 }
4512 /* If the cause is not accepted then we have to remove all the session information about its corresponding request */
4514 }
4515 }
4516 }
4517 }
4518 }
4520 }
4523 static int
4524 check_field_presence_and_decoder(uint8_t version, uint8_t message, uint8_t field, int *position, ie_decoder **alt_decoder)
4525 {
4539 }
4554 }
4555 }
4556 }
4558 }
4559 i++;
4560 }
4563 }
4565 /* Decoders of fields in extension headers, each function returns no of bytes from field */
4567 /* GPRS: 9.60 v7.6.0, chapter
4568 * UMTS: 29.060 v4.0, chapter
4569 * 7.7.1 Cause
4570 */
4571 static int
4572 decode_gtp_cause(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args)
4573 {
4579 }
4583 }
4585 /* GPRS: 9.60 v7.6.0, chapter 7.9.2
4586 * UMTS: 29.060 v4.0, chapter 7.7.2
4587 */
4588 static int
4589 decode_gtp_imsi(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
4590 {
4591 /* const char *imsi_str; */
4593 /* Octets 2 - 9 IMSI */
4597 }
4599 /* GPRS: 9.60 v7.6.0, chapter 7.9.3
4600 * UMTS: 29.060 v4.0, chapter 7.7.3 Routeing Area Identity (RAI)
4601 */
4602 static int
4603 decode_gtp_rai(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
4604 {
4616 }
4618 /* GPRS: 9.60 v7.6.0, chapter 7.9.4, page 39
4619 * UMTS: 29.060 v4.0, chapter 7.7.4 Temporary Logical Link Identity (TLLI)
4620 */
4621 static int
4622 decode_gtp_tlli(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
4623 {
4631 }
4633 /* GPRS: 9.60 v7.6.0, chapter 7.9.5, page 39
4634 * UMTS: 29.060 v4.0, chapter 7.7.5 Packet TMSI (P-TMSI)
4635 */
4636 static int
4637 decode_gtp_ptmsi(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
4638 {
4646 }
4648 /*
4649 * adjust - how many bytes before offset should be highlighted
4650 */
4651 static int
4652 decode_qos_gprs(tvbuff_t * tvb, int offset, proto_tree * tree, const char * qos_str, uint8_t adjust)
4653 {
4667 ext_tree_qos = proto_tree_add_subtree_format(tree, tvb, offset - adjust, 3 + adjust, ett_gtp_qos, NULL,
4680 }
4683 }
4685 /* GPRS: 9.60 v7.6.0, chapter 7.9.6, page 39
4686 * 4.08
4687 * 3.60
4688 * UMTS: not present
4689 * TODO: check if length is included: ETSI 4.08 vs 9.60
4690 */
4691 static int
4692 decode_gtp_qos_gprs(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
4693 {
4697 }
4699 /* GPRS: 9.60 v7.6.0, chapter 7.9.7, page 39
4700 * UMTS: 29.060 v4.0, chapter 7.7.6 Reordering Required
4701 */
4702 static int
4703 decode_gtp_reorder(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
4704 {
4712 }
4714 /* GPRS: 9.60 v7.6.0, chapter 7.9.8, page 40
4715 * 4.08 v7.1.2, chapter 10.5.3.1+
4716 * UMTS: 29.060 v4.0, chapter 7.7.7
4717 * TODO: Add blurb support by registering items in the protocol registration
4718 */
4719 static int
4720 decode_gtp_auth_tri(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
4721 {
4725 ext_tree_auth_tri = proto_tree_add_subtree(tree, tvb, offset, 29, ett_gtp_ies[GTP_EXT_AUTH_TRI], NULL,
4733 }
4735 /* GPRS: 9.60 v7.6.0, chapter 7.9.9, page 40
4736 * 9.02 v7.7.0, page 1090
4737 * UMTS: 29.060 v4.0, chapter 7.7.8, page 48
4738 * 29.002 v4.2.1, chapter 17.5, page 268
4739 */
4740 static int
4741 decode_gtp_map_cause(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
4742 {
4750 }
4752 /* GPRS: 9.60 v7.6.0, chapter 7.9.10, page 41
4753 * UMTS: 29.060 v4.0, chapter 7.7.9, page 48
4754 */
4755 static int
4756 decode_gtp_ptmsi_sig(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
4757 {
4765 }
4767 /* GPRS: 9.60 v7.6.0, chapter 7.9.11, page 41
4768 * UMTS: 29.060 v4.0, chapter 7.7.10, page 49
4769 */
4770 static int
4771 decode_gtp_ms_valid(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
4772 {
4780 }
4782 /* GPRS: 9.60 v7.6.0, chapter 7.9.12, page 41
4783 * UMTS: 29.060 v4.0, chapter 7.7.11 Recovery
4784 */
4785 static int
4786 decode_gtp_recovery(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
4787 {
4795 }
4797 /* GPRS: 9.60 v7.6.0, chapter 7.9.13, page 42
4798 * UMTS: 29.060 v4.0, chapter 7.7.12 Selection Mode
4799 */
4804 {
4807 /* Value in ASCII(UTF-8) */
4812 }
4814 static int
4815 decode_gtp_sel_mode(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
4816 {
4829 }
4831 /* GPRS: 9.60 v7.6.0, chapter 7.9.14, page 42
4832 * UMTS: 29.060 v4.0, chapter 7.7.13, page 50
4833 */
4834 static int
4835 decode_gtp_16(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args)
4836 {
4849 /* We save the teid_data so that we could assignate its corresponding session ID later */
4856 }
4857 }
4866 }
4867 }
4869 /* GPRS: 9.60 v7.6.0, chapter 7.9.15, page 42
4870 * UMTS: 29.060 v4.0, chapter 7.7.14, page 42
4871 */
4872 static int
4873 decode_gtp_17(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args)
4874 {
4884 proto_tree_add_item_ret_uint(tree, hf_gtp_teid_cp, tvb, offset+1 , 4, ENC_BIG_ENDIAN, &teid_cp);
4885 /* We save the teid_cp so that we could assignate its corresponding session ID later */
4891 }
4892 }
4898 }
4899 }
4901 /* GPRS: 9.60 v7.6.0, chapter 7.9.16, page 42
4902 * UMTS: 29.060 v4.0, chapter 7.7.15, page 51
4903 */
4904 static int
4905 decode_gtp_18(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
4906 {
4914 ext_tree_flow_ii = proto_tree_add_subtree(tree, tvb, offset, 4, ett_gtp_ies[GTP_EXT_FLOW_II], NULL,
4938 }
4939 }
4941 /* GPRS: 9.60 v7.6.0, chapter 7.9.16A, page 43
4942 * UMTS: 29.060 v4.0, chapter 7.7.16, page 51
4943 * Check if all ms_reason types are included
4944 */
4945 static int
4946 decode_gtp_19(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
4947 {
4964 }
4967 }
4969 /* GPRS: not present
4970 * UMTS: 29.060 v4.0, chapter 7.7.17, page 51
4971 */
4972 static int
4973 decode_gtp_nsapi(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
4974 {
4987 }
4989 /* GPRS: not present
4990 * UMTS: 29.060 v4.0, chapter 7.7.18, page 52
4991 */
4992 static int
4993 decode_gtp_ranap_cause(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
4994 {
5037 }
5039 /* GPRS: not present
5040 * UMTS: 29.060 v4.0, chapter 7.7.19, page 52
5041 */
5042 static int
5043 decode_gtp_rab_cntxt(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
5044 {
5047 ext_tree_rab_cntxt = proto_tree_add_subtree(tree, tvb, offset, 10, ett_gtp_ies[GTP_EXT_RAB_CNTXT], NULL,
5051 proto_tree_add_item(ext_tree_rab_cntxt, hf_gtp_rab_gtpu_dn, tvb, offset + 2, 2, ENC_BIG_ENDIAN);
5052 proto_tree_add_item(ext_tree_rab_cntxt, hf_gtp_rab_gtpu_up, tvb, offset + 4, 2, ENC_BIG_ENDIAN);
5053 proto_tree_add_item(ext_tree_rab_cntxt, hf_gtp_rab_pdu_dn, tvb, offset + 6, 2, ENC_BIG_ENDIAN);
5054 proto_tree_add_item(ext_tree_rab_cntxt, hf_gtp_rab_pdu_up, tvb, offset + 8, 2, ENC_BIG_ENDIAN);
5057 }
5060 /* GPRS: not present
5061 * UMTS: 29.060 v4.0, chapter 7.7.20, page 53
5062 */
5063 static int
5064 decode_gtp_rp_sms(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
5065 {
5073 }
5075 /* GPRS: not present
5076 * UMTS: 29.060 v4.0, chapter 7.7.21, page 53
5077 */
5078 static int
5079 decode_gtp_rp(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
5080 {
5089 /* TODO: shouldn't really use int item as tree root.. */
5090 te = proto_tree_add_uint_format(tree, hf_gtp_rp, tvb, offset, 2, rp, "Radio Priority for NSAPI(%u) : %u", nsapi, rp);
5098 }
5100 /* GPRS: not present
5101 * UMTS: 29.060 v4.0, chapter 7.7.22, page 53
5102 */
5103 static int
5104 decode_gtp_pkt_flow_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
5105 {
5114 te = proto_tree_add_uint_format(tree, hf_gtp_pkt_flow_id, tvb, offset, 3, pkt_flow_id, "Packet Flow ID for NSAPI(%u) : %u", nsapi, pkt_flow_id);
5119 offset + 2, 1, pkt_flow_id, "%s : %u", val_to_str_ext_const(GTP_EXT_PKT_FLOW_ID, >p_val_ext, "Unknown message"), pkt_flow_id);
5122 }
5124 /* GPRS: not present
5125 * UMTS: 29.060 v4.0, chapter 7.7.23, page 53
5126 * TODO: Differenciate these uints?
5127 */
5128 static int
5129 decode_gtp_chrg_char(tvbuff_t* tvb, int offset, packet_info* pinfo _U_, proto_tree* tree, session_args_t* args _U_)
5130 {
5139 NULL
5140 };
5142 proto_tree_add_bitmask(tree, tvb, offset + 1, hf_gtp_chrg_char, ett_gtp_ies[GTP_EXT_CHRG_CHAR], gtp_charg_flags, ENC_BIG_ENDIAN);
5145 }
5147 /* GPRS: not present
5148 * UMTS: 29.060 v4.0, chapter 7.7.24, page
5149 */
5150 static int
5151 decode_gtp_trace_ref(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
5152 {
5161 }
5163 /* GPRS: not present
5164 * UMTS: 29.060 v4.0, chapter 7.7.25, page
5165 */
5166 static int
5167 decode_gtp_trace_type(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
5168 {
5177 }
5179 /* GPRS: 9.60 v7.6.0, chapter 7.9.16A
5180 * UMTS: 29.060 v4.0, chapter 7.7.25A, page
5181 */
5182 static int
5183 decode_gtp_ms_reason(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
5184 {
5190 /* Reason for Absence is defined in 3GPP TS 23.040 */
5194 }
5196 /* GPRS: ?
5197 * UMTS: 29.060 v6.11.0, chapter 7.7.25B
5198 * Radio Priority LCS
5199 */
5200 static int
5201 decode_gtp_ra_prio_lcs(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
5202 {
5208 ext_tree = proto_tree_add_subtree_format(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_RA_PRIO_LCS], NULL,
5211 offset++;
5219 }
5221 /* TS 32.295, chapter 6.2.4.5.2, page 29 */
5222 static int
5223 decode_gtp_tr_comm(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
5224 {
5233 }
5235 /* GPRS: 9.60 v7.6.0, chapter 7.9.17, page 43
5236 * UMTS: 29.060 v4.0, chapter 7.7.26, page 55
5237 */
5238 static int
5239 decode_gtp_chrg_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
5240 {
5248 }
5250 /* GPRS: 9.60 v7.6.0, chapter 7.9.18, page 43
5251 * UMTS: 29.060 v4.0, chapter 7.7.27, page 55
5252 */
5253 static int
5254 decode_gtp_user_addr(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
5255 {
5294 ws_in6_addr ipv6;
5297 proto_tree_add_ipv6_format_value(ext_tree_user, hf_gtp_user_ipv6, tvb, offset + 9, 0, &ipv6, "dynamic");
5300 proto_tree_add_ipv4_format_value(ext_tree_user, hf_gtp_user_ipv6, tvb, offset + 5, 0, 0, "dynamic");
5309 proto_tree_add_expert_format(ext_tree_user, pinfo, &ei_gtp_ext_length_mal, tvb, offset + 3, length, "Wrong length indicated. Expected 6, 18 or 22, got %u", length);
5310 }
5312 }
5317 }
5319 static int
5321 {
5327 ext_tree_trip = proto_tree_add_subtree_format(tree, tvb, offset + i * 28, 28, ett_gtp_trip, NULL, "Triplet no%x", i);
5332 }
5335 }
5337 /* adjust - how many bytes before quintuplet should be highlighted
5338 */
5339 static int
5341 {
5358 proto_tree_add_item(ext_tree_quint, hf_gtp_xres_length, tvb, offset + q_offset, 1, ENC_BIG_ENDIAN);
5359 q_offset++;
5362 proto_tree_add_item(ext_tree_quint, hf_gtp_quintuplet_ciphering_key, tvb, offset + q_offset, 16, ENC_NA);
5364 proto_tree_add_item(ext_tree_quint, hf_gtp_quintuplet_integrity_key, tvb, offset + q_offset, 16, ENC_NA);
5367 proto_tree_add_item(ext_tree_quint, hf_gtp_authentication_length, tvb, offset + q_offset, 1, ENC_BIG_ENDIAN);
5368 q_offset++;
5374 }
5377 }
5379 /* GPRS: 9.60 v7.6.0, chapter 7.9.19 page
5380 * UMTS: 29.060 v4.0, chapter 7.7.28 page 57
5381 * TODO: - check if for quintuplets first 2 bytes are length, according to AuthQuint
5382 * - finish displaying last 3 parameters
5383 */
5384 static int
5385 decode_gtp_mm_cntxt(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
5386 {
5393 ext_tree_mm = proto_tree_add_subtree(tree, tvb, offset, 1, ett_gtp_ies[GTP_EXT_MM_CNTXT], NULL,
5396 /* Octet 2 - 3 */
5401 /* Octet 4 (cksn)*/
5403 /* Octet 5 */
5420 proto_tree_add_item(ext_tree_mm, hf_gtp_quintuplets_length, tvb, offset + 37, 2, ENC_BIG_ENDIAN);
5444 proto_tree_add_item(ext_tree_mm, hf_gtp_quintuplets_length, tvb, offset + 37, 2, ENC_BIG_ENDIAN);
5455 proto_tree_add_item(ext_tree_mm, hf_gtp_quintuplets_length, tvb, offset + 13, 2, ENC_BIG_ENDIAN);
5462 }
5464 /*
5465 * 3GPP TS 24.008 10.5.5.6 ( see packet-gsm_a.c )
5466 */
5467 tf_tree = proto_tree_add_subtree(ext_tree_mm, tvb, offset, 2, ett_gtp_drx, NULL, "DRX Parameter");
5472 tf_tree = proto_tree_add_subtree(ext_tree_mm, tvb, offset, len + 1, ett_gtp_net_cap, NULL, "MS Network Capability");
5476 offset++;
5477 /*
5478 * GPP TS 24.008 10.5.5.12 ( see packet-gsm_a.c )
5479 */
5483 }
5485 /* 3GPP TS 29.060 version 9.4.0 Release 9
5486 * The two octets Container Length holds the length of the Container, excluding the Container Length octets.
5487 * Container contains one or several optional information elements as described in the clause "Overview", from the clause
5488 * "General message format and information elements coding" in 3GPP TS 24.008 [5]. For the definition of the IEI see
5489 * table 47a, "IEIs for information elements used in the container". The IMEISV shall, if available, be included in the
5490 * Container. The IMEISV is included in the Mobile identity IE. If Container is not included, its Length field value shall
5491 * be set to 0. If the MS is emergency attached and the MS is UICCless or the IMSI is unauthenticated, the International
5492 * Mobile Equipment Identity (IMEI) shall be used as the MS identity.
5493 *
5494 * Table 47A: IEIs for information elements used in the container
5495 * IEI Information element
5496 * 0x23 Mobile identity
5497 *
5498 * NOTE: In 3GPP TS 24.008 [5] the IEI definition is
5499 * message dependent. The table is added to
5500 * have a unique definition in the present
5501 * document for the used IEI in the MMcontext.
5502 */
5511 con_tree = proto_tree_add_subtree(ext_tree_mm, tvb, offset, con_len, ett_gtp_mm_cntxt, NULL, "Container");
5517 offset++;
5520 offset++;
5524 }
5525 }
5528 }
5530 /* Function to extract the value of an hexadecimal octet. Only the lower
5531 * nybble will be non-zero in the output.
5532 * */
5533 static uint8_t
5535 {
5536 /* XXX, ws_xton() */
5543 else
5546 }
5548 /* Wrapper function to add UTF-8 decoding for QoS attributes in
5549 * RADIUS messages.
5550 * */
5551 static uint8_t
5553 {
5556 else
5558 }
5560 /* WARNING : actually length is coded on 2 octets for QoS profile but on 1 octet for PDP Context!
5561 * so type means length of length :-)
5562 *
5563 * WARNING :) type does not mean length of length any more... see below for
5564 * type = 3!
5565 */
5566 int
5567 decode_qos_umts(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, const char * qos_str, uint8_t type)
5568 {
5574 uint8_t max_sdu_size, max_ul, max_dl, max_ul_ext, max_dl_ext, max_ul_ext2 = 0, max_dl_ext2 = 0;
5585 /* Will keep if the input is UTF-8 encoded (as in RADIUS messages).
5586 * If 1, input is *not* UTF-8 encoded (i.e. each input octet corresponds
5587 * to one byte to be dissected).
5588 * If 2, input is UTF-8 encoded (i.e. each *couple* of input octets
5589 * corresponds to one byte to be dissected)
5590 * */
5593 /* Will keep the release indicator as indicated in the RADIUS message */
5596 /* In RADIUS messages the QoS has a version field of two octets prepended.
5597 * As of 29.061 v.3.a.0, there is an hyphen between "Release Indicator" and
5598 * <release specific QoS IE UTF-8 encoding>. Even if it sounds rather
5599 * inconsistent and unuseful, I will check hyphen presence here and
5600 * will signal its presence.
5601 * */
5604 /* Will keep the value that will be returned
5605 * */
5610 /* For QoS inside GPRS-CDR messages from GGSN/P-GW */
5614 /* QoS inside GPRS-CDR has no length octet, so no extra offset needed */
5619 ext_tree_qos = proto_tree_add_subtree(tree, tvb, offset, length + 1, ett_gtp_qos, NULL, qos_str);
5621 offset++;
5626 ext_tree_qos = proto_tree_add_subtree(tree, tvb, offset, length + 3, ett_gtp_qos, NULL, qos_str);
5632 /* For QoS inside RADIUS Client messages from GGSN/P-GW */
5635 /* The field in the RADIUS message is the length of the tvb we were given */
5642 /* Hyphen handling */
5645 /* Hyphen is present, put in protocol tree */
5648 }
5650 /* Now, we modify offset here and in order to use type later
5651 * effectively.*/
5652 offset++;
5657 /* Fake the length of the IE including the IE id and length octets
5658 * we are actually using it to determine presence of Octet n as counted
5659 * in TS 24.008
5660 */
5665 /* XXX - what should we do with the length here? */
5670 }
5673 /* Release 8 or higher P-GW QoS profile */
5678 NULL
5679 };
5681 offset++;
5691 /* GBR QCI */
5720 /* non GBR QCI */
5732 }
5734 }
5736 /* In RADIUS messages there is no allocation-retention priority
5737 * so I don't need to wrap the following call to tvb_get_uint8
5738 * */
5741 /* All calls are wrapped to take into account the possibility that the
5742 * input is UTF-8 encoded. If utf8_type is equal to 1, the final value
5743 * of the offset will be the same as in the previous version of this
5744 * dissector, and the wrapped function will serve as a dumb wrapper;
5745 * otherwise, if utf_8_type is 2, the offset is correctly shifted by
5746 * two bytes for needed shift, and the wrapped function will unencode
5747 * two values from the input.
