/* packet-bssgp.c

 * Routines for Base Station Subsystem GPRS Protocol dissection

 * Copyright 2000, Susanne Edlund <susanne.edlund@ericsson.com>

 * Copyright 2017, Anders Broman <anders.broman@ericsson.com>

 *

 * Wireshark - Network traffic analyzer

 * By Gerald Combs <gerald@wireshark.org>

 * Copyright 1998 Gerald Combs

 *

 * SPDX-License-Identifier: GPL-2.0-or-later

 */

/* 3GPP TS 48.018 V 6.5.0 (2004-07) Release 6 */

#include "config.h"

#include <epan/packet.h>

#include <epan/expert.h>

#include <epan/prefs.h>

#include <epan/asn1.h>

#include <epan/tfs.h>

#include <wsutil/array.h>

#include "packet-bssgp.h"

#include "packet-e212.h"

#include "packet-gsm_a_common.h"

#include "packet-ranap.h"

#include "packet-rrc.h"

#include "packet-lte-rrc.h"

#include "packet-s1ap.h"

/* #define BSSGP_DEBUG */

/*

 * TS 48.018 V6.6.0 (2004-11) says, of information elements:

 *

 *    Refer to General Structure Of The Information Elements/3GPP TS 48.016.

 *

 * TS 48.016 V9.0.0 (2010-02), in that section, says, of information elements:

 *

 *    When a field extends over more than one octet, the order of bit

 *    values progressively decreases as the octet number increases.

 *    The least significant bit of the field is represented by the

 *    lowest numbered bit of the highest numbered octet of the field.

 *

 * which sure sounds little-endian.

 *

 * [

 * Later comment:

 * Actually: To me. the above reads as being BIG_ENDIAN.

 *  IOW: if bytes are numbered from 0 to n, then the n'th byte

 *       ("highest numbered octet") has the least significant bit.

 * ]

 *

 * However, for some not-entirely-obvious reason, BSSGP_LITTLE_ENDIAN, which

 * was passed to proto_tree_add_item() as the byte-order argument, was

 * defined as false - which meant big-endian.

 *

 * For now, we'll use ENC_BIG_ENDIAN, now that we have ENC_BIG_ENDIAN and

 * REP_LITTLE_ENDIAN definitions.

 */

#define BSSGP_SEP ", "

void proto_register_bssgp(void);

void proto_reg_handoff_bssgp(void);

static uint8_t g_pdu_type, g_rim_application_identity;

static uint32_t g_bssgp_ran_inf_pdu_t_ext_c;

static proto_tree *gparent_tree;

static dissector_handle_t llc_handle;

static dissector_handle_t rrlp_handle;

static dissector_handle_t rrc_sys_info_cont_handle;

static module_t *bssgp_module;

static dissector_table_t diameter_3gpp_avp_dissector_table;

/* Initialize the protocol and registered fields */

static int proto_bssgp;

static int hf_bssgp_msg_type;

int hf_bssgp_elem_id;

static int hf_bssgp_ci;

static int hf_bssgp_flush_action;

static int hf_bssgp_llc_frames_disc;

static int hf_bssgp_ra_discriminator;

static int hf_bssgp_rim_app_id;

static int hf_bssgp_rim_seq_no;

static int hf_bssgp_rat_discriminator;

static int hf_bssgp_nacc_cause;

static int hf_bssgp_si3_cause;

static int hf_bssgp_mbms_data_ch_cause;

static int hf_bssgp_utra_si_cause;

static int hf_bssgp_num_si_psi;

static int hf_bssgp_si_psi_type;

static int hf_bssgp_ran_inf_req_pdu_t_ext_c;

static int hf_bssgp_ran_inf_pdu_t_ext_c;

static int hf_bssgp_rim_pdu_ind_ack;

static int hf_bssgp_rim_proto_ver_no;

static int hf_bssgp_bss_area_ind;

static int hf_bssgp_bvci;

static int hf_bssgp_bmax;

static int hf_bssgp_r;

static int hf_bssgp_r_pfc;

static int hf_bssgp_bucket_size;

static int hf_bssgp_bmax_pfc;

static int hf_bssgp_omc_id;

static int hf_bssgp_nsei;

static int hf_bssgp_rrlp_flag1;

static int hf_bssgp_delay_val;

static int hf_bssgp_cause;

static int hf_bssgp_peak_rate_gran;

static int hf_bssgp_cr_bit;

static int hf_bssgp_t_bit;

static int hf_bssgp_a_bit;

static int hf_bssgp_ra_cause;

static int hf_bssgp_ra_cap_upd_cause;

static int hf_bssgp_r_default_ms;

static int hf_bssgp_suspend_ref_no;

static int hf_bssgp_tag;

static int hf_bssgp_trace_ref;

static int hf_bssgp_trigger_id;

static int hf_bssgp_transaction_id;

static int hf_bssgp_no_of_oct;

static int hf_bssgp_unit_val;

static int hf_bssgp_gprs_timer;

static int hf_bssgp_mbms;

static int hf_bssgp_EnhancedRadioStatus;

static int hf_bssgp_pfcfc;

static int hf_bssgp_rim;

static int hf_bssgp_lcs;

static int hf_bssgp_inr;

static int hf_bssgp_cbl;

static int hf_bssgp_pfc;

static int hf_bssgp_bucket_full_ratio;

static int hf_bssgp_b_pfc;

static int hf_bssgp_precedence;

static int hf_bssgp_serv_utran_cco;

static int hf_bssgp_mbms_session_id;

static int hf_bssgp_mbms_cause;

static int hf_bssgp_mbms_stop_cause;

static int hf_bssgp_mbms_num_ra_ids;

static int hf_bssgp_session_inf;

static int hf_bssgp_ec_gsm_iot;

static int hf_bssgp_mocn;

static int hf_bssgp_csps_coord;

static int hf_bssgp_eDRX;

static int hf_bssgp_dcn;

static int hf_bssgp_gb_if;

static int hf_bssgp_ps_ho;

static int hf_bssgp_src_to_trg_transp_cont;

static int hf_bssgp_trg_to_src_transp_cont;

static int hf_bssgp_rnc_id;

static int hf_bssgp_page_mode;

static int hf_bssgp_container_id;

static int hf_bssgp_global_tfi;

static int hf_bssgp_ul_tfi;

static int hf_bssgp_dl_tfi;

static int hf_bssgp_time_to_MBMS_data_tran;

static int hf_bssgp_mbms_session_rep_no;

static int hf_bssgp_ps_ho_cmd;

static int hf_bssgp_sipsi;

static int hf_bssgp_type;

static int hf_bssgp_cs_indication;

