Decoded json output about qcsuper HOT 4 OPEN

Hello,

For this purpose, you may want to use our open-source library Pycrate, which allows to decode various telecom protocols, for which you can find the source code here: https://github.com/P1sec/pycrate

A tutorial for using the ASN.1-decoding runtime is available here: https://github.com/P1sec/pycrate/wiki/Using-the-pycrate-asn1-runtime

Especially, for the RRC: https://github.com/P1sec/pycrate/wiki/Using-the-pycrate-asn1-runtime#the-umts-and-lte-rrc-protocols

Regards,

from qcsuper.

The "decoded_sibs_dump.py" module is not sufficient? It uses pycrate inside.

from qcsuper.

Hello,

No, it is not its purpose. The "decoded_sibs_dump.py" module is here because Wireshark lacks native reassembly of SIBs, and hence can't decode the SIBs out of QCSuper captures.

In order to obtain a standard JSON representation of the RRC messages, you may want to use tshark against a PCAP capture, with the -r flag in order to parse a QCSuper-issued capture, and with the -T json or -T ek flag (beware, with some of these modes JSON keys may be repeated, producing effectively non-standard JSON) in order to obtain parseable JSON.

Regards,

from qcsuper.

Hello
you mean that i can use

/qcsuper.py --usb-modem /dev/tty2 --pcap-dump result.pcap
/tshark -r result.pcap -T json

and results would be ready! That's great.

from qcsuper.