/epan/dissectors/packet-gtpv2.c

https://bitbucket.org/stevexiao/wireshark · C · 4504 lines · 3453 code · 379 blank · 672 comment · 58 complexity · f9a378f893bdf921e74fb028818d20aa MD5 · raw file

Large files are truncated click here to view the full file

    

  1. /* packet-gtpv2.c
    2. 

  2.  *
    3. 

  3.  * Routines for GTPv2 dissection
    4. 

  4.  * Copyright 2009 - 2011, Anders Broman <anders.broman [at] ericcsson.com>
    5. 

  5.  *
    6. 

  6.  * $Id: packet-gtpv2.c 38852 2011-09-01 23:27:28Z gerald $
    7. 

  7.  *
    8. 

  8.  * Wireshark - Network traffic analyzer
    9. 

  9.  * By Gerald Combs <gerald@wireshark.org>
    10. 

  10.  * Copyright 1998 Gerald Combs
    11. 

  11.  *
    12. 

  12.  * This program is free software; you can redistribute it and/or
    13. 

  13.  * modify it under the terms of the GNU General Public License
    14. 

  14.  * as published by the Free Software Foundation; either version 2
    15. 

  15.  * of the License, or (at your option) any later version.
    16. 

  16.  *
    17. 

  17.  * This program is distributed in the hope that it will be useful,
    18. 

  18.  * but WITHOUT ANY WARRANTY; without even the implied warranty of
    19. 

  19.  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    20. 

  20.  * GNU General Public License for more details.
    21. 

  21.  *
    22. 

  22.  * You should have received a copy of the GNU General Public License
    23. 

  23.  * along with this program; if not, write to the Free Software
    24. 

  24.  * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
    25. 

  25.  * Ref: 3GPP TS 29.274 version 8.1.1 Release 8 ETSI TS 129 274 V8.1.1 (2009-04)
    26. 

  26.  */
    27. 

  27. 

  28. #ifdef HAVE_CONFIG_H
    29. 

  29. # include "config.h"
    30. 

  30. #endif
    31. 

  31. 

  32. #include <stdlib.h>
    33. 

  33. 

  34. #include <glib.h>
    35. 

  35. 

  36. #include <epan/packet.h>
    37. 

  37. #include <epan/asn1.h>
    38. 

  38. #include <epan/expert.h>
    39. 

  39. #include <epan/sminmpec.h>
    40. 

  40. 

  41. #include "packet-gsm_a_common.h"
    42. 

  42. #include "packet-gsm_map.h"
    43. 

  43. #include "packet-e164.h"
    44. 

  44. #include "packet-e212.h"
    45. 

  45. #include "packet-s1ap.h"
    46. 

  46. #include "packet-ranap.h"
    47. 

  47. 

  48. 

  49. static dissector_handle_t nas_eps_handle;
    50. 

  50. 

  51. /*GTPv2 Message->GTP Header(SB)*/
    52. 

  52. static int proto_gtpv2 = -1;
    53. 

  53. 

  54. static int hf_gtpv2_reserved = -1;
    55. 

  55. static int hf_gtpv2_spare_half_octet = -1;
    56. 

  56. static int hf_gtpv2_spare_bits = -1;
    57. 

  57. static int hf_gtpv2_flags = -1;
    58. 

  58. static int hf_gtpv2_version = -1;
    59. 

  59. static int hf_gtpv2_p = -1;
    60. 

  60. static int hf_gtpv2_t = -1;
    61. 

  61. static int hf_gtpv2_message_type = -1;
    62. 

  62. static int hf_gtpv2_msg_length = -1;
    63. 

  63. static int hf_gtpv2_teid = -1;
    64. 

  64. static int hf_gtpv2_seq = -1;
    65. 

  65. static int hf_gtpv2_spare = -1;
    66. 

  66. 

  67. 

  68. static int hf_gtpv2_ie = -1;
    69. 

  69. static int hf_gtpv2_ie_len = -1;
    70. 

  70. static int hf_gtpv2_cr = -1;
    71. 

  71. static int hf_gtpv2_instance = -1;
    72. 

  72. static int hf_gtpv2_cause = -1;
    73. 

  73. static int hf_gtpv2_cause_cs = -1;
    74. 

  74. static int hf_gtpv2_cause_bce = -1;
    75. 

  75. static int hf_gtpv2_cause_pce = -1;
    76. 

  76. static int hf_gtpv2_cause_off_ie_t = -1;
    77. 

  77. static int hf_gtpv2_rec = -1;
    78. 

  78. static int hf_gtpv2_apn = -1;
    79. 

  79. static int hf_gtpv2_ebi = -1;
    80. 

  80. static int hf_gtpv2_daf = -1;
    81. 

  81. static int hf_gtpv2_dtf = -1;
    82. 

  82. static int hf_gtpv2_hi = -1;
    83. 

  83. static int hf_gtpv2_dfi = -1;
    84. 

  84. static int hf_gtpv2_oi = -1;
    85. 

  85. static int hf_gtpv2_isrsi = -1;
    86. 

  86. static int hf_gtpv2_israi = -1;
    87. 

  87. static int hf_gtpv2_sgwci = -1;
    88. 

  88. static int hf_gtpv2_sqci = -1;
    89. 

  89. static int hf_gtpv2_uimsi = -1;
    90. 

  90. static int hf_gtpv2_cfsi = -1;
    91. 

  91. static int hf_gtpv2_crsi = -1;
    92. 

  92. static int hf_gtpv2_pt = -1;
    93. 

  93. static int hf_gtpv2_ps = -1;
    94. 

  94. static int hf_gtpv2_si = -1;
    95. 

  95. static int hf_gtpv2_msv = -1;
    96. 

  96. static int hf_gtpv2_ccrsi = -1;
    97. 

  97. static int hf_gtpv2_pdn_type = -1;
    98. 

  98. static int hf_gtpv2_pdn_ipv4 = -1;
    99. 

  99. static int hf_gtpv2_pdn_ipv6_len = -1;
    100. 

  100. static int hf_gtpv2_pdn_ipv6 = -1;
    101. 

  101. static int hf_gtpv2_pdn_numbers_nsapi = -1;
    102. 

  102. static int hf_gtpv2_p_tmsi = -1;
    103. 

  103. static int hf_gtpv2_p_tmsi_sig = -1;
    104. 

  104. 

  105. 

  106. static int hf_gtpv2_rat_type = -1;
    107. 

  107. static int hf_gtpv2_uli_ecgi_flg = -1;
    108. 

  108. static int hf_gtpv2_uli_lai_flg = -1;
    109. 

  109. static int hf_gtpv2_uli_tai_flg = -1;
    110. 

  110. static int hf_gtpv2_uli_rai_flg = -1;
    111. 

  111. static int hf_gtpv2_uli_sai_flg = -1;
    112. 

  112. static int hf_gtpv2_uli_cgi_flg = -1;
    113. 

  113. static int hf_gtpv2_cng_rep_act = -1;
    114. 

  114. 

  115. static int hf_gtpv2_selec_mode = -1;
    116. 

  116. static int hf_gtpv2_source_type = -1;
    117. 

  117. static int hf_gtpv2_f_teid_v4 = -1;
    118. 

  118. static int hf_gtpv2_f_teid_v6 = -1;
    119. 

  119. static int hf_gtpv2_f_teid_interface_type= -1;
    120. 

  120. static int hf_gtpv2_f_teid_gre_key= -1;
    121. 

  121. static int hf_gtpv2_f_teid_ipv4= -1;
    122. 

  122. static int hf_gtpv2_f_teid_ipv6= -1;
    123. 

  123. static int hf_gtpv2_tmsi = -1;
    124. 

  124. static int hf_gtpv2_hsgw_addr_f_len = -1;
    125. 

  125. static int hf_gtpv2_hsgw_addr_ipv4 = -1;
    126. 

  126. static int hf_gtpv2_hsgw_addr_ipv6 = -1;
    127. 

  127. static int hf_gtpv2_gre_key = -1;
    128. 

  128. static int hf_gtpv2_sgw_addr_ipv4 = -1;
    129. 

  129. static int hf_gtpv2_sgw_addr_ipv6 = -1;
    130. 

  130. static int hf_gtpv2_sgw_s1u_teid = -1;
    131. 

  131. static int hf_gtpv2_imsi= -1;
    132. 

  132. static int hf_gtpv2_ipv4_addr = -1;
    133. 

  133. 

  134. 

  135. static int hf_gtpv2_ambr_up= -1;
    136. 

  136. static int hf_gtpv2_ambr_down= -1;
    137. 

  137. static int hf_gtpv2_ip_address_ipv4= -1;
    138. 

  138. static int hf_gtpv2_ip_address_ipv6= -1;
    139. 

  139. static int hf_gtpv2_mei= -1;
    140. 

  140. 

  141. /* Trace Information */
    142. 

  142. static int hf_gtpv2_tra_info = -1;
    143. 

  143. static int hf_gtpv2_tra_info_msc_momt_calls = -1;
    144. 

  144. static int hf_gtpv2_tra_info_msc_momt_sms = -1;
    145. 

  145. static int hf_gtpv2_tra_info_msc_lu_imsi_ad = -1;
    146. 

  146. static int hf_gtpv2_tra_info_msc_handovers = -1;
    147. 

  147. static int hf_gtpv2_tra_info_msc_ss = -1;
    148. 

  148. static int hf_gtpv2_tra_info_mgw_context = -1;
    149. 

  149. static int hf_gtpv2_tra_info_sgsn_pdp_context = -1;
    150. 

  150. static int hf_gtpv2_tra_info_sgsn_momt_sms = -1;
    151. 

  151. static int hf_gtpv2_tra_info_sgsn_rau_gprs_ad = -1;
    152. 

  152. static int hf_gtpv2_tra_info_sgsn_mbms = -1;
    153. 

  153. static int hf_gtpv2_tra_info_sgsn_reserved = -1;
    154. 

  154. static int hf_gtpv2_tra_info_ggsn_pdp = -1;
    155. 

  155. static int hf_gtpv2_tra_info_ggsn_mbms = -1;
    156. 

  156. static int hf_gtpv2_tra_info_bm_sc = -1;
    157. 

  157. static int hf_gtpv2_tra_info_mme_sgw_ss = -1;
    158. 

  158. static int hf_gtpv2_tra_info_mme_sgw_sr = -1;
    159. 

  159. static int hf_gtpv2_tra_info_mme_sgw_iataud = -1;
    160. 

  160. static int hf_gtpv2_tra_info_lne_msc_s = -1;
    161. 

