wireshark: Support dissecting LLC frames on top of RLCMAC (E)GPRS data blocks
Since recently wireshark is able to correctly identify rlcmac data payload (llc frames), and identify padding, spare bits, etc.Next step is to call the LLC dissector to try to dissect the llc frames of:
- GPRS UL data blocks
- GPRS DL data blocks
- EGPRS UL data blocks
- EGPRS DL data blocks
This will help in quickly finding out if data forwarded from/to RLCMAC has any issue.
I so far have a quick patch which already works for UL and DL GPRS data packets which don't need to be defragmented.
So work needs to be done to support fragmentation, and EGPRS as well.
Supporting fragmentation probably means we also need to identify TBFs by TFI or something similar, to be able to track the fragments.
#2 Updated by pespin about 2 months ago
- File 0001-WIP-rlcmac-Support-dissecting-LLC-frames-in-rlcmac-d.patch 0001-WIP-rlcmac-Support-dissecting-LLC-frames-in-rlcmac-d.patch added
New version of the patch also with EGPRS dissect partial support, useful to at least see small GMM messages which usually fit into one rlcmac block.