5748 * */
5749 spare1 = wrapped_tvb_get_uint8(tvb, offset + (1 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_SPARE1_MASK;
5750 delay = wrapped_tvb_get_uint8(tvb, offset + (1 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_DELAY_MASK;
5751 reliability = wrapped_tvb_get_uint8(tvb, offset + (1 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_RELIABILITY_MASK;
5752 peak = wrapped_tvb_get_uint8(tvb, offset + (2 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_PEAK_MASK;
5753 spare2 = wrapped_tvb_get_uint8(tvb, offset + (2 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_SPARE2_MASK;
5754 precedence = wrapped_tvb_get_uint8(tvb, offset + (2 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_PRECEDENCE_MASK;
5755 spare3 = wrapped_tvb_get_uint8(tvb, offset + (3 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_SPARE3_MASK;
5756 mean = wrapped_tvb_get_uint8(tvb, offset + (3 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_MEAN_MASK;
5758 /* In RADIUS messages there is no allocation-retention priority */
5760 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_al_ret_priority, tvb, offset, 1, al_ret_priority);
5762 /* Add an octet to the binary data length to account for the
5763 * missing ARP so that the length tests below are correct.
5764 */
5766 }
5768 /* All additions must take care of the fact that QoS fields in RADIUS
5769 * messages are UTF-8 encoded, so we have to use the same trick as above.
5770 * */
5771 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_spare1, tvb, offset + (1 - 1) * utf8_type + 1, utf8_type, spare1);
5772 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_delay, tvb, offset + (1 - 1) * utf8_type + 1, utf8_type, delay);
5773 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_reliability, tvb, offset + (1 - 1) * utf8_type + 1, utf8_type, reliability);
5774 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_peak, tvb, offset + (2 - 1) * utf8_type + 1, utf8_type, peak);
5775 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_spare2, tvb, offset + (2 - 1) * utf8_type + 1, utf8_type, spare2);
5776 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_precedence, tvb, offset + (2 - 1) * utf8_type + 1, utf8_type, precedence);
5777 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_spare3, tvb, offset + (3 - 1) * utf8_type + 1, utf8_type, spare3);
5778 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_mean, tvb, offset + (3 - 1) * utf8_type + 1, utf8_type, mean);
5780 /* TS 24.008 V 7.8.0 10.5.6.5 Quality of service
5781 * The quality of service is a type 4 information element with a minimum length of 14 octets and a maximum length of 18
5782 * octets. The QoS requested by the MS shall be encoded both in the QoS attributes specified in octets 3-5 and in the QoS
5783 * attributes specified in octets 6-14.
5784 * In the MS to network direction and in the network to MS direction the following applies:
5785 * - Octets 15-18 are optional. If octet 15 is included, then octet 16 shall also be included, and octets 17 and 18 may
5786 * be included.
5787 * - If octet 17 is included, then octet 18 shall also be included.
5788 * - A QoS IE received without octets 6-18, without octets 14-18, without octets 15-18, or without octets 17-18 shall
5789 * be accepted by the receiving entity.
5790 */
5794 /* See above for the need of wrapping
5795 *
5796 */
5797 /* Octet 6 */
5798 traf_class = wrapped_tvb_get_uint8(tvb, offset + (4 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_TRAF_CLASS_MASK;
5799 del_order = wrapped_tvb_get_uint8(tvb, offset + (4 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_DEL_ORDER_MASK;
5800 del_err_sdu = wrapped_tvb_get_uint8(tvb, offset + (4 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_DEL_ERR_SDU_MASK;
5804 res_ber = wrapped_tvb_get_uint8(tvb, offset + (8 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_RES_BER_MASK;
5805 sdu_err_ratio = wrapped_tvb_get_uint8(tvb, offset + (8 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_SDU_ERR_RATIO_MASK;
5806 trans_delay = wrapped_tvb_get_uint8(tvb, offset + (9 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_TRANS_DELAY_MASK;
5807 traf_handl_prio = wrapped_tvb_get_uint8(tvb, offset + (9 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_TRAF_HANDL_PRIORITY_MASK;
5809 /* Octet 13 */
5821 spare4 = wrapped_tvb_get_uint8(tvb, offset + (12 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_SPARE4_MASK;
5822 sig_ind = wrapped_tvb_get_uint8(tvb, offset + (12 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_SIG_IND_MASK;
5823 src_stat_desc = wrapped_tvb_get_uint8(tvb, offset + (12 - 1) * utf8_type + 1, utf8_type) & GTP_EXT_QOS_SRC_STAT_DESC_MASK;
5824 }
5828 }
5832 }
5836 }
5840 }
5842 /*
5843 * See above comments for the changes
5844 */
5845 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_traf_class, tvb, offset + (4 - 1) * utf8_type + 1, utf8_type, traf_class);
5846 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_del_order, tvb, offset + (4 - 1) * utf8_type + 1, utf8_type, del_order);
5847 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_del_err_sdu, tvb, offset + (4 - 1) * utf8_type + 1, utf8_type, del_err_sdu);
5849 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_max_sdu_size, tvb, offset + (5 - 1) * utf8_type + 1, utf8_type, max_sdu_size);
5852 proto_tree_add_uint_format_value(ext_tree_qos, hf_gtp_qos_max_sdu_size, tvb, offset + (5 - 1) * utf8_type + 1, utf8_type, mss,
5854 }
5857 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_max_ul, tvb, offset + (6 - 1) * utf8_type + 1, utf8_type, max_ul);
5859 proto_tree_add_uint_format_value(ext_tree_qos, hf_gtp_qos_max_ul, tvb, offset + (6 - 1) * utf8_type + 1, utf8_type, max_ul,
5863 proto_tree_add_uint_format_value(ext_tree_qos, hf_gtp_qos_max_ul, tvb, offset + (6 - 1) * utf8_type + 1, utf8_type, mu,
5865 }
5869 proto_tree_add_uint_format_value(ext_tree_qos, hf_gtp_qos_max_ul, tvb, offset + (6 - 1) * utf8_type + 1, utf8_type, mu,
5871 }
5874 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_max_dl, tvb, offset + (7 - 1) * utf8_type + 1, utf8_type, max_dl);
5876 proto_tree_add_uint_format_value(ext_tree_qos, hf_gtp_qos_max_dl, tvb, offset + (7 - 1) * utf8_type + 1, utf8_type, max_dl,
5880 proto_tree_add_uint_format_value(ext_tree_qos, hf_gtp_qos_max_dl, tvb, offset + (7 - 1) * utf8_type + 1, utf8_type, md,
5882 }
5885 proto_tree_add_uint_format_value(ext_tree_qos, hf_gtp_qos_max_dl, tvb, offset + (7 - 1) * utf8_type + 1, utf8_type, md,
5887 }
5889 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_res_ber, tvb, offset + (8 - 1) * utf8_type + 1, utf8_type, res_ber);
5890 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_sdu_err_ratio, tvb, offset + (8 - 1) * utf8_type + 1, utf8_type, sdu_err_ratio);
5891 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_trans_delay, tvb, offset + (9 - 1) * utf8_type + 1, utf8_type, trans_delay);
5892 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_traf_handl_prio, tvb, offset + (9 - 1) * utf8_type + 1, utf8_type, traf_handl_prio);
5895 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_guar_ul, tvb, offset + (10 - 1) * utf8_type + 1, utf8_type, guar_ul);
5897 proto_tree_add_uint_format_value(ext_tree_qos, hf_gtp_qos_guar_ul, tvb, offset + (10 - 1) * utf8_type + 1, utf8_type, guar_ul,
5901 proto_tree_add_uint_format_value(ext_tree_qos, hf_gtp_qos_guar_ul, tvb, offset + (10 - 1) * utf8_type + 1, utf8_type, gu,
5903 }
5906 proto_tree_add_uint_format_value(ext_tree_qos, hf_gtp_qos_guar_ul, tvb, offset + (10 - 1) * utf8_type + 1, utf8_type, gu,
5908 }
5910 /* Octet 13 */
5912 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_guar_dl, tvb, offset + (11 - 1) * utf8_type + 1, utf8_type, guar_dl);
5914 proto_tree_add_uint_format_value(ext_tree_qos, hf_gtp_qos_guar_dl, tvb, offset + (11 - 1) * utf8_type + 1, utf8_type, guar_dl,
5918 proto_tree_add_uint_format_value(ext_tree_qos, hf_gtp_qos_guar_dl, tvb, offset + (11 - 1) * utf8_type + 1, utf8_type, gd,
5920 }
5923 proto_tree_add_uint_format_value(ext_tree_qos, hf_gtp_qos_guar_dl, tvb, offset + (11 - 1) * utf8_type + 1, utf8_type, gd,
5925 }
5928 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_spare4, tvb, offset + (12 - 1) * utf8_type + 1, utf8_type, spare4);
5929 proto_tree_add_boolean(ext_tree_qos, hf_gtp_qos_sig_ind, tvb, offset + (12 - 1) * utf8_type + 1, utf8_type, sig_ind);
5930 proto_tree_add_uint(ext_tree_qos, hf_gtp_qos_src_stat_desc, tvb, offset + (12 - 1) * utf8_type + 1, utf8_type, src_stat_desc);
5931 }
5935 /* Octet 15 */
5937 proto_tree_add_expert_format(ext_tree_qos, pinfo, &ei_gtp_max_bit_rate_value, tvb, offset + (13 - 1) * utf8_type + 1, utf8_type,
5941 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_max_dl, tvb, offset + (13 - 1) * utf8_type + 1, utf8_type, md,
5943 }
5946 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_max_dl, tvb, offset + (13 - 1) * utf8_type + 1, utf8_type, md,
5948 }
5951 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_max_dl, tvb, offset + (13 - 1) * utf8_type + 1, utf8_type, md,
5953 }
5954 /* Octet 16 */
5956 proto_tree_add_expert_format(ext_tree_qos, pinfo, &ei_gtp_guaranteed_bit_rate_value, tvb, offset + (14 - 1) * utf8_type + 1, utf8_type,
5960 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_guar_dl, tvb, offset + (14 - 1) * utf8_type + 1, utf8_type, gd,
5962 }
5965 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_guar_dl, tvb, offset + (14 - 1) * utf8_type + 1, utf8_type, gd,
5967 }
5970 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_guar_dl, tvb, offset + (14 - 1) * utf8_type + 1, utf8_type, gd,
5972 }
5974 }
5976 /* Octet 17
5977 * This field is an extension of the Maximum bit rate for uplink in octet 8. The coding is identical to that of the Maximum bit
5978 * rate for downlink (extended).
5979 */
5981 proto_tree_add_expert_format(ext_tree_qos, pinfo, &ei_gtp_max_bit_rate_value, tvb, offset + (15 - 1) * utf8_type + 1, utf8_type,
5985 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_max_ul, tvb, offset + (15 - 1) * utf8_type + 1, utf8_type, md,
5987 }
5990 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_max_ul, tvb, offset + (15 - 1) * utf8_type + 1, utf8_type, md,
5992 }
5995 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_max_ul, tvb, offset + (15 - 1) * utf8_type + 1, utf8_type, md,
5997 }
5998 /* Octet 18 */
6000 proto_tree_add_expert_format(ext_tree_qos, pinfo, &ei_gtp_guaranteed_bit_rate_value, tvb, offset + (16 - 1) * utf8_type + 1, utf8_type,
6004 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_guar_ul, tvb, offset + (16 - 1) * utf8_type + 1, utf8_type, gd,
6006 }
6009 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_guar_ul, tvb, offset + (16 - 1) * utf8_type + 1, utf8_type, gd,
6011 }
6014 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_guar_ul, tvb, offset + (16 - 1) * utf8_type + 1, utf8_type, gd,
6016 }
6017 }
6020 /* Octet 19 Maximum bit rate for downlink (extended-2)
6021 * This field is an extension of the Maximum bit rate for uplink in octet 8. The coding is identical to that of the Maximum bit
6022 * rate for downlink (extended).
6023 */
6025 proto_tree_add_expert_format(ext_tree_qos, pinfo, &ei_gtp_max_bit_rate_value, tvb, offset + (17 - 1) * utf8_type + 1, utf8_type,
6030 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_max_ul, tvb, offset + (15 - 1) * utf8_type + 1, utf8_type, md,
6032 }
6035 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_max_ul, tvb, offset + (15 - 1) * utf8_type + 1, utf8_type, md,
6037 }
6040 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_max_ul, tvb, offset + (15 - 1) * utf8_type + 1, utf8_type, md,
6042 }
6043 /* Octet 20 Guaranteed bit rate for downlink (extended-2) */
6045 proto_tree_add_expert_format(ext_tree_qos, pinfo, &ei_gtp_max_bit_rate_value, tvb, offset + (16 - 1) * utf8_type + 1, utf8_type,
6049 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_guar_ul, tvb, offset + (16 - 1) * utf8_type + 1, utf8_type, gd,
6051 }
6054 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_guar_ul, tvb, offset + (16 - 1) * utf8_type + 1, utf8_type, gd,
6056 }
6059 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_guar_ul, tvb, offset + (16 - 1) * utf8_type + 1, utf8_type, gd,
6061 }
6062 }
6065 /* Maximum bit rate for uplink (extended-2), octet 21
6066 * This field is an extension of the Maximum bit rate for uplink in octet 8. The coding is identical to that of the Maximum bit
6067 * rate for downlink (extended).
6068 */
6070 proto_tree_add_expert_format(ext_tree_qos, pinfo, &ei_gtp_max_bit_rate_value, tvb, offset + (17 - 1) * utf8_type + 1, utf8_type,
6075 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_max_ul, tvb, offset + (15 - 1) * utf8_type + 1, utf8_type, md,
6077 }
6080 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_max_ul, tvb, offset + (15 - 1) * utf8_type + 1, utf8_type, md,
6082 }
6085 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_max_ul, tvb, offset + (15 - 1) * utf8_type + 1, utf8_type, md,
6087 }
6088 /* Guaranteed bit rate for uplink (extended-2), octet 22 */
6090 proto_tree_add_expert_format(ext_tree_qos, pinfo, &ei_gtp_max_bit_rate_value, tvb, offset + (16 - 1) * utf8_type + 1, utf8_type,
6094 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_guar_ul, tvb, offset + (16 - 1) * utf8_type + 1, utf8_type, gd,
6096 }
6099 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_guar_ul, tvb, offset + (16 - 1) * utf8_type + 1, utf8_type, gd,
6101 }
6104 proto_tree_add_uint_format(ext_tree_qos, hf_gtp_qos_guar_ul, tvb, offset + (16 - 1) * utf8_type + 1, utf8_type, gd,
6106 }
6107 }
6108 }
6111 }
6113 /* Diameter 3GPP AVP Code: 5 3GPP-GPRS Negotiated QoS profile */
6114 static int
6115 dissect_diameter_3gpp_qosprofile(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data _U_) {
6119 }
6123 {
6126 }
6128 static void
6129 decode_apn(packet_info *pinfo, tvbuff_t * tvb, int offset, uint16_t length, proto_tree * tree, proto_item *item)
6130 {
6133 /*
6134 * This is "a domain name represented as a sequence of labels, where
6135 * each label consists of a length octet followed by that number of
6136 * octets.", DNS-style.
6137 *
6138 * XXX - does it involve compression?
6139 */
6141 /* Highlight bytes including the first length byte */
6142 proto_tree_add_item_ret_string(tree, hf_gtp_apn, tvb, offset, length, ENC_APN_STR, pinfo->pool, &apn);
6145 }
6147 }
6149 static void
6150 decode_fqdn(tvbuff_t * tvb, int offset, uint16_t length, proto_tree * tree, session_args_t * args _U_)
6151 {
6154 /* "The FQDN field encoding shall be identical to the encoding of a FQDN
6155 * within a DNS message of clause 3.1 of IETF RFC 1035 [45] but excluding
6156 * the trailing zero byte"
6157 *
6158 * XXX: is compression possible?
6159 */
6163 /* "NOTE 1: The FQDN field in the IE is not encoded as a dotted string"
6164 * but if the first byte is large (in the letter range or higher),
6165 * assume that it is so encoded incorrectly.
6166 */
6171 }
6172 }
6174 /*
6175 * GPRS: 9.60 v7.6.0, chapter 7.9.20
6176 * UMTS: 29.060 v4.0, chapter 7.7.29 PDP Context
6177 * TODO: unify addr functions
6178 */
6179 static int
6180 decode_gtp_pdp_cntxt(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
6181 {
6190 ext_tree_pdp = proto_tree_add_subtree(tree, tvb, offset, length + 3, ett_gtp_ies[GTP_EXT_PDP_CNTXT], NULL,
6195 proto_tree_add_item(ext_tree_pdp, hf_gtp_extended_end_user_address, tvb, offset + 3, 1, ENC_NA);
6197 proto_tree_add_item(ext_tree_pdp, hf_gtp_activity_status_indicator, tvb, offset + 3, 1, ENC_NA);
6217 }
6219 proto_tree_add_item(ext_tree_pdp, hf_gtp_sequence_number_down, tvb, offset, 2, ENC_BIG_ENDIAN);
6220 proto_tree_add_item(ext_tree_pdp, hf_gtp_sequence_number_up, tvb, offset + 2, 2, ENC_BIG_ENDIAN);
6221 proto_tree_add_item(ext_tree_pdp, hf_gtp_send_n_pdu_number, tvb, offset + 4, 1, ENC_BIG_ENDIAN);
6222 proto_tree_add_item(ext_tree_pdp, hf_gtp_receive_n_pdu_number, tvb, offset + 5, 1, ENC_BIG_ENDIAN);
6226 proto_tree_add_item(ext_tree_pdp, hf_gtp_uplink_flow_label_signalling, tvb, offset + 6, 2, ENC_BIG_ENDIAN);
6231 proto_tree_add_item(ext_tree_pdp, hf_gtp_uplink_teid_data, tvb, offset + 10, 4, ENC_BIG_ENDIAN);
6232 proto_tree_add_item(ext_tree_pdp, hf_gtp_pdp_context_identifier, tvb, offset + 14, 1, ENC_BIG_ENDIAN);
6237 }
6244 proto_tree_add_item(ext_tree_pdp, hf_gtp_pdp_address_length, tvb, offset + 2, 1, ENC_BIG_ENDIAN);
6249 proto_tree_add_item(ext_tree_pdp, hf_gtp_pdp_address_ipv4, tvb, offset + 3, 4, ENC_BIG_ENDIAN);
6256 }
6257 }
6266 proto_tree_add_item(ext_tree_pdp, hf_gtp_ggsn_address_for_control_plane_ipv4, tvb, offset + 1, 4, ENC_BIG_ENDIAN);
6269 proto_tree_add_item(ext_tree_pdp, hf_gtp_ggsn_address_for_control_plane_ipv6, tvb, offset + 1, 16, ENC_NA);
6273 }
6284 proto_tree_add_item(ext_tree_pdp, hf_gtp_ggsn_address_for_user_traffic_ipv4, tvb, offset + 1, 4, ENC_BIG_ENDIAN);
6287 proto_tree_add_item(ext_tree_pdp, hf_gtp_ggsn_address_for_user_traffic_ipv6, tvb, offset + 1, 16, ENC_NA);
6291 }
6294 }
6301 /*
6302 * The Transaction Identifier is the 4 or 12 bit Transaction Identifier used in the 3GPP TS 24.008 [5] Session Management
6303 * messages which control this PDP Context. If the length of the Transaction Identifier is 4 bit, the second octet shall be
6304 * set to all zeros. The encoding is defined in 3GPP TS 24.007 [3]. The latest Transaction Identifier sent from SGSN to
6305 * MS is stored in the PDP context IE.