static int hf_bssgp_flow_control_gran;

static int hf_bssgp_serv_eutran_cco;

static int hf_bssgp_sub_prof_id_f_rat_freq_prio;

static int hf_bssgp_eutran_irat_ho_inf_req;

static int hf_bssgp_irat_ho_inf_req;

static int hf_bssgp_rel_int_rat_ho_inf_ind;

static int hf_bssgp_csg_id;

static int hf_bssgp_cell_acc_mode;

static int hf_bssgp_redir_complete_outcome;

static int hf_bssgp_redir_indication_reroute_reject_cause;

static int hf_bssgp_unconfirm_send_state_var;

static int hf_bssgp_Global_ENB_ID_PDU;

static int hf_bssgp_SONtransferRequestContainer_PDU;

static int hf_bssgp_plmn_id;

static int hf_bssgp_num_pfc;

static int hf_bssgp_llc_data;

static int hf_bssgp_pdu_data;

static int hf_bssgp_rrlp_apdu;

static int hf_bssgp_dtm_handover_command_data;

static int hf_bssgp_message_elements;

static int hf_bssgp_spare;

static int hf_bssgp_si;

static int hf_bssgp_psi;

static int hf_bssgp_peak_bit_rate;

static int hf_bssgp_sys_info_type3_msg;

static int hf_bssgp_trace_type_data;

static int hf_bssgp_si_item;

static int hf_bssgp_sci;

static int hf_bssgp_ggsn_pgw_location;

static int hf_bssgp_edrx_cycle_value;

static int hf_bssgp_tunpo_minutes;

static int hf_bssgp_tunpo_seconds;

static int hf_bssgp_ec_dl_coverage_class;

static int hf_bssgp_ec_ul_coverage_class;

static int hf_bssgp_pei;

static int hf_bssgp_paging_attempt_count;

static int hf_bssgp_intended_num_of_pag_attempts;

static int hf_bssgp_extended_feature_bitmap;

static int hf_bssgp_prio_class_ind;

static int hf_bssgp_prio_class_flag_b0;

/* Initialize the subtree pointers */

static int ett_bssgp;

static int ett_bssgp_new;

static int ett_bssgp_pfcs_to_be_set_up_list;

static int ett_bssgp_pfcs_to_be_set_up_list_pft;

static int ett_bssgp_pfcs_to_be_set_up_list_abqp;

static int ett_bssgp_pfcs_to_be_set_up_list_arp;

static int ett_bssgp_pfcs_to_be_set_up_list_t10;

static int ett_bssgp_list_of_setup_pfcs;

static int ett_bssgp_pfc_flow_control_parameters_pfc;

static int ett_bssgp_ra_id;

static int ett_bssgp_extended_feature_bitmap;

static int ett_bssgp_prio_class_ind;

static expert_field ei_bssgp_extraneous_data;

static expert_field ei_bssgp_missing_mandatory_element;

static expert_field ei_bssgp_not_dissected_yet;

static expert_field ei_bssgp_erroneous_app_container;

static expert_field ei_bssgp_si_item;

static expert_field ei_bssgp_unknown_rim_app_id_data;

static expert_field ei_bssgp_unknown_app_container;

static expert_field ei_bssgp_ra_discriminator;

static expert_field ei_bssgp_unknown_rim_app_id;

static expert_field ei_bssgp_msg_type;

static expert_field ei_bssgp_ran_inf_app_cont_utra_si;