  161. static int hf_gtpv2_tra_info_lne_mgw = -1;
    162. 

  162. static int hf_gtpv2_tra_info_lne_sgsn = -1;
    163. 

  163. static int hf_gtpv2_tra_info_lne_ggsn = -1;
    164. 

  164. static int hf_gtpv2_tra_info_lne_rnc = -1;
    165. 

  165. static int hf_gtpv2_tra_info_lne_bm_sc = -1;
    166. 

  166. static int hf_gtpv2_tra_info_lne_mme = -1;
    167. 

  167. static int hf_gtpv2_tra_info_lne_sgw = -1;
    168. 

  168. static int hf_gtpv2_tra_info_lne_pdn_gw = -1;
    169. 

  169. static int hf_gtpv2_tra_info_lne_enb = -1;
    170. 

  170. static int hf_gtpv2_tra_info_tdl = -1;
    171. 

  171. static int hf_gtpv2_tra_info_lmsc_a = -1;
    172. 

  172. static int hf_gtpv2_tra_info_lmsc_lu = -1;
    173. 

  173. static int hf_gtpv2_tra_info_lmsc_mc = -1;
    174. 

  174. static int hf_gtpv2_tra_info_lmsc_map_g = -1;
    175. 

  175. static int hf_gtpv2_tra_info_lmsc_map_b = -1;
    176. 

  176. static int hf_gtpv2_tra_info_lmsc_map_e = -1;
    177. 

  177. static int hf_gtpv2_tra_info_lmsc_map_f = -1;
    178. 

  178. static int hf_gtpv2_tra_info_lmsc_cap = -1;
    179. 

  179. static int hf_gtpv2_tra_info_lmsc_map_d = -1;
    180. 

  180. static int hf_gtpv2_tra_info_lmsc_map_c = -1;
    181. 

  181. static int hf_gtpv2_tra_info_lmgw_mc = -1;
    182. 

  182. static int hf_gtpv2_tra_info_lmgw_nb_up = -1;
    183. 

  183. static int hf_gtpv2_tra_info_lmgw_lu_up = -1;
    184. 

  184. static int hf_gtpv2_tra_info_lsgsn_gb = -1;
    185. 

  185. static int hf_gtpv2_tra_info_lsgsn_lu = -1;
    186. 

  186. static int hf_gtpv2_tra_info_lsgsn_gn = -1;
    187. 

  187. static int hf_gtpv2_tra_info_lsgsn_map_gr = -1;
    188. 

  188. static int hf_gtpv2_tra_info_lsgsn_map_gd = -1;
    189. 

  189. static int hf_gtpv2_tra_info_lsgsn_map_gf = -1;
    190. 

  190. static int hf_gtpv2_tra_info_lsgsn_gs = -1;
    191. 

  191. static int hf_gtpv2_tra_info_lsgsn_ge = -1;
    192. 

  192. static int hf_gtpv2_tra_info_lggsn_gn = -1;
    193. 

  193. static int hf_gtpv2_tra_info_lggsn_gi = -1;
    194. 

  194. static int hf_gtpv2_tra_info_lggsn_gmb = -1;
    195. 

  195. static int hf_gtpv2_tra_info_lrnc_lu = -1;
    196. 

  196. static int hf_gtpv2_tra_info_lrnc_lur = -1;
    197. 

  197. static int hf_gtpv2_tra_info_lrnc_lub = -1;
    198. 

  198. static int hf_gtpv2_tra_info_lrnc_uu = -1;
    199. 

  199. static int hf_gtpv2_tra_info_lbm_sc_gmb = -1;
    200. 

  200. static int hf_gtpv2_tra_info_lmme_s1_mme = -1;
    201. 

  201. static int hf_gtpv2_tra_info_lmme_s3 = -1;
    202. 

  202. static int hf_gtpv2_tra_info_lmme_s6a = -1;
    203. 

  203. static int hf_gtpv2_tra_info_lmme_s10 = -1;
    204. 

  204. static int hf_gtpv2_tra_info_lmme_s11 = -1;
    205. 

  205. static int hf_gtpv2_tra_info_lsgw_s4 = -1;
    206. 

  206. static int hf_gtpv2_tra_info_lsgw_s5 = -1;
    207. 

  207. static int hf_gtpv2_tra_info_lsgw_s8b = -1;
    208. 

  208. static int hf_gtpv2_tra_info_lsgw_s11 = -1;
    209. 

  209. static int hf_gtpv2_tra_info_lpdn_gw_s2a = -1;
    210. 

  210. static int hf_gtpv2_tra_info_lpdn_gw_s2b = -1;
    211. 

  211. static int hf_gtpv2_tra_info_lpdn_gw_s2c = -1;
    212. 

  212. static int hf_gtpv2_tra_info_lpdn_gw_s5 = -1;
    213. 

  213. static int hf_gtpv2_tra_info_lpdn_gw_s6c = -1;
    214. 

  214. static int hf_gtpv2_tra_info_lpdn_gw_gx = -1;
    215. 

  215. static int hf_gtpv2_tra_info_lpdn_gw_s8b = -1;
    216. 

  216. static int hf_gtpv2_tra_info_lpdn_gw_sgi = -1;
    217. 

  217. static int hf_gtpv2_tra_info_lenb_s1_mme = -1;
    218. 

  218. static int hf_gtpv2_tra_info_lenb_x2 = -1;
    219. 

  219. static int hf_gtpv2_tra_info_lenb_uu = -1;
    220. 

  220. 

  221. static int hf_gtpv2_address_digits = -1;
    222. 

  222. static int hf_gtpv2_ti = -1;
    223. 

  223. 

  224. static int hf_gtpv2_bearer_qos_pvi= -1;
    225. 

  225. static int hf_gtpv2_bearer_qos_pl= -1;
    226. 

  226. static int hf_gtpv2_bearer_qos_pci= -1;
    227. 

  227. static int hf_gtpv2_bearer_qos_label_qci = -1;
    228. 

  228. static int hf_gtpv2_bearer_qos_mbr_up = -1;
    229. 

  229. static int hf_gtpv2_bearer_qos_mbr_down = -1;
    230. 

  230. static int hf_gtpv2_bearer_qos_gbr_up = -1;
    231. 

  231. static int hf_gtpv2_bearer_qos_gbr_down = -1;
    232. 

  232. static int hf_gtpv2_flow_qos_label_qci = -1;
    233. 

  233. static int hf_gtpv2_flow_qos_mbr_up = -1;
    234. 

  234. static int hf_gtpv2_flow_qos_mbr_down = -1;
    235. 

  235. static int hf_gtpv2_flow_qos_gbr_up = -1;
    236. 

  236. static int hf_gtpv2_flow_qos_gbr_down = -1;
    237. 

  237. 

  238. static int hf_gtpv2_delay_value = -1;
    239. 

  239. static int hf_gtpv2_charging_id = -1;
    240. 

  240. static int hf_gtpv2_charging_characteristic = -1;
    241. 

  241. static int hf_gtpv2_bearer_flag_ppc = -1;
    242. 

  242. static int hf_gtpv2_bearer_flag_vb = -1;
    243. 

  243. static int hf_gtpv2_ue_time_zone_dst = -1;
    244. 

  244. static int hf_gtpv2_fq_csid_type = -1;
    245. 

  245. static int hf_gtpv2_fq_csid_nr = -1;
    246. 

  246. static int hf_gtpv2_fq_csid_ipv4 = -1;
    247. 

  247. static int hf_gtpv2_fq_csid_ipv6 = -1;
    248. 

  248. static int hf_gtpv2_fq_csid_id = -1;
    249. 

  249. static int hf_gtpv2_complete_req_msg_type = -1;
    250. 

  250. static int hf_gtpv2_mme_grp_id = -1;
    251. 

  251. static int hf_gtpv2_mme_code = -1;
    252. 

  252. static int hf_gtpv2_m_tmsi = -1;
    253. 

  253. static int hf_gtpv2_container_type = -1;
    254. 

  254. static int hf_gtpv2_cause_type = -1;
    255. 

  255. static int hf_gtpv2_CauseRadioNetwork = -1;
    256. 

  256. static int hf_gtpv2_CauseTransport = -1;
    257. 

  257. static int hf_gtpv2_CauseNas = -1;
    258. 

  258. static int hf_gtpv2_CauseProtocol = -1;
    259. 

  259. static int hf_gtpv2_CauseMisc = -1;
    260. 

  260. static int hf_gtpv2_target_type = -1;
    261. 

  261. static int hf_gtpv2_macro_enodeb_id = -1;
    262. 

  262. 

  263. static int hf_gtpv2_node_type= -1;
    264. 

  264. static int hf_gtpv2_fqdn = -1;
    265. 

  265. static int hf_gtpv2_enterprise_id = -1;
    266. 

  266. static int hf_gtpv2_apn_rest= -1;
    267. 

  267. static int hf_gtpv2_pti= -1;
    268. 

  268. static int hf_gtpv2_mm_context_sm = -1;
    269. 

  269. static int hf_gtpv2_mm_context_nhi = -1;
    270. 

  270. static int hf_gtpv2_mm_context_drxi = -1;
    271. 

  271. static int hf_gtpv2_mm_context_cksn = -1;
    272. 

  272. static int hf_gtpv2_mm_context_cksn_ksi = -1;
    273. 

  273. static int hf_gtpv2_mm_context_ksi_a= -1;
    274. 

  274. static int hf_gtpv2_mm_context_ksi = -1;
    275. 

  275. static int hf_gtpv2_mm_context_nr_tri = -1;
    276. 

  276. static int hf_gtpv2_mm_context_nr_qui = -1;
    277. 

  277. static int hf_gtpv2_mm_context_nr_qua = -1;
    278. 

  278. static int hf_gtpv2_mm_context_unipa = -1;
    279. 

  279. static int hf_gtpv2_mm_context_unc = -1;
    280. 

  280. static int hf_gtpv2_mm_context_nas_dl_cnt = -1;
    281. 

  281. static int hf_gtpv2_mm_context_nas_ul_cnt = -1;
    282. 

  282. 

  283. static int hf_gtpv2_uli_cgi_lac= -1;
    284. 

  284. static int hf_gtpv2_uli_cgi_ci= -1;
    285. 

  285. static int hf_gtpv2_uli_sai_lac= -1;
    286. 

  286. static int hf_gtpv2_uli_sai_sac= -1;
    287. 

  287. static int hf_gtpv2_uli_rai_lac= -1;
    288. 

  288. static int hf_gtpv2_uli_rai_rac= -1;
    289. 

