Files
openairinterface5g/openair2/UTIL/OPT
Laurent THOMAS f77f428767 Small optimization L2 to wireshark
the code creates a sink to read all traced packets and drop it.  but
this works only if we send to a local address and if there is not
another sink (like if we trace both UE and gNB in the same machine).
this sink's purpose is only to prevent to get automatic packets back
from the kernel saying "no listener". So, instead of killing the trace
when we can't create the sink (as done previously), we now just let the
trace in operation.
2024-10-07 13:37:34 +02:00
..
2021-05-19 10:26:26 +02:00
2024-10-07 13:37:34 +02:00

How to configure wireshark for dissecting LTE/NR protocols:
- start the wireshark as a sudoers
  - goto analyze->enabled prototols
  => enable mac_xxx_udp and rlc_xxx_udp (xxx is lte or nr)
  - goto edit/preferences and expand Protocols
  - select UDP and check "try heuristic sub-dissectors first"
  - select MAC-LTE (or MAC-NR), and check all the options (checkboxes), and set the "which layer info to show in info column" to "MAC info"
  - select RLC-LTE (or NR), and check all the options except the "May see RLC headers only", and
    set the "call PDCP dissector for DRB PDUs" to "12-bit SN". Optionally you may select the sequence analysis for RLC AM/UM.
  - select PDCP-LTE (or NR)

    How to use
    - start eNB or UE with option --opt.type wireshark
  --opt options are:
    --opt.type none/wireshark/pcap
  --opt.ip 127.0.0.1 to specify the output IP address (default: 127.0.0.1)
        output port is always: 9999 (to change it, change constant: PACKET_MAC_LTE_DEFAULT_UDP_PORT in OAI code)
        --opt.path file_name to specify the file name (pcap)
        - capture on local interface "lo"
        - filter out the ICMP/DNS/TCP messages (e.g. "!icmp && !dns && !tcp")