Hi Guys, has anybody started working on 5G logs ?

[vitthal-agav]

[p1-mmr]

Hello,

Decoding and capturing 5G/NR packets seems to be already handled by the MobileInsight project, see: https://github.com/mobile-insight/mobileinsight-core/blob/0f98718/dm_collector_c/log_packet.h#L356

However, MobileInsight requires a specific Wireshark plug-in to be decoded in order to have the 5G decoding to work, as if Wireshark does have bits of 5G/NR decoding implemented, the GSMTAP format, which is used by QCSuper to encapsulate the captured radio frames obtained through Diag into a Wireshark-decodable PCAP file, supports encapsulating up to 4G but does not support encapsulating 5G yet.

For reference:

• The SCAT issue regarding the matter: https://github.com/fgsect/scat/issues/26
• The part of Wireshark code where GSMTAP does not currently reference 5G/NR: https://github.com/wireshark/wireshark/blob/132d6ec/epan/dissectors/packet-gsmtap.h#L38
• The central current reference for GSMTAP: https://cgit.osmocom.org/libosmocore/tree/include/osmocom/core/gsmtap.h / https://osmocom.org/projects/baseband/wiki/GSMTAP
• NR-related sources in Wireshark: https://github.com/wireshark/wireshark/search?q=filename%3Anr

A developer of SCAT has manifested plans to propose an update of the GSMTAP format, I have followed him up on the matter on the concerned issue.

Regards,

[Matheus-Garbelini]

Hi @p1-mmr decoding 5G is possible out of the box in the latest Wireshark (>3.2 I believe) by simply encapsulating them as UDP heuristic packets. These UDP packets have a magic string (i.e., nr-mac) which is identified by the NR mac dissector.