6306 * NOTE: Bit 5-8 of the first octet in the encoding defined in 3GPP TS 24.007 [3] is mapped into bit 1-4 of the first
6307 * octet in this field.
6308 */
6318 proto_tree_add_item(ext_tree_pdp, hf_gtp_pdp_address_length, tvb, offset + 1, 1, ENC_BIG_ENDIAN);
6330 }
6331 }
6332 }
6335 }
6337 /* GPRS: 9.60, v7.6.0, chapter 7.9.21
6338 * UMTS: 29.060, v4.0, chapter 7.7.30
6339 */
6340 static int
6341 decode_gtp_apn(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
6342 {
6350 ext_tree_apn = proto_tree_add_subtree(tree, tvb, offset, length + 3, ett_gtp_ies[GTP_EXT_APN], &te,
6357 }
6359 /* GPRS: 9.60 v7.6.0, chapter 7.9.22
6360 * 4.08 v. 7.1.2, chapter 10.5.6.3 (p.580)
6361 * UMTS: 29.060 v4.0, chapter 7.7.31 Protocol Configuration Options
6362 * 24.008, v4.2, chapter 10.5.6.3
6363 */
6364 int
6365 decode_gtp_proto_conf(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
6366 {
6375 ett_gtp_proto, NULL, val_to_str_ext_const(GTP_EXT_PROTO_CONF, >p_val_ext, "Unknown message"));
6382 /* The Protocol Configuration Options contains external network protocol options that may be necessary to transfer
6383 * between the GGSN and the MS. The content and the coding of the Protocol Configuration are defined in octet 3-z of the
6384 * Protocol Configuration Options in3GPP TS 24.008 [5].
6385 */
6390 }
6392 /* GPRS: 9.60 v7.6.0, chapter 7.9.23
6393 * UMTS: 29.060 v4.0, chapter 7.7.32
6394 */
6395 static int
6396 decode_gtp_gsn_addr_common(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args, const char * tree_name, int hf_ipv4, int hf_ipv6)
6397 {
6407 ext_tree_gsn_addr = proto_tree_add_subtree_format(tree, tvb, offset, 3 + length, ett_gtp_gsn_addr, &te, "%s : ", tree_name);
6411 proto_tree_add_item(ext_tree_gsn_addr, hf_gtp_gsn_address_length, tvb, offset + 1, 2, ENC_BIG_ENDIAN);
6414 proto_item_set_hidden(proto_tree_add_item(ext_tree_gsn_addr, hf_gtp_gsn_ipv4, tvb, offset + 3, 4, ENC_BIG_ENDIAN));
6419 proto_tree_add_item(ext_tree_gsn_addr, hf_gtp_gsn_address_information_element_length, tvb, offset + 1, 2, ENC_BIG_ENDIAN);
6426 proto_item_set_hidden(proto_tree_add_item(ext_tree_gsn_addr, hf_gtp_gsn_ipv4, tvb, offset + 4, 4, ENC_BIG_ENDIAN));
6431 proto_tree_add_item(ext_tree_gsn_addr, hf_gtp_gsn_address_length, tvb, offset + 1, 2, ENC_BIG_ENDIAN);
6434 proto_item_set_hidden(proto_tree_add_item(ext_tree_gsn_addr, hf_gtp_gsn_ipv6, tvb, offset + 3, 16, ENC_NA));
6439 proto_tree_add_item(ext_tree_gsn_addr, hf_gtp_gsn_address_information_element_length, tvb, offset + 1, 2, ENC_BIG_ENDIAN);
6447 proto_item_set_hidden(proto_tree_add_item(ext_tree_gsn_addr, hf_gtp_gsn_ipv6, tvb, offset + 4, 16, ENC_NA));
6453 }
6459 }
6460 }
6462 }
6464 static int
6465 decode_gtp_gsn_addr(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args) {
6466 return decode_gtp_gsn_addr_common(tvb, offset, pinfo, tree, args, "GSN address", hf_gtp_gsn_ipv4, hf_gtp_gsn_ipv6);
6467 }
6469 static int
6470 decode_gtp_sgsn_addr_for_control_plane(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args)
6471 {
6473 "SGSN Address for control plane", hf_gtp_sgsn_address_for_control_plane_ipv4, hf_gtp_sgsn_address_for_control_plane_ipv6);
6474 }
6476 static int
6477 decode_gtp_sgsn_addr_for_user_plane(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args)
6478 {
6480 "SGSN Address for user traffic", hf_gtp_sgsn_address_for_user_traffic_ipv4, hf_gtp_sgsn_address_for_user_traffic_ipv6);
6481 }
6483 static int
6484 decode_gtp_ggsn_addr_for_control_plane(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args)
6485 {
6487 "GGSN Address for control plane", hf_gtp_ggsn_address_for_control_plane_ipv4, hf_gtp_ggsn_address_for_control_plane_ipv6);
6488 }
6490 static int
6491 decode_gtp_ggsn_addr_for_user_plane(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args)
6492 {
6494 "GGSN Address for user traffic", hf_gtp_ggsn_address_for_user_traffic_ipv4, hf_gtp_ggsn_address_for_user_traffic_ipv6);
6495 }
6497 /* GPRS: 9.60 v7.6.0, chapter 7.9.24
6498 * UMTS: 29.060 v4.0, chapter 7.7.33
6499 */
6500 static int
6501 decode_gtp_msisdn(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
6502 {
6523 }
6525 /* GPRS: not present
6526 * UMTS: 29.060 v4.0, chapter 7.7.34
6527 * 24.008 v4.2, chapter 10.5.6.5
6528 */
6529 static int
6530 decode_gtp_qos_umts(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
6531 {
6534 }
6536 /* GPRS: not present
6537 * UMTS: 29.060 v4.0, chapter 7.7.35
6538 */
6539 static int
6540 decode_gtp_auth_qui(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
6541 {
6550 ext_tree = proto_tree_add_subtree(tree, tvb, offset, length + 1, ett_gtp_quint, NULL, "Quintuplet");
6551 offset++;
6560 offset++;
6569 offset++;
6574 }
6576 /* GPRS: not present
6577 * UMTS: 29.060 v4.0, chapter 7.7.36
6578 * 24.008 v4.2, chapter 10.5.6.12
6579 */
6580 static int
6581 decode_gtp_tft(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
6582 {
6588 ext_tree_tft = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_tft, NULL, "Traffic flow template");
6591 /* The detailed coding of Traffic Flow Template
6592 * Description is specified in 3GPP TS 24.008 [5] ,
6593 * clause 10.5.6.12, beginning with octet 3..
6594 * Use the decoding in packet-gsm_a_gm.c
6595 */
6599 }
6601 /* GPRS: not present
6602 * UMTS: 3GPP TS 29.060 version 10.4.0 Release 10, chapter 7.7.37
6603 * Type = 138 (Decimal)
6604 * 25.413(RANAP) TargetID
6605 * There are several CRs to this IE make sure to check with a recent spec if dissection is questioned.
6606 */
6607 static int
6608 decode_gtp_target_id(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
6609 {
6617 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_TARGET_ID], NULL, "Target Identification");
6623 }
6625 /* Quote from specification:
6626 * The Target Identification information element contains the identification of a target RNC. Octets 4-n shall contain a
6627 * non-transparent copy of the corresponding IEs (see subclause 7.7.2) and be encoded as specified in Figure 51 below.
6628 * The "Target RNC-ID" part of the "Target ID" parameter is specified in 3GPP TS 25.413 [7].
6629 * NOTE 1: The ASN.1 parameter "Target ID" is forwarded non-transparently in order to maintain backward compatibility.
6630 * NOTE 2: The preamble of the "Target RNC-ID" (numerical value of e.g. 0x20) however shall not be included in
6631 * octets 4-n. Also the optional "iE-Extensions" parameter shall not be included into the GTP IE.
6632 */
6633 /* Octet 4-6 MCC + MNC */
6635 /* Patch for systems still not following NOTE 2 */
6636 proto_tree_add_expert_format(ext_tree, pinfo, &ei_gtp_undecoded, tvb, offset, 1, "Not Compliant with 3GPP TS 29.060 7.7.37: The preamble of the \"Target RNC-ID\" (numerical value of e.g. 0x20) however shall not be included in octets 4-n.");
6640 /* Following Standards */
6642 }
6645 /* Octet 7-8 LAC */
6648 /* Octet 9 RAC */
6650 offset++;
6651 /* Octet 10-11 RNC-ID*/
6654 /* If the optional Extended RNC-ID is not included, then the length variable 'n' = 8 and the overall length of the IE is 11
6655 * octets. Otherwise, 'n' = 10 and the overall length of the IE is 13 octets
6656 */
6659 }
6662 }
6665 /* GPRS: not present
6666 * UMTS: 29.060 v4.0, chapter 7.7.38
6667 */
6668 static int
6669 decode_gtp_utran_cont(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
6670 {
6679 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_UTRAN_CONT], NULL, "UTRAN transparent Container");
6687 }
6691 sub_tree = proto_tree_add_subtree(ext_tree, tvb, offset, length, ett_gtp_utran_cont, NULL, "Source RNC to Target RNC Transparent Container");
6696 sub_tree = proto_tree_add_subtree(ext_tree, tvb, offset, length, ett_gtp_utran_cont, NULL, "Target RNC to Source RNC Transparent Container");
6702 }
6706 }
6709 /* GPRS: not present
6710 * UMTS: 29.060 v4.0, chapter 7.7.39
6711 */
6712 static int
6713 decode_gtp_rab_setup(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
6714 {
6722 ext_tree_rab_setup = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_rab_setup, NULL, "Radio Access Bearer Setup Information");
6724 proto_tree_add_item(ext_tree_rab_setup, hf_gtp_rab_setup_length, tvb, offset + 1, 2, ENC_BIG_ENDIAN);
6742 }
6743 }
6746 }
6749 /* GPRS: not present
6750 * UMTS: 29.060 v4.0, chapter 7.7.40
6751 */
6752 static int
6753 decode_gtp_hdr_list(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
6754 {
6762 ext_tree_hdr_list = proto_tree_add_subtree(tree, tvb, offset, 2 + length, ett_gtp_hdr_list, NULL,
6770 proto_tree_add_uint_format(ext_tree_hdr_list, hf_gtp_ext_hdr_type, tvb, offset + 2 + i, 1, hdr, "No. %u --> Extension Header Type value : %s (0x%02x)", i + 1,
6772 }
6775 }
6777 /* GPRS: not present
6778 * UMTS: 29.060 v4.0, chapter 7.7.41
6779 * TODO: find TriggerID description
6780 */
6781 static int
6782 decode_gtp_trigger_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
6783 {
6789 ti = proto_tree_add_uint_format(tree, hf_gtp_ext_length, tvb, offset, 2, length, "%s length : %u",
6795 }
6797 /* GPRS: not present
6798 * UMTS: 29.060 v4.0, chapter 7.7.42
6799 * TODO: find OMC-ID description
6800 */
6801 static int
6802 decode_gtp_omc_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
6803 {
6809 ti = proto_tree_add_uint_format(tree, hf_gtp_ext_length, tvb, offset, 2, length, "%s length : %u",
6815 }
6817 /* GPRS: 9.60 v7.6.0, chapter 7.9.25
6818 * UMTS: 29.060 v6.11.0, chapter 7.7.44 Charging Gateway Address
6819 */
6820 static int
6821 decode_gtp_chrg_addr(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
6822 {
6830 ext_tree_chrg_addr = proto_tree_add_subtree_format(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_CHRG_ADDR], &te,
6848 }
6851 }
6853 /* GPRS: ?
6854 * UMTS: 29.060 V9.4.0, chapter 7.7.43 RAN Transparent Container
6855 * The information in the value part of the RAN Transparent Container IE contains all information elements (starting with
6856 * and including the BSSGP "PDU Type") in either of the RAN INFORMATION, RAN INFORMATION REQUEST,
6857 * RAN INFORMATION ACK or RAN INFORMATION ERROR messages respectively as specified in 3GPP TS 48.018
6858 */
6859 static int
6860 decode_gtp_ran_tr_cont(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
6861 {
6868 ext_tree = proto_tree_add_subtree_format(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_RAN_TR_CONT], NULL,
6871 offset++;
6877 #if 0
6879 #endif
6881 }
6885 }
6887 /* GPRS: ?
6888 * UMTS: 29.060 v6.11.0, chapter 7.7.45 PDP Context Prioritization
6889 */
6890 static int
6891 decode_gtp_pdp_cont_prio(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
6892 {
6898 ext_tree = proto_tree_add_subtree_format(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_PDP_CONT_PRIO], NULL,
6903 }
6905 offset++;
6908 /* TODO add decoding of data */
6913 }
6915 /* GPRS: ?
6916 * UMTS: 29.060 v6.11.0, chapter 7.7.45A Additional RAB Setup Information
6917 */
6918 static int
6919 decode_gtp_add_rab_setup_inf(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
6920 {
6926 ext_tree = proto_tree_add_subtree_format(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_ADD_RAB_SETUP_INF], NULL,
6929 offset++;
6937 offset++;
6942 /* RNC IP address IPv4*/
6945 /* RNC IP address IPv6*/
6947 }
6952 }
6955 /* GPRS: ?
6956 * UMTS: 29.060 v6.11.0, chapter 7.7.47 SGSN Number
6957 */
6958 static int
6959 decode_gtp_sgsn_no(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
6960 {
6967 ext_tree = proto_tree_add_subtree_format(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_SGSN_NO], NULL,
6971 offset++;
6980 }
6982 /* GPRS: ?
6983 * UMTS: 3GPP TS 29.060 version 7.8.0 Release 7, chapter 7.7.48 Common Flags
6984 */
6985 static int
6986 decode_gtp_common_flgs(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
6987 {
6993 ext_tree = proto_tree_add_subtree_format(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_COMMON_FLGS], NULL,
6996 offset++;
6999 /* Dual Address Bearer Flag */
7000 proto_tree_add_item(ext_tree, hf_gtp_cmn_flg_dual_addr_bearer_flg, tvb, offset, 1, ENC_BIG_ENDIAN);
7001 /* Upgrade QoS Supported */
7003 /* NRSN bit field */
7005 /* No QoS negotiation */
7007 /* MBMS Counting Information bi */
7009 /* RAN Procedures Ready */
7011 /* MBMS Service Type */
7013 /* Prohibit Payload Compression */
7018 }
7020 /* GPRS: ?
7021 * UMTS: 29.060 v6.11.0, chapter 7.7.49
7022 */
7023 static int
7024 decode_gtp_apn_res(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
7025 {
7031 ext_tree_apn_res = proto_tree_add_subtree_format(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_APN_RES], NULL,
7034 offset++;
7038 /* Restriction Type value */
7040 proto_tree_add_expert_format(tree, pinfo, &ei_gtp_ext_length_mal, tvb, 0, length, "Wrong length indicated. Expected 1, got %u", length);
7042 }
7044 proto_tree_add_item(ext_tree_apn_res, hf_gtp_ext_apn_res, tvb, offset, length, ENC_BIG_ENDIAN);
7046 }
7048 /* GPRS: ?
7049 * UMTS: 29.060 v6.11.0, chapter 7.7.50 RAT Type
7050 * RAT Type
7051 * Type = 151 (Decimal)
7052 */
7054 static int
7055 decode_gtp_rat_type(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
7056 {
7063 ext_tree_rat_type = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_RAT_TYPE], &te,
7066 offset++;
7070 /* RAT Type value */
7072 proto_tree_add_expert_format(tree, pinfo, &ei_gtp_ext_length_mal, tvb, 0, length, "Wrong length indicated. Expected 1, got %u", length);
7074 }
7076 proto_tree_add_item(ext_tree_rat_type, hf_gtp_ext_rat_type, tvb, offset, length, ENC_BIG_ENDIAN);
7077 proto_item_append_text(te, ": %s", val_to_str_const(tvb_get_uint8(tvb,offset), gtp_ext_rat_type_vals, "Unknown"));
7080 }
7082 /*
7083 * 7.7.51 User Location Information
7084 */
7086 void
7087 dissect_gtp_uli(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
7088 {
7092 /* Geographic Location Type */
7096 offset++;
7100 /* Geographic Location field included and it holds the Cell Global
7101 * Identification (CGI) of where the user currently is registered.
7102 * CGI is defined in sub-clause 4.3.1 of 3GPP TS 23.003 [2].
7103 */
7108 /* The CI is of fixed length with 2 octets and it can be coded using a full hexadecimal representation */
7112 /* Geographic Location field included and it holds the Service
7113 * Area Identity (SAI) of where the user currently is registered.
7114 * SAI is defined in sub-clause 9.2.3.9 of 3GPP TS 25.413 [7].
7115 */
7123 /* Geographic Location field included and it holds the Routing
7124 * Area Identification (RAI) of where the user currently is
7125 * registered. RAI is defined in sub-clause 4.2 of 3GPP TS 23.003
7126 * [2].
7127 *
7128 * The routing area code consists of 2 octets and is found in octet
7129 * 10 and octet 11. Only the first octet (10) contains the RAC and
7130 * the second octet (11) is coded as "11111111".
7131 */
7141 }
7142 }
7144 static int
7145 decode_gtp_usr_loc_inf(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
7146 {
7152 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_USR_LOC_INF], NULL,
7155 offset++;
7162 }
7170 };
7172 /* GPRS: ?
7173 * UMTS: 29.060 v6.11.0, chapter 7.7.52
7174 * MS Time Zone
7175 * Type = 153 (Decimal)
7176 * The ' MS Time Zone' IE is used to indicate the offset between universal time and local time
7177 * in steps of 15 minutes of where the MS currently resides. The 'Time Zone' field uses the same
7178 * format as the 'Time Zone' IE in 3GPP TS 24.008 (10.5.3.8)
7179 * its value shall be set as defined in 3GPP TS 22.042
7180 */
7181 static int
7182 decode_gtp_ms_time_zone(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7183 {
7192 ext_tree = proto_tree_add_subtree_format(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MS_TIME_ZONE], &te,
7195 offset++;
7199 /* 3GPP TS 23.040 version 6.6.0 Release 6
7200 * 9.2.3.11 TP-Service-Centre-Time-Stamp (TP-SCTS)
7201 * :
7202 * The Time Zone indicates the difference, expressed in quarters of an hour,
7203 * between the local time and GMT. In the first of the two semi-octets,
7204 * the first bit (bit 3 of the seventh octet of the TP-Service-Centre-Time-Stamp field)
7205 * represents the algebraic sign of this difference (0: positive, 1: negative).
7206 */
7212 proto_tree_add_uint_format_value(ext_tree, hf_gtp_timezone, tvb, offset, 1, data, "GMT %c %d hours %d minutes", sign, data / 4, data % 4 * 15);
7214 offset++;
7220 }
7222 /* GPRS: ?
7223 * UMTS: 29.060 v6.11.0, chapter 7.7.53
7224 * International Mobile Equipment Identity (and Software Version) (IMEI(SV))
7225 * Type = 154 (Decimal)
7226 */
7227 static int
7228 decode_gtp_imeisv(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
7229 {
7238 ext_imeisv = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_IMEISV], &te,
7241 offset++;
7245 /* IMEI(SV)
7246 * The structure of the IMEI and IMEISV are defined in sub-clause 6.2 of 3GPP TS 23.003 [2].
7247 * The 'IMEI(SV)' field shall contain the IMEISV if it is available. If only the IMEI is available,
7248 * then the IMEI shall be placed in the IMEI(SV) field and the last semi-octet of octet 11 shall be
7249 * set to '1111'. Both IMEI and IMEISV are BCD encoded.
7250 */
7252 proto_tree_add_item_ret_display_string(ext_imeisv, hf_gtp_ext_imeisv, next_tvb, 0, -1, ENC_BCD_DIGITS_0_9|ENC_LITTLE_ENDIAN, pinfo->pool, &digit_str);
7256 }
7258 /* GPRS: ?
