This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

libwireshark is not dissecting diameter messages.

0

Hi,

I have written an application to dissect diameter packets ,i'm using wireshark dissection engine to do it.. problem is-

I have build the application on wireshark version 1.6.5 , and the application is working fine on that system, it dissects the packets, shows the AVPs.

now when i copy the application on another system(wireshark 1.0.8) , and i also copied the libraries from that system to another one.(libwireshark,libwsutil,libpcap etc) and i have set LD_LIBRARY_PATH to local folder containing the application.

now the application is dissecting the packets but it shows all the AVPs UNKNOWN. I just dont know what is wrong, tshark is working fine on this system but not this app.

thnks

asked 02 Oct '12, 22:38

Sanny_D's gravatar image

Sanny_D
0182021
accept rate: 50%

the location for the dictionaries are the same.. as i copied the dictionaries to the same location as it was on previous system.

(03 Oct '12, 02:19) Sanny_D

One Answer:

0

now when i copy the application on another system(wireshark 1.0.8) , and i also copied the libraries from that system to another one.(libwireshark,libwsutil,libpcap etc)

Did you also copy the Diameter dictionaries? If not, do so. Note that they'll have to be installed in the exact same location as they were installed on the machine from which you copied Wireshark 1.6.5.

answered 03 Oct '12, 01:25

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%

yes i did.. i also copied the diameter dictionaries to the same location on new system as it was on previous system! but still its showing it AVP UNKNOWN.

one difference i can see that is.. on previous system the libwireshark and other utils were in /usr/local/lib but on new system it is in /lib64

(03 Oct '12, 02:33) Sanny_D