https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16530
Bug ID: 16530
Summary: packet-ieee80211.c: Add MCC, MNC, and resolved fields
as they pertain to NAI realm and Domain Names
Product: Wireshark
Version: unspecified
Hardware: x86-64
OS: Ubuntu
Status: UNCONFIRMED
Severity: Enhancement
Priority: Low
Component: Dissection engine (libwireshark)
Assignee: mswe...@hotmail.com
Reporter: mswe...@hotmail.com
CC: boardermar...@gmail.com, realrichardsha...@gmail.com
Target Milestone: ---
Build Information:
Wireshark 3.2.0
Copyright 1998-2019 Gerald Combs <ger...@wireshark.org> and contributors.
License GPLv2+: GNU GPL version 2 or later
<https://www.gnu.org/licenses/gpl-2.0.html>
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (64-bit) with Qt 5.9.5, with libpcap, without POSIX capabilities,
without libnl, with GLib 2.56.4, with zlib 1.2.11, without SMI, with c-ares
1.16.0, without Lua, without GnuTLS, with Gcrypt 1.8.1, without Kerberos, with
MaxMind DB resolver, without nghttp2, without brotli, without LZ4, without
Zstandard, without Snappy, without libxml2, with QtMultimedia, with SpeexDSP
(using bundled resampler), without SBC, without SpanDSP, without bcg729.
Running on Linux 5.3.0-46-generic, with Intel(R) Core(TM) i7-4790K CPU @
4.00GHz
(with SSE4.2), with 7934 MB of physical memory, with locale en_US.UTF-8, with
libpcap version 1.8.1, with Gcrypt 1.8.1, with zlib 1.2.11, binary plugins
supported (0 loaded).
Built using gcc 7.5.0.
--
The following additions relate to ANQP within IEEE 802.11:
(1) In packet-ieee80211.c, modify 'wlan.fixed.anqp.info_id' to be split into
two separate fields called 'wlan.fixed.anqp.request_id' and
'wlan.fixed.anqp.response_id' as they are unique and the field is currently
used for both ANQP messages. This change would affect the two following (but
related) requests.
(2) In packet-ieee80211.c and function 'dissect_nai_realm_list()', add fields
to fully dissect and post to tree the MCC/MNC values within NAI Realm strings
that follow 3GPP format.
Example found using filter 'wlan.fixed.anqp.info_id == 263':
NAI Realm: wlan.mnc###.mcc###.3gppnetwork.org
-hf_ieee80211_ff_anqp_nai_realm_mcc
-hf_ieee80211_ff_anqp_nai_realm_mcc_resolved
-hf_ieee80211_ff_anqp_nai_realm_mnc
-hf_ieee80211_ff_anqp_nai_realm_mnc_resolved
(3) In packet-ieee80211.c and function 'dissect_domain_name_list()', add fields
to fully dissect and post to tree the MCC/MNC values within domain names when
those names include MNC and MCC values and follow 3GPP format.
Example found using filter 'wlan.fixed.anqp.info_id == 268':
Domain Name: wlan.mnc###.mcc###.3gppnetwork.org
- hf_ieee80211_ff_anqp_domain_mcc
- hf_ieee80211_ff_anqp_domain_mcc_resolved
- hf_ieee80211_ff_anqp_domain_mnc
- hf_ieee80211_ff_anqp_domain_mnc_resolved
All aforementioned fields would be FT_STRINGs similar to the proposal in Bug
16527.
--
You are receiving this mail because:
You are watching all bug changes.___________________________________________________________________________
Sent via: Wireshark-bugs mailing list <wireshark-bugs@wireshark.org>
Archives: https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