7259 * UMTS: 29.060 v6.11.0, chapter 7.7.54
7260 * CAMEL Charging Information Container
7261 * Type = 155 (Decimal)
7262 */
7263 static int
7264 decode_gtp_camel_chg_inf_con(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7265 {
7271 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_CAMEL_CHG_INF_CON], NULL,
7274 offset++;
7277 dissect_gprscdr_CAMELInformationPDP_PDU(tvb_new_subset_length(tvb, offset, length), pinfo, ext_tree, NULL);
7281 }
7283 /* GPRS: ?
7284 * UMTS: 29.060 v6.11.0, chapter 7.7.55
7285 * MBMS UE Context
7286 */
7287 static int
7288 decode_gtp_mbms_ue_ctx(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7289 {
7297 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MBMS_UE_CTX], NULL,
7300 offset++;
7304 offset++;
7309 proto_tree_add_uint_format_value(ext_tree, hf_gtp_enh_nsapi, tvb, offset, 1, enh_nsapi, "Reserved");
7312 }
7313 offset++;
7315 offset++;
7316 proto_tree_add_item_ret_uint(ext_tree, hf_gtp_pdp_type, tvb, offset, 1, ENC_BIG_ENDIAN, &pdp_type_num);
7317 offset++;
7318 proto_tree_add_item_ret_uint(ext_tree, hf_gtp_pdp_address_length, tvb, offset, 1, ENC_BIG_ENDIAN, &pdp_addr_len);
7319 offset++;
7330 }
7332 }
7333 proto_tree_add_item_ret_uint(ext_tree, hf_gtp_ggsn_address_length, tvb, offset, 1, ENC_BIG_ENDIAN, &ggsn_addr_len);
7334 offset++;
7338 proto_tree_add_item(ext_tree, hf_gtp_ggsn_address_for_control_plane_ipv4, tvb, offset, 4, ENC_BIG_ENDIAN);
7341 proto_tree_add_item(ext_tree, hf_gtp_ggsn_address_for_control_plane_ipv6, tvb, offset, 16, ENC_NA);
7344 /* XXX: Expert info? */
7346 }
7349 proto_tree_add_item_ret_uint(ext_tree, hf_gtp_apn_length, tvb, offset, 1, ENC_BIG_ENDIAN, &apn_len);
7350 offset++;
7353 /*
7354 * The Transaction Identifier is the 4 or 12 bit Transaction Identifier used in the 3GPP TS 24.008 [5] Session Management
7355 * messages which control this PDP Context. If the length of the Transaction Identifier is 4 bit, the second octet shall be
7356 * set to all zeros. The encoding is defined in 3GPP TS 24.007 [3]. The latest Transaction Identifier sent from SGSN to
7357 * MS is stored in the MBMS context IE.
7358 * NOTE: Bit 5-8 of the first octet in the encoding defined in 3GPP TS 24.007 [3] is mapped into bit 1-4 of the first
7359 * octet in this field.
7360 */
7366 }
7368 /* GPRS: ?
7369 * UMTS: 3GPP TS 29.060 version 7.8.0 Release 7, chapter 7.7.56
7370 * Temporary Mobile Group Identity (TMGI)
7371 * The Temporary Mobile Group Identity (TMGI) information element contains
7372 * a TMGI allocated by the BM-SC. It is coded as in the value part defined
7373 * in 3GPP T S 24.008 [5] (i.e. the IEI and octet length indicator are not included).
7374 */
7376 static int
7377 decode_gtp_tmgi(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
7378 {
7386 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_TMGI], NULL,
7389 offset++;
7400 }
7402 /* GPRS: ?
7403 * UMTS: 29.060 v6.11.0, chapter 7.7.57
7404 * RIM Routing Address
7405 */
7406 static int
7407 decode_gtp_rim_ra(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
7408 {
7415 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_RIM_RA], NULL,
7418 offset++;
7421 /* To dissect the Address the Routing Address discriminator must be known */
7422 /*
7423 * Octets 4-n are coded according to 3GPP TS 48.018 [20] 11.3.77 RIM Routing Information IE octets 4-n.
7424 */
7443 }
7444 }
7448 }
7450 /* GPRS: ?
7451 * UMTS: 29.060 v6.11.0, chapter 7.7.58
7452 * MBMS Protocol Configuration Options
7453 */
7454 static int
7455 decode_gtp_mbms_prot_conf_opt(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7456 {
7463 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MBMS_PROT_CONF_OPT], NULL,
7466 offset++;
7469 /* The MBMS Protocol Configuration Options contains protocol options
7470 * associated with an MBMS context, that may be necessary to transfer
7471 * between the GGSN and the MS. The content and the coding of the MBMS
7472 * Protocol Configuration Options are defined in octets 3-z of the MBMS
7473 * Protocol Configuration Options in 3GPP TS 24.008 [5].
7474 */
7480 }
7482 /* GPRS: ?
7483 * UMTS: 3GPP TS 29.060 version 7.8.0 Release 7, chapter 7.7.59
7484 * MBMS Session Duration
7485 */
7486 /* Used for Diameter */
7487 static int
7488 dissect_gtp_mbms_ses_dur(tvbuff_t * tvb, packet_info * pinfo _U_, proto_tree * tree, void *data _U_)
7489 {
7498 }
7500 static int
7501 decode_gtp_mbms_ses_dur(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7502 {
7508 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MBMS_SES_DUR], NULL,
7511 offset++;
7514 /* The MBMS Session Duration is defined in 3GPP TS 23.246 [26].
7515 * The MBMS Session Duration information element indicates the estimated
7516 * session duration of the MBMS service data transmission if available.
7517 * The payload shall be encoded as per the MBMS-Session-Duration AVP defined
7518 * in 3GPP TS 29.061 [27], excluding the AVP Header fields
7519 * (as defined in IETF RFC 3588 [36], section 4.1).
7520 */
7521 /* The MBMS-Session-Duration AVP (AVP code 904) is of type OctetString
7522 * with a length of three octets and indicates the estimated session duration
7523 * (MBMS Service data transmission). Bits 0 to 16 (17 bits) express seconds, for which the
7524 * maximum allowed value is 86400 seconds. Bits 17 to 23 (7 bits) express days,
7525 * for which the maximum allowed value is 18 days. For the whole session duration the seconds
7526 * and days are added together and the maximum session duration is 19 days.
7527 */
7533 }
7535 /* GPRS: ?
7536 * UMTS: 3GPP TS 29.060 version 7.8.0 Release 7, chapter 7.7.60
7537 * MBMS Service Area
7538 */
7539 static int
7540 dissect_gtp_3gpp_mbms_service_area(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void *data _U_) {
7546 /* The MBMS Service Area is defined in 3GPP TS 23.246 [26].
7547 * The MBMS Service Area information element indicates the area over
7548 * which the Multimedia Broadcast/Multicast Service is to be distributed.
7549 * The payload shall be encoded as per the MBMS-Service-Area AVP defined
7550 * in 3GPP TS 29.061 [27], excluding the AVP Header fields (as defined in
7551 * IETF RFC 3588 [36], section 4.1).
7552 */
7553 /* Number N of MBMS service area codes coded as:
7554 * 1 binary value is '00000000'
7555 * ... ...
7556 * 256 binary value is '11111111'
7557 */
7560 offset++;
7561 /* A consecutive list of N MBMS service area codes
7562 * The MBMS Service Area Identity and its semantics are defined in 3GPP TS 23.003
7563 * The length of an MBMS service area code is 2 octets.
7564 */
7568 }
7571 }
7573 static int
7574 decode_gtp_mbms_sa(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
7575 {
7582 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MBMS_SA], NULL,
7585 offset++;
7593 }
7595 /* GPRS: ?
7596 * UMTS: 29.060 v6.11.0, chapter 7.7.61
7597 * Source RNC PDCP context info
7598 */
7599 static int
7600 decode_gtp_src_rnc_pdp_ctx_inf(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7601 {
7607 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_SRC_RNC_PDP_CTX_INF], NULL,
7610 offset++;
7614 sub_tree = proto_tree_add_subtree(ext_tree, tvb, offset, length, ett_gtp_rrc_cont, NULL, "Source RNC to Target RNC Transparent Container");
7618 }
7620 /* GPRS: ?
7621 * UMTS: 29.060 v6.11.0, chapter 7.7.62
7622 * Additional Trace Info
7623 */
7633 };
7639 };
7641 static int
7642 decode_gtp_add_trs_inf(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7643 {
7651 NULL
7652 };
7658 NULL
7659 };
7662 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_ADD_TRS_INF], NULL,
7665 offset++;
7672 proto_tree_add_bitmask(ext_tree, tvb, offset, hf_gtp_trace_triggers_ggsn, ett_gtp_trace_triggers_ggsn, trigger_flags, ENC_BIG_ENDIAN);
7673 offset++;
7675 offset++;
7676 proto_tree_add_bitmask(ext_tree, tvb, offset, hf_gtp_trace_loi_ggsn, ett_gtp_trace_loi_ggsn, loi_flags, ENC_BIG_ENDIAN);
7677 offset++;
7682 }
7684 /* GPRS: ?
7685 * UMTS: 29.060 v6.11.0, chapter 7.7.63
7686 * Hop Counter
7687 */
7688 static int
7689 decode_gtp_hop_count(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7690 {
7696 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_HOP_COUNT], NULL,
7699 offset++;
7706 }
7708 /* GPRS: ?
7709 * UMTS: 29.060 v6.11.0, chapter 7.7.64
7710 * Selected PLMN ID
7711 */
7712 static int
7713 decode_gtp_sel_plmn_id(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
7714 {
7720 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MBMS_SES_ID], NULL,
7723 offset++;
7730 }
7732 /* GPRS: ?
7733 * UMTS: 29.060 v6.11.0, chapter 7.7.65
7734 * MBMS Session Identifier
7735 */
7736 static int
7737 decode_gtp_mbms_ses_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7738 {
7744 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MBMS_SES_ID], NULL, val_to_str_ext_const(GTP_EXT_MBMS_SES_ID, >p_val_ext, "Unknown"));
7746 offset++;
7749 /* TODO add decoding of data */
7754 }
7756 /* GPRS: ?
7757 * UMTS: 29.060 v6.11.0, chapter 7.7.66
7758 * MBMS 2G/3G Indicator
7759 */
7765 };
7767 static int
7768 decode_gtp_mbms_2g_3g_ind(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7769 {
7775 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MBMS_2G_3G_IND], NULL,
7778 offset++;
7781 /* MBMS 2G/3G Indicator */
7786 }
7788 /* GPRS: ?
7789 * UMTS: 29.060 v6.11.0, chapter 7.7.67
7790 * Enhanced NSAPI
7791 */
7792 static int
7793 decode_gtp_enh_nsapi(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7794 {
7801 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_ENH_NSAPI], NULL, val_to_str_ext_const(GTP_EXT_ENH_NSAPI, >pv1_val_ext, "Unknown"));
7803 offset++;
7808 proto_tree_add_uint_format_value(ext_tree, hf_gtp_enh_nsapi, tvb, offset, 1, enh_nsapi, "Reserved");
7811 }
7815 }
7817 /* GPRS: ?
7818 * UMTS: 29.060 v6.11.0, chapter 7.7.68
7819 * Additional MBMS Trace Info
7820 */
7821 static int
7822 decode_gtp_add_mbms_trs_inf(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7823 {
7830 NULL
7831 };
7835 NULL
7836 };
7839 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_ADD_MBMS_TRS_INF], NULL,
7842 offset++;
7845 /* XXX: There is clearly an error in TS 29.060 V17.1.0 and earlier.
7846 * In Figure 7.7.68.1 the octet column has a gap and is not aligned,
7847 * octets 7-8 should be for the Trace Recording Session Reference, other
7848 * values should be moved up a row, and there should be a value for
7849 * the Trace Activity Control as octet 12, making the IE length 9,
7850 * as with 7.7.62 Additional Trace Info.
7851 * Unfortunately the mistake is carried over into the the length field
7852 * elsewhere in the spec, such as in Table 37.
7853 */
7858 proto_tree_add_bitmask(ext_tree, tvb, offset, hf_gtp_trace_triggers_bm_sc, ett_gtp_trace_triggers_bm_sc, trigger_flags, ENC_BIG_ENDIAN);
7859 offset++;
7861 offset++;
7862 proto_tree_add_bitmask(ext_tree, tvb, offset, hf_gtp_trace_loi_bm_sc, ett_gtp_trace_loi_bm_sc, loi_flags, ENC_BIG_ENDIAN);
7864 offset++;
7866 }
7870 }
7872 /* GPRS: ?
7873 * UMTS: 29.060 v6.11.0, chapter 7.7.69
7874 * MBMS Session Identity Repetition Number
7875 */
7876 static int
7877 decode_gtp_mbms_ses_id_rep_no(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7878 {
7884 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MBMS_SES_ID_REP_NO], NULL,
7887 offset++;
7890 /* TODO add decoding of data */
7895 }
7897 /* GPRS: ?
7898 * UMTS: 3GPP TS 29.060 version 7.8.0 Release 7
7899 * MBMS Time To Data Transfer
7900 */
7901 /* Used for Diameter */
7902 static int
7903 dissect_gtp_mbms_time_to_data_tr(tvbuff_t * tvb, packet_info * pinfo _U_, proto_tree * tree, void *data _U_)
7904 {
7914 }
7916 static int
7917 decode_gtp_mbms_time_to_data_tr(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7918 {
7925 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MBMS_TIME_TO_DATA_TR], NULL,
7928 offset++;
7931 /* TODO add decoding of data
7932 * The MBMS Time To Data Transfer is defined in 3GPP TS 23.246 [26].
7933 * The MBMS Time To Data Transfer information element contains a
7934 * MBMS Time To Data Transfer allocated by the BM-SC.
7935 * The payload shall be encoded as per the MBMS-Time-To-Data-Transfer AVP
7936 * defined in 3GPP TS 29.061 [27], excluding the AVP Header fields
7937 * (as defined in IETF RFC 3588 [36], section 4.1).
7938 */
7939 /* The coding is specified as per the Time to MBMS Data Transfer Value Part Coding
7940 * of the Time to MBMS Data Transfer IE in 3GPP TS 48.018
7941 * Bits
7942 * 8 7 6 5 4 3 2 1
7943 * 0 0 0 0 0 0 0 0 1s
7944 * 0 0 0 0 0 0 0 1 2s
7945 * 0 0 0 0 0 0 1 0 3s
7946 * :
7947 * 1 1 1 1 1 1 1 1 256s
7948 */
7954 }
7956 /* GPRS: ?
7957 * UMTS: 29.060 v6.11.0, chapter 7.7.71
7958 * PS Handover Request Context
7959 */
7960 static int
7961 decode_gtp_ps_ho_req_ctx(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7962 {
7968 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_PS_HO_REQ_CTX], NULL,
7971 offset++;
7974 /* TODO add decoding of data */
7979 }
7981 /* GPRS: ?
7982 * UMTS: 29.060 v6.11.0, chapter 7.7.72
7983 * BSS Container
7984 */
7985 static int
7986 decode_gtp_bss_cont(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
7987 {
7993 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_BSS_CONT], NULL,
7996 offset++;
8002 sub_tree = proto_tree_add_subtree(ext_tree, tvb, offset, length, ett_gtp_bss_cont, NULL, "Source BSS to Target BSS Transparent Container");
8006 sub_tree = proto_tree_add_subtree(ext_tree, tvb, offset, length, ett_gtp_bss_cont, NULL, "Target BSS to Source BSS Transparent Container");
8011 }
8012 /*
8013 * The content of this container is defined in 3GPP TS 48.018
8014 */
8018 }
8020 /* GPRS: ?
8021 * UMTS: 29.060 v6.11.0, chapter 7.7.73
8022 * Cell Identification
8023 */
8028 };
8030 static int
8031 decode_gtp_cell_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8032 {
8039 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_CELL_ID], NULL,
8042 offset++;
8046 /*
8047 * for PS handover from A/Gb mode, the identification of a target cell (Cell ID 1) and the identification of the
8048 * source cell (Cell ID 2) as defined in 3GPP TS 48.018 [20].
8049 *
8050 * for PS handover from Iu mode, the identification of a target cell (Cell ID 1)) and the identification of the
8051 * source RNC (RNC-ID) as defined in 3GPP TS 48.018
8052 *
8053 * for PS handover from S1 mode, the identification of a target cell (Target Cell ID) as defined in 3GPP TS 48.018.
8054 * Octet 12 shall be set to "Source Cell ID" and octets 13-20 shall be encoded as all zero.
8055 *
8056 * 3GPP TS 48.018 defines Target and Source Cell ID to use the Cell
8057 * Identifier IE, encoded as 6 octets of the value part of the RAI IE
8058 * followed by 2 octets of the value of the Cell Identity IE, both defined
8059 * in 3GPP TS 24.008. The 3GPP TS 48.018 RNC-ID IE is similar, with the 6
8060 * octet RAI as in 3GPP TS 24.008 followed by two octets of the RNC-ID.
8061 * (Or Extended RNC-ID, but the RNC-ID is presented in network byte order
8062 * with the most significant bits of octet 9 set to "0000", so there is
8063 * no need to distinguish be RNC-ID and Extended RNC-ID.)
8064 */
8073 proto_tree_add_item_ret_uint(ext_tree, hf_gtp_source_type, tvb, offset, 1, ENC_NA, &source_type);
8074 offset++;
8097 }
8101 }
8103 /* GPRS: ?
8104 * UMTS: 29.060 v6.11.0, chapter 7.7.74
8105 * PDU Numbers
8106 */
8107 static int
8108 decode_gtp_pdu_no(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8109 {
8115 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_PDU_NO], NULL,
8118 offset++;
8123 offset++;
8129 /* The Send N-PDU Number is used only when acknowledged peer-to-peer LLC
8130 * operation is used for the PDP context. Send N-PDU Number is the N-PDU
8131 * number to be assigned by SNDCP to the next down link N-PDU received from
8132 * the GGSN.
8133 *
8134 * The Receive N-PDU Number is used only when acknowledged peer-to-peer LLC
8135 * operation is used for the PDP context. The Receive N-PDU Number is the
8136 * N-PDU number expected by SNDCP from the next up link N-PDU to be
8137 * received from the MS.
8138 *
8139 * XXX: For some reason, 2 octets are reserved for each the Send and
8140 * Receive N-PDU numbers, even though an N-PDU number in acknowledged
8141 * mode only has values 0-255 (see 3GPP TS 44.065) and is in a one
8142 * octet field in the PDP Context IE (7.7.29). Assume, in the lack
8143 * of other guidance, that the first octet will be zero and the value
8144 * will be in the second octet.
8145 * Cf. 7.7.51 ULI, where there is an explicit note in TS 29.060 that only
8146 * the first octet contains the RAC and the second octet is filler.
8147 */
8154 }
8156 /* GPRS: ?
8157 * UMTS: 29.060 v6.11.0, chapter 7.7.75
8158 * BSSGP Cause
8159 */
8160 static int
8161 decode_gtp_bssgp_cause(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8162 {
8168 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_BSSGP_CAUSE], NULL,
8171 offset++;
8175 /*
8176 * The BSSGP Cause information element contains the cause as defined in 3GPP TS 48.018
8177 */
8182 }
8184 /*
8185 * Required MBMS bearer capabilities 7.7.76
8186 */
8187 static int
8188 decode_gtp_mbms_bearer_cap(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8189 {
8194 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_REQ_MBMS_BEARER_CAP], NULL,
8197 offset++;
8201 #endif
8202 /* The payload shall be encoded as per the
8203 * Required-MBMS-Bearer-Capabilities AVP defined in 3GPP TS 29.061 [27],
8204 * excluding the AVP Header fields (as defined in IETF RFC 3588 [36], section 4.1).
