Tamas,
Thanks a lot for the quick response. I upgraded to the latest version, and it
works! I’ll let my team know, so we can plan the upgrade. Typically we only
upgrade when we need to support a newer feature.
FYI – To decrypt the NGAP message, you may need to ensure the checkbox is
checked.
[cid:image001.png@01DB7FA3.2ADE4C50]
Item 2: id-NAS-PDU
ProtocolIE-Field
id: id-NAS-PDU (38)
criticality: reject (0)
value
NAS-PDU: 7e02b0073e4b050f8800
Non-Access-Stratum 5GS (NAS)PDU
Security protected NAS 5GS message
Extended protocol discriminator: 5G mobility management
messages (126)
0000 .... = Spare Half Octet: 0
.... 0010 = Security header type: Integrity protected
and ciphered (2)
Message authentication code: 0xb0073e4b
Sequence number: 5
Plain NAS 5GS Message
Extended protocol discriminator: Tests procedures
described in 3GPP TS 44.014, 3GPP TS 34.109 and 3GPP TS 36.509 (15)
GSM A-I/F DTAP - Reset UE Positioning Stored Information
Protocol Discriminator: Tests procedures described
in 3GPP TS 44.014, 3GPP TS 34.109 and 3GPP TS 36.509 (15)
.... 1111 = Protocol discriminator: Tests
procedures described in 3GPP TS 44.014, 3GPP TS 34.109 and 3GPP TS 36.509 (0xf)
0000 .... = Skip Indicator: No indication of
selected PLMN (0)
DTAP Tests Procedures Message Type: Reset UE
Positioning Stored Information (0x88)
UE Positioning Technology
0000 0000 = UE positioning technology: AGNSS (0)
Thanks,
Anthony
From: Tamás Regős <reg...@gmail.com>
Sent: Saturday, February 15, 2025 11:57 AM
To: Community support list for Wireshark <wireshark-users@wireshark.org>
Cc: Tancredi, Anthony <anthony.tancr...@spirent.com>; Pascal Quantin
<pas...@wireshark.org>
Subject: Re: [Wireshark-users] Re: LPP Release 17 Reset Positioning Information
can not be decoded
[Warning] This email comes from an external source. Be careful of any embedded
links and attachments.
Hi Anthony, This is a known bug which was fixed already. Please download and
install the latest available WS version (You use 4. 2. 4). Please note, frame
5720 has Encrypted data. It works for me. (My previous reply has a screenshot
in it but
Hi Anthony,
This is a known bug which was fixed already. Please download and install the
latest available WS version (You use 4.2.4).
Please note, frame 5720 has Encrypted data.
It works for me.
(My previous reply has a screenshot in it but it's too big so it needs
moderator approval first).
Regards,
Tamas
On Sat, 15 Feb 2025 at 23:55, Pascal Quantin via Wireshark-users
<wireshark-users@wireshark.org<mailto:wireshark-users@wireshark.org>> wrote:
Hi Anthony,
I do not have a computer to open your pcap right now but in the screenshot you
shared the NAS message seems to be ciphered, which would explain why Wireshark
cannot decode it.
Best regards,
Pascal.
15 févr. 2025 17:47:37 Tancredi, Anthony via Wireshark-users
<wireshark-users@wireshark.org<mailto:wireshark-users@wireshark.org>>:
Wireshark Support,
Is this a known issue that the LPP message Reset Positioning Information can
not be decoded by the Wireshark Dissector. All other LPP messages can be
decoded properly. When logging the LPP message in another tool such as Qualcomm
QXDM, the message can be decoded successfully.
Fram 5720:
[cid:image002.png@01DB7FA3.2ADE4C50]
Version 4.2.4-01 (Git commit c966d79150b6).
Compiled (64-bit) using Microsoft Visual Studio 2019 (VC++ 14.29, build 30151),
with GLib 2.78.0, with Qt 6.5.3, with libpcap, with zlib 1.3.0, with PCRE2, with
Lua 5.2.4 (with UfW patches), with GnuTLS 3.8.3 and PKCS #11 support, with
Gcrypt 1.10.2-unknown, with Kerberos (MIT), with MaxMind, with nghttp2 1.57.0,
with nghttp3 1.0.0, with brotli, with LZ4, with Zstandard, with Snappy, with
libxml2 2.11.5, with libsmi 0.5.0, with QtMultimedia, with automatic updates
using WinSparkle 0.8.0, with AirPcap, with Minizip, with binary plugins.
Running on 64-bit Windows 10 (1809), build 17763, with Intel(R) Core(TM)
i7-4790S CPU @ 3.20GHz (with SSE4.2), with 6143 MB of physical memory, with GLib
2.78.0, with Qt 6.5.3, with Npcap version 1.78, based on libpcap version 1.10.4,
with PCRE2 10.42 2022-12-11, with c-ares 1.27.0, with GnuTLS 3.8.3, with Gcrypt
1.10.2-unknown, with nghttp2 1.57.0, with nghttp3 1.0.0, with brotli 1.0.9, with
LZ4 1.9.3, with Zstandard 1.5.2, without AirPcap, with light display mode, with
HiDPI, with QPA plugin "windows", with LC_TYPE=English_United States.utf8,
binary plugins supported.
Thanks,
Anthony
_______________________________________________
Wireshark-users mailing list --
wireshark-users@wireshark.org<mailto:wireshark-users@wireshark.org>
To unsubscribe send an email to
wireshark-users-le...@wireshark.org<mailto:wireshark-users-le...@wireshark.org>
_______________________________________________
Wireshark-users mailing list -- wireshark-users@wireshark.org
To unsubscribe send an email to wireshark-users-le...@wireshark.org