  289. static int hf_gtpv2_uli_tai_tac= -1;
    290. 

  290. static int hf_gtpv2_uli_ecgi_eci= -1;
    291. 

  291. static int hf_gtpv2_uli_lai_lac = -1;
    292. 

  292. static int hf_gtpv2_uli_ecgi_eci_spare= -1;
    293. 

  293. static int hf_gtpv2_nsapi = -1;
    294. 

  294. static int hf_gtpv2_bearer_control_mode= -1;
    295. 

  295. 

  296. 

  297. static gint ett_gtpv2 = -1;
    298. 

  298. static gint ett_gtpv2_flags = -1;
    299. 

  299. static gint ett_gtpv2_ie = -1;
    300. 

  300. static gint ett_gtpv2_uli_flags = -1;
    301. 

  301. static gint ett_gtpv2_uli_field = -1;
    302. 

  302. static gint ett_gtpv2_bearer_ctx = -1;
    303. 

  303. static gint ett_gtpv2_PDN_conn = -1;
    304. 

  304. static gint ett_gtpv2_mm_context_flag = -1;
    305. 

  305. static gint ett_gtpv2_pdn_numbers_nsapi = -1;
    306. 

  306. static gint ett_gtpv2_tra_info_trigg = -1;
    307. 

  307. static gint ett_gtpv2_tra_info_trigg_msc_server = -1;
    308. 

  308. static gint ett_gtpv2_tra_info_trigg_mgw = -1;
    309. 

  309. static gint ett_gtpv2_tra_info_trigg_sgsn = -1;
    310. 

  310. static gint ett_gtpv2_tra_info_trigg_ggsn = -1;
    311. 

  311. static gint ett_gtpv2_tra_info_trigg_bm_sc = -1;
    312. 

  312. static gint ett_gtpv2_tra_info_trigg_sgw_mme = -1;
    313. 

  313. static gint ett_gtpv2_tra_info_interfaces = -1;
    314. 

  314. static gint ett_gtpv2_tra_info_interfaces_imsc_server = -1;
    315. 

  315. static gint ett_gtpv2_tra_info_interfaces_lmgw = -1;
    316. 

  316. static gint ett_gtpv2_tra_info_interfaces_lsgsn = -1;
    317. 

  317. static gint ett_gtpv2_tra_info_interfaces_lggsn = -1;
    318. 

  318. static gint ett_gtpv2_tra_info_interfaces_lrnc = -1;
    319. 

  319. static gint ett_gtpv2_tra_info_interfaces_lbm_sc = -1;
    320. 

  320. static gint ett_gtpv2_tra_info_interfaces_lmme = -1;
    321. 

  321. static gint ett_gtpv2_tra_info_interfaces_lsgw = -1;
    322. 

  322. static gint ett_gtpv2_tra_info_interfaces_lpdn_gw = -1;
    323. 

  323. static gint ett_gtpv2_tra_info_interfaces_lpdn_lenb = -1;
    324. 

  324. static gint ett_gtpv2_tra_info_ne_types = -1;
    325. 

  325. 

  326. 

  327. /* Definition of User Location Info (AVP 22) masks */
    328. 

  328. #define GTPv2_ULI_CGI_MASK			0x01
    329. 

  329. #define GTPv2_ULI_SAI_MASK			0x02
    330. 

  330. #define GTPv2_ULI_RAI_MASK			0x04
    331. 

  331. #define GTPv2_ULI_TAI_MASK			0x08
    332. 

  332. #define GTPv2_ULI_ECGI_MASK			0x10
    333. 

  333. #define GTPv2_ULI_LAI_MASK			0x20
    334. 

  334. 

  335. #define GTPV2_CREATE_SESSION_REQUEST     32
    336. 

  336. #define GTPV2_CREATE_SESSION_RESPONSE    33
    337. 

  337. #define GTPV2_FORWARD_RELOCATION_REQ	133
    338. 

  338. #define GTPV2_FORWARD_CTX_NOTIFICATION	137
    339. 

  339. static void dissect_gtpv2_ie_common(tvbuff_t * tvb, packet_info * pinfo _U_, proto_tree * tree, gint offset, guint8 message_type);
    340. 

  340. 

  341. /*Message Types for GTPv2 (Refer Pg19 29.274) (SB)*/
    342. 

  342. static const value_string gtpv2_message_type_vals[] = {
    343. 

  343.     {0, "Reserved"},
    344. 

  344.     {1, "Echo Request"},
    345. 

  345.     {2, "Echo Response"},
    346. 

  346.     {3, "Version Not Supported Indication"},
    347. 

  347.     /* 4-24 Reserved for S101 interface TS 29.276 */
    348. 

  348.     /* 25-31 Reserved for Sv interface TS 29.280 */
    349. 

  349.     /* SGSN/MME to PGW (S4/S11, S5/S8) */
    350. 

  350.     {32, "Create Session Request"},
    351. 

  351.     {33, "Create Session Response"},
    352. 

  352.     {34, "Modify Bearer Request"},
    353. 

  353.     {35, "Modify Bearer Response"},
    354. 

  354.     {36, "Delete Session Request"},
    355. 

  355.     {37, "Delete Session Response"},
    356. 

  356.     /* SGSN to PGW (S4, S5/S8) */
    357. 

  357.     {38, "Change Notification Request"},
    358. 

  358.     {39, "Change Notification Response"},
    359. 

  359.     /* 40-63 For future use */
    360. 

  360.     /* Messages without explicit response */
    361. 

  361.     {64, "Modify Bearer Command"},                          /* (MME/SGSN to PGW -S11/S4, S5/S8) */
    362. 

  362.     {65, "Modify Bearer Failure Indication"},               /*(PGW to MME/SGSN -S5/S8, S11/S4) */
    363. 

  363.     {66, "Delete Bearer Command"},                          /* (MME to PGW -S11, S5/S8) */
    364. 

  364.     {67, "Delete Bearer Failure Indication"},               /* (PGW to MME -S5/S8, S11) */
    365. 

  365.     {68, "Bearer Resource Command"},                        /* (MME/SGSN to PGW -S11/S4, S5/S8) */
    366. 

  366.     {69, "Bearer Resource Failure Indication"},             /* (PGW to MME/SGSN -S5/S8, S11/S4) */
    367. 

  367.     {70, "Downlink Data Notification Failure Indication"},  /*(SGSN/MME to SGW -S4/S11) */
    368. 

  368.     {71, "Trace Session Activation"},
    369. 

  369.     {72, "Trace Session Deactivation"},
    370. 

  370.     {73, "Stop Paging Indication"},
    371. 

  371.     /* 74-94 For future use */
    372. 

  372.     /* PDN-GW to SGSN/MME (S5/S8, S4/S11) */
    373. 

  373.     {95, "Create Bearer Request"},
    374. 

  374.     {96, "Create Bearer Response"},
    375. 

  375.     {97, "Update Bearer Request"},
    376. 

  376.     {98, "Update Bearer Response"},
    377. 

  377.     {99, "Delete Bearer Request"},
    378. 

  378.     {100, "Delete Bearer Response"},
    379. 

  379.     /* PGW to MME, MME to PGW, SGW to PGW, SGW to MME (S5/S8, S11) */
    380. 

  380.     {101, "Delete PDN Connection Set Request"},
    381. 

  381.     {102, "Delete PDN Connection Set Response"},
    382. 

  382.     /* 103-127 For future use */
    383. 

  383.     /* MME to MME, SGSN to MME, MME to SGSN, SGSN to SGSN (S3/10/S16) */
    384. 

  384.     {128, "Identification Request"},
    385. 

  385.     {129, "Identification Response"},
    386. 

  386.     {130, "Context Request"},
    387. 

  387.     {131, "Context Response"},
    388. 

  388.     {132, "Context Acknowledge"},
    389. 

  389.     {133, "Forward Relocation Request"},
    390. 

  390.     {134, "Forward Relocation Response"},
    391. 

  391.     {135, "Forward Relocation Complete Notification"},
    392. 

  392.     {136, "Forward Relocation Complete Acknowledge"},
    393. 

  393.     {137, "Forward Access Context Notification"},
    394. 

  394.     {138, "Forward Access Context Acknowledge"},
    395. 

  395.     {139, "Relocation Cancel Request"},
    396. 

  396.     {140, "Relocation Cancel Response"},
    397. 

  397.     {141, "Configuration Transfer Tunnel"},
    398. 

  398.     /* 142-148 For future use */
    399. 

  399.     /* SGSN to MME, MME to SGSN (S3)*/
    400. 

  400.     {149, "Detach Notification"},
    401. 

  401.     {150, "Detach Acknowledge"},
    402. 

  402.     {151, "CS Paging Indication"},
    403. 

  403.     {152, "RAN Information Relay"},
    404. 

  404.     {153, "Alert MME Notification"},
    405. 

  405.     {154, "Alert MME Acknowledge"},
    406. 

  406.     {155, "UE Activity Notification"},
    407. 

  407.     {156, "UE Activity Acknowledge"},
    408. 

  408.     /* 157 to 159 For future use */
    409. 

  409.     /* MME to SGW (S11) */
    410. 

  410.     {160, "Create Forwarding Tunnel Request"},
    411. 

  411.     {161, "Create Forwarding Tunnel Response"},
    412. 

  412.     {162, "Suspend Notification"},
    413. 

  413.     {163, "Suspend Acknowledge"},
    414. 

  414.     {164, "Resume Notification"},
    415. 

  415.     {165, "Resume Acknowledge"},
    416. 

  416.     {166, "Create Indirect Data Forwarding Tunnel Request"},
    417. 

  417.     {167, "Create Indirect Data Forwarding Tunnel Response"},
    418. 

  418.     {168, "Delete Indirect Data Forwarding Tunnel Request"},
    419. 

  419.     {169, "Delete Indirect Data Forwarding Tunnel Response"},
    420. 

  420.     {170, "Release Access Bearers Request"},
    421. 

  421.     {171, "Release Access Bearers Response"},
    422. 

  422.     /* 172-175 For future use */
    423. 

  423.     /* SGW to SGSN/MME (S4/S11) */
    424. 

  424.     {176, "Downlink Data Notification"},
    425. 

  425.     {177, "Downlink Data Notification Acknowledgement"},
    426. 

  426.     /* SGW to SGSN (S4) */
    427. 

  427.     {178, "Update Bearer Complete"},
    428. 

  428.     /* 179-191 For future use */
    429. 

  429.     /* Other */
    430. 