8205 */
8206 /* TODO Add decoding (call Diameter dissector???) */
8208 }
8210 /*
8211 * RIM Routing Address Discriminator 7.7.77
8212 */
8219 };
8221 static int
8222 decode_gtp_rim_ra_disc(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
8223 {
8231 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_RIM_ROUTING_ADDR_DISC], NULL,
8234 offset++;
8237 /* Octet 4 bits 4 - 1 is coded according to 3GPP TS 48.018 [20]
8238 * RIM Routing Information IE octet 3 bits 4 - 1.
8239 * Bits 8 - 5 are coded "0000".
8240 */
8241 proto_tree_add_item_ret_uint(ext_tree, hf_gtp_bssgp_ra_discriminator, tvb, offset, 1, ENC_BIG_ENDIAN, &val);
8246 }
8247 /*
8248 * List of set-up PFCs 7.7.78
8249 */
8250 static int
8251 decode_gtp_lst_set_up_pfc(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8252 {
8258 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_LIST_OF_SETUP_PFCS], NULL,
8261 offset++;
8265 sub_tree = proto_tree_add_subtree(ext_tree, tvb, offset, length, ett_gtp_lst_set_up_pfc, NULL, "List of set-up PFCs");
8270 }
8271 /*
8272 * PS Handover XID Parameters 7.7.79
8273 */
8274 static int
8275 decode_gtp_ps_handover_xid(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
8276 {
8285 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_PS_HANDOVER_XIP_PAR], NULL,
8288 offset++;
8294 offset++;
8298 offset++;
8303 else
8308 }
8310 /*
8311 * MS Info Change Reporting Action 7.7.80
8312 */
8313 static int
8314 decode_gtp_ms_inf_chg_rep_act(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8315 {
8321 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MS_INF_CHG_REP_ACT], NULL,
8324 offset++;
8332 }
8333 /*
8334 * Direct Tunnel Flags 7.7.81
8335 */
8336 static int
8337 decode_gtp_direct_tnl_flg(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8338 {
8344 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_DIRECT_TUNNEL_FLGS], NULL,
8347 offset++;
8354 offset++;
8358 }
8363 }
8364 /*
8365 * Correlation-ID 7.7.82
8366 */
8367 static int
8368 decode_gtp_corrl_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8369 {
8375 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_CORRELATION_ID], NULL,
8378 offset++;
8386 }
8387 /*
8388 * Bearer Control Mode 7.7.83
8389 * version 10.0.0
8390 */
8395 };
8397 static int
8398 decode_gtp_bearer_cntrl_mod(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8399 {
8405 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_BEARER_CONTROL_MODE], NULL,
8410 offset++;
8418 }
8420 /*
8421 * 7.7.84 MBMS Flow Identifier
8422 */
8423 static int
8424 decode_gtp_mbms_flow_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8425 {
8430 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MBMS_FLOW_ID], NULL,
8434 offset++;
8438 /* 4-n MBMS Flow Identifier */
8443 }
8445 /*
8446 * 7.7.85 MBMS IP Multicast Distribution
8447 */
8449 static int
8450 decode_gtp_mbms_ip_mcast_dist(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8451 {
8456 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MBMS_IP_MCAST_DIST], NULL,
8460 offset++;
8467 }
8469 /*
8470 * 7.7.86 MBMS Distribution Acknowledgement
8471 */
8472 /* Table 7.7.86.1: Distribution Indication values */
8479 };
8480 static int
8481 decode_gtp_mbms_dist_ack(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8482 {
8487 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MBMS_DIST_ACK], NULL,
8491 offset++;
8495 /* Distribution Indication values */
8499 }
8501 /*
8502 * 7.7.87 Reliable INTER RAT HANDOVER INFO
8503 */
8504 static int
8505 decode_gtp_reliable_irat_ho_inf(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8506 {
8511 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_RELIABLE_IRAT_HO_INF], NULL,
8515 offset++;
8522 }
8524 /*
8525 * 7.7.88 RFSP Index
8526 */
8527 static int
8528 decode_gtp_rfsp_index(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8529 {
8534 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_RFSP_INDEX], NULL,
8538 offset++;
8545 }
8546 /*
8547 * 7.7.89 PDP Type
8548 */
8549 /*
8550 * 7.7.90 Fully Qualified Domain Name (FQDN)
8551 */
8552 static int
8553 decode_gtp_fqdn(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8554 {
8561 ext_tree = proto_tree_add_subtree(tree, tvb, offset, length + 3, ett_gtp_ies[GTP_EXT_FQDN], NULL,
8569 }
8571 /*
8572 * 7.7.91 Evolved Allocation/Retention Priority I
8573 */
8574 static int
8575 decode_gtp_evolved_allc_rtn_p1(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8576 {
8582 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_EVO_ALLO_RETE_P1], NULL,
8586 offset++;
8597 }
8599 /*
8600 * 7.7.92 Evolved Allocation/Retention Priority II
8601 */
8602 static int
8603 decode_gtp_evolved_allc_rtn_p2(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8604 {
8610 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_EVO_ALLO_RETE_P2], NULL,
8614 offset++;
8619 offset++;
8628 }
8630 /*
8631 * 7.7.93 Extended Common Flags
8632 */
8633 static int
8634 decode_gtp_extended_common_flgs(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8635 {
8640 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_EXTENDED_COMMON_FLGS], NULL,
8644 offset++;
8655 proto_tree_add_item(ext_tree, hf_gtp_ext_comm_flags_unauthenticated_imsi, tvb, offset, 1, ENC_BIG_ENDIAN);
8656 offset++;
8660 }
8663 }
8665 /*
8666 * 7.7.94 User CSG Information (UCI)
8667 */
8675 };
8677 static int
8678 decode_gtp_uci(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8679 {
8684 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_UCI], NULL,
8688 offset++;
8698 /* Due to a specification oversight, the CMI values ... are reversed from
8699 * the values of the CSG-Membership-Indication AVP in 3GPP TS 32.299 [56].
8700 * Therefore, when CMI values are sent over the charging interface, the
8701 * values are encoded as specified in 3GPP TS 32.299 [56]. Furthermore,
8702 * the encoding is different between GTPv1 and GTPv2.
8703 */
8707 }
8709 /*
8710 * 7.7.95 CSG Information Reporting Action
8711 */
8713 static int
8714 decode_gtp_csg_inf_rep_act(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8715 {
8723 NULL
8724 };
8727 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_CSG_INF_REP_ACT], NULL,
8731 offset++;
8738 }
8739 /*
8740 * 7.7.96 CSG ID
8741 */
8743 static int
8744 decode_gtp_csg_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8745 {
8750 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_CSG_ID], NULL,
8754 offset++;
8761 }
8762 /*
8763 * 7.7.97 CSG Membership Indication (CMI)
8764 */
8765 static int
8766 decode_gtp_cmi(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8767 {
8772 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_CMI], NULL,
8776 offset++;
8780 /* Due to a specification oversight, the CMI values ... are reversed from
8781 * the values of the CSG-Membership-Indication AVP in 3GPP TS 32.299 [56].
8782 * Therefore, when CMI values are sent over the charging interface, the
8783 * values are encoded as specified in 3GPP TS 32.299 [56].
8784 */
8788 }
8789 /*
8790 * 7.7.98 APN Aggregate Maximum Bit Rate (APN-AMBR)
8791 */
8792 static int
8793 decode_gtp_apn_ambr(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8794 {
8799 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_RELIABLE_IRAT_HO_INF], NULL,
8803 offset++;
8807 /* APN Aggregate Maximum Bit Rate (APN-AMBR) is defined in clause 9.9.4.2 of 3GPP TS 24.301 [42], but shall be
8808 * formatted as shown in Figure 7.7.98-1 as Unsigned32 binary integer values in kbps (1000 bits per second).
8809 */
8810 /* 4 to 7 APN-AMBR for Uplink */
8813 /* 8 to 11 APN-AMBR for Downlink */
8817 }
8818 /*
8819 * 7.7.99 UE Network Capability
8820 */
8821 static int
8822 decode_gtp_ue_network_cap(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
8823 {
8828 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_UE_NETWORK_CAP], NULL,
8831 offset++;
8838 }
8839 /*
8840 * 7.7.100 UE-AMBR
8841 */
8843 static int
8844 decode_gtp_ue_ambr(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8845 {
8850 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_UE_AMBR], NULL,
8854 offset++;
8858 /* 4 to 7 Subscribed UE-AMBR for Uplink */
8861 /* 8 to 11 Subscribed UE-AMBR for Downlink */
8865 /* Authorized UE-AMBR for Uplink and Downlink fields are present in the IE only if the sender has their valid values
8866 * available. Otherwise, the fields from m to (n+3) shall not be present.
8867 */
8869 /* m to (m+3) Authorized UE-AMBR for Uplink */
8873 /* (m+4) to (n+3) Authorized UE-AMBR for Downlink */
8876 }
8880 }
8883 }
8885 /*
8886 * 7.7.101 APN-AMBR with NSAPI
8887 */
8888 static int
8889 decode_gtp_apn_ambr_with_nsapi(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8890 {
8895 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_APN_AMBR_WITH_NSAPI], NULL,
8899 offset++;
8904 offset++;
8906 /* 5 to 8 Authorized APN-AMBR for Uplink */
8910 /* 9 to12 Authorized APN-AMBR for Downlink */
8914 }
8915 /*
8916 * 7.7.102 GGSN Back-Off Time
8917 */
8918 /* Table 7.7.102.1: GGSN Back-Off Time information element */
8927 };
8928 static int
8929 decode_gtp_ggsn_back_off_time(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8930 {
8935 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_GGSN_BACK_OFF_TIME], NULL,
8939 offset++;
8943 /* 4 Timer unit Timer value */
8944 proto_tree_add_item(ext_tree, hf_gtp_ext_ggsn_back_off_time_units, tvb, offset, 1, ENC_BIG_ENDIAN);
8948 }
8950 /*
8951 * 7.7.103 Signalling Priority Indication
8952 */
8955 "MS is not configured for NAS signalling low priority"
8956 };
8958 static int
8959 decode_gtp_sig_pri_ind(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8960 {
8965 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_SIG_PRI_IND], NULL,
8969 offset++;
8976 }
8977 /*
8978 * 7.7.104 Signalling Priority Indication with NSAPI
8979 */
8981 static int
8982 decode_gtp_sig_pri_ind_w_nsapi(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
8983 {
8988 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_SIG_PRI_IND_W_NSAPI], NULL,
8992 offset++;
8997 offset++;
9002 }
9003 /*
9004 * 7.7.105 Higher bitrates than 16 Mbps flag
9005 */
9010 };
9012 static int
9013 decode_gtp_higher_br_16mb_flg(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9014 {
9019 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_HIGHER_BR_16MB_FLG], NULL,
9023 offset++;
9027 /* Higher bitrates than 16 Mbps flag */
9031 }
9032 /*
9033 * 7.7.106 Max MBR/APN-AMBR
9034 */
9036 static int
9037 decode_gtp_max_mbr_apn_ambr(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9038 {
9045 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MAX_MBR_APN_AMBR], NULL,
9049 offset++;
9053 /* Max MBR/APN-AMBR for uplink */
9055 proto_tree_add_uint_format_value(ext_tree, hf_gtp_max_mbr_apn_ambr_ul, tvb, offset, 4, max_ul, "%u %s",
9061 /* Max MBR/APN-AMBR for downlink */
9063 proto_tree_add_uint_format_value(ext_tree, hf_gtp_max_mbr_apn_ambr_dl, tvb, offset, 4, max_dl, "%u %s",
9068 }
9069 /*
9070 * 7.7.107 Additional MM context for SRVCC
9071 */
9073 static int
9074 decode_gtp_add_mm_ctx_srvcc(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
9075 {
9081 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_ADD_MM_CTX_SRVCC], NULL,
9085 offset++;
9089 /* Length of the Mobile Station Classmark 2 */
9090 proto_tree_add_item_ret_uint(ext_tree, hf_gtp_ms_cm_2_len, tvb, offset, 1, ENC_BIG_ENDIAN, &inf_len);
9091 offset++;
9094 }
9096 /* Length of the Mobile Station Classmark 3 */
9097 proto_tree_add_item_ret_uint(ext_tree, hf_gtp_ms_cm_3_len, tvb, offset, 1, ENC_BIG_ENDIAN, &inf_len);
9098 offset++;
9101 }
9103 /* Length of the Supported Codec List */
9104 proto_tree_add_item_ret_uint(ext_tree, hf_gtp_sup_codec_lst_len, tvb, offset, 1, ENC_BIG_ENDIAN, &inf_len);
9105 offset++;
9108 }
9111 }
9113 /*
9114 * 7.7.108 Additional flags for SRVCC
9115 */
9117 static int
9118 decode_gtp_add_flgs_srvcc(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9119 {
9124 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_ADD_FLGS_SRVCC], NULL,
9128 offset++;
9132 /* 4 Spare ICS */
9136 }
9137 /*
9138 * 7.7.109 STN-SR
9139 */
9140 static int
9141 decode_gtp_stn_sr(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9142 {
9147 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_STN_SR], NULL,
9151 offset++;
9158 }
9160 /*
9161 * 7.7.110 C-MSISDN
9162 */
9164 static int
9165 decode_gtp_c_msisdn(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9166 {
9171 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_C_MSISDN], NULL,
9175 offset++;
9182 }
9183 /*
9184 * 7.7.111 Extended RANAP Cause
9185 */
9186 static int
9187 decode_gtp_ext_ranap_cause(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
9188 {
9194 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_EXT_RANAP_CAUSE], NULL,
9198 offset++;
9207 }
9209 /*
9210 * 7.7.112 eNodeB ID
9211 */
9217 };
9219 static int
9220 decode_gtp_ext_enodeb_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9221 {
9227 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_ENODEB_ID], NULL,
9231 offset++;
9235 /* eNodeB Type */
9236 proto_tree_add_item_ret_uint(ext_tree, hf_gtp_ext_enb_type, tvb, offset, 1, ENC_BIG_ENDIAN, &enb_type);
9237 offset++;
9244 /* Macro eNodeB ID */
9250 /* Home eNodeB ID */
9258 }
9261 }
9263 /*
9264 * 7.7.113 Selection Mode with NSAPI
9265 */
9273 };
9275 static int
9276 decode_gtp_ext_sel_mode_w_nsapi(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9277 {
9282 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_SEL_MODE_W_NSAPI], NULL,
9286 offset++;
9291 offset++;
9297 }
9298 /*
9299 * 7.7.114 ULI Timestamp
9300 */
9301 static int
9302 decode_gtp_ext_uli_timestamp(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9303 {
9308 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_ULI_TIMESTAMP], NULL,
9312 offset++;
9316 proto_tree_add_item(ext_tree, hf_gtp_uli_timestamp, tvb, offset, 4, ENC_TIME_SECS_NTP|ENC_BIG_ENDIAN);
9319 }
9321 /*
9322 * 7.7.115 Local Home Network ID (LHN-ID) with NSAPI
9323 */
9324 static int
9325 decode_gtp_ext_lhn_id_w_sapi(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9326 {
9331 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_LHN_ID_W_SAPI], NULL,
9335 offset++;
9344 }
9345 /*
9346 * 7.7.116 CN Operator Selection Entity
9347 */
9354 };
9356 static int
9357 decode_gtp_ext_cn_op_sel_entity(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9358 {
9363 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_CN_OP_SEL_ENTITY], NULL,
9367 offset++;
9372 offset++;
9376 }
9378 }
9380 /*
9381 * 7.7.117 UE Usage Type
9382 */
9383 static int
9384 decode_gtp_ue_usage_type(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9385 {
9390 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_UE_USAGE_TYPE], NULL,
9394 offset++;
9403 }
9406 }
9408 /*
9409 * 7.7.118 Extended Common Flags II
9410 */
9411 static int
9412 decode_gtp_extended_common_flgs_II(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9413 {
9418 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_EXT_COMMON_FLGS_II], NULL,
9422 offset++;
9428 proto_tree_add_item(ext_tree, hf_gtp_ext_comm_flags_II_pmtsmi, tvb, offset, 1, ENC_BIG_ENDIAN);
9431 offset++;
9435 }
9438 }
9440 /*
9441 * 7.7.119 Node Identifier
9442 */
9443 static int
9444 decode_gtp_ext_node_id(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9445 {
9451 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_NODE_IDENTIFIER], NULL,
9455 offset++;
9459 /* The Node Name and Node Realm are Diameter Identities, which are
9460 * specified by RFC 6733 to be in ASCII for compatibility with DNS.
9461 */
9462 proto_tree_add_item_ret_length(ext_tree, hf_gtp_node_name, tvb, offset, 1, ENC_ASCII | ENC_NA, &item_len);
9464 proto_tree_add_item_ret_length(ext_tree, hf_gtp_node_realm, tvb, offset, 1, ENC_ASCII | ENC_NA, &item_len);
9467 }
9469 /*
9470 * 7.7.120 CIoT Optimizations Support Indication
9471 */
9472 static int
9473 decode_gtp_ciot_opt_sup_ind(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9474 {
9479 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_CIOT_OPT_SUP_IND], NULL,
9483 offset++;
9490 offset++;
9494 }
9497 }
9499 /*
9500 * 7.7.121 SCEF PDN Connection
9501 */
9502 static int
9503 decode_gtp_scef_pdn_conn(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
9504 {
9510 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_SCEF_PDN_CONNECTION], NULL,
9514 offset++;
9518 proto_tree_add_item_ret_uint(ext_tree, hf_gtp_apn_length, tvb, offset, 1, ENC_NA, &apn_length);
9524 offset++;
9526 proto_tree_add_item_ret_uint(ext_tree, hf_gtp_scef_id_length, tvb, offset, 2, ENC_BIG_ENDIAN, &scef_id_length);
9533 proto_tree_add_expert(ext_tree, pinfo, &ei_gtp_undecoded, tvb, offset, length - (4 + apn_length + scef_id_length));
9534 }
9537 }
9538 /*
9539 * 7.7.122 IOV_updates counter
9540 */
9541 static int
9542 decode_gtp_iov_updates_counter(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9543 {
9548 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_IOV_UPDATES_COUNTER], NULL,
9552 offset++;
9557 offset++;
9561 }
9564 }
9565 /*
9566 * 7.7.123 Mapped UE Usage Type
9567 */
9568 static int
9569 decode_gtp_mapped_ue_usage_type(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9570 {
9575 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_MAPPED_UE_USAGE_TYPE], NULL,
9579 offset++;
9588 }
9591 }
9592 /*
9593 * 7.7.124 UP Function Selection Indication Flags
9594 */
9595 static int
9596 decode_gtp_up_fun_sel_ind_flags(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9597 {
9602 ext_tree = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_ies[GTP_EXT_UP_FUN_SEL_IND_FLAGS], NULL,
9606 offset++;
9610 proto_tree_add_item(ext_tree, hf_gtp_up_fun_sel_ind_flags_dcnr, tvb, offset, 1, ENC_BIG_ENDIAN);
9611 proto_tree_add_item(ext_tree, hf_gtp_up_fun_sel_ind_flags_spare, tvb, offset, 1, ENC_BIG_ENDIAN);
9612 offset++;
9616 }
9619 }
9621 /* TS 32.295, chapter 6.2.4.5.4, page 30 */
9622 static int
9623 decode_gtp_rel_pack(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9624 {
9631 ext_tree_rel_pack = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_rel_pack, NULL,
9639 proto_tree_add_uint_format(ext_tree_rel_pack, hf_gtp_seq_num_released, tvb, offset + 3 + n, 2, number, "%u", number);
9642 }
9645 }
9647 /* GPRS: 12.15
9648 * UMTS: 33.015
9649 */
9650 static int
9651 decode_gtp_can_pack(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9652 {
9659 ext_tree_can_pack = proto_tree_add_subtree(tree, tvb, offset, 3 + length, ett_gtp_can_pack, NULL,
9667 proto_tree_add_uint_format(ext_tree_can_pack, hf_gtp_seq_num_canceled, tvb, offset + 3 + n, 2, number, "%u", number);
9669 }
9672 }
9674 /* CDRs dissector
9675 * 3GPP TS 32.295 version 9.0.0 Release 9
9676 */
9678 /* 3GPP TS 32.298 version 18.6.0, chapter 6.1, page 259 */
9685 };
9686 static int
9687 decode_gtp_data_req(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
9688 {
9699 offset++;
9707 }
9709 /* Octet 4 Number of Data Records */
9712 offset++;
9714 /* Octet 5 Data Record Format */
9716 fmt_item = proto_tree_add_item(ext_tree, hf_gtp_data_record_format, tvb, offset, 1, ENC_BIG_ENDIAN);
9717 offset++;
9718 /* The value range is 1-255 in decimal. The value '0' should not be used.