/* PDU type coding, v6.5.0, table 11.3.26, p 80 */

#define BSSGP_PDU_DL_UNITDATA                  0x00

#define BSSGP_PDU_UL_UNITDATA                  0x01

#define BSSGP_PDU_RA_CAPABILITY                0x02

#define BSSGP_PDU_PTM_UNITDATA                 0x03

#define BSSGP_PDU_DL_MBMS_UNITDATA             0x04

#define BSSGP_PDU_UL_MBMS_UNITDATA             0x05

#define BSSGP_PDU_PAGING_PS                    0x06

#define BSSGP_PDU_PAGING_CS                    0x07

#define BSSGP_PDU_RA_CAPABILITY_UPDATE         0x08

#define BSSGP_PDU_RA_CAPABILITY_UPDATE_ACK     0x09

#define BSSGP_PDU_RADIO_STATUS                 0x0a

#define BSSGP_PDU_SUSPEND                      0x0b

#define BSSGP_PDU_SUSPEND_ACK                  0x0c

#define BSSGP_PDU_SUSPEND_NACK                 0x0d

#define BSSGP_PDU_RESUME                       0x0e

#define BSSGP_PDU_RESUME_ACK                   0x0f

#define BSSGP_PDU_RESUME_NACK                  0x10

#define BSSGP_PDU_PAGING_PS_REJECT             0x11

#define BSSGP_PDU_DUMMY_PAGING_PS              0x12

#define BSSGP_PDU_DUMMY_PAGING_PS_RESPONSE     0x13

#define BSSGP_PDU_MS_REG_ENQ                   0x14

#define BSSGP_PDU_MS_REG_ENQ_RESP              0x15

#define BSSGP_PDU_RESERVED_0X16                0x16

#define BSSGP_PDU_RESERVED_0X17                0x17

#define BSSGP_PDU_RESERVED_0X18                0x18

#define BSSGP_PDU_RESERVED_0X19                0x19

#define BSSGP_PDU_RESERVED_0X1A                0x1a

#define BSSGP_PDU_RESERVED_0X1B                0x1b

#define BSSGP_PDU_RESERVED_0X1C                0x1c

#define BSSGP_PDU_RESERVED_0X1D                0x1d

#define BSSGP_PDU_RESERVED_0X1E                0x1e

#define BSSGP_PDU_RESERVED_0X1F                0x1f

#define BSSGP_PDU_BVC_BLOCK                    0x20

#define BSSGP_PDU_BVC_BLOCK_ACK                0x21

#define BSSGP_PDU_BVC_RESET                    0x22

#define BSSGP_PDU_BVC_RESET_ACK                0x23

#define BSSGP_PDU_BVC_UNBLOCK                  0x24

#define BSSGP_PDU_BVC_UNBLOCK_ACK              0x25

#define BSSGP_PDU_FLOW_CONTROL_BVC             0x26

#define BSSGP_PDU_FLOW_CONTROL_BVC_ACK         0x27

#define BSSGP_PDU_FLOW_CONTROL_MS              0x28

#define BSSGP_PDU_FLOW_CONTROL_MS_ACK          0x29

#define BSSGP_PDU_FLUSH_LL                     0x2a

#define BSSGP_PDU_FLUSH_LL_ACK                 0x2b

#define BSSGP_PDU_LLC_DISCARDED                0x2c

#define BSSGP_PDU_FLOW_CONTROL_PFC             0x2d

#define BSSGP_PDU_FLOW_CONTROL_PFC_ACK         0x2e

#define BSSGP_PDU_RESERVED_0X2F                0x2f

#define BSSGP_PDU_RESERVED_0X30                0x30

#define BSSGP_PDU_RESERVED_0X31                0x31

#define BSSGP_PDU_RESERVED_0X32                0x32

#define BSSGP_PDU_RESERVED_0X33                0x33

#define BSSGP_PDU_RESERVED_0X34                0x34

#define BSSGP_PDU_RESERVED_0X35                0x35

#define BSSGP_PDU_RESERVED_0X36                0x36

#define BSSGP_PDU_RESERVED_0X37                0x37

#define BSSGP_PDU_RESERVED_0X38                0x38

#define BSSGP_PDU_RESERVED_0X39                0x39

#define BSSGP_PDU_RESERVED_0X3A                0x3a

#define BSSGP_PDU_RESERVED_0X3B                0x3b

#define BSSGP_PDU_RESERVED_0X3C                0x3c

#define BSSGP_PDU_RESERVED_0X3D                0x3d

#define BSSGP_PDU_RESERVED_0X3E                0x3e

#define BSSGP_PDU_RESERVED_0X3F                0x3f

#define BSSGP_PDU_SGSN_INVOKE_TRACE            0x40

#define BSSGP_PDU_STATUS                       0x41

#define BSSGP_PDU_OVERLOAD                     0x42

#define BSSGP_PDU_RESERVED_0X43                0x43

#define BSSGP_PDU_RESERVED_0X44                0x44

#define BSSGP_PDU_RESERVED_0X45                0x45

#define BSSGP_PDU_RESERVED_0X46                0x46

#define BSSGP_PDU_RESERVED_0X47                0x47

#define BSSGP_PDU_RESERVED_0X48                0x48

#define BSSGP_PDU_RESERVED_0X49                0x49

#define BSSGP_PDU_RESERVED_0X4A                0x4a

#define BSSGP_PDU_RESERVED_0X4B                0x4b

#define BSSGP_PDU_RESERVED_0X4C                0x4c

#define BSSGP_PDU_RESERVED_0X4D                0x4d

#define BSSGP_PDU_RESERVED_0X4E                0x4e

#define BSSGP_PDU_RESERVED_0X4F                0x4f

#define BSSGP_PDU_DOWNLOAD_BSS_PFC             0x50

#define BSSGP_PDU_CREATE_BSS_PFC               0x51

#define BSSGP_PDU_CREATE_BSS_PFC_ACK           0x52

#define BSSGP_PDU_CREATE_BSS_PFC_NACK          0x53

#define BSSGP_PDU_MODIFY_BSS_PFC               0x54

#define BSSGP_PDU_MODIFY_BSS_PFC_ACK           0x55

#define BSSGP_PDU_DELETE_BSS_PFC               0x56

#define BSSGP_PDU_DELETE_BSS_PFC_ACK           0x57

#define BSSGP_PDU_DELETE_BSS_PFC_REQ           0x58

#define BSSGP_PDU_PS_HANDOVER_REQUIRED         0x59

#define BSSGP_PDU_PS_HANDOVER_REQUIRED_ACK     0x5a

#define BSSGP_PDU_PS_HANDOVER_REQUIRED_NACK    0x5b

#define BSSGP_PDU_PS_HANDOVER_REQUEST          0x5c

#define BSSGP_PDU_PS_HANDOVER_REQUEST_ACK      0x5d

#define BSSGP_PDU_PS_HANDOVER_REQUEST_NACK     0x5e

#define BSSGP_PDU_RESERVED_0X5F                0x5f

#define BSSGP_PDU_PERFORM_LOCATION_REQUEST     0x60

#define BSSGP_PDU_PERFORM_LOCATION_RESPONSE    0x61

#define BSSGP_PDU_PERFORM_LOCATION_ABORT       0x62

#define BSSGP_PDU_POSITION_COMMAND             0x63

#define BSSGP_PDU_POSITION_RESPONSE            0x64

#define BSSGP_PDU_RESERVED_0X65                0x65

#define BSSGP_PDU_RESERVED_0X66                0x66

#define BSSGP_PDU_RESERVED_0X67                0x67

#define BSSGP_PDU_RESERVED_0X68                0x68

#define BSSGP_PDU_RESERVED_0X69                0x69

#define BSSGP_PDU_RESERVED_0X6A                0x6a

#define BSSGP_PDU_RESERVED_0X6B                0x6b

#define BSSGP_PDU_RESERVED_0X6C                0x6c

#define BSSGP_PDU_RESERVED_0X6D                0x6d

#define BSSGP_PDU_RESERVED_0X6E                0x6e

#define BSSGP_PDU_RESERVED_0X6F                0x6f

#define BSSGP_PDU_RAN_INFORMATION              0x70