  430.     {200, "Update PDN Connection Set Request"},
    431. 

  431.     {201, "Update PDN Connection Set Response"},
    432. 

  432. 	/* 202 to 230 For future use */
    433. 

  433. 	/* MBMS GW to MME/SGSN (Sm/Sn) */
    434. 

  434.     {231, "MBMS Session Start Request"},
    435. 

  435.     {323, "MBMS Session Start Response"},
    436. 

  436.     {233, "MBMS Session Update Request"},
    437. 

  437.     {234, "MBMS Session Update Response"},
    438. 

  438.     {235, "MBMS Session Stop Request"},
    439. 

  439.     {236, "MBMS Session Stop Response"},
    440. 

  440. 	/* 237 to 239 For future use */
    441. 

  441. /* 240-255 Reserved for GTP-U TS 29.281 [13] */
    442. 

  442.     {0, NULL}
    443. 

  443. };
    444. 

  444. 

  445. #define GTPV2_IE_RESERVED        0
    446. 

  446. #define GTPV2_IE_IMSI            1
    447. 

  447. #define GTPV2_IE_CAUSE           2
    448. 

  448. #define GTPV2_REC_REST_CNT       3
    449. 

  449. #define GTPV2_APN               71
    450. 

  450. #define GTPV2_AMBR              72
    451. 

  451. #define GTPV2_EBI               73
    452. 

  452. #define GTPV2_IP_ADDRESS        74
    453. 

  453. #define GTPV2_MEI               75
    454. 

  454. #define GTPV2_IE_MSISDN         76
    455. 

  455. #define GTPV2_INDICATION        77
    456. 

  456. #define GTPV2_PCO               78
    457. 

  457. #define GTPV2_PAA               79
    458. 

  458. #define GTPV2_BEARER_QOS        80
    459. 

  459. #define GTPV2_IE_FLOW_QOS       81
    460. 

  460. #define GTPV2_IE_RAT_TYPE       82
    461. 

  461. #define GTPV2_IE_SERV_NET       83
    462. 

  462. #define GTPV2_IE_BEARER_TFT     84
    463. 

  463. #define GTPV2_IE_TAD            85
    464. 

  464. #define GTPV2_IE_ULI            86
    465. 

  465. #define GTPV2_IE_F_TEID         87
    466. 

  466. #define GTPV2_IE_TMSI           88
    467. 

  467. #define GTPV2_IE_GLOBAL_CNID    89
    468. 

  468. #define GTPV2_IE_S103PDF                 90
    469. 

  469. #define GTPV2_IE_S1UDF                   91
    470. 

  470. #define GTPV2_IE_DEL_VAL                 92
    471. 

  471. #define GTPV2_IE_BEARER_CTX              93
    472. 

  472. #define GTPV2_IE_CHAR_ID                 94
    473. 

  473. #define GTPV2_IE_CHAR_CHAR               95
    474. 

  474. #define GTPV2_IE_TRA_INFO		         96
    475. 

  475. #define GTPV2_BEARER_FLAG                97
    476. 

  476. /* define GTPV2_IE_PAGING_CAUSE          98 (void) */
    477. 

  477. #define GTPV2_IE_PDN_TYPE                99
    478. 

  478. #define GTPV2_IE_PTI                    100
    479. 

  479. #define GTPV2_IE_DRX_PARAM              101
    480. 

  480. #define GTPV2_IE_UE_NET_CAPABILITY      102
    481. 

  481. #define GTPV2_IE_MM_CONTEXT_GSM_T       103
    482. 

  482. #define GTPV2_IE_MM_CONTEXT_UTMS_CQ     104
    483. 

  483. #define GTPV2_IE_MM_CONTEXT_GSM_CQ      105
    484. 

  484. #define GTPV2_IE_MM_CONTEXT_UTMS_Q      106
    485. 

  485. #define GTPV2_IE_MM_CONTEXT_EPS_QQ      107
    486. 

  486. #define GTPV2_IE_MM_CONTEXT_UTMS_QQ     108
    487. 

  487. #define GTPV2_IE_PDN_CONNECTION         109
    488. 

  488. #define GTPV2_IE_PDN_NUMBERS            110
    489. 

  489. #define GTPV2_IE_P_TMSI                 111
    490. 

  490. #define GTPV2_IE_P_TMSI_SIG             112
    491. 

  491. #define GTPV2_IE_HOP_COUNTER            113
    492. 

  492. #define GTPV2_IE_UE_TIME_ZONE           114
    493. 

  493. #define GTPV2_IE_TRACE_REFERENCE        115
    494. 

  494. #define GTPV2_IE_COMPLETE_REQUEST_MSG   116
    495. 

  495. #define GTPV2_IE_GUTI                   117
    496. 

  496. #define GTPV2_IE_F_CONTAINER	        118
    497. 

  497. #define GTPV2_IE_F_CAUSE                119
    498. 

  498. #define GTPV2_IE_SEL_PLMN_ID            120
    499. 

  499. #define GTPV2_IE_TARGET_ID              121
    500. 

  500. /* GTPV2_IE_NSAPI                       122 */
    501. 

  501. #define GTPV2_IE_PKT_FLOW_ID            123
    502. 

  502. #define GTPV2_IE_RAB_CONTEXT            124
    503. 

  503. #define GTPV2_IE_S_RNC_PDCP_CTX_INFO    125
    504. 

  504. #define GTPV2_IE_UDP_S_PORT_NR          126
    505. 

  505. #define GTPV2_IE_APN_RESTRICTION        127
    506. 

  506. #define GTPV2_IE_SEL_MODE               128
    507. 

  507. #define GTPV2_IE_SOURCE_IDENT           129
    508. 

  508. #define GTPV2_IE_BEARER_CONTROL_MODE    130
    509. 

  509. #define GTPV2_IE_CNG_REP_ACT            131
    510. 

  510. #define GTPV2_IE_FQ_CSID                132
    511. 

  511. #define GTPV2_IE_CHANNEL_NEEDED         133
    512. 

  512. #define GTPV2_IE_EMLPP_PRI              134
    513. 

  513. #define GTPV2_IE_NODE_TYPE              135
    514. 

  514. #define GTPV2_IE_FQDN                   136
    515. 

  515. #define GTPV2_IE_TI                     137
    516. 

  516. #define GTPV2_IE_PRIVATE_EXT            255
    517. 

  517. 

  518. #define SPARE                               0X0
    519. 

  519. #define CREATE_NEW_TFT                      0X20
    520. 

  520. #define DELETE_TFT                          0X40
    521. 

  521. #define ADD_PACKET_FILTERS_TFT              0X60
    522. 

  522. #define REPLACE_PACKET_FILTERS_TFT          0X80
    523. 

  523. #define DELETE_PACKET_FILTERS_TFT           0XA0
    524. 

  524. #define NO_TFT_OPERATION                    0XC0
    525. 

  525. #define RESERVED                            0XE0
    526. 

  526. 

  527. 

  528. /* Table 8.1-1: Information Element types for GTPv2 */
    529. 

  529. static const value_string gtpv2_element_type_vals[] = {
    530. 

  530.     {0, "Reserved"},
    531. 

  531.     {1, "International Mobile Subscriber Identity (IMSI)"},                     /* Variable Length / 8.3 */
    532. 

  532.     {2, "Cause"},                                                               /* Variable Length / 8.4 */
    533. 

  533.     {3, "Recovery (Restart Counter)"},                                          /* Variable Length / 8.5 */
    534. 

  534.     /* 4-50 Reserved for S101 interface Extendable / See 3GPP TS 29.276 [14] */
    535. 

  535.     /* 51-70 Reserved for Sv interface Extendable / See 3GPP TS 29.280 [15] */
    536. 

  536.     {71, "Access Point Name (APN)"},                                            /* Variable Length / 8.6 */
    537. 

  537.     {72, "Aggregate Maximum Bit Rate (AMBR)"},                                  /* Fixed Length / 8.7 */
    538. 

  538.     {73, "EPS Bearer ID (EBI)"},                                                /* Extendable / 8.8 */
    539. 

  539.     {74, "IP Address"},                                                         /* Extendable / 8.9 */
    540. 

  540.     {75, "Mobile Equipment Identity (MEI)"},                                    /* Variable Length / 8.10 */
    541. 

  541.     {76, "MSISDN"},                                                             /* Variable Length / 8.11 */
    542. 

  542.     {77, "Indication"},                                                         /* Extendable / 8.12 */
    543. 

  543.     {78, "Protocol Configuration Options (PCO)"},                               /* Variable Length / 8.13 */
    544. 

  544.     {79, "PDN Address Allocation (PAA)"},                                       /* Variable Length / 8.14 */
    545. 

  545.     {80, "Bearer Level Quality of Service (Bearer QoS)"},                       /* Variable Length / 8.15 */
    546. 

  546.     {81, "Flow Quality of Service (Flow QoS)"},                                 /* Extendable / 8.16 */
    547. 

  547.     {82, "RAT Type"},                                                           /* Extendable / 8.17 */
    548. 

  548.     {83, "Serving Network"},                                                    /* Extendable / 8.18 */
    549. 

  549.     {84, "EPS Bearer Level Traffic Flow Template (Bearer TFT)"},                /* Variable Length / 8.19 */
    550. 

  550.     {85, "Traffic Aggregation Description (TAD)"},                              /* Variable Length / 8.20 */
    551. 

  551.     {86, "User Location Info (ULI)"},                                           /* Variable Length / 8.21 */
    552. 

  552.     {87, "Fully Qualified Tunnel Endpoint Identifier (F-TEID)"},                /* Extendable / 8.22 */
    553. 

  553.     {88, "TMSI"},                                                               /* Variable Length / 8.23 */
    554. 

  554.     {89, "Global CN-Id"},                                                       /* Variable Length / 8.24 */
    555. 

  555.     {90, "S103 PDN Data Forwarding Info (S103PDF)"},                            /* Variable Length / 8.25 */
    556. 

  556.     {91, "S1-U Data Forwarding Info (S1UDF)"},                                  /* Variable Length/ 8.26 */
    557. 

  557.     {92, "Delay Value"},                                                        /* Extendable / 8.27 */
    558. 

  558.     {93, "Bearer Context"},                                                     /* Extendable / 8.28 */
    559. 

  559.     {94, "Charging ID"},                                                        /* Extendable / 8.29 */
    560. 

  560.     {95, "Charging Characteristics"},                                           /* Extendable / 8.30 */
    561. 

  561.     {96, "Trace Information"},                                                  /* Extendable / 8.31 */
    562. 