9719 * Only the values 1-10 and 51-255 can be used for standards purposes.
9720 * Values in the range of 11-50 are to be configured only by operators, and are not subject to standardization.
9721 */
9723 proto_item_append_text(fmt_item, " %s", val_to_str_const(format, gtp_cdr_fmt_vals, "Unknown"));
9724 /* Octet 6 -7 Data Record Format Version
9725 * 8 7 6 5 4 3 2 1
9726 * 6 Application Identifier Release Identifier
9727 * 7 Version Identifier
9728 *
9729 * New with Release 15 and higher:
9730 * 8 Release Identifier Extension
9731 * The Release Identifier indicates the TS release up to and including
9732 * 15. The Release Identifier Extension indicates TS releases above 15,
9733 * in this case the Release Identifier has a value of '0' (decimal)
9734 */
9742 }
9743 /* The second octet (#7 in Data Record Packet IE) identifies the version of the TS used to encode the CDR,
9744 * i.e. its value corresponds to the second digit of the version number of the document [51]
9745 * (as shown on the cover sheet), plus '1'.
9746 * E.g. for version 3.4.0, the Version Identifier would be "5".
9747 * In circumstances where the second digit is an alphabetical character, (e.g. 3.b.0), the corresponding ASCII value shall
9748 * be taken, e.g. the Version Identifier would be "66" (ASCII(b)).
9749 */
9752 /* XXX We don't handle ASCCI version */
9754 ver_tree = proto_tree_add_subtree_format(ext_tree, tvb, offset, (rel_id_zero || rel_id == 15) ? 3 : 2, ett_gtp_cdr_ver, NULL,
9758 offset++;
9760 offset++;
9762 /* The Release Identifier indicates the TS release up to and including 15.
9763 * The Release Identifier Extension indicates TS releases above 15,
9764 * in this case the Release Identifier has a value of '0' (decimal).
9765 */
9767 offset++;
9770 }
9771 }
9781 /* XXX this is for release 6, may not work for higher releases */
9787 }
9789 /* Do we have a dissector registering for this standardized encodings data format? */
9791 }
9794 }
9798 /* Proprietary CDR format */
9800 }
9806 /* Do we have a dissector registering for this proprietary data format? */
9807 dissector_try_uint_with_data(gtp_cdr_fmt_dissector_table, format, next_tvb, pinfo, tree, false, &no);
9808 }
9811 }
9813 /* TS 32.295 */
9814 static int
9815 decode_gtp_data_resp(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args)
9816 {
9835 proto_tree_add_item_ret_uint(ext_tree_data_resp, hf_gtp_requests_responded, tvb, offset + 3 + n, 2, ENC_BIG_ENDIAN, &request_responded_seq_no);
9838 /* Unlike GTP, sequence number inside GTP' header of response is not used to confirm request.
9839 * Instead of this "Data Record Transfer Response" message includes IE "Requests Responded"
9840 * with sequence numbers of requests to confirm.
9841 */
9845 }
9846 gcrp = gtp_match_response(tvb, pinfo, tree, request_responded_seq_no, GTP_MSG_DATA_TRANSF_RESP, gtp_info, cause_aux);
9847 /*pass packet to tap for response time reporting*/
9850 }
9851 }
9855 }
9857 /* GPRS: 12.15
9858 * UMTS: 33.015
9859 */
9860 static int
9861 decode_gtp_node_addr(tvbuff_t * tvb, int offset, packet_info * pinfo _U_, proto_tree * tree, session_args_t * args _U_)
9862 {
9873 proto_tree_add_item(ext_tree_node_addr, hf_gtp_node_address_length, tvb, offset + 1, 2, ENC_BIG_ENDIAN);
9887 }
9891 }
9893 /* GPRS: 9.60 v7.6.0, chapter 7.9.26
9894 * UMTS: 29.060 v4.0, chapter 7.7.46 Private Extension
9895 *
9896 */
9898 static int
9899 decode_gtp_priv_ext(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
9900 {
9910 offset++;
9922 if(!dissector_try_uint(gtp_priv_ext_dissector_table, ext_id, next_tvb, pinfo, ext_tree_priv_ext)){
9924 }
9925 }
9926 }
9929 }
9931 static int
9932 decode_gtp_unknown(tvbuff_t * tvb, int offset, packet_info * pinfo, proto_tree * tree, session_args_t * args _U_)
9933 {
9938 }
9940 static void
9941 track_gtp_session(tvbuff_t * tvb, packet_info * pinfo, proto_tree * tree, gtp_hdr_t * gtp_hdr, wmem_list_t *teid_list, wmem_list_t *ip_list, uint32_t last_teid, address last_ip)
9942 {
9946 /* GTP session */
9952 }
9953 }
9957 /* If the message does not have any session ID */
9960 /* If the message is not a CPDPCRES, CPDPCREQ, UPDPREQ, UPDPRES
9961 * then we remove its information from teid and ip lists
9962 * XXX: Wouldn't it be better not to insert this information
9963 * in the first place for other message types, instead of
9964 * inserting it and then immediately removing it?
9965 * At the very least, it would be faster to iterate through the
9966 * teid_list and ip_list and remove via keys rather than doing
9967 * removal through a reverse lookup.
9968 */
9969 if ((gtp_hdr->message != GTP_MSG_CREATE_PDP_RESP && gtp_hdr->message != GTP_MSG_CREATE_PDP_REQ && gtp_hdr->message != GTP_MSG_UPDATE_PDP_RESP
9971 /* If the lists are not empty*/
9974 }
9975 }
9978 /* If CPDPCREQ and not already in the list then we create a new session*/
9981 /* If this is an error indication then we have to check the session id that belongs to the message with the same data teid and ip */
9986 /* We add the corresponding session to the session list*/
9988 }
9989 }
9990 }
9992 /* We have to check if its teid == teid_cp and ip.dst == gsn_ipv4 from the lists, if that is the case then we have to assign
9993 the corresponding session ID */
9995 /* Then we have to set its session ID */
9998 /* We add the corresponding session to the list so that when a response came we can associate its session ID*/
10000 }
10001 }
10002 }
10003 }
10004 }
10005 }
10006 }
10008 static int
10011 {
10018 /* NRUP */
10022 /* Protocol subtree */
10027 proto_tree_add_item_ret_uint(nrup_ti, hf_nrup_pdu_type,tvb, offset, 1, ENC_BIG_ENDIAN, &pdu_type);
10031 {
10032 /* 5.5.2.1 */
10035 /* PDU Type (=0) Spare DL Discard Blocks DL Flush Report polling Octet 1*/
10037 proto_tree_add_item_ret_boolean(nrup_tree, hf_nrup_dl_discrd_blks, tvb, offset, 1, ENC_BIG_ENDIAN, &dl_disc_blk);
10038 proto_tree_add_item_ret_boolean(nrup_tree, hf_nrup_dl_flush, tvb, offset, 1, ENC_BIG_ENDIAN, &dl_flush);
10040 offset++;
10042 /* Spare Assistance Info. Report Polling Flag Retransmission flag*/
10044 proto_tree_add_item(nrup_tree, hf_nrup_request_out_of_seq_report, tvb, offset, 1, ENC_BIG_ENDIAN);
10045 proto_tree_add_item_ret_boolean(nrup_tree, hf_nrup_report_delivered, tvb, offset, 1, ENC_BIG_ENDIAN, &report_delivered);
10046 proto_tree_add_item(nrup_tree, hf_nrup_user_data_existence_flag, tvb, offset, 1, ENC_BIG_ENDIAN);
10047 proto_tree_add_item(nrup_tree, hf_nrup_ass_inf_rep_poll_flag, tvb, offset, 1, ENC_BIG_ENDIAN);
10049 offset++;
10051 /* NR-U Sequence NUmber */
10056 /* DL discard NR PDCP PDU SN */
10057 proto_tree_add_item(nrup_tree, hf_nrup_dl_disc_nr_pdcp_pdu_sn, tvb, offset, 3, ENC_BIG_ENDIAN);
10059 }
10060 /* Discarded blocks */
10062 /* DL discard Number of blocks */
10063 proto_tree_add_item_ret_uint(nrup_tree, hf_nrup_dl_disc_num_blks, tvb, offset, 1, ENC_BIG_ENDIAN, &dl_disc_num_blks);
10064 offset++;
10066 /* DL discard NR PDCP PDU SN start */
10067 proto_tree_add_item(nrup_tree, hf_nrup_dl_disc_nr_pdcp_pdu_sn_start, tvb, offset, 3, ENC_BIG_ENDIAN);
10070 /* Discarded Block size */
10072 offset++;
10073 dl_disc_num_blks--;
10074 }
10075 }
10078 /* DL report NR PDCP PDU SN */
10079 proto_tree_add_item(nrup_tree, hf_nrup_dl_report_nr_pdcp_pdu_sn, tvb, offset, 3, ENC_BIG_ENDIAN);
10081 }
10083 }
10086 {
10087 /* 5.5.2.2 */
10097 proto_tree_add_item_ret_boolean(nrup_tree, hf_nrup_high_tx_nr_pdcp_sn_ind ,tvb, offset,1, ENC_BIG_ENDIAN, &high_tx_nr_pdcp_sn_ind );
10098 proto_tree_add_item_ret_boolean(nrup_tree, hf_nrup_high_delivered_nr_pdcp_sn_ind ,tvb, offset,1, ENC_BIG_ENDIAN, &high_del_nr_pdcp_sn_ind );
10100 proto_tree_add_item_ret_boolean(nrup_tree, hf_nrup_lost_pkt_rpt,tvb, offset, 1, ENC_BIG_ENDIAN, &lost_packet_report);
10101 offset++;
10104 proto_tree_add_item(nrup_tree, hf_nrup_delivered_nr_pdcp_sn_range_ind ,tvb, offset,1, ENC_BIG_ENDIAN);
10105 proto_tree_add_item_ret_boolean(nrup_tree, hf_nrup_data_rate_ind,tvb, offset,1, ENC_BIG_ENDIAN, &data_rate_ind);
10106 proto_tree_add_item_ret_boolean(nrup_tree, hf_nrup_high_retx_nr_pdcp_sn_ind,tvb, offset,1, ENC_BIG_ENDIAN, &high_retx_nr_pdcp_sn_ind);
10107 proto_tree_add_item_ret_boolean(nrup_tree, hf_nrup_high_delivered_retx_nr_pdcp_sn_ind,tvb, offset,1, ENC_BIG_ENDIAN, &high_del_retx_nr_pdcp_sn_ind);
10108 proto_tree_add_item_ret_boolean(nrup_tree, hf_nrup_cause_rpt,tvb, offset,1, ENC_BIG_ENDIAN, &cause_rpt);
10109 offset++;
10111 proto_tree_add_item(nrup_tree, hf_nrup_desrd_buff_sz_data_radio_bearer,tvb, offset, 4, ENC_BIG_ENDIAN);
10117 }
10120 proto_tree_add_item_ret_uint(nrup_tree, hf_nrup_num_lost_nru_seq_num,tvb, offset, 1, ENC_BIG_ENDIAN, &lost_NR_U_SN_range);
10124 proto_tree_add_item(nrup_tree, hf_nrup_start_lost_nru_seq_num,tvb, offset, 3, ENC_BIG_ENDIAN);
10129 lost_NR_U_SN_range--;
10130 }
10131 }
10134 proto_tree_add_item(nrup_tree, hf_nrup_high_success_delivered_nr_pdcp_sn,tvb, offset, 3, ENC_BIG_ENDIAN);
10136 }
10141 }
10145 offset ++;
10146 }
10149 proto_tree_add_item(nrup_tree, hf_nrup_high_success_delivered_retx_nr_pdcp_sn,tvb, offset, 3, ENC_BIG_ENDIAN);
10151 }
10155 }
10158 }
10161 {
10162 /* 5.5.2.3 */
10169 /* Flags */
10170 proto_tree_add_item_ret_boolean(nrup_tree, hf_nrup_pdcp_duplication_ind, tvb, offset,1, ENC_BIG_ENDIAN, &pdcp_duplication_indication);
10171 proto_tree_add_item_ret_boolean(nrup_tree, hf_nrup_assistance_information_ind, tvb, offset,1, ENC_BIG_ENDIAN, &assistance_information_ind);
10172 proto_tree_add_item_ret_boolean(nrup_tree, hf_nrup_ul_delay_ind, tvb, offset,1, ENC_BIG_ENDIAN, &ul_delay_ind);
10173 proto_tree_add_item_ret_boolean(nrup_tree, hf_nrup_dl_delay_ind, tvb, offset,1, ENC_BIG_ENDIAN, &dl_delay_ind);
10174 offset++;
10178 offset++;
10180 /* Number of Assistance Information Fields */
10185 /* Number of assistance info fields */
10188 offset++;
10191 /* Assistance Information Type */
10194 offset++;
10195 /* Num octets in assistance info */
10198 offset++;
10199 /* Radio Quality Assistance info */
10203 }
10204 }
10206 /* UL Delay DU Result */
10210 }
10211 /* DL Delay DU Result */
10215 }
10217 }
10219 /* TODO: expert info error for unexpected PDU type? */
10221 }
10224 }
10226 /* TS 38.425 */
10227 static void
10228 addRANContParameter(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int offset, int length)
10229 {
10232 }
10234 static void
10235 dissect_gtp_tpdu_by_handle(dissector_handle_t handle, tvbuff_t * tvb, packet_info * pinfo, proto_tree * tree, int offset)
10236 {
10241 }
10243 static void
10244 dissect_gtp_tpdu_as_pdcp_lte_info(tvbuff_t * tvb, packet_info * pinfo, proto_tree * tree, gtp_hdr_t *gtp_hdr, int offset)
10245 {
10246 /* Check if we have info to call the PDCP dissector */
10252 /* Look for attached packet info! */
10253 p_pdcp_info = (struct pdcp_lte_info *)p_get_proto_data(wmem_file_scope(), pinfo, proto_pdcp_lte, 0);
10254 /* If we don't have the data, add it */
10257 /* Channel info is needed for RRC parsing */
10262 /*p_pdcp_info->BCCHTransport;*/
10264 /* Details of PDCP header */
10269 }
10273 /* RoHC settings */
10283 /* p_pdcp_info->is_retx;*/
10285 /* Used by heuristic dissector only */
10286 /*p_pdcp_info->pdu_length;*/
10288 }
10293 proto_tree_add_subtree(tree, tvb, offset, -1, ett_gtp_pdcp_no_conf, NULL, "[No PDCP-LTE Configuration data found]");
10295 }
10296 }
10298 static void
10299 dissect_gtp_tpsu_as_pdcp_nr_info(tvbuff_t * tvb, packet_info * pinfo, proto_tree * tree, gtp_hdr_t *gtp_hdr, int offset)
10300 {
10301 /*NR-U DUD or DDDS PDU
10302 * This is NR-U DUD/DDDS PDU. It contains PDCP
10303 * payload as per 3GPP TS 38.323
10304 */
10305 /* Check if we have info to call the PDCP dissector */
10314 /* Fill in pdcp_nr_info */
10317 /* Want to use same ueid as other PDCP config.. */
10319 /* Get this from table, may also be available from F1AP signalling... */
10322 /* Details of PDCP header */
10325 /* PDCP_NR_(U|D)L_sdap_hdr_PRESENT bitmask */
10331 }
10334 }
10335 /* Integrity MAC present? */
10338 /* RoHC settings */
10350 /* Used by heuristic dissector only */
10355 proto_tree_add_subtree(tree, tvb, offset, -1, ett_gtp_pdcp_no_conf, NULL, "[No PDCP-NR Configuration data found]");
10357 }
10358 }
10360 static int
10362 {
10383 /* Do we have enough bytes for the version and message type? */
10385 /* No - reject the packet. */
10387 }
10390 /* Version > 2; reject the packet */
10392 }
10395 /* Unknown message type; reject the packet */
10397 }
10399 /* Setting everything to 0, so that the TEID is 0 for GTP version 0
10400 * The magic number should perhaps be replaced.
10401 */
10404 /* Setting the TEID to -1 to say that the TEID is not valid for this packet */
10413 /* We create the auxiliary lists */
10416 }
10426 }
10438 }
10445 NULL
10446 };
10452 NULL
10453 };
10458 /* Octet 8 7 6 5 4 3 2 1
10459 * 1 Version | PT| Spare '1 1 1 '| ' 0/1 '
10460 */
10462 /* Bit 1 of octet 1 is not used in GTP' (except in v0), and it is marked '0'
10463 * in the GTP' header. It is in use in GTP' v0 and distinguishes the used header-length.
10464 * In the case of GTP' v0, this bit being marked one (1) indicates the usage of the 6
10465 * octets header. If the bit is set to '0' (usually the case) the 20-octet header is used.
10466 * For all other versions of GTP', this bit is not used and is set to '0'. However,
10467 * this does not suggest the use of the 20-octet header, rather a shorter 6-octet header.
10468 */
10475 }
10484 NULL
10485 };
10491 NULL
10492 };
10502 }
10503 }
10504 }
10505 offset++;
10508 /* Link direction is needed to properly dissect PCO */
10523 case GTP_MSG_FORW_RELOC_RESP: /* direction added for UTRAN Container & BSS Container decode */
10528 }
10529 col_set_str(pinfo->cinfo, COL_INFO, val_to_str_ext_const(gtp_hdr->message, >p_message_type_ext, "Unknown"));
10530 message_item = proto_tree_add_uint(gtp_tree, hf_gtp_message_type, tvb, offset, 1, gtp_hdr->message);
10531 offset++;
10533 proto_tree_add_item_ret_uint(gtp_tree, hf_gtp_length, tvb, 2, 2, ENC_BIG_ENDIAN, >p_hdr->length);
10536 /* We initialize the sequence number*/
10540 proto_tree_add_item_ret_uint(gtp_tree, hf_gtp_seq_number, tvb, offset, 2, ENC_BIG_ENDIAN, &seq_no);
10542 /* If GTP' version is 0 and bit 1 is 0 20 bytes header is used, dissect it */
10546 }
10553 proto_tree_add_item_ret_uint(gtp_tree, hf_gtp_seq_number, tvb, offset, 2, ENC_BIG_ENDIAN, &seq_no);
10556 proto_tree_add_item_ret_uint(gtp_tree, hf_gtp_flow_label, tvb, offset, 2, ENC_BIG_ENDIAN, &flow_label);
10576 /* Are sequence number/N-PDU Number/extension header present?