#define BSSGP_PDU_RAN_INFORMATION_REQUEST      0x71

#define BSSGP_PDU_RAN_INFORMATION_ACK          0x72

#define BSSGP_PDU_RAN_INFORMATION_ERROR        0x73

#define BSSGP_PDU_RAN_INFORMATION_APP_ERROR    0x74

#define BSSGP_PDU_RESERVED_0X75                0x75

#define BSSGP_PDU_RESERVED_0X76                0x76

#define BSSGP_PDU_RESERVED_0X77                0x77

#define BSSGP_PDU_RESERVED_0X78                0x78

#define BSSGP_PDU_RESERVED_0X79                0x79

#define BSSGP_PDU_RESERVED_0X7A                0x7a

#define BSSGP_PDU_RESERVED_0X7B                0x7b

#define BSSGP_PDU_RESERVED_0X7C                0x7c

#define BSSGP_PDU_RESERVED_0X7D                0x7d

#define BSSGP_PDU_RESERVED_0X7E                0x7e

#define BSSGP_PDU_RESERVED_0X7F                0x7f

#define BSSGP_PDU_MBMS_SESSION_START_REQ       0x80

#define BSSGP_PDU_MBMS_SESSION_START_RESP      0x81

#define BSSGP_PDU_MBMS_SESSION_STOP_REQ        0x82

#define BSSGP_PDU_MBMS_SESSION_STOP_RESP       0x83

#define BSSGP_PDU_MBMS_SESSION_UPDATE_REQ      0x84

#define BSSGP_PDU_MBMS_SESSION_UPDATE_RESP     0x85

#define BSSGP_PDU_RESERVED_0X86                0x86

#define BSSGP_PDU_RESERVED_0X87                0x87

#define BSSGP_PDU_RESERVED_0X88                0x88

#define BSSGP_PDU_RESERVED_0X89                0x89

#define BSSGP_PDU_RESERVED_0X8A                0x8a

#define BSSGP_PDU_RESERVED_0X8B                0x8b

#define BSSGP_PDU_RESERVED_0X8C                0x8c

#define BSSGP_PDU_RESERVED_0X8D                0x8d

#define BSSGP_PDU_RESERVED_0X8E                0x8e

#define BSSGP_PDU_RESERVED_0X8F                0x8f

#define BSSGP_PDU_RESERVED_0X90                0x90

#define BSSGP_PDU_PS_HANDOVER_COMPLETE         0x91

#define BSSGP_PDU_PS_HANDOVER_CANCEL           0x92

#define BSSGP_PDU_PS_HANDOVER_COMPLETE_ACK     0x93

/* Information element coding, v 6.5.0, table 11.3, p 72 */

#define BSSGP_IEI_ALIGNMENT_OCTETS                         0x00

#define BSSGP_IEI_BMAX_DEFAULT_MS                          0x01

#define BSSGP_IEI_BSS_AREA_INDICATION                      0x02

#define BSSGP_IEI_BUCKET_LEAK_RATE                         0x03

#define BSSGP_IEI_BVCI                                     0x04

#define BSSGP_IEI_BVC_BUCKET_SIZE                          0x05

#define BSSGP_IEI_BVC_MEASUREMENT                          0x06

#define BSSGP_IEI_CAUSE                                    0x07

#define BSSGP_IEI_CELL_IDENTIFIER                          0x08

#define BSSGP_IEI_CHANNEL_NEEDED                           0x09

#define BSSGP_IEI_DRX_PARAMETERS                           0x0a

#define BSSGP_IEI_EMLPP_PRIORITY                           0x0b

#define BSSGP_IEI_FLUSH_ACTION                             0x0c

#define BSSGP_IEI_IMSI                                     0x0d

#define BSSGP_IEI_LLC_PDU                                  0x0e

#define BSSGP_IEI_LLC_FRAMES_DISCARDED                     0x0f

#define BSSGP_IEI_LOCATION_AREA                            0x10

#define BSSGP_IEI_MOBILE_ID                                0x11

#define BSSGP_IEI_MS_BUCKET_SIZE                           0x12

#define BSSGP_IEI_MS_RADIO_ACCESS_CAPABILITY               0x13

#define BSSGP_IEI_OMC_ID                                   0x14

#define BSSGP_IEI_PDU_IN_ERROR                             0x15

#define BSSGP_IEI_PDU_LIFETIME                             0x16

#define BSSGP_IEI_PRIORITY                                 0x17

#define BSSGP_IEI_QOS_PROFILE                              0x18

#define BSSGP_IEI_RADIO_CAUSE                              0x19

#define BSSGP_IEI_RA_CAP_UPD_CAUSE                         0x1a

#define BSSGP_IEI_ROUTING_AREA                             0x1b

#define BSSGP_IEI_R_DEFAULT_MS                             0x1c

#define BSSGP_IEI_SUSPEND_REFERENCE_NUMBER                 0x1d

#define BSSGP_IEI_TAG                                      0x1e

#define BSSGP_IEI_TLLI                                     0x1f

#define BSSGP_IEI_TMSI                                     0x20

#define BSSGP_IEI_TRACE_REFERENCE                          0x21

#define BSSGP_IEI_TRACE_TYPE                               0x22

#define BSSGP_IEI_TRANSACTION_ID                           0x23

#define BSSGP_IEI_TRIGGER_ID                               0x24

#define BSSGP_IEI_NUMBER_OF_OCTETS_AFFECTED                0x25

#define BSSGP_IEI_LSA_IDENTIFIER_LIST                      0x26

#define BSSGP_IEI_LSA_INFORMATION                          0x27

#define BSSGP_IEI_PFI                                      0x28

#define BSSGP_IEI_GPRS_TIMER                               0x29

#define BSSGP_IEI_ABQP                                     0x3a

#define BSSGP_IEI_FEATURE_BITMAP                           0x3b

#define BSSGP_IEI_BUCKET_FULL_RATIO                        0x3c

#define BSSGP_IEI_SERVICE_UTRAN_CCO                        0x3d

#define BSSGP_IEI_NSEI                                     0x3e

#define BSSGP_IEI_RRLP_APDU                                0x3f

#define BSSGP_IEI_LCS_QOS                                  0x40

#define BSSGP_IEI_LCS_CLIENT_TYPE                          0x41

#define BSSGP_IEI_REQUESTED_GPS_ASSISTANCE_DATA            0x42

#define BSSGP_IEI_LOCATION_TYPE                            0x43

#define BSSGP_IEI_LOCATION_ESTIMATE                        0x44

#define BSSGP_IEI_POSITIONING_DATA                         0x45

#define BSSGP_IEI_DECIPHERING_KEYS                         0x46

#define BSSGP_IEI_LCS_PRIORITY                             0x47

#define BSSGP_IEI_LCS_CAUSE                                0x48

#define BSSGP_IEI_LCS_CAPABILITY                           0x49

#define BSSGP_IEI_RRLP_FLAGS                               0x4a

#define BSSGP_IEI_RIM_APP_ID                               0x4b

#define BSSGP_IEI_RIM_SEQUENCE_NUMBER                      0x4c

#define BSSGP_IEI_RAN_INF_REQUEST_APP_CONTAINER            0x4d

#define BSSGP_IEI_RAN_INF_APP_CONTAINER                    0x4e

#define BSSGP_IEI_RIM_PDU_INDICATIONS                      0x4f