  562.     {97, "Bearer Flags"},                                                       /* Extendable / 8.32 */
    563. 

  563.     {98, "Paging Cause"},                                                       /* Variable Length / 8.33 */
    564. 

  564.     {99, "PDN Type"},                                                           /* Extendable / 8.34 */
    565. 

  565.     {100, "Procedure Transaction ID"},                                          /* Extendable / 8.35 */
    566. 

  566.     {101, "DRX Parameter"},                                                     /* Variable Length/ 8.36 */
    567. 

  567.     {102, "UE Network Capability"},                                             /* Variable Length / 8.37 */
    568. 

  568.     {103, "MM Context (GSM Key and Triplets)"},                                 /* Variable Length / 8.38 */
    569. 

  569.     {104, "MM Context (UMTS Key, Used Cipher and Quintuplets)"},                /* Variable Length / 8.38 */
    570. 

  570.     {105, "MM Context (GSM Key, Used Cipher and Quintuplets)"},                 /* Variable Length / 8.38 */
    571. 

  571.     {106, "MM Context (UMTS Key and Quintuplets)"},                             /* Variable Length / 8.38 */
    572. 

  572.     {107, "MM Context (EPS Security Context, Quadruplets and Quintuplets)"},    /* Variable Length / 8.38 */
    573. 

  573.     {108, "MM Context (UMTS Key, Quadruplets and Quintuplets)"},                /* Variable Length / 8.38 */
    574. 

  574.     {109, "PDN Connection"},                                                    /* Extendable / 8.39 */
    575. 

  575.     {110, "PDU Numbers"},                                                       /* Extendable / 8.40 */
    576. 

  576.     {111, "P-TMSI"},                                                            /* Variable Length / 8.41 */
    577. 

  577.     {112, "P-TMSI Signature"},                                                  /* Variable Length / 8.42 */
    578. 

  578.     {113, "Hop Counter"},                                                       /* Extendable / 8.43 */
    579. 

  579.     {114, "UE Time Zone"},                                                      /* Variable Length / 8.44 */
    580. 

  580.     {115, "Trace Reference"},                                                   /* Fixed Length / 8.45 */
    581. 

  581.     {116, "Complete Request Message"},                                          /* Variable Length / 8.46 */
    582. 

  582.     {117, "GUTI"},                                                              /* Variable Length / 8.47 */
    583. 

  583.     {118, "F-Container"},                                                       /* Variable Length / 8.48 */
    584. 

  584.     {119, "F-Cause"},                                                           /* Variable Length / 8.49 */
    585. 

  585.     {120, "Selected PLMN ID"},                                                  /* Variable Length / 8.50 */
    586. 

  586.     {121, "Target Identification"},                                             /* Variable Length / 8.51 */
    587. 

  587.     {122, "NSAPI"},                                                             /* Extendable / 8.52 */
    588. 

  588.     {123, "Packet Flow ID"},                                                    /* Variable Length / 8.53 */
    589. 

  589.     {124, "RAB Context"},                                                       /* Fixed Length / 8.54 */
    590. 

  590.     {125, "Source RNC PDCP Context Info"},                                      /* Variable Length / 8.55 */
    591. 

  591.     {126, "UDP Source Port Number"},                                            /* Extendable / 8.56 */
    592. 

  592.     {127, "APN Restriction"},                                                   /* Extendable / 8.57 */
    593. 

  593.     {128, "Selection Mode"},                                                    /* Extendable / 8.58 */
    594. 

  594.     {129, "Source Identification"},                                             /* Variable Length / 8.50 */
    595. 

  595.     {130, "Bearer Control Mode"},                                               /* Extendable / 8.60 */
    596. 

  596.     {131, "Change Reporting Action"},                                           /* Variable Length / 8.61 */
    597. 

  597.     {132, "Fully Qualified PDN Connection Set Identifier (FQ-CSID)"},           /* Variable Length / 8.62 */
    598. 

  598.     {133, "Channel needed"},                                                    /* Extendable / 8.63 */
    599. 

  599.     {134, "eMLPP Priority"},                                                    /* Extendable / 8.64 */
    600. 

  600.     {135, "Node Type"},                                                         /* Extendable / 8.65 */
    601. 

  601.     {136, "Fully Qualified Domain Name (FQDN)"},                                /* Variable Length / 8.66 */
    602. 

  602.     {137, "Transaction Identifier (TI)"},                                       /* Variable Length / 8.68 */
    603. 

  603.     {138, "MBMS Session"},							/* Duration Extendable / 8.69 */
    604. 

  604.     {139, "MBMS Service Area"},							/* Extendable / 8.70 */
    605. 

  605.     {140, "MBMS Session Identifier"},						/* Extendable / 8.71 */
    606. 

  606.     {141, "MBMS Flow Identifier"},						/* Extendable / 8.72 */
    607. 

  607.     {142, "MBMS IP Multicast Distribution"},					/* Extendable / 8.73 */
    608. 

  608.     {143, "MBMS Distribution Acknowledge"},					/* Extendable / 8.74 */
    609. 

  609.     {144, "RFSP Index"},							/* Fixed Length / 8.77 */
    610. 

  610.     {145, "User CSG Information (UCI)"},					/* Extendable / 8.75 */
    611. 

  611.     {146, "CSG Information Reporting Action"},					/* Extendable / 8.76 */
    612. 

  612.     {147, "CSG ID"},								/* Extendable / 8.78 */
    613. 

  613.     {148, "CSG Membership Indication (CMI)"},					/* Extendable / 8.79 */
    614. 

  614.     {149, "Service indicator"},							/* Fixed Length / 8.80 */
    615. 

  615.     {150, "Detach Type"},							/* Fixed Length / 8.81 */
    616. 

  616.     {151, "Local Distiguished Name (LDN)"},					/* Variable / 8.82 */
    617. 

  617.     {152, "Node Features"},                                                     /* Extendable / 8.83 */
    618. 

  618.     {153, "MBMS Time to Data Transfer"},                                        /* Extendable / 8.84 */
    619. 

  619.     {154, "Throttling"},                                                        /* Extendable / 8.85 */
    620. 

  620.     {155, "Allocation/Retention Priority (ARP)"},                               /* Extendable / 8.86 */
    621. 

  621.     /* 156 to 254 Spare. For future use.  */                                    /* For future use. FFS */
    622. 

  622.     {255, "Private"},                                                           /* Extension Extendable / 8.67 */
    623. 

  623.     {0, NULL}
    624. 

  624. };
    625. 

  625. 

  626. /* Code to dissect IE's */
    627. 

  627. 

  628. static void
    629. 

  629. dissect_gtpv2_unknown(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, proto_item *item _U_, guint16 length _U_,guint8 message_type _U_,  guint8 instance _U_)
    630. 

  630. {
    631. 

  631.    proto_item *expert_item;
    632. 

  632. 

  633.    expert_item = proto_tree_add_text(tree, tvb, 0, length, "IE data not dissected yet");
    634. 

  634.    expert_add_info_format(pinfo, expert_item, PI_PROTOCOL, PI_NOTE, "IE data not dissected yet");
    635. 

  635.    PROTO_ITEM_SET_GENERATED(expert_item);
    636. 

  636. 

  637. }
    638. 

  638. 

  639. /*
    640. 

  640.  * 8.3 International Mobile Subscriber Identity (IMSI)
    641. 

  641.  *
    642. 

  642.  * IMSI is defined in 3GPP TS 23.003
    643. 

  643.  * Editor's note: IMSI coding will be defined in 3GPP TS 24.301
    644. 

  644.  * Editor's note: In the first release of GTPv2 spec (TS 29.274v8.0.0) n = 8.
    645. 

  645.  * That is, the overall length of the IE is 11 octets.
    646. 

  646.  */
    647. 

  647. 

  648. static void
    649. 

  649. dissect_gtpv2_imsi(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, proto_item *item _U_, guint16 length _U_,guint8 message_type _U_,  guint8 instance _U_)
    650. 

  650. {
    651. 

  651.     int offset= 0;
    652. 

  652.     const gchar *imsi_str;
    653. 

  653. 

  654.     /* Fetch the BCD encoded digits from tvb low half byte, formating the digits according to
    655. 

  655.      * a default digit set of 0-9 returning "?" for overdecadic digits a pointer to the EP
    656. 

  656.      * allocated string will be returned.
    657. 

  657.      */
    658. 

  658.     imsi_str = tvb_bcd_dig_to_ep_str( tvb, offset, length, NULL, FALSE);
    659. 

  659. 

  660.     proto_tree_add_string(tree, hf_gtpv2_imsi, tvb, offset, length, imsi_str);
    661. 

  661.     proto_item_append_text(item, "%s", imsi_str);
    662. 

  662. 

  663. }
    664. 

  664. 

  665. /*
    666. 

  666.  * 8.4 Cause
    667. 

  667.  */
    668. 

  668. 

  669. /* Table 8.4-1: Cause values */
    670. 

  670. static const value_string gtpv2_cause_vals[] = {
    671. 

  671.     {0, "Reserved"},
    672. 

  672.     /* Request */
    673. 

  673.     {1, "Paging Cause"},
    674. 

  674.     {2, "Local Detach"},
    675. 

  675.     {3, "Complete Detach"},
    676. 

  676.     {4, "RAT changed from 3GPP to Non-3GPP"},
    677. 

  677.     {5, "ISR is activated"},
    678. 

  678.     {6, "Error Indication received from RNC/eNodeB"},
    679. 

  679.     {7, "IMSI Detach Only"},
    680. 

  680.     {8, "Reactivation Requested"},
    681. 

  681.     {9, "PDN reconnection to this APN disallowed"},
    682. 

  682.     {10, "Access changed from Non-3GPP to 3GPP"},
    683. 

  683.     /* 11-15 Spare. This value range is reserved for Cause values in a request message */
    684. 

  684.     {11, "Spare"},
    685. 

  685.     {12, "Spare"},
    686. 

  686.     {13, "Spare"},
    687. 

  687.     {14, "Spare"},
    688. 

  688.     {15, "Spare"},
    689. 

  689.     /* Acceptance Response */
    690. 

  690.     {16, "Request accepted"},
    691. 

  691.     {17, "Request accepted partially"},
    692. 

  692.     {18, "New PDN type due to network preference"},
    693. 

  693.     {19, "New PDN type due to single address bearer only"},
    694. 

  694.     /* 20-63 Spare. This value range is reserved for Cause values in acceptance response message */
    695. 

  695.     /* Rejection Response */
    696. 

  696.     {20, "Spare"},
    697. 