10577 See NOTE 5 of Figure 2 of 3GPP TS 29.060 version 4.3.0
10578 Release 4 - the Sequence Number, N-PDU Number, and
10579 Next Extension Header fields are present if any of
10580 GTP_E_MASK, GTP_S_MASK, or GTP_PN_MASK are set. */
10582 /* Those fields are only *interpreted* if the
10583 particular flag for the field is set. */
10586 proto_tree_add_item_ret_uint(gtp_tree, hf_gtp_seq_number, tvb, offset, 2, ENC_BIG_ENDIAN, &seq_no);
10587 }
10592 }
10593 offset++;
10597 hdr_ext_item = proto_tree_add_item_ret_uint(gtp_tree, hf_gtp_ext_hdr_next, tvb, offset, 1, ENC_NA, &next_hdr);
10598 offset++;
10599 /* Add each extension header found. */
10603 ext_hdr_len_item = proto_tree_add_item_ret_uint(ext_tree, hf_gtp_ext_hdr_length, tvb, offset, 1, ENC_NA, &ext_hdr_length);
10609 }
10610 offset++;
10611 proto_item_append_text(tf, " (%s)", val_to_str_const(next_hdr, next_extension_header_fieldvals, "Unknown"));
10616 /* UDP Port
10617 * 3GPP 29.281 v9.0.0, 5.2.2.1 UDP Port
10618 * "This extension header may be transmitted in
10619 * Error Indication messages to provide the UDP
10620 * Source Port of the G-PDU that triggered the
10621 * Error Indication. It is 4 octets long, and
10622 * therefore the Length field has value 1"
10623 */
10625 /* UDP Port of source */
10628 /* Bad length */
10629 expert_add_info_format(pinfo, ext_tree, &ei_gtp_ext_length_warn, "The length field for the UDP Port Extension header should be 1.");
10630 }
10634 /* RAN Container
10635 * 3GPP 29.281 v15.2.0, 5.2.2.4 RAN Container
10636 * This extension header may be transmitted in
10637 * a G-PDU over the X2 user plane interface
10638 * between the eNBs. The RAN Container has a
10639 * variable length and its content is specified
10640 * in 3GPP TS 36.425 [25]. A G-PDU message with
10641 * this extension header may be sent without a T-PDU.
10642 */
10643 proto_tree_add_item(ext_tree, hf_gtp_ext_hdr_ran_cont, tvb, offset, (4*ext_hdr_length)-1, ENC_NA);
10647 /* Long PDCP PDU Number
10648 * 3GPP 29.281 v15.2.0, 5.2.2.2A Long PDCP PDU Number
10649 * This extension header is used for direct X2 or
10650 * indirect S1 DL data forwarding during a Handover
10651 * procedure between two eNBs. The Long PDCP PDU number
10652 * extension header is 8 octets long, and therefore
10653 * the Length field has value 2.
10654 * The PDCP PDU number field of the Long PDCP PDU number
10655 * extension header has a maximum value which requires 18
10656 * bits (see 3GPP TS 36.323 [24]). Bit 2 of octet 2 is
10657 * the most significant bit and bit 1 of octet 4 is the
10658 * least significant bit, see Figure 5.2.2.2A-1. Bits 8 to
10659 * 3 of octet 2, and Bits 8 to 1 of octets 5 to 7 shall be
10660 * set to 0.
10661 * NOTE: A G-PDU which includes a PDCP PDU Number contains
10662 * either the extension header PDCP PDU Number or Long PDCP
10663 * PDU Number.
10664 */
10666 proto_tree_add_bits_item(ext_tree, hf_gtp_ext_hdr_spare_bits, tvb, offset<<3, 6, ENC_BIG_ENDIAN);
10670 expert_add_info_format(pinfo, ext_tree, &ei_gtp_ext_length_warn, "The length field for the Long PDCP SN Extension header should be 2.");
10671 }
10675 /* Xw RAN Container
10676 * 3GPP 29.281 v15.2.0, 5.2.2.5 Xw RAN Container
10677 * This extension header may be transmitted in a
10678 * G-PDU over the Xw user plane interface between
10679 * the eNB and the WLAN Termination (WT). The Xw
10680 * RAN Container has a variable length and its
10681 * content is specified in 3GPP TS 36.464 [27].
10682 * A G-PDU message with this extension header may
10683 * be sent without a T-PDU.
10684 */
10685 proto_tree_add_item(ext_tree, hf_gtp_ext_hdr_xw_ran_cont, tvb, offset, (4*ext_hdr_length)-1, ENC_NA);
10689 /* NR RAN Container
10690 * 3GPP 29.281 v15.2.0, 5.2.2.6 NR RAN Container
10691 * This extension header may be transmitted in a
10692 * G-PDU over the X2-U, Xn-U and F1-U user plane
10693 * interfaces, within NG-RAN and, for EN-DC, within
10694 * E-UTRAN. The NR RAN Container has a variable
10695 * length and its content is specified in 3GPP TS
10696 * 38.425 [30]. A G-PDU message with this extension
10697 * header may be sent without a T-PDU.
10698 */
10699 ran_cont_tree = proto_tree_add_subtree(ext_tree, tvb, offset, (ext_hdr_length * 4) - 1, ett_gtp_nr_ran_cont, NULL, "NR RAN Container");
10704 {
10705 /* PDU Session Container
10706 * 3GPP 29.281 v15.2.0, 5.2.2.7 PDU Session Container
10707 * This extension header may be transmitted in a G-PDU
10708 * over the N3 and N9 user plane interfaces, between
10709 * NG-RAN and UPF, or between two UPFs. The PDU Session
10710 * Container has a variable length and its content is
10711 * specified in 3GPP TS 38.415 [31].
10712 */
10718 NULL
10719 };
10725 NULL
10726 };
10731 NULL
10732 };
10736 NULL
10737 };
10742 NULL
10743 };
10753 NULL
10754 };
10758 NULL
10759 };
10766 pdu_ses_cont_tree = proto_tree_add_subtree(ext_tree, tvb, curr_offset, (ext_hdr_length * 4) - 1, ett_pdu_session_cont, NULL, "PDU Session Container");
10767 proto_tree_add_item_ret_uint(pdu_ses_cont_tree, hf_gtp_ext_hdr_pdu_ses_cont_pdu_type, tvb, curr_offset, 1, ENC_BIG_ENDIAN, &pdu_type);
10770 /* PDU Type: DL PDU SESSION INFORMATION (0) */
10771 /* PDU Type QMP SNP MSNP Spare */
10772 proto_tree_add_bitmask_list_ret_uint64(pdu_ses_cont_tree, tvb, curr_offset, 1, flags1_dl, ENC_BIG_ENDIAN, &flags1_val);
10773 curr_offset++;
10774 /* PPP RQI QoS Flow Identifier */
10775 proto_tree_add_bitmask_list_ret_uint64(pdu_ses_cont_tree, tvb, curr_offset, 1, flags2, ENC_BIG_ENDIAN, &flags2_val);
10776 curr_offset++;
10778 /* PPI Spare */
10780 curr_offset++;
10781 }
10783 proto_tree_add_item(pdu_ses_cont_tree, hf_gtp_ext_hdr_pdu_ses_cont_dl_send_time_stamp, tvb, curr_offset, 8, ENC_TIME_NTP|ENC_BIG_ENDIAN);
10785 }
10787 proto_tree_add_item(pdu_ses_cont_tree, hf_gtp_ext_hdr_pdu_ses_cont_dl_qfi_sn, tvb, curr_offset, 3, ENC_BIG_ENDIAN);
10789 }
10791 proto_tree_add_item(pdu_ses_cont_tree, hf_gtp_ext_hdr_pdu_ses_cont_dl_mbs_qfi_sn, tvb, curr_offset, 4, ENC_BIG_ENDIAN);
10792 //curr_offset += 4;
10793 }
10796 /* PDU Type: UL PDU SESSION INFORMATION (1)*/
10797 /* PDU Type QMP DL Delay Ind UL Delay Ind SNP */
10798 proto_tree_add_bitmask_list_ret_uint64(pdu_ses_cont_tree, tvb, curr_offset, 1, flags1_ul, ENC_BIG_ENDIAN, &flags1_val);
10799 curr_offset++;
10800 /* N3/N9 Delay ind New IE Flag QoS Flow Identifier */
10801 proto_tree_add_bitmask_list_ret_uint64(pdu_ses_cont_tree, tvb, curr_offset, 1, flags4, ENC_BIG_ENDIAN, &flags4_val);
10802 curr_offset++;
10804 proto_tree_add_item(pdu_ses_cont_tree, hf_gtp_ext_hdr_pdu_ses_cont_dl_send_time_stamp_repeat, tvb, curr_offset, 8, ENC_TIME_NTP|ENC_BIG_ENDIAN);
10806 proto_tree_add_item(pdu_ses_cont_tree, hf_gtp_ext_hdr_pdu_ses_cont_dl_recv_time_stamp, tvb, curr_offset, 8, ENC_TIME_NTP|ENC_BIG_ENDIAN);
10808 proto_tree_add_item(pdu_ses_cont_tree, hf_gtp_ext_hdr_pdu_ses_cont_ul_send_time_stamp, tvb, curr_offset, 8, ENC_TIME_NTP|ENC_BIG_ENDIAN);
10810 }
10812 proto_tree_add_item(pdu_ses_cont_tree, hf_gtp_ext_hdr_pdu_ses_cont_dl_delay_result, tvb, curr_offset, 4, ENC_BIG_ENDIAN);
10814 }
10816 proto_tree_add_item(pdu_ses_cont_tree, hf_gtp_ext_hdr_pdu_ses_cont_ul_delay_result, tvb, curr_offset, 4, ENC_BIG_ENDIAN);
10818 }
10820 proto_tree_add_item(pdu_ses_cont_tree, hf_gtp_ext_hdr_pdu_ses_cont_ul_qfi_sn, tvb, curr_offset, 3, ENC_BIG_ENDIAN);
10822 }
10824 proto_tree_add_item(pdu_ses_cont_tree, hf_gtp_ext_hdr_pdu_ses_cont_n3_n9_delay_result, tvb, curr_offset, 4, ENC_BIG_ENDIAN);
10826 }
10828 proto_tree_add_bitmask_list_ret_uint64(pdu_ses_cont_tree, tvb, curr_offset, 1, flags5, ENC_BIG_ENDIAN, &flags5_val);
10829 curr_offset++;
10832 //curr_offset++;
10833 }
10834 }
10837 proto_tree_add_expert(pdu_ses_cont_tree, pinfo, &ei_gtp_unknown_pdu_type, tvb, offset, (ext_hdr_length * 4) - 1);
10839 }
10840 }
10844 /* PDCP PDU
10845 * 3GPP 29.281 v9.0.0, 5.2.2.2 PDCP PDU Number
10846 *
10847 * "This extension header is transmitted, for
10848 * example in UTRAN, at SRNS relocation time,
10849 * to provide the PDCP sequence number of not
10850 * yet acknowledged N-PDUs. It is 4 octets long,
10851 * and therefore the Length field has value 1.
10852 *
10853 * When used during a handover procedure between
10854 * two eNBs at the X2 interface (direct DL data
10855 * forwarding) or via the S1 interface (indirect
10856 * DL data forwarding) in E-UTRAN, bit 8 of octet
10857 * 2 is spare and shall be set to zero.
10858 *
10859 * Wireshark Note: TS 29.060 does not define bit
10860 * 5-6 as spare, so no check is possible unless
10861 * a preference is used.
10862 */
10863 /* First byte is length (should be 1) */
10867 ext_item = proto_tree_add_item_ret_uint(ext_tree, hf_gtp_ext_hdr_pdcpsn, tvb, offset, 2, ENC_BIG_ENDIAN, &ext_hdr_pdcpsn);
10870 }
10872 expert_add_info_format(pinfo, ext_tree, &ei_gtp_ext_length_warn, "The length field for the PDCP SN Extension header should be 1.");
10873 }
10877 /* Suspend Request */
10881 /* Suspend Response */
10885 {
10887 gtp_hdr_ext_info_t gtp_hdr_ext_info;
10890 /* NOTE Type and length included in the call */
10892 dissector_try_uint_with_data(gtp_hdr_ext_dissector_table, next_hdr, ext_hdr_tvb, pinfo, ext_tree, false, >p_hdr_ext_info);
10894 }
10895 }
10897 hdr_ext_item = proto_tree_add_item_ret_uint(ext_tree, hf_gtp_ext_hdr_next, tvb, offset, 1, ENC_NA, &next_hdr);
10898 offset++;
10899 }
10901 offset++;
10902 }
10906 }
10907 }
10911 /* GTP' protocol version has different meaning rather GTP.
10912 * According to 3GPP TS 32.295:
10913 * - GTP' version 1 is the same as version 0 but has, in addendum, the duplicate CDR prevention
10914 * mechanism, introduced in GSM 12.15 version 7.2.1 (1999-07) of the GPRS charging specification.
10915 * - GTP' version 2 is the same as version 1, but the header is just 6 octets long
10916 *
10917 * Decode GTP' versions v1/v2 as v0.
10918 */
10921 }
10923 /* Dissect IEs */
10929 checked_field = check_field_presence_and_decoder(version, gtp_hdr->message, ext_hdr_val, &mandatory, &decoder);
10940 expert_add_info_format(pinfo, message_item, &ei_gtp_wrong_next_field, "[WARNING] wrong next field, should be: %s",
10943 }
10944 }
10952 }
10955 }
10958 /* We insert the lists inside the table*/
10960 }
10961 /* Use sequence number to track Req/Resp pairs except GTP' message "Data Record Transfer Response".
10962 * For "Data Record Transfer Response" sequence numbers are analysed inside decoder of TLV "Requests Responded".
10963 */
10968 }
10969 gcrp = gtp_match_response(tvb, pinfo, gtp_tree, seq_no, gtp_hdr->message, gtp_info, cause_aux);
10970 /*pass packet to tap for response time reporting*/
10973 }
10974 }
10975 }
10977 track_gtp_session(tvb, pinfo, gtp_tree, gtp_hdr, args->teid_list, args->ip_list, args->last_teid, args->last_ip);
10978 }
10986 if (dissector_try_heuristic(heur_subdissector_list, next_tvb, pinfo, tree, &hdtbl_entry, NULL)) {
10990 }
10992 }
11006 /* Call a custom dissector if available */
11012 }
11017 }
11018 }
11023 }
11025 static int
11028 {
11030 }
11032 static int
11035 {
11038 /*
11039 * Do we have enough data to check the first byte?
11040 */
11042 /* No. */
11044 }
11046 /*
11047 * If this is GTPv2-C call the gtpv2 dissector if present
11048 * Should this be moved to after the conversation stuff to retain that functionality for GTPv2 ???
11049 */
11052 /* Unknown version - reject the packet */
11054 }
11056 /* GTPv2-C 3GPP TS 29.274 */
11060 }
11061 }
11064 }
11066 // Very minimal heuristic dissector for ethernet that recognizes ethernet with a limited
11067 // set of protocols, optionally with a set of vlan tags.
11068 // This dissector is not implemented in the packet-eth.c file as it is too simplistic
11069 // for general purpose.
11070 static bool
11072 {
11078 }
11080 // skip both mac-addresses, no information to be gained from them
11087 {
11090 }
11094 }
11096 }
11098 {
11101 }
11104 }
11114 }
11117 }
11119 static void
11121 {
11123 }
11125 void
11127 {
11139 },
11144 },
11149 },
11154 },
11159 },
11164 },
11169 },
11174 },
11179 },
11184 },
11189 },
11194 },
11199 },
11204 },
11209 },
11214 },
11219 },
11224 },
11229 },
11234 },
11239 },
11244 },
11249 },
11254 },
11259 },
11264 },
11269 },
11275 },
11280 },
11285 },
11290 },
11295 },
11300 },
11305 },
11310 },
11315 },
11320 },
11325 },
11330 },
11335 },
11340 },
11345 },
11350 },
11355 },
11360 },
11365 },
11370 },
11375 },
11380 },
11385 },
11390 },
11395 },
11400 },
11405 },
11410 },
11415 },
11420 },
11425 },
11430 },
11436 },
11441 },
11446 },
11451 },
11456 },
11461 },
11466 },
11471 },
11476 },
11481 },
11486 },
11491 },
11496 },
11501 },
11506 },
11511 },
11516 },
11521 },
11526 },
11531 },
11536 },
11541 },
11546 },
11551 },
11556 },
11561 },
11566 },
11571 },
11576 },
11581 },
11586 },
11591 },
11596 },
11601 },
11606 },
11611 },
11616 },
11621 },
11626 },
11631 },
11636 },
11641 },
11646 },
11651 },
11656 },
11657 /* The SDU size and UL/DL bandwidth items take up one octet in the
11658 * frame, but are multiplied by various factors before being added
11659 * to the tree with proto_item_add_uint[_format_value].