#define BSSGP_IEI_NUMBER_OF_CONTAINER_UNITS                0x50

/* x51 This value should not be used, as it has been used in earlier versions of

this protocol. */

#define BSSGP_IEI_PFC_FLOW_CONTROL_PARAMETERS              0x52

#define BSSGP_IEI_GLOBAL_CN_ID                             0x53

#define BSSGP_IEI_RIM_ROUTING_INFORMATION                  0x54

#define BSSGP_IEI_RIM_PROTOCOL_VERSION                     0x55

#define BSSGP_IEI_APPLICATION_ERROR_CONTAINER              0x56

#define BSSGP_IEI_RAN_INF_REQUEST_RIM_CONTAINER            0x57

#define BSSGP_IEI_RAN_INF_RIM_CONTAINER                    0x58

#define BSSGP_IEI_RAN_INF_APP_ERROR_RIM_CONTAINER          0x59

#define BSSGP_IEI_RAN_INF_ACK_RIM_CONTAINER                0x5a

#define BSSGP_IEI_RAN_INF_ERROR_RIM_CONTAINER              0x5b

/*

x5c TMGI

x5d MBMS Session Identity

x5e MBMS Session Duration

x5f MBMS Service Area Identity List

x60 MBMS Response

x61 MBMS Routing Area List

x62 MBMS Session Information

x63 MBMS Stop Cause

x64 Source BSS to Target BSS Transparent Container

x65 Target BSS to Source BSS Transparent Container

x66 NAS container for PS Handover

x67 PFCs to be set-up list

x68 List of set-up PFCs

x69 Extended Feature Bitmap

x6a Source RNC to Target RNC Transparent Container

x6b Target RNC to Source RNC Transparent Container

x6c RNC Identifier

x6d Page Mode

x6e Container ID

x6f Global TFI

x70 IMEI

x71 Time to MBMS Data Transfer

x72 MBMS Session Repetition Number

x73 Inter RAT Handover Info

x74 PS Handover Command

x75 PS Handover Indications

x76 SI/PSI Container

x77 Active PFCs List

x78 Velocity Data

x79 DTM Handover Command

x7a CS Indication

x7b Requested GANSS Assistance Data

x7c GANSS Location Type

x7d GANSS Positioning Data

x7e Flow Control Granularity

x7f eNB Identifier

x80 E-UTRAN Inter RAT Handover Info

x81 Subscriber Profile ID for RAT/Frequency priority

x82 Request for Inter RAT Handover Info

x83 Reliable Inter RAT Handover Info

x84 SON Transfer Application Identity

x85 CSG Identifier

x86 TAC

*/

#define BSSGP_IEI_REDIR_ATTEMP_FLG                         0x87

#define BSSGP_IEI_REDIR_INDICATION                         0x88

#define BSSGP_IEI_REDIR_COMPLETE                           0x89

#define BSSGP_IEI_UNCONFIRM_SEND_STATE_VAR                 0x8a

#define BSSGP_IEI_SCI                                      0x8c

#define BSSGP_IEI_GGSN_PGW_LOCATION                        0x8d

#define BSSGP_IEI_SELECTED_PLMN_ID                         0x8e

#define BSSGP_IEI_PRIORITY_CLASS_INDICATOR                 0x8f

/*

x90     Source Cell ID

x91     IRAT Measurement Configuration (extended E-ARFCNs)

*/

#define BSSGP_IEI_EDRX_PARAMETERS                          0x92

#define BSSGP_IEI_TUNPO                                    0x93

#define BSSGP_IEI_COVERAGE_CLASS                           0x98

#define BSSGP_IEI_PAG_ATTEMPT_INFO                         0x99

#define BSSGP_IEI_EXCEPTION_REPORT_FLAG                    0x9a

#define BSSGP_IEI_OLD_RA_IDENTIFICATION                    0x9b

#define BSSGP_IEI_ATTACH_INDIC                             0x9c

#define BSSGP_IEI_PLMN_ID                                  0x9d

/*

x9e     MME Query

x9f     SGSN Group Identity

xa0     Additional P-TMSI

xa1     UE Usage Type

xa2     Multilateration Timer

xa3     Multilateration Timing Advance

xa4     MS Sync Accuracy

xa5     BTS Reception Accuracy Level

xa6     Timing Advance Request

*/

/* Macros */

/* Defined locally here without the check of curr_len wrapping, that will be taken care of when this IEI dissection finishes */

#define ELEM_IN_ELEM_MAND_TELV(EMT_iei, EMT_pdu_type, EMT_elem_idx, EMT_elem_name_addition) \

{\

    if ((consumed = elem_telv(tvb, tree, pinfo, (uint8_t) EMT_iei, EMT_pdu_type, EMT_elem_idx, curr_offset, curr_len, EMT_elem_name_addition)) > 0) \

    { \

        curr_offset += consumed; \

        curr_len -= consumed; \

    } \

    else \

    { \

        proto_tree_add_expert_format(tree, pinfo, &ei_bssgp_missing_mandatory_element,\

            tvb, curr_offset, 0, \

            "Missing Mandatory element (0x%02x) %s%s, rest of dissection is suspect", \

            EMT_iei, \

            get_gsm_a_msg_string(pinfo->pool, EMT_pdu_type, EMT_elem_idx), \

            (EMT_elem_name_addition == NULL) ? "" : EMT_elem_name_addition \

            ); \

    } \

}

#define ELEM_IN_ELEM_OPT_TELV(EOT_iei, EOT_pdu_type, EOT_elem_idx, EOT_elem_name_addition) \

{\

    if (curr_len != 0){\

        if ((consumed = elem_telv(tvb, tree, pinfo, (uint8_t) EOT_iei, EOT_pdu_type, EOT_elem_idx, curr_offset, curr_len, EOT_elem_name_addition)) > 0) \

        { \

            curr_offset += consumed; \

            curr_len -= consumed; \

        } \

    } \

}

/* Forward declarations */

static uint16_t de_bssgp_ran_inf_request_rim_cont(tvbuff_t *tvb, proto_tree *tree, packet_info *pinfo _U_, uint32_t offset, unsigned len _U_, char *add_string _U_, int string_len _U_);

static uint16_t de_bssgp_ran_inf_rim_cont(tvbuff_t *tvb, proto_tree *tree, packet_info *pinfo _U_, uint32_t offset, unsigned len _U_, char *add_string _U_, int string_len _U_);

static uint16_t de_bssgp_ran_inf_ack_rim_cont(tvbuff_t *tvb, proto_tree *tree, packet_info *pinfo _U_, uint32_t offset, unsigned len _U_, char *add_string _U_, int string_len _U_);

static uint16_t de_bssgp_ran_inf_error_rim_cont(tvbuff_t *tvb, proto_tree *tree, packet_info *pinfo _U_, uint32_t offset, unsigned len _U_, char *add_string _U_, int string_len _U_);

static uint16_t de_bssgp_ran_inf_app_error_rim_cont(tvbuff_t *tvb, proto_tree *tree, packet_info *pinfo _U_, uint32_t offset, unsigned len _U_, char *add_string _U_, int string_len _U_);

#if 0

static const value_string tab_nacc_cause[]={

    { 0x00,           "Other unspecified error" },

    { 0x01,           "Syntax error in the Application Container" },

    { 0x02,           "Reporting Cell Identifier does not match with the Destination Cell Identifier or with the Source Cell Identifier" },

