I am using wireshark version 1.10.0rc2. I want to capture Diameter stuffs for S6a interface. I am facing problem while decode the Trace-Data AVP having AVP code = 1458. In wireshark it is showing as AVP Code: 1458 Unknown Unknow AVP, if you know what this is you can add it to the dictionary.xml. Can any one have a look and please let me know. Hope for your cooperation. Thanks in advance. -- Regards Mrinal Aich Software Engineer-1, Dynamic Digital Technology, Kolkata asked 26 Aug '13, 08:16  Mrinal |
One Answer:
The AVP 1458 is in the diameter.xml in trunk, I'm not sure when it was added you could try the released version 1.10.1 which is newer than 1.10.0.rc2 or a development build from http://www.wireshark.org/download/automated/ Note that the AVP should have the vendor bit set and the vendor ID as 3GPP in your trace. You could also check if your dictionmary.xml have <avp name="Trace-Data" code="1458" mandatory="must" vendor-bit="must" may-encrypt="no" vendor-id="TGPP"> <grouped> <gavp name="Trace-Reference"/> <gavp name="Trace-Depth"/> <gavp name="Trace-NE-Type-List"/> <gavp name="Trace-Interface-List"/> <gavp name="Trace-Event-List"/> <gavp name="OMC-Id"/> <gavp name="Trace-Collection-Entity"/> </grouped> </avp> <avp name="Trace-Reference" code="1459" mandatory="must" vendor-bit="must" may-encrypt="no" vendor-id="TGPP"> <type type-name="OctetString"/> </avp> <avp name="Trace-Depth" code="1462" mandatory="must" vendor-bit="must" may-encrypt="no" vendor-id="TGPP"> <type type-name="Enumerated"/> <enum name="Minimum" code="0"/> <enum name="Medium" code="1"/> <enum name="Maximum" code="2"/> <enum name="MinimumWithoutVendorSpecificExtension" code="3"/> <enum name="MediumWithoutVendorSpecificExtension" code="4"/> <enum name="MaximumWithoutVendorSpecificExtension" code="5"/> </avp> <avp name="Trace-NE-Type-List" code="1463" mandatory="must" vendor-bit="must" may-encrypt="no" vendor-id="TGPP"> <type type-name="OctetString"/> </avp> <avp name="Trace-Interface-List" code="1464" mandatory="must" vendor-bit="must" may-encrypt="no" vendor-id="TGPP"> <type type-name="OctetString"/> </avp> <avp name="Trace-Event-List" code="1465" mandatory="must" vendor-bit="must" may-encrypt="no" vendor-id="TGPP"> <type type-name="OctetString"/> </avp> <avp name="OMC-Id" code="1466" mandatory="must" vendor-bit="must" may-encrypt="no" vendor-id="TGPP"> <type type-name="OctetString"/> </avp> <avp name="Trace-Collection-Entity" code="1452" mandatory="must" vendor-bit="must" may-encrypt="no" vendor-id="TGPP"> <type type-name="IPAddress"/> </avp> And if not add them. answered 26 Aug '13, 08:29  Anders ♦ |
In dictionary.xml,the information about Trace Data AVP was already mentioned. I also set the vendor bit and assigned the vendor ID as 3GPP but still it is showing 1458 Unknown AVP.
If you can share a trace file thrugh bugzilla or some other means we might be able to figure out what the problem is.