11660 */
11665 },
11670 },
11675 },
11680 },
11684 NULL,
11685 HFILL}
11686 },
11691 },
11696 },
11701 },
11706 },
11711 },
11716 },
11721 },
11726 },
11731 },
11736 },
11741 },
11746 },
11751 },
11756 },
11761 },
11766 },
11771 },
11776 },
11781 },
11786 },
11791 },
11796 },
11801 },
11806 },
11811 },
11816 },
11821 },
11826 },
11831 },
11836 },
11841 },
11846 },
11851 },
11856 },
11861 },
11866 },
11871 },
11876 },
11881 },
11886 },
11891 },
11896 },
11901 },
11906 },
11911 },
11916 },
11921 },
11926 },
11931 },
11936 },
11941 },
11946 },
11951 },
11956 },
11961 },
11966 },
11971 },
11976 },
11981 },
11986 },
11991 },
11996 },
12001 },
12006 },
12011 },
12016 },
12021 },
12026 },
12031 },
12036 },
12041 },
12046 },
12051 },
12056 },
12061 },
12066 },
12071 },
12076 },
12081 },
12086 },
12091 },
12096 },
12101 },
12106 },
12111 },
12116 },
12121 },
12126 },
12131 },
12136 },
12141 },
12146 },
12151 },
12156 HFILL}
12157 },
12162 HFILL}
12163 },
12168 HFILL}
12169 },
12174 },
12179 },
12184 },
12189 },
12194 },
12199 },
12204 },
12209 },
12214 },
12219 },
12224 },
12229 },
12234 },
12239 },
12244 },
12249 },
12254 },
12259 },
12264 },
12269 },
12274 },
12279 },
12284 },
12289 },
12294 },
12299 },
12304 },
12310 },
12315 },
12320 },
12325 },
12330 },
12335 },
12340 },
12345 },
12350 },
12355 },
12360 },
12365 },
12370 },
12375 },
12380 },
12385 },
12390 },
12395 },
12400 },
12405 },
12410 },
12415 },
12420 },
12425 },
12430 },
12435 },
12440 },
12445 },
12450 },
12455 },
12460 },
12465 },
12470 },
12475 },
12480 },
12485 },
12490 },
12495 },
12500 },
12505 },
12510 },
12515 },
12520 },
12525 },
12530 },
12535 },
12540 },
12545 },
12550 },
12555 },
12560 },
12565 },
12570 },
12575 },
12580 },
12585 },
12590 },
12595 },
12600 },
12605 },
12610 { &hf_gtp_xres_length, { "XRES length", "gtp.xres_length", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12612 { &hf_gtp_quintuplet_ciphering_key, { "Quintuplet Ciphering Key", "gtp.quintuplet_ciphering_key", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12613 { &hf_gtp_quintuplet_integrity_key, { "Quintuplet Integrity Key", "gtp.quintuplet_integrity_key", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12614 { &hf_gtp_authentication_length, { "Authentication length", "gtp.authentication_length", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12616 { &hf_gtp_ciphering_key_ck, { "Ciphering key CK", "gtp.ciphering_key_ck", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12617 { &hf_gtp_integrity_key_ik, { "Integrity key IK", "gtp.integrity_key_ik", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12618 { &hf_gtp_quintuplets_length, { "Quintuplets length", "gtp.quintuplets_length", FT_UINT16, BASE_DEC_HEX, NULL, 0x0, NULL, HFILL }},
12619 { &hf_gtp_ciphering_key_kc, { "Ciphering key Kc", "gtp.ciphering_key_kc", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12620 { &hf_gtp_container_length, { "Container length", "gtp.container_length", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12621 { &hf_gtp_extended_end_user_address, { "Extended End User Address", "gtp.extended_end_user_address", FT_BOOLEAN, 8, TFS(&tfs_yes_no), 0x80, NULL, HFILL }},
12622 { &hf_gtp_vplmn_address_allowed, { "VPLMN address allowed", "gtp.vplmn_address_allowed", FT_BOOLEAN, 8, TFS(&tfs_yes_no), 0x40, NULL, HFILL }},
12623 { &hf_gtp_activity_status_indicator, { "Activity Status Indicator", "gtp.activity_status_indicator", FT_BOOLEAN, 8, TFS(&tfs_yes_no), 0x20, NULL, HFILL }},
12624 { &hf_gtp_reordering_required, { "Reordering required", "gtp.reordering_required", FT_BOOLEAN, 8, TFS(&tfs_yes_no), 0x10, NULL, HFILL }},
12625 { &hf_gtp_pdp_cntxt_sapi, { "SAPI", "gtp.pdp_cntxt.sapi", FT_UINT8, BASE_DEC, NULL, 0x0F, NULL, HFILL }},
12626 { &hf_gtp_sequence_number_down, { "Sequence number down", "gtp.sequence_number_down", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12627 { &hf_gtp_sequence_number_up, { "Sequence number up", "gtp.sequence_number_up", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12628 { &hf_gtp_send_n_pdu_number, { "Send N-PDU number", "gtp.send_n_pdu_number", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12629 { &hf_gtp_receive_n_pdu_number, { "Receive N-PDU number", "gtp.receive_n_pdu_number", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12630 { &hf_gtp_uplink_flow_label_signalling, { "Uplink flow label signalling", "gtp.uplink_flow_label_signalling", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12631 { &hf_gtp_pdp_context_identifier, { "PDP context identifier", "gtp.pdp_context_identifier", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12632 { &hf_gtp_pdp_organization, { "PDP organization", "gtp.pdp_organization", FT_UINT8, BASE_DEC, VALS(pdp_org_type), 0x0F, NULL, HFILL }},
12633 { &hf_gtp_pdp_type, { "PDP type", "gtp.pdp_type", FT_UINT8, BASE_DEC, VALS(pdp_type), 0x0, NULL, HFILL }},
12634 { &hf_gtp_pdp_address_length, { "PDP address length", "gtp.pdp_address_length", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12635 { &hf_gtp_pdp_address_ipv4, { "PDP address", "gtp.pdp_address.ipv4", FT_IPv4, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12636 { &hf_gtp_pdp_address_ipv6, { "PDP address", "gtp.pdp_address.ipv6", FT_IPv6, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12637 { &hf_gtp_sgsn_address_for_control_plane_ipv4, { "SGSN Address for control plane", "gtp.sgsn_address_for_control_plane.ipv4", FT_IPv4, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12638 { &hf_gtp_sgsn_address_for_control_plane_ipv6, { "SGSN Address for control plane", "gtp.sgsn_address_for_control_plane.ipv6", FT_IPv6, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12639 { &hf_gtp_sgsn_address_for_user_traffic_ipv4, { "SGSN Address for User Traffic", "gtp.sgsn_address_for_user_traffic.ipv4", FT_IPv4, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12640 { &hf_gtp_sgsn_address_for_user_traffic_ipv6, { "SGSN Address for User Traffic", "gtp.sgsn_address_for_user_traffic.ipv6", FT_IPv6, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12641 { &hf_gtp_ggsn_address_length, { "GGSN address length", "gtp.ggsn_address_length", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12642 { &hf_gtp_ggsn_address_for_control_plane_ipv4, { "GGSN Address for control plane", "gtp.ggsn_address_for_control_plane.ipv4", FT_IPv4, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12643 { &hf_gtp_ggsn_address_for_control_plane_ipv6, { "GGSN Address for control plane", "gtp.ggsn_address_for_control_plane.ipv6", FT_IPv6, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12644 { &hf_gtp_ggsn_address_for_user_traffic_ipv4, { "GGSN Address for User Traffic", "gtp.ggsn_address_for_user_traffic.ipv4", FT_IPv4, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12645 { &hf_gtp_ggsn_address_for_user_traffic_ipv6, { "GGSN Address for User Traffic", "gtp.ggsn_address_for_user_traffic.ipv6", FT_IPv6, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12646 { &hf_gtp_apn_length, { "APN length", "gtp.apn_length", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12647 { &hf_gtp_transaction_identifier, { "Transaction identifier", "gtp.transaction_identifier", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12648 { &hf_gtp_gsn_address_length, { "GSN address length", "gtp.gsn_address_length", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12649 { &hf_gtp_gsn_address_information_element_length, { "GSN address Information Element length", "gtp.gsn_address_information_element_length", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12650 { &hf_gtp_tft_length, { "TFT length", "gtp.tft_length", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12651 { &hf_gtp_rab_setup_length, { "RAB setup length", "gtp.rab_setup_length", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12652 { &hf_gtp_timezone, { "Timezone", "gtp.timezone", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12653 { &hf_gtp_timezone_dst, { "DST", "gtp.timezone_dst", FT_UINT8, BASE_DEC, VALS(daylight_saving_time_vals), 0x03, NULL, HFILL }},
12654 { &hf_gtp_rfsp_index, { "RFSP Index", "gtp.rfsp_index", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12655 { &hf_gtp_fqdn_length, { "FQDN length", "gtp.fqdn_length", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12656 { &hf_gtp_number_of_data_records, { "Number of data records", "gtp.number_of_data_records", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12657 { &hf_gtp_data_record_format, { "Data record format", "gtp.data_record_format", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12658 { &hf_gtp_node_address_length, { "Node address length", "gtp.node_address_length", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12659 { &hf_gtp_seq_num_released, { "Sequence number released", "gtp.seq_num_released", FT_UINT16, BASE_HEX_DEC, NULL, 0x0, NULL, HFILL }},
12660 { &hf_gtp_seq_num_canceled, { "Sequence number cancelled", "gtp.seq_num_canceled", FT_UINT16, BASE_HEX_DEC, NULL, 0x0, NULL, HFILL }},
12661 { &hf_gtp_requests_responded, { "Requests responded", "gtp.requests_responded", FT_UINT16, BASE_HEX_DEC, NULL, 0x0, NULL, HFILL }},
12662 { &hf_gtp_hyphen_separator, { "Hyphen separator: -", "gtp.hyphen_separator", FT_NONE, BASE_NONE, NULL, 0x0, NULL, HFILL }},
12663 { &hf_gtp_ms_network_cap_content_len, { "Length of MS network capability contents", "gtp.ms_network_cap_content_len", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12665 { &hf_gtp_iei_mobile_id_len, { "Length", "gtp.iei.mobile_id_len", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12666 { &hf_gtp_qos_umts_length, { "Length", "gtp.qos_umts_length", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12667 { &hf_gtp_num_ext_hdr_types, { "Number of Extension Header Types in list (i.e., length)", "gtp.num_ext_hdr_types", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }},
12668 { &hf_gtp_ext_hdr_type, { "Extension Header Type", "gtp.ext_hdr_type", FT_UINT8, BASE_DEC, VALS(next_extension_header_fieldvals), 0x0, NULL, HFILL }},
12669 { &hf_gtp_tpdu_data, { "T-PDU Data", "gtp.tpdu_data", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL } },
12670 { &hf_gtp_ext_enb_type, { "enb_type", "gtp.enb_type", FT_UINT8, BASE_DEC, VALS(gtp_enb_type_vals), 0x0, NULL, HFILL } },
12675 },
12680 },
12685 },
12690 },
12695 },
12700 },
12705 },
12710 },
12715 },
12720 },
12725 },
12730 },
12735 },
12736 };
12740 {
12745 },
12750 },
12754 "Presence of DL discard Number of blocks, discard NR PDCP PDU SN start and Discarded Block size", HFILL}
12755 },
12760 },
12764 "Indicates that the node hosting the NR PDCP entity requests providing the downlink delivery status report", HFILL}
12765 },
12769 "Indicates whether the NR PDCP PDU is a retransmission NR-U packet sent by the node hosting the NR PDCP entity to the corresponding node", HFILL}
12770 },
12775 },
12780 },
12785 },
12791 },
12795 "Whether the node hosting the NR PDCP entity has some user data for the concerned data radio bearer", HFILL}
12796 },
12801 },
12806 },
12811 },
12816 },
12821 },
12826 },
12832 },
12837 },
12842 },
12847 },
12852 },
12857 },
12862 },
12867 },
12872 },
12874 { "Highest Delivered Retransmitted NR PDCP SN Ind", "nrup.high_delivered_retx_nr_pdcp_sn_ind",
12877 },
12882 },
12887 },
12892 },
12897 },
12902 },
12907 },
12912 },
12914 { "Highest Successfully Delivered Retransmitted NR PDCP SN", "nrup.high_success_delivered_retx_nr_pdcp_sn",
12917 },
12922 },
12928 },
12933 },
12938 },
12943 },
12948 },
12953 },
12958 },
12963 },
12965 { "Number of octets for Radio Quality Assistance Information Fields", "nrup.num_octets_radio_qa_info",
12968 },
12973 },
12978 },
12983 }
12984 };
12988 { &ei_gtp_ext_length_mal, { "gtp.ext_length.invalid", PI_MALFORMED, PI_ERROR, "Malformed length", EXPFILL }},
12989 { &ei_gtp_ext_hdr_pdcpsn, { "gtp.ext_hdr.pdcp_sn.non_zero", PI_PROTOCOL, PI_NOTE, "3GPP TS 29.281 v9.0.0: When used between two eNBs at the X2 interface in E-UTRAN, bit 8 of octet 2 is spare. The meaning of the spare bits shall be set to zero.", EXPFILL }},
12990 { &ei_gtp_ext_length_warn, { "gtp.ext_length.invalid", PI_PROTOCOL, PI_WARN, "Length warning", EXPFILL }},
12991 { &ei_gtp_undecoded, { "gtp.undecoded", PI_UNDECODED, PI_WARN, "Data not decoded yet", EXPFILL }},
12992 { &ei_gtp_message_not_found, { "gtp.message_not_found", PI_PROTOCOL, PI_WARN, "Message not found", EXPFILL }},
12993 { &ei_gtp_field_not_present, { "gtp.field_not_present", PI_PROTOCOL, PI_WARN, "Field not present", EXPFILL }},
12994 { &ei_gtp_wrong_next_field, { "gtp.wrong_next_field", PI_PROTOCOL, PI_WARN, "Wrong next field", EXPFILL }},
12995 { &ei_gtp_field_not_support_in_version, { "gtp.field_not_support_in_version", PI_PROTOCOL, PI_WARN, "GTP version not supported for field", EXPFILL }},
12996 { &ei_gtp_guaranteed_bit_rate_value, { "gtp.guaranteed_bit_rate_value", PI_PROTOCOL, PI_NOTE, "Use the value indicated by the Guaranteed bit rate", EXPFILL }},
12997 { &ei_gtp_max_bit_rate_value, { "gtp.max_bit_rate_value", PI_PROTOCOL, PI_NOTE, "Use the value indicated by the Maximum bit rate", EXPFILL }},
12998 { &ei_gtp_ext_geo_loc_type, { "gtp.ext_geo_loc_type.unknown", PI_PROTOCOL, PI_WARN, "Unknown Location type data", EXPFILL }},
12999 { &ei_gtp_iei, { "gtp.iei.unknown", PI_PROTOCOL, PI_WARN, "Unknown IEI - Later spec than TS 29.060 9.4.0 used?", EXPFILL }},
13000 { &ei_gtp_unknown_extension_header, { "gtp.unknown_extension_header", PI_PROTOCOL, PI_WARN, "Unknown extension header", EXPFILL }},
13001 { &ei_gtp_unknown_pdu_type, { "gtp.unknown_pdu_type", PI_PROTOCOL, PI_WARN, "Unknown PDU type", EXPFILL }},
13002 { &ei_gtp_source_type_unknown, { "gtp.source_type.unknown", PI_PROTOCOL, PI_WARN, "Unknown source type", EXPFILL }},
13003 { &ei_gtp_cdr_rel_ext_invalid, { "gtp.cdr_rel_ext.invalid", PI_PROTOCOL, PI_WARN, "If Release Identifier is 0, Release Identifier Extension must be >= 16", EXPFILL}},
13004 };
13006 /* Setup protocol subtree array */
13007 #define GTP_NUM_INDIVIDUAL_ELEMS 39
13053 {
13055 }
13059 proto_gtpprime = proto_register_protocol("GPRS Tunneling Protocol Prime", "GTP (Prime)", "gtpprime");
13071 /* For reading older preference files with "gtpv0." or "gtpv1." preferences */
13075 prefs_register_uint_preference(gtp_module, "v0_port", "GTPv0 and GTP' port", "GTPv0 and GTP' port (default 3386)", 10, &g_gtpv0_port);
13076 prefs_register_uint_preference(gtp_module, "v1c_port", "GTPv1 or GTPv2 control plane (GTP-C, GTPv2-C) port", "GTPv1 and GTPv2 control plane port (default 2123)", 10,
13078 prefs_register_uint_preference(gtp_module, "v1u_port", "GTPv1 user plane (GTP-U) port", "GTPv1 user plane port (default 2152)", 10,
13084 gtp_decode_tpdu_as,
13086 prefs_register_uint_preference(gtp_module, "pair_max_interval", "Max interval allowed in pair matching", "Request/reply pair matches only if their timestamps are closer than that value, in ms (default 0, i.e. don't use timestamps)", 10, &pref_pair_matching_max_interval_ms);
13091 prefs_register_bool_preference(gtp_module, "check_etsi", "Compare GTP order with ETSI", "GTP ETSI order", &g_gtp_etsi_order);
13095 /* This preference can be used to disable the dissection of GTP over TCP. Most of the Wireless operators uses GTP over UDP.
13096 * The preference is set to true by default forbackward compatibility
13097 */
13098 prefs_register_bool_preference(gtp_module, "dissect_gtp_over_tcp", "Dissect GTP over TCP", "Dissect GTP over TCP", &g_gtp_over_tcp);
13099 prefs_register_bool_preference(gtp_module, "track_gtp_session", "Track GTP session", "Track GTP session", &g_gtp_session);
13101 /* --- PDCP DECODE ADDITIONS --- */
13104 UAT_FLD_CSTRING_OTHER(pdcp_lte_users, ip_addr_str, "Dst IP address", pdcp_uat_fld_ip_chk_cb, "IPv4 or IPv6 address"),
13105 UAT_FLD_CSTRING_OTHER(pdcp_lte_users, teid_str, "TEID value or \"" PDCP_TEID_WILDCARD "\"", pdcp_uat_fld_teid_chk_cb, "Tunnel Endpoint Identifier"),
13107 UAT_FLD_VS(pdcp_lte_users, header_present, "Header present", vs_header_present, "Header present flag"),
13109 UAT_FLD_VS(pdcp_lte_users, lte_sn_length, "PDCP SN length", vs_pdcp_lte_sn_length, "Length of PDCP sequence number"),
13110 UAT_FLD_VS(pdcp_lte_users, rohc_compression, "ROHC compression", vs_rohc_compression, "Header compression"),
13111 //UAT_FLD_VS(pdcp_lte_users, rohc_mode, "ROHC mode", vs_rohc_mode, "ROHC mode"),
13115 UAT_END_FIELDS
13116 };
13138 pdcp_lte_keys_uat);
13141 UAT_FLD_CSTRING_OTHER(pdcp_nr_users, ip_addr_str, "Dst IP address", pdcp_uat_fld_ip_chk_cb, "IPv4 or IPv6 address"),
13142 UAT_FLD_CSTRING_OTHER(pdcp_nr_users, teid_str, "TEID value or \"" PDCP_TEID_WILDCARD "\"", pdcp_uat_fld_teid_chk_cb, "Tunnel Endpoint Identifier"),
13144 UAT_FLD_VS(pdcp_nr_users, sdap_header_present, "SDAP header present flag", vs_sdap_header_present, "SDAP header present flag"),
13145 UAT_FLD_VS(pdcp_nr_users, mac_i_present, "MAC-I present flag", vs_mac_i_present, "MAC-I present flag"),
13147 UAT_FLD_VS(pdcp_nr_users, pdcp_nr_sn_length, "PDCP SN length", vs_pdcp_nr_sn_length, "Length of PDCP sequence number"),
13148 UAT_FLD_VS(pdcp_nr_users, rohc_compression, "ROHC compression", vs_rohc_compression, "Header compression"),
13149 //UAT_FLD_VS(pdcp_nr_users, rohc_mode, "ROHC mode", vs_rohc_mode, "ROHC mode"),
13153 UAT_END_FIELDS
13154 };
13171 /* Set default values for new entries to this table. Choosing SRB-1 (DL) */
13172 /* N.B. currently doesn't seem to work.. */
13177 SIGNALING_PLANE_STR, PDCP_SN_LENGTH_12_BITS_STR, ROHC_COMPRESSION_FALSE_STR, ROHC_PROFILE_UNCOMPRESSED_STR,
13179 };
13187 pdcp_nr_keys_uat);
13189 /* --- END PDCP NR DECODE ADDITIONS ---*/
13195 gtp_priv_ext_dissector_table = register_dissector_table("gtp.priv_ext", "GTP Private Extension", proto_gtp, FT_UINT16, BASE_DEC);
13196 gtp_cdr_fmt_dissector_table = register_dissector_table("gtp.cdr_fmt", "GTP Data Record Type", proto_gtp, FT_UINT16, BASE_DEC);
13197 gtp_hdr_ext_dissector_table = register_dissector_table("gtp.hdr_ext", "GTP Header Extension", proto_gtp, FT_UINT16, BASE_DEC);
13199 session_table = wmem_map_new_autoreset(wmem_epan_scope(), wmem_file_scope(), g_direct_hash, g_direct_equal);
13200 frame_map = wmem_map_new_autoreset(wmem_epan_scope(), wmem_file_scope(), gtp_info_hash, gtp_info_equal);
13208 }
13209 /* TS 132 295 V9.0.0 (2010-02)
13210 * 5.1.3 Port usage
13211 * - The UDP Destination Port may be the server port number 3386 which has been reserved for GTP'.
13212 * Alternatively another port can be used, which has been configured by O&M, except Port Number 2123
13213 * which is used by GTPv2-C.
13214 * :
13215 * The TCP Destination Port may be the server port number 3386, which has been reserved for G-PDUs. Alternatively,
13216 * another port may be used as configured by O&M. Extra implementation-specific destination ports are possible but
13217 * all CGFs shall support the server port number.
13218 */
13220 void
13222 {
13248 /* AVP Code: 5 3GPP-GPRS Negotiated QoS profile */
13249 dissector_add_uint("diameter.3gpp", 5, create_dissector_handle(dissect_diameter_3gpp_qosprofile, proto_gtp));
13250 /* AVP Code: 903 MBMS-Service-Area */
13251 dissector_add_uint("diameter.3gpp", 903, create_dissector_handle(dissect_gtp_3gpp_mbms_service_area, proto_gtp));
13252 /* AVP Code: 904 MBMS-Session-Duration */
13253 dissector_add_uint("diameter.3gpp", 904, create_dissector_handle(dissect_gtp_mbms_ses_dur, proto_gtp));
13254 /* AVP Code: 911 MBMS-Time-To-Data-Transfer */
13255 dissector_add_uint("diameter.3gpp", 911, create_dissector_handle(dissect_gtp_mbms_time_to_data_tr, proto_gtp));
13257 // TPDU payload detection
13259 heur_dissector_add("gtp.tpdu", dissect_eth_heur, "Ethernet over GTP", "eth_gtp.tpdu", eth_proto_id, HEURISTIC_ENABLE);
13271 }
13272 }
13279 /* This doesn't use the "auto preference" API because the port
13280 description is too specific */
13286 /* This doesn't use the "auto preference" API because the port
13287 description is too specific */
13291 }
13292 }
13294 /*
13295 * Editor modelines - https://www.wireshark.org/tools/modelines.html
13296 *
13297 * Local variables:
13298 * c-basic-offset: 4
13299 * tab-width: 8
13300 * indent-tabs-mode: nil
13301 * End:
13302 *
13303 * vi: set shiftwidth=4 tabstop=8 expandtab:
13304 * :indentSize=4:tabSize=8:noTabs=true:
13305 */