    { 0x03,           "SI/PSI type error" },

    { 0x04,           "Inconsistent length of a SI/PSI message" },

    { 0x05,           "Inconsistent set of messages" },

    { 0,              NULL },

};

#endif

/*

 * 11.3 Information Element Identifier (IEI)

 */

/*

 * 11.3.1   Alignment octets

 */

static uint16_t

de_bssgp_aligment_octets(tvbuff_t *tvb, proto_tree *tree, packet_info *pinfo _U_, uint32_t offset, unsigned len, char *add_string _U_, int string_len _U_)

{

    uint32_t curr_offset;

    curr_offset = offset;

    proto_tree_add_item(tree, hf_bssgp_spare, tvb, curr_offset, len, ENC_NA);

    return len;

}

/*

 * 11.3.2   Bmax default MS

 */

static uint16_t

de_bssgp_bmax_default_ms(tvbuff_t *tvb, proto_tree *tree, packet_info *pinfo _U_, uint32_t offset, unsigned len _U_, char *add_string _U_, int string_len _U_)

{

    uint32_t curr_offset;

    curr_offset = offset;

    proto_tree_add_item(tree, hf_bssgp_bmax, tvb, curr_offset, 2, ENC_BIG_ENDIAN);

    curr_offset+=2;

    return curr_offset-offset;

}

/*

 * 11.3.3   BSS Area Indication

 */

static uint16_t

de_bssgp_bss_area_ind(tvbuff_t *tvb, proto_tree *tree, packet_info *pinfo _U_, uint32_t offset, unsigned len _U_, char *add_string _U_, int string_len _U_)

{

    uint32_t curr_offset;

    curr_offset = offset;

    proto_tree_add_item(tree, hf_bssgp_bss_area_ind, tvb, curr_offset, 1, ENC_BIG_ENDIAN);

    curr_offset++;

    return curr_offset-offset;

}

/*

 * 11.3.4   Bucket Leak Rate (R)

 */

static uint16_t

de_bssgp_bucket_leak_rate(tvbuff_t *tvb, proto_tree *tree, packet_info *pinfo _U_, uint32_t offset, unsigned len _U_, char *add_string _U_, int string_len _U_)

{

    uint32_t curr_offset;

    curr_offset = offset;

    proto_tree_add_item(tree, hf_bssgp_r, tvb, curr_offset, 2, ENC_BIG_ENDIAN);

    curr_offset+=2;

    return curr_offset-offset;

}

/*

 * 11.3.5   BVC Bucket Size

 */

static uint16_t

de_bssgp_bvc_bucket_size(tvbuff_t *tvb, proto_tree *tree, packet_info *pinfo _U_, uint32_t offset, unsigned len _U_, char *add_string _U_, int string_len _U_)

{

    uint32_t curr_offset;

    curr_offset = offset;

    proto_tree_add_item(tree, hf_bssgp_bucket_size, tvb, curr_offset, 2, ENC_BIG_ENDIAN);

    curr_offset+=2;

    return curr_offset-offset;

}

/*

 * 11.3.6   BVCI (BSSGP Virtual Connection Identifier)

 */

static uint16_t

de_bssgp_bvci(tvbuff_t *tvb, proto_tree *tree, packet_info *pinfo _U_, uint32_t offset, unsigned len _U_, char *add_string, int string_len)

{

    uint32_t curr_offset;

    uint16_t bvci;

    curr_offset = offset;

    /* octet 3-4 Unstructured value */

    proto_tree_add_item_ret_uint16(tree, hf_bssgp_bvci, tvb, curr_offset, 2, ENC_BIG_ENDIAN, &bvci);

    curr_offset+=2;

    if (add_string)

        snprintf(add_string, string_len, " - 0x%x", bvci);

    return curr_offset-offset;

}

/*

 * 11.3.7   BVC Measurement

 */

static uint16_t

de_bssgp_bvc_meas(tvbuff_t *tvb, proto_tree *tree, packet_info *pinfo _U_, uint32_t offset, unsigned len _U_, char *add_string _U_, int string_len _U_)

{

    uint32_t curr_offset;

    curr_offset = offset;

    /*  The Delay Value field is coded as a 16-bit integer value in units of centi-seconds (one hundredth of a second). This

     * coding provides a range of over 10 minutes in increments of 10 ms. As a special case, the hexadecimal value 0xFFFF

     *(decimal 65 535) shall be interpreted as "infinite delay".

     */

    proto_tree_add_item(tree, hf_bssgp_delay_val, tvb, curr_offset, 2, ENC_BIG_ENDIAN);

    curr_offset+=2;

    return curr_offset-offset;

}

/*

 * 11.3.8   Cause

 */

static const value_string bssgp_cause_vals[] = {

    { 0x00, "Processor overload" },

    { 0x01, "Equipment failure" },

    { 0x02, "Transit network service failure" },

    { 0x03, "Network service transmission capacity modified from zero kbps to greater than zero kbps" },