  697.     {21, "Spare"},
    698. 

  698.     {22, "Spare"},
    699. 

  699.     {23, "Spare"},
    700. 

  700.     {24, "Spare"},
    701. 

  701.     {25, "Spare"},
    702. 

  702.     {26, "Spare"},
    703. 

  703.     {27, "Spare"},
    704. 

  704.     {28, "Spare"},
    705. 

  705.     {29, "Spare"},
    706. 

  706.     {30, "Spare"},
    707. 

  707.     {31, "Spare"},
    708. 

  708.     {32, "Spare"},
    709. 

  709.     {33, "Spare"},
    710. 

  710.     {34, "Spare"},
    711. 

  711.     {35, "Spare"},
    712. 

  712.     {36, "Spare"},
    713. 

  713.     {37, "Spare"},
    714. 

  714.     {38, "Spare"},
    715. 

  715.     {39, "Spare"},
    716. 

  716.     {40, "Spare"},
    717. 

  717.     {41, "Spare"},
    718. 

  718.     {42, "Spare"},
    719. 

  719.     {43, "Spare"},
    720. 

  720.     {44, "Spare"},
    721. 

  721.     {45, "Spare"},
    722. 

  722.     {46, "Spare"},
    723. 

  723.     {47, "Spare"},
    724. 

  724.     {48, "Spare"},
    725. 

  725.     {49, "Spare"},
    726. 

  726.     {50, "Spare"},
    727. 

  727.     {51, "Spare"},
    728. 

  728.     {52, "Spare"},
    729. 

  729.     {53, "Spare"},
    730. 

  730.     {54, "Spare"},
    731. 

  731.     {55, "Spare"},
    732. 

  732.     {56, "Spare"},
    733. 

  733.     {57, "Spare"},
    734. 

  734.     {58, "Spare"},
    735. 

  735.     {59, "Spare"},
    736. 

  736.     {60, "Spare"},
    737. 

  737.     {61, "Spare"},
    738. 

  738.     {62, "Spare"},
    739. 

  739.     {63, "Spare"},
    740. 

  740. 

  741.     {64, "Context Not Found"},
    742. 

  742.     {65, "Invalid Message Format"},
    743. 

  743.     {66, "Version not supported by next peer"},
    744. 

  744.     {67, "Invalid length"},
    745. 

  745.     {68, "Service not supported"},
    746. 

  746.     {69, "Mandatory IE incorrect"},
    747. 

  747.     {70, "Mandatory IE missing"},
    748. 

  748.     {71, "Optional IE incorrect"},
    749. 

  749.     {72, "System failure"},
    750. 

  750.     {73, "No resources available"},
    751. 

  751.     {74, "Semantic error in the TFT operation"},
    752. 

  752.     {75, "Syntactic error in the TFT operation"},
    753. 

  753.     {76, "Semantic errors in packet filter(s)"},
    754. 

  754.     {77, "Syntactic errors in packet filter(s)"},
    755. 

  755.     {78, "Missing or unknown APN"},
    756. 

  756.     {79, "Unexpected repeated IE"},
    757. 

  757.     {80, "GRE key not found"},
    758. 

  758.     {81, "Reallocation failure"},
    759. 

  759.     {82, "Denied in RAT"},
    760. 

  760.     {83, "Preferred PDN type not supported"},
    761. 

  761.     {84, "All dynamic addresses are occupied"},
    762. 

  762.     {85, "UE context without TFT already activated"},
    763. 

  763.     {86, "Protocol type not supported"},
    764. 

  764.     {87, "UE not responding"},
    765. 

  765.     {88, "UE refuses"},
    766. 

  766.     {89, "Service denied"},
    767. 

  767.     {90, "Unable to page UE"},
    768. 

  768.     {91, "No memory available"},
    769. 

  769.     {92, "User authentication failed"},
    770. 

  770.     {93, "APN access denied - no subscription"},
    771. 

  771.     {94, "Request rejected"},
    772. 

  772.     {95, "P-TMSI Signature mismatch"},
    773. 

  773.     {96, "IMSI not known"},
    774. 

  774.     {97, "Semantic error in the TAD operation"},
    775. 

  775.     {98, "Syntactic error in the TAD operation"},
    776. 

  776.     {99, "Reserved Message Value Received"},
    777. 

  777.     {100, "PGW not responding"},
    778. 

  778.     {101, "Collision with network initiated request"},
    779. 

  779.     {102, "Unable to page UE due to Suspension"},
    780. 

  780.     {103, "Conditional IE missing"},
    781. 

  781.     {104, "APN Restriction type Incompatible with currently active PDN connection"},
    782. 

  782.     {105, "Invalid overall length of the triggered response message and a piggybacked initial message"},
    783. 

  783.     {106, "Data forwarding not supported"},
    784. 

  784.     {107, "Invalid reply from remote peer"},
    785. 

  785.     {108, "Fallback to GTPv1"},
    786. 

  786.     {109, "Invalid peer"},
    787. 

  787.     {110, "Temporarily rejected due to handover procedure in progress"},
    788. 

  788.     {111, "Modifications not limited to S1-U bearers"},
    789. 

  789.     {112, "Request rejected for a PMIPv6 reason "},
    790. 

  790.     /* 113-239 Spare. For future use in a triggered/response message  */
    791. 

  791.     /* 240-255 Spare. For future use in an initial/request message */
    792. 

  792.     {0, NULL}
    793. 

  793. };
    794. 

  794. 

  795. static value_string_ext gtpv2_cause_vals_ext = VALUE_STRING_EXT_INIT(gtpv2_cause_vals);
    796. 

  796. 

  797. /* Table 8.4-1: CS (Cause Source) */
    798. 

  798. static const true_false_string gtpv2_cause_cs = {
    799. 

  799. 	"Originated by remote node",
    800. 

  800. 	"Originated by node sending the message",
    801. 

  801. };
    802. 

  802. 

  803. static void
    804. 

  804. dissect_gtpv2_cause(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, proto_item *item _U_, guint16 length _U_,guint8 message_type _U_,  guint8 instance _U_)
    805. 

  805. {
    806. 

  806.     int     offset = 0;
    807. 

  807.     guint8  tmp;
    808. 

  808. 

  809.     /* Cause value octet 5 */
    810. 

  810.     tmp = tvb_get_guint8(tvb, offset);
    811. 

  811.     proto_tree_add_item(tree, hf_gtpv2_cause, tvb, offset, 1, FALSE);
    812. 

  812. 

  813.     /* Add Cause to ie_tree */
    814. 

  814.     proto_item_append_text(item, "%s (%u)", val_to_str_ext_const(tmp, &gtpv2_cause_vals_ext, "Unknown"),tmp);
    815. 

  815.     offset++;
    816. 

  816. 

  817.     /* Octet 6 Spare PCE BCE CS */
    818. 

  818.     proto_tree_add_bits_item(tree, hf_gtpv2_spare_bits, tvb, offset<<3, 5, FALSE);
    819. 

  819.     proto_tree_add_item(tree, hf_gtpv2_cause_pce, tvb, offset, 1, FALSE);
    820. 

  820.     proto_tree_add_item(tree, hf_gtpv2_cause_bce, tvb, offset, 1, FALSE);
    821. 

  821.     proto_tree_add_item(tree, hf_gtpv2_cause_cs, tvb, offset, 1, FALSE);
    822. 

  822.     offset++;
    823. 

  823. 

  824.     /* If n = 2, a = 0 and the Cause IE shall be 6 octets long.
    825. 

  825.      * Therefore, octets "a(n+1) to a(n+4)" will not be present.
    826. 

  826.      * If n = 6, a = 1 and the Cause IE will be 10 octets long.
    827. 

  827.      */
    828. 

  828.     if ( length == 2 ) {
    829. 

  829.         return;
    830. 

  830.     }
    831. 

  831. 	/*
    832. 

  832. 	 * If the rejection is due to a mandatory IE or a verifiable conditional IE is faulty
    833. 

  833. 	 * or missing, the offending IE shall be included within an additional field "a(n+1)
    834. 

  834. 	 * to a(n+4)". Only Type and Instance fields of the offending IE that caused the
    835. 

  835. 	 * rejection have a meaning. The length in the Octet 8-9 and spare bits in the Octet 10
    836. 

  836. 	 * shall be set to "0". In this case, the value of "n" shall be "6".
    837. 

  837. 	 * Otherwise, the value of "n" is equal to "2".
    838. 

  838. 	 */
    839. 

  839. 

  840.     /* Type of the offending IE */
    841. 

  841. 	proto_tree_add_item(tree, hf_gtpv2_cause_off_ie_t, tvb, offset, 1, FALSE);
    842. 

  842.     offset++;
    843. 

  843. 

  844.     /* Length */
    845. 

  845.     proto_tree_add_item(tree, hf_gtpv2_ie_len, tvb, offset, 2, FALSE);
    846. 

  846.     offset+=2;
    847. 

  847.     /* a(n+4) Spare Instance */
    848. 

  848.     proto_tree_add_bits_item(tree, hf_gtpv2_spare_half_octet, tvb, offset>>3, 4, FALSE);
    849. 

  849.     proto_tree_add_item(tree, hf_gtpv2_instance, tvb, offset, 1, FALSE);
    850. 

  850.     offset++;
    851. 

  851. 

  852. }
    853. 

  853. 

  854. /*
    855. 

  855.  * 8.5 Recovery (Restart Counter)
    856. 

  856.  */
    857. 

  857. static void
    858. 

  858. dissect_gtpv2_recovery(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, proto_item *item _U_, guint16 length _U_,guint8 message_type _U_,  guint8 instance _U_)
    859. 

  859. {
    860. 

  860.     int     offset = 0;
    861. 

  861.     guint8  recovery;
    862. 

  862. 

  863.     recovery = tvb_get_guint8(tvb, offset);
    864. 

  864.     proto_tree_add_item(tree, hf_gtpv2_rec, tvb, offset, 1, FALSE);
    865. 

  865.     proto_item_append_text(item, "%u", recovery);
    866. 

  866. 

  867. }
    868. 

  868. 

  869. /*
    870. 

  870.  * 8.6 Access Point Name (APN)
    871. 

  871.  * The encoding the APN field follows 3GPP TS 23.003 [2] subclause 9.1.
    872. 

  872.  * The content of the APN field shall be the full APN with both the APN Network Identifier
    873. 

  873.  * and APN Operator Identifier being present as specified in 3GPP TS 23.003 [2]
    874. 

