This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How to add New vendor definition in wireshark?

0

hi, can anyone tell me how to add new vendor-id & its attributes definition in wireshark?

I have wireshark Version 1.6.5 (SVN Rev 40429 from /trunk-1.6) installed on my laptop with windows7 (64-bit edition).

I tried to add the vendor Id for Starent in dictionary.xml and also copied the starent.xml under the diameter folder in Program Files>>wireshark; but it seems either I have missed out somewhere or added wrong definition. I still get the following error when reading the pcap. "Unknown Vendor, if you know whose this is you can add it to dictionary.xml"

Your help is appreciated.

BR//Abhinav

asked 29 Jun '12, 03:04

Abhinav%20Singh's gravatar image

Abhinav Singh
1111
accept rate: 0%


One Answer:

0

It would help if you listed exactly the changes you made to dictionary.xml and also starent.xml. Actually, even better, submit them as a bug report so we could support into Wireshark.

If you added Starent as a subfile (starent.xml) then there are some things that have to be done in dictionary.xml; you do need to be sure you follow the same pattern as is done with the other sub-files. If in doubt, you could also just try adding the vendor and attributes in dictionary.xml directly.

answered 29 Jun '12, 13:37

JeffMorriss's gravatar image

JeffMorriss ♦
6.2k572
accept rate: 27%