    { 0x04, "Unknown MS" },

    { 0x05, "BVCI unknown" },

    { 0x06, "Cell traffic congestion" },

    { 0x07, "SGSN congestion" },

    { 0x08, "O&M intervention" },

    { 0x09, "BVCI blocked" },

    { 0x0a, "PFC create failure" },

    { 0x0b, "PFC preempted" },

    { 0x0c, "ABQP no more supported" },

    { 0x0d, "Undefined - protocol error - unspecified" },

    { 0x0e, "Undefined - protocol error - unspecified" },

    { 0x0f, "Undefined - protocol error - unspecified" },

    { 0x10, "Undefined - protocol error - unspecified" },

    { 0x11, "Undefined - protocol error - unspecified" },

    { 0x12, "Undefined - protocol error - unspecified" },

    { 0x13, "Undefined - protocol error - unspecified" },

    { 0x14, "Undefined - protocol error - unspecified" },

    { 0x15, "Undefined - protocol error - unspecified" },

    { 0x16, "Undefined - protocol error - unspecified" },

    { 0x17, "Undefined - protocol error - unspecified" },

    { 0x18, "Undefined - protocol error - unspecified" },

    { 0x19, "Undefined - protocol error - unspecified" },

    { 0x1a, "Undefined - protocol error - unspecified" },

    { 0x1b, "Undefined - protocol error - unspecified" },

    { 0x1c, "Undefined - protocol error - unspecified" },

    { 0x1d, "Undefined - protocol error - unspecified" },

    { 0x1e, "Undefined - protocol error - unspecified" },

    { 0x1f, "Undefined - protocol error - unspecified" },

    { 0x20, "Semantically incorrect PDU" },

    { 0x21, "Invalid mandatory information" },

    { 0x22, "Missing mandatory IE" },

    { 0x23, "Missing conditional IE" },

    { 0x24, "Unexpected conditional IE" },

    { 0x25, "Conditional IE error" },

    { 0x26, "PDU not compatible with the protocol state" },

    { 0x27, "Protocol error - unspecified" },

    { 0x28, "PDU not compatible with the feature set" },

    { 0x29, "Requested information not available" },

    { 0x2a, "Unknown destination address" },

    { 0x2b, "Unknown RIM application identity" },

    { 0x2c, "Invalid container unit information" },

    { 0x2d, "PFC queuing" },

    { 0x2e, "PFC created successfully" },

    { 0x2f, "T12 expiry" },

    { 0x30, "MS under PS Handover treatment" },

    { 0x31, "Uplink quality" },

    { 0x32, "Uplink strength" },

    { 0x33, "Downlink quality" },

    { 0x34, "Downlink strength" },

    { 0x35, "Distance" },

    { 0x36, "Better cell" },

    { 0x37, "Traffic" },

    { 0x38, "Radio contact lost with MS" },

    { 0x39, "MS back on old channel" },

    { 0x3a, "T13 expiry" },

    { 0x3b, "T14 expiry" },

    { 0x3c, "Not all requested PFCs created" },

    { 0x3d, "CS cause" },

    { 0x3e, "Requested ciphering and/or integrity protection algorithms not supported" },

    { 0x3f, "Relocation failure in target system" },

    { 0x40, "Directed Retry" },

    { 0x41, "Time critical relocation" },

    { 0x42, "PS Handover Target not allowed" },

    { 0x43, "PS Handover not Supported in Target BSS or Target System" },

    { 0x44, "Incoming relocation not supported due to PUESBINE feature" },

    { 0x45, "DTM Handover - No CS resource" },

    { 0x46, "DTM Handover - PS Allocation failure" },

    { 0x47, "DTM Handover - T24 expiry" },

    { 0x48, "DTM Handover - Invalid CS Indication IE" },

    { 0x49, "DTM Handover - T23 expiry" },

    { 0x4a, "DTM Handover - MSC Error" },

    { 0x4b, "Invalid CSG cell" },

    { 0,    NULL },

};

value_string_ext bssgp_cause_vals_ext = VALUE_STRING_EXT_INIT(bssgp_cause_vals);

static uint16_t

de_bssgp_cause(tvbuff_t *tvb, proto_tree *tree, packet_info *pinfo _U_, uint32_t offset, unsigned len _U_, char *add_string _U_, int string_len _U_)

{

    uint32_t curr_offset;

    curr_offset = offset;

    /*  The Delay Value field is coded as a 16-bit integer value in units of centi-seconds (one hundredth of a second). This

     * coding provides a range of over 10 minutes in increments of 10 ms. As a special case, the hexadecimal value 0xFFFF

     *(decimal 65 535) shall be interpreted as "infinite delay".

     */

    proto_tree_add_item(tree, hf_bssgp_cause, tvb, curr_offset, 1, ENC_BIG_ENDIAN);

    curr_offset+=1;

    return curr_offset-offset;

}

/*

 * 11.3.9   Cell Identifier

 */

/*

 * octets 3-8 Octets 3 to 8 contain the value part (starting with octet 2) of the

 * Routing Area Identification IE defined in 3GPP TS 24.008, not

 * including 3GPP TS 24.008 IEI

 * Octets 9 and 10 contain the value part (starting with octet 2) of the

 * Cell Identity IE defined in 3GPP TS 24.008, not including

 * 3GPP TS 24.008 IEI (10.5.1.1)

 */

uint16_t

de_bssgp_cell_id(tvbuff_t *tvb, proto_tree *tree, packet_info *pinfo, uint32_t offset, unsigned len _U_, char *add_string, int string_len)

{

    uint32_t curr_offset;

    uint16_t ci;

    curr_offset = offset;

    curr_offset = curr_offset + de_gmm_rai(tvb, tree, pinfo, curr_offset, 6, add_string, string_len);

    /*Why doesn't this work? ( add_string will not contain RAI + CI )

     * curr_offset = curr_offset + de_cell_id(tvb, tree, curr_offset , 2, add_string, string_len);

     */

    proto_tree_add_item_ret_uint16(tree, hf_bssgp_ci, tvb, curr_offset, 2, ENC_BIG_ENDIAN, &ci);

    curr_offset+=2;

    if (add_string) {

        char *str = ws_strdup_printf("%s, CI %u", add_string, ci);

        (void) g_strlcpy(add_string, str, string_len);

        g_free(str);

    }

    return curr_offset-offset;

}

/*

 * 11.3.10  Channel needed

 */

/* Rest of element coded as the value part of the Channel Needed

 * PDU defined in 3GPP TS 29.018, not including 3GPP TS 29.018

 * IEI and 3GPP TS 29.018 length indicator

 * TS 29.018

 * The rest of the information element is coded as the IEI part and the

 * value part of the Channel Needed IE defined in 3GPP TS 44.018.

 */

static uint16_t

de_bssgp_chnl_needed(tvbuff_t *tvb, proto_tree *tree, packet_info *pinfo, uint32_t offset, unsigned len, char *add_string _U_, int string_len _U_)

{

    uint32_t curr_offset;

    curr_offset = offset;

    curr_offset = de_rr_chnl_needed(tvb, tree, pinfo, curr_offset, len , NULL, 0);

    return curr_offset-offset;

}

/*

 * 11.3.11  DRX Parameters

 */

/*

 * Rest of element coded as the value part defined in

 * 3GPP TS 24.008, not including 3GPP TS 24.008 IEI and

 * 3GPP TS 24.008 octet length indicator

 */

/*

 * 11.3.12  eMLPP-Priority

 */

/*

 * Rest of element coded as the value part of the eMLPP-Priority IE

 * defined in 3GPP TS 48.008, not including 3GPP TS 48.008 IEI and

 * 3GPP TS 48.008 length indicator

 */

/*

 * 11.3.13  Flush Action

 */

static const value_string bssgp_flush_action_vals[] = {

    { 0x00, "LLC-PDU(s) deleted" },

    { 0x01, "LLC-PDU(s) transferred" },

    { 0,    NULL },

    /* Otherwise "Reserved" */

};

static uint16_t

de_bssgp_flush_action(tvbuff_t *tvb, proto_tree *tree, packet_info *pinfo _U_, uint32_t offset, unsigned len _U_, char *add_string, int string_len)

{

    uint32_t curr_offset;

    uint8_t oct;

    curr_offset = offset;

    /* Action value */

    oct = tvb_get_uint8(tvb,curr_offset);

    proto_tree_add_item(tree, hf_bssgp_flush_action, tvb, curr_offset, 1, ENC_BIG_ENDIAN);

    curr_offset+=1;

    if (add_string)

        snprintf(add_string, string_len, " - %s", val_to_str_const(oct, bssgp_flush_action_vals, "Reserved"));

    return curr_offset-offset;

}

/*

 * 11.3.14  IMSI

 */

/* Octets 3-n contain an IMSI coded as the value part of the Mobile

 * Identity IE defined in 3GPP TS 24.008

 * (NOTE 1)

 * NOTE 1: The Type of identity field in the Mobile Identity IE shall be ignored by

 * the receiver.

