Decoding NR RRC Reconfiguration Complete in 5G SA
Description
Wireshark doesn't support the decoding of "NR RRC Reconfiguration Complete" message in 5G SA when using USER_DLT. It does decode it when it is embedded in an LTE message (5G NSA) and using "lte-rrc.rrc_conn_reconf_compl" dissector. Querying the list of 5G DLT dissectors results this:
- mac-nr
- pdcp-nr
- rlc-nr
- nr-rrc.bcch.bch
- nr-rrc.bcch.dl.sch
- nr-rrc.cg_configinfo
- nr-rrc.dl.ccch
- nr-rrc.dl.dcch
- nr-rrc.pcch
- nr-rrc.radiobearerconfig
- nr-rrc.rrc_reconf
- nr-rrc.rrc_reconf_msg
- nr-rrc.sbcch.sl.bch
- nr-rrc.scch
- nr-rrc.ue_capabilityrat_containerlist
- nr-rrc.ue_mrdc_cap
- nr-rrc.ue_mrdc_cap_msg
- nr-rrc.ue_nr_cap
- nr-rrc.ue_nr_cap_msg
- nr-rrc.ue_radio_access_cap_info
- nr-rrc.ue_radio_paging_info
- nr-rrc.ul.ccch
- nr-rrc.ul.ccch1
- nr-rrc.ul.dcch
- nr-rrc.ul.dcch_msg_msg
- nas-5gs
There's no "nr-rrc.rrc_reconf_compl" dissector for "NR RRC Reconfiguration Complete" message.
Code Inspection
From code inspection, I couyld see that you have a function called dissect_nr_rrc_RRCReconfigurationComplete_PDU() and that you use it to decode "NR RRC Reconfiguration Complete" message when embedded in LTE:
Comparing that to dissect_nr_rrc_RRCReconfiguration_PDU() shows that the latter is called also in "packet-nr-rrc-template.c" where I assume 5G SA dissecting takes place: