hi, can anyone tell me how to add new vendor-id & its attributes definition in wireshark? I have wireshark Version 1.6.5 (SVN Rev 40429 from /trunk-1.6) installed on my laptop with windows7 (64-bit edition). I tried to add the vendor Id for Starent in dictionary.xml and also copied the starent.xml under the diameter folder in Program Files>>wireshark; but it seems either I have missed out somewhere or added wrong definition. I still get the following error when reading the pcap. "Unknown Vendor, if you know whose this is you can add it to dictionary.xml" Your help is appreciated. BR//Abhinav asked 29 Jun '12, 03:04 Abhinav Singh |
One Answer:
It would help if you listed exactly the changes you made to dictionary.xml and also starent.xml. Actually, even better, submit them as a bug report so we could support into Wireshark. If you added Starent as a subfile (starent.xml) then there are some things that have to be done in dictionary.xml; you do need to be sure you follow the same pattern as is done with the other sub-files. If in doubt, you could also just try adding the vendor and attributes in dictionary.xml directly. answered 29 Jun '12, 13:37 JeffMorriss ♦ |