 */

/*

 * 11.3.15  LLC-PDU

 */

static uint16_t

de_bssgp_llc_pdu(tvbuff_t *tvb, proto_tree *tree, packet_info *pinfo, uint32_t offset, unsigned len, char *add_string _U_, int string_len _U_)

{

    tvbuff_t *next_tvb=NULL;

    uint32_t curr_offset;

    curr_offset = offset;

    if(len > 0){

        next_tvb = tvb_new_subset_length(tvb, curr_offset, len);

        proto_tree_add_bytes_format(tree, hf_bssgp_llc_data, tvb, curr_offset, len, NULL, "LLC Data");

    }

    if(next_tvb){

        if (llc_handle) {

            call_dissector(llc_handle, next_tvb, pinfo, gparent_tree);

        } else {

            call_data_dissector(next_tvb, pinfo, gparent_tree);

        }

    }

    return len;

}

/*

 * 11.3.16  LLC Frames Discarded

 */

static uint16_t

de_bssgp_llc_frames_disc(tvbuff_t *tvb, proto_tree *tree, packet_info *pinfo _U_, uint32_t offset, unsigned len _U_, char *add_string, int string_len)

{

    uint32_t curr_offset;

    uint8_t oct;

    curr_offset = offset;

    /* Action value */

    oct = tvb_get_uint8(tvb,curr_offset);

    proto_tree_add_item(tree, hf_bssgp_llc_frames_disc, tvb, curr_offset, 1, ENC_BIG_ENDIAN);

    curr_offset+=1;

    if (add_string)

        snprintf(add_string, string_len, " - %u Frames", oct);

    return curr_offset-offset;

}

/*

 * 11.3.17  Location Area

 */

/* Octets 3 to 7 contain the value part (starting with octet 2) of the

 * Location Area Identification IE defined in 3GPP TS 24.008, not

 * including 3GPP TS 24.008 IEI

 */

/*

 * 11.3.18  LSA Identifier List

 */

/* Rest of element coded as in 3GPP TS 48.008, not including

 * 3GPP TS 48.008 IEI and 3GPP TS 48.008 length indicator

 */

/*

 * 11.3.19  LSA Information

 */

/* Rest of element coded as in 3GPP TS 48.008, not including

 * 3GPP TS 48.008 IEI and 3GPP TS 48.008 length indicator

 */

/*

 * 11.3.20  Mobile Id

 */

/* Octets 3-n contain either the IMSI, IMEISV or IMEI coded as the

 * value part (starting with octet 3) of the Mobile Identity IE defined in

 * 3GPP TS 24.008, not including 3GPP TS 24.008 IEI and

 * 3GPP TS 24.008 length indicator

 */

/*

 * 11.3.21  MS Bucket Size

 */

static uint16_t

de_bssgp_ms_bucket_size(tvbuff_t *tvb, proto_tree *tree, packet_info *pinfo _U_, uint32_t offset, unsigned len _U_, char *add_string _U_, int string_len _U_)

{

    uint32_t curr_offset;

    curr_offset = offset;

    /* The Bmax field is coded as Bmax of BVC Bucket Size, see sub-clause 11.3.5. */

    proto_tree_add_item(tree, hf_bssgp_bucket_size, tvb, curr_offset, 2, ENC_BIG_ENDIAN);

    curr_offset+=2;

    return curr_offset-offset;

}

/*

 * 11.3.22  MS Radio Access Capability

 */

/* Rest of element coded as the value part defined in

 * 3GPP TS 24.008, not including 3GPP TS 24.008 IEI and

 * 3GPP TS 24.008 octet length indicator.

 */

/*

 * 11.3.23  OMC Id

 */

static uint16_t

de_bssgp_omc_id(tvbuff_t *tvb, proto_tree *tree, packet_info *pinfo _U_, uint32_t offset, unsigned len, char *add_string _U_, int string_len _U_)

{

    uint32_t curr_offset;

    curr_offset = offset;

    /* octet 3-22 For the OMC identity, see 3GPP TS 12.20 */

    proto_tree_add_item(tree, hf_bssgp_omc_id, tvb, curr_offset, len, ENC_NA);

    return len;

}

/*

 * 11.3.24  PDU In Error

 */

static uint16_t

de_bssgp_pdu_in_error(tvbuff_t *tvb, proto_tree *tree, packet_info *pinfo _U_, uint32_t offset, unsigned len, char *add_string _U_, int string_len _U_)

{

    uint32_t curr_offset;

    curr_offset = offset;

    /* octet 3-? Erroneous BSSGP PDU */

     proto_tree_add_item(tree, hf_bssgp_msg_type, tvb, curr_offset, 1, ENC_BIG_ENDIAN);

     curr_offset++;

     proto_tree_add_item(tree, hf_bssgp_pdu_data, tvb, curr_offset, len-1, ENC_NA);

    return len;

}

/*

 * 11.3.25 PDU Lifetime

 */

static uint16_t

de_bssgp_pdu_lifetime(tvbuff_t *tvb, proto_tree *tree, packet_info *pinfo _U_, uint32_t offset, unsigned len _U_, char *add_string _U_, int string_len _U_)

{

    uint32_t curr_offset;

    curr_offset = offset;

    proto_tree_add_item(tree, hf_bssgp_delay_val, tvb, curr_offset, 2, ENC_BIG_ENDIAN);

    curr_offset+=2;

    return curr_offset-offset;

}

/*

The Delay Value field is coded as a 16-bit integer value in units of centi-seconds (one hundredth of a second). This

coding provides a range of over 10 minutes in increments of 10 ms. As a special case, the hexadecimal value 0xFFFF

(decimal 65 535) shall be interpreted as "infinite delay".

*/

/*

 * 11.3.26  PDU Type

 */

/*

 * 11.3.27  Priority

 */

/* Rest of element coded as the value part of the Priority IE defined in

 * 3GPP TS 48.008, not including 3GPP TS 48.008 IEI and

 * 3GPP TS 48.008 length indicator