  874.  * subclauses 9.1.1 and 9.1.2, 3GPP TS 23.060 [35] Annex A and 3GPP TS 23.401 [3] subclauses 4.3.8.1.
    875. 

  875.  */
    876. 

  876. static void
    877. 

  877. dissect_gtpv2_apn(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, proto_item *item _U_, guint16 length _U_, guint8 message_type _U_,  guint8 instance _U_)
    878. 

  878. {
    879. 

  879.     int offset = 0;
    880. 

  880.     guint8 *apn = NULL;
    881. 

  881.     int name_len, tmp;
    882. 

  882. 

  883.     if (length > 0) {
    884. 

  884.         name_len = tvb_get_guint8(tvb, offset);
    885. 

  885. 

  886.         if (name_len < 0x20) {
    887. 

  887.             apn = tvb_get_ephemeral_string(tvb, offset + 1, length - 1);
    888. 

  888.             for (;;) {
    889. 

  889.                 if (name_len >= length - 1)
    890. 

  890.                 break;
    891. 

  891.                 tmp = name_len;
    892. 

  892.                 name_len = name_len + apn[tmp] + 1;
    893. 

  893.                 apn[tmp] = '.';
    894. 

  894.             }
    895. 

  895.         } else{
    896. 

  896.             apn = tvb_get_ephemeral_string(tvb, offset, length);
    897. 

  897.         }
    898. 

  898.         proto_tree_add_string(tree, hf_gtpv2_apn, tvb, offset, length, apn);
    899. 

  899.     }
    900. 

  900. 

  901.     if (apn)
    902. 

  902. 	proto_item_append_text(item, "%s", apn);
    903. 

  903. 

  904. }
    905. 

  905. 

  906. /*
    907. 

  907.  * 8.7 Aggregate Maximum Bit Rate (AMBR)
    908. 

  908.  */
    909. 

  909. 

  910. static void
    911. 

  911. dissect_gtpv2_ambr(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, proto_item *item _U_, guint16 length _U_,guint8 message_type _U_,  guint8 instance _U_)
    912. 

  912. {
    913. 

  913.     int offset = 0;
    914. 

  914. 

  915.     proto_tree_add_item(tree, hf_gtpv2_ambr_up, tvb, offset, 4, FALSE);
    916. 

  916.     offset= offset + 4;
    917. 

  917.     proto_tree_add_item(tree, hf_gtpv2_ambr_down, tvb, offset, 4, FALSE);
    918. 

  918. }
    919. 

  919. 

  920. /*
    921. 

  921.  * 8.8 EPS Bearer ID (EBI)
    922. 

  922.  */
    923. 

  923. static void
    924. 

  924. dissect_gtpv2_ebi(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, proto_item *item _U_, guint16 length _U_,guint8 message_type _U_,  guint8 instance _U_)
    925. 

  925. {
    926. 

  926. 

  927.     int offset = 0;
    928. 

  928.     guint8       ebi;
    929. 

  929. 

  930.     /* Spare (all bits set to 0) B8 - B5*/
    931. 

  931.     proto_tree_add_bits_item(tree, hf_gtpv2_spare_bits, tvb, offset, 4, FALSE);
    932. 

  932.     /* EPS Bearer ID (EBI) B4 - B1 */
    933. 

  933.     ebi = tvb_get_guint8(tvb, offset);
    934. 

  934.     proto_tree_add_item(tree, hf_gtpv2_ebi, tvb, offset, 1, FALSE);
    935. 

  935.     proto_item_append_text(item, "%u", ebi);
    936. 

  936. 

  937. }
    938. 

  938. /*
    939. 

  939.  * 8.9 IP Address
    940. 

  940.  */
    941. 

  941. static void
    942. 

  942. dissect_gtpv2_ip_address(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, proto_item *item _U_, guint16 length _U_,guint8 message_type _U_,  guint8 instance _U_)
    943. 

  943. {
    944. 

  944.     int offset = 0;
    945. 

  945.     struct e_in6_addr ipv6_addr;
    946. 

  946. 

  947.     if (length==4)
    948. 

  948.     {
    949. 

  949.         proto_tree_add_item(tree, hf_gtpv2_ip_address_ipv4, tvb, offset, length, FALSE);
    950. 

  950. 	    proto_item_append_text(item, "IPv4 %s", tvb_ip_to_str(tvb, offset));
    951. 

  951.     }
    952. 

  952.     else if (length==16)
    953. 

  953.     {
    954. 

  954.         proto_tree_add_item(tree, hf_gtpv2_ip_address_ipv6, tvb, offset, length, FALSE);
    955. 

  955. 	tvb_get_ipv6(tvb, offset, &ipv6_addr);
    956. 

  956. 	proto_item_append_text(item, "IPv6 %s", ip6_to_str(&ipv6_addr));
    957. 

  957.     }
    958. 

  958. }
    959. 

  959. /*
    960. 

  960.  * 8.10 Mobile Equipment Identity (MEI)
    961. 

  961.  * The ME Identity field contains either the IMEI or the IMEISV
    962. 

  962.  * as defined in clause 6.2 of 3GPP TS 23.003 [2]. It is encoded
    963. 

  963.  * as specified in clause 7.7.53 of 3GPP TS 29.060 [4], beginning
    964. 

  964.  * with octet 4 of Figure 7.7.53.1. The IMEI(SV) digits are encoded
    965. 

  965.  * using BCD coding where IMEI is 15 BCD digits and IMEISV is 16 BCD
    966. 

  966.  * digits. For IMEI, bits 5 to 8 of the last octet shall be filled
    967. 

  967.  * with an end mark coded as '1111'.
    968. 

  968.  */
    969. 

  969. 

  970. static void
    971. 

  971. dissect_gtpv2_mei(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, proto_item *item _U_, guint16 length _U_,guint8 message_type _U_,  guint8 instance _U_)
    972. 

  972. {
    973. 

  973.     int offset= 0;
    974. 

  974.     const gchar *mei_str;
    975. 

  975. 

  976.     /* Fetch the BCD encoded digits from tvb low half byte, formating the digits according to
    977. 

  977.      * a default digit set of 0-9 returning "?" for overdecadic digits a pointer to the EP
    978. 

  978.      * allocated string will be returned.
    979. 

  979.      */
    980. 

  980.     mei_str = tvb_bcd_dig_to_ep_str( tvb, 0, length, NULL, FALSE);
    981. 

  981. 

  982.     proto_tree_add_string(tree, hf_gtpv2_mei, tvb, offset, length, mei_str);
    983. 

  983.     proto_item_append_text(item, "%s", mei_str);
    984. 

  984. }
    985. 

  985. 

  986. /*
    987. 

  987.  * 8.11 MSISDN
    988. 

  988.  *
    989. 

  989.  * MSISDN is defined in 3GPP TS 23.003
    990. 

  990.  * Editor's note: MSISDN coding will be defined in TS 24.301.
    991. 

  991.  */
    992. 

  992. static void
    993. 

  993. dissect_gtpv2_msisdn(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, proto_item *item _U_, guint16 length _U_,guint8 message_type _U_,  guint8 instance _U_)
    994. 

  994. {
    995. 

  995.     const char     *digit_str;
    996. 

  996. 

  997. 	/* Octets 5 to (n+4) represent the MSISDN value is in international number format
    998. 

  998. 	 * as described in ITU-T Rec E.164 [25] and 3GPP TS 29.002 [41].
    999. 

  999. 	 * MSISDN value contains only the actual MSISDN number (does not contain the "nature of
    1000. 

  1000. 	 * address indicator" octet, which indicates "international number"
    1001. 

  1001. 	 * as in 3GPP TS 29.002 [41]) and is encoded as TBCD digits, i.e.
    1002. 

  1002. 	 * digits from 0 through 9 are encoded "0000" to "1001".
    1003. 

  1003. 	 * When there is an odd number of digits, bits 8 to 5 of the last octet are encoded with
    1004. 

  1004. 	 * the filler "1111".
    1005. 

  1005. 	 */
    1006. 

  1006.     dissect_e164_cc(tvb, tree, 0, TRUE);
    1007. 

  1007.     /* Fetch the BCD encoded digits from tvb low half byte, formating the digits according to
    1008. 

  1008.      * a default digit set of 0-9 returning "?" for overdecadic digits a pointer to the EP
    1009. 

  1009.      * allocated string will be returned.
    1010. 

  1010.      */
    1011. 

  1011.     digit_str = tvb_bcd_dig_to_ep_str( tvb, 0, length, NULL, FALSE);
    1012. 

  1012. 

  1013.     proto_tree_add_string(tree, hf_gtpv2_address_digits, tvb, 0, length, digit_str);
    1014. 

  1014.     proto_item_append_text(item, "%s", digit_str);
    1015. 

  1015. }
    1016. 

  1016. 

  1017. /*
    1018. 

  1018.  * 8.12 Indication
    1019. 

  1019.  */
    1020. 

  1020. static void
    1021. 

  1021. dissect_gtpv2_ind(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, proto_item *item _U_, guint16 length, guint8 message_type _U_,  guint8 instance _U_)
    1022. 

  1022. {
    1023. 

  1023.     int offset = 0;
    1024. 

  1024. 	/* Octet 5 DAF DTF HI DFI OI ISRSI ISRAI SGWCI */
    1025. 

  1025.     proto_tree_add_item(tree, hf_gtpv2_daf,         tvb, offset, 1, FALSE);
    1026. 

  1026.     proto_tree_add_item(tree, hf_gtpv2_dtf,         tvb, offset, 1, FALSE);
    1027. 

  1027.     proto_tree_add_item(tree, hf_gtpv2_hi,          tvb, offset, 1, FALSE);
    1028. 

  1028.     proto_tree_add_item(tree, hf_gtpv2_dfi,         tvb, offset, 1, FALSE);
    1029. 

  1029.     proto_tree_add_item(tree, hf_gtpv2_oi,          tvb, offset, 1, FALSE);
    1030. 

  1030.     proto_tree_add_item(tree, hf_gtpv2_isrsi,       tvb, offset, 1, FALSE);
    1031. 

  1031.     proto_tree_add_item(tree, hf_gtpv2_israi,       tvb, offset, 1, FALSE);
    1032. 

  1032.     proto_tree_add_item(tree, hf_gtpv2_sgwci,       tvb, offset, 1, FALSE);
    1033. 

  1033. 

  1034.     if(length==1) {
    1035. 

  1035.         proto_tree_add_text(tree, tvb, 0, length, "Older version?, should be 2 octets in 8.0.0");
    1036. 

  1036.         return;
    1037. 

  1037.     }
    1038. 

  1038. 

  1039.     offset++;
    1040. 

  1040. 

  1041. 	/* Octet 6 SQCI UIMSI CFSI CRSI P PT SI MSV
    1042. 

  1042. 	 * 3GPP TS 29.274 version 9.4.0 Release 9
    1043. 

  1043. 	 */
    1044. 

  1044.     proto_tree_add_item(tree, hf_gtpv2_sqci,          tvb, offset, 1, FALSE);
    1045. 

  1045.     proto_tree_add_item(tree, hf_gtpv2_uimsi,          tvb, offset, 1, FALSE);
    1046. 

  1046.     proto_tree_add_item(tree, hf_gtpv2_cfsi,          tvb, offset, 1, FALSE);
    1047. 

  1047.     proto_tree_add_item(tree, hf_gtpv2_crsi,          tvb, offset, 1, FALSE);
    1048. 

  1048. 

  1049.     proto_tree_add_item(tree, hf_gtpv2_ps,          tvb, offset, 1, FALSE);
    1050. 

  1050.     proto_tree_add_item(tree, hf_gtpv2_pt,          tvb, offset, 1, FALSE);
    1051. 

  1051.     proto_tree_add_item(tree, hf_gtpv2_si,          tvb, offset, 1, FALSE);
    1052. 

  1052.     proto_tree_add_item(tree, hf_gtpv2_msv,         tvb, offset, 1, FALSE);
    1053. 

  1053.     offset++;
    1054. 

  1054. 

  1055. 	if(length==2){
    1056. 

  1056. 		return;
    1057. 

  1057. 	}
    1058. 

  1058. 	/* Only present in version 9 and higher */
    1059. 

  1059. 	/* Octet 7 Spare Spare Spare Spare Spare Spare Spare CCRSI */
    1060. 

  1060.     proto_tree_add_item(tree, hf_gtpv2_ccrsi,         tvb, offset, 1, FALSE);
    1061. 

  1061. 

  1062. }
    1063. 

  1063. 

  1064. /*
    1065. 

  1065.  * 8.13 Protocol Configuration Options (PCO)
    1066. 

  1066.  * Protocol Configuration Options (PCO) is transferred via GTP tunnels. The sending entity copies the value part of the
    1067. 

  1067.  * PCO into the Value field of the PCO IE. The detailed coding of the PCO field from octets 5 to (n+4) shall be specified
    1068. 

  1068.  * as per clause 10.5.6.3 of 3GPP TS 24.008 [5], starting with octet 3.
    1069. 

  1069.  * Dissected in packet-gsm_a_gm.c
    1070. 

  1070.  */
    1071. 

  1071. static void
    1072. 

  1072. dissect_gtpv2_pco(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, proto_item *item _U_, guint16 length _U_,guint8 message_type _U_,  guint8 instance _U_)
    1073. 

  1073. {
    1074. 

  1074.     switch(message_type){
    1075. 

  1075. 	case GTPV2_CREATE_SESSION_REQUEST:
    1076. 

  1076. 	    /* PCO options as MS to network direction */
    1077. 

  1077. 	    pinfo->link_dir = P2P_DIR_UL;
    1078. 

  1078. 	    break;
    1079. 

  1079. 	case GTPV2_CREATE_SESSION_RESPONSE:
    1080. 

  1080. 	    /* PCO options as Network to MS direction: */
    1081. 

  1081. 	    pinfo->link_dir = P2P_DIR_DL;
    1082. 

  1082. 	    break;
    1083. 

  1083. 	default:
    1084. 

  1084. 	    break;
    1085. 

  1085.     }
    1086. 

  1086.     de_sm_pco(tvb, tree, pinfo, 0, length, NULL, 0);
    1087. 

  1087. }
    1088. 

  1088. 

  1089. /*
    1090. 

  1090.  * 8.14 PDN Address Allocation (PAA)
    1091. 

  1091.  */
    1092. 

  1092. 

  1093. static const value_string gtpv2_pdn_type_vals[] = {
    1094. 

  1094.     {1, "IPv4"},
    1095. 

  1095.     {2, "IPv6"},
    1096. 

  1096.     {3, "IPv4/IPv6"},
    1097. 

  1097.     {0, NULL}
    1098. 

  1098. };
    1099. 

  1099. 

  1100. static void
    1101. 

  1101. dissect_gtpv2_paa(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, proto_item *item _U_, guint16 length _U_, guint8 message_type _U_, guint8 instance _U_)
    1102. 

  1102. {
    1103. 

  1103.     int offset = 0;
    1104. 

  1104.     guint8 pdn_type;
    1105. 

  1105.     pdn_type  = tvb_get_guint8(tvb, offset);
    1106. 

  1106.     proto_tree_add_item(tree, hf_gtpv2_pdn_type, tvb, offset, 1, FALSE);
    1107. 

  1107.     offset++;
    1108. 

  1108.     switch(pdn_type)
    1109. 

  1109.     {
    1110. 

  1110.     case 1:
    1111. 

  1111.         /* IPv4 */
    1112. 

  1112.         proto_tree_add_item(tree, hf_gtpv2_pdn_ipv4, tvb, offset, 4, FALSE);
    1113. 

  1113.         offset+=4;
    1114. 

  1114.         break;
    1115. 

  1115.     case 2:
    1116. 

  1116.         /* IPv6*/
    1117. 

  1117. 		/* If PDN type value indicates IPv6, octet 6 contains the IPv6 Prefix Length.
    1118. 

  1118. 		 * Octets 7 through 22 contain an IPv6 Prefix and Interface Identifier.
    1119. 

  1119. 		 * Bit 8 of octet 7 represents the most significant bit of the IPv6 Prefix
    1120. 

  1120. 		 * and Interface Identifier and bit 1 of octet 22 the least significant bit.
    1121. 

  1121. 		 */
    1122. 

  1122.         proto_tree_add_item(tree, hf_gtpv2_pdn_ipv6_len, tvb, offset, 1, FALSE);
    1123. 

  1123.         offset++;
    1124. 

  1124.         proto_tree_add_item(tree, hf_gtpv2_pdn_ipv6, tvb, offset, 16, FALSE);
    1125. 

  1125.         offset+=16;
    1126. 

  1126.         break;
    1127. 

  1127.     case 3:
    1128. 

  1128.         /* IPv4/IPv6 */
    1129. 

  1129. 		/* If PDN type value indicates IPv4v6, octet 6 contains the IPv6 Prefix Length.
    1130. 

  1130. 		 * Octets 7 through 22 contain an IPv6 Prefix and Interface Identifier.
    1131. 

  1131. 		 * Bit 8 of octet 7 represents the most significant bit of the IPv6 Prefix
    1132. 

  1132. 		 * and Interface Identifier and bit 1 of octet 22 the least significant bit.
    1133. 

  1133. 		 * Octets 23 through 26 contain an IPv4 address. Bit 8 of octet 23 represents
    1134. 

  1134. 		 * the most significant bit of the IPv4 address and bit 1 of octet 26 the least
    1135. 

  1135. 		 * significant bit.
    1136. 

  1136. 		 */
    1137. 

  1137.         proto_tree_add_item(tree, hf_gtpv2_pdn_ipv6_len, tvb, offset, 1, FALSE);
    1138. 

  1138.         offset++;
    1139. 

  1139.         proto_tree_add_item(tree, hf_gtpv2_pdn_ipv6, tvb, offset, 16, FALSE);
    1140. 

  1140.         offset+=16;
    1141. 

  1141.         proto_tree_add_item(tree, hf_gtpv2_pdn_ipv4, tvb, offset, 4, FALSE);
    1142. 

  1142.         offset+=4;
    1143. 

  1143.         break;
    1144. 

  1144.     default:
    1145. 

  1145.         break;
    1146. 

  1146.     }
    1147. 

  1147. }
    1148. 

  1148. /*
    1149. 

  1149.  * 8.15 Bearer Quality of Service (Bearer QoS)
    1150. 

  1150.  */
    1151. 

  1151. 

  1152. static void
    1153. 

  1153. dissect_gtpv2_bearer_qos(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, proto_item *item _U_, guint16 length _U_,guint8 message_type _U_,  guint8 instance _U_)
    1154. 

  1154. {
    1155. 

  1155.     int offset = 0;
    1156. 

  1156.     proto_tree_add_item(tree, hf_gtpv2_bearer_qos_pvi, tvb, offset, 1, FALSE);
    1157. 

  1157.     proto_tree_add_item(tree, hf_gtpv2_bearer_qos_pl, tvb, offset, 1, FALSE);
    1158. 

  1158.     proto_tree_add_item(tree, hf_gtpv2_bearer_qos_pci, tvb, offset, 1, FALSE);
    1159. 

  1159.     offset++;
    1160. 

  1160.     proto_tree_add_item(tree, hf_gtpv2_bearer_qos_label_qci, tvb, offset, 1, FALSE);
    1161. 

  1161.     offset++;
    1162. 

  1162.     proto_tree_add_item(tree, hf_gtpv2_bearer_qos_mbr_up, tvb, offset, 5, FALSE);
    1163. 

  1163.     offset= offset+5;
    1164. 

  1164.     proto_tree_add_item(tree, hf_gtpv2_bearer_qos_mbr_down, tvb, offset, 5, FALSE);
    1165. 

  1165.     offset= offset+5;
    1166. 

  1166.     proto_tree_add_item(tree, hf_gtpv2_bearer_qos_gbr_up, tvb, offset, 5, FALSE);
    1167. 

  1167.     offset= offset+5;
    1168. 

  1168.     proto_tree_add_item(tree, hf_gtpv2_bearer_qos_gbr_down, tvb, offset, 5, FALSE);
    1169. 

  1169.     offset= offset+5;
    1170. 

  1170. }
    1171. 

  1171. 

  1172. /*
    1173. 

  1173.  * 8.16 Flow Quality of Service (Flow QoS)
    1174. 

  1174.  */
    1175. 

  1175. 

  1176. static void
    1177. 

  1177. dissect_gtpv2_flow_qos(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, proto_item *item _U_, guint16 length _U_,guint8 message_type _U_,  guint8 instance _U_)
    1178. 

  1178. {
    1179. 

  1179.     int offset = 0;
    1180. 

  1180.     proto_tree_add_item(tree, hf_gtpv2_flow_qos_label_qci, tvb, offset, 1, FALSE);
    1181. 

  1181.     offset++;
    1182. 

  1182.     proto_tree_add_item(tree, hf_gtpv2_flow_qos_mbr_up, tvb, o…
    1183.