This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I am using wireshark version 1.10.0rc2. I want to capture Diameter stuffs for S6a interface. I am facing problem while decode the Trace-Data AVP having AVP code = 1458.

In wireshark it is showing as AVP Code: 1458 Unknown Unknow AVP, if you know what this is you can add it to the dictionary.xml.

Can any one have a look and please let me know.

Hope for your cooperation. Thanks in advance.

-- Regards Mrinal Aich Software Engineer-1, Dynamic Digital Technology, Kolkata

asked 26 Aug '13, 08:16

Mrinal's gravatar image

Mrinal
11225
accept rate: 0%


The AVP 1458 is in the diameter.xml in trunk, I'm not sure when it was added you could try the released version 1.10.1 which is newer than 1.10.0.rc2 or a development build from http://www.wireshark.org/download/automated/ Note that the AVP should have the vendor bit set and the vendor ID as 3GPP in your trace. You could also check if your dictionmary.xml have <avp name="Trace-Data" code="1458" mandatory="must" vendor-bit="must" may-encrypt="no" vendor-id="TGPP"> <grouped> <gavp name="Trace-Reference"/> <gavp name="Trace-Depth"/> <gavp name="Trace-NE-Type-List"/> <gavp name="Trace-Interface-List"/> <gavp name="Trace-Event-List"/> <gavp name="OMC-Id"/> <gavp name="Trace-Collection-Entity"/> </grouped> </avp> <avp name="Trace-Reference" code="1459" mandatory="must" vendor-bit="must" may-encrypt="no" vendor-id="TGPP"> <type type-name="OctetString"/> </avp> <avp name="Trace-Depth" code="1462" mandatory="must" vendor-bit="must" may-encrypt="no" vendor-id="TGPP"> <type type-name="Enumerated"/> <enum name="Minimum" code="0"/> <enum name="Medium" code="1"/> <enum name="Maximum" code="2"/> <enum name="MinimumWithoutVendorSpecificExtension" code="3"/> <enum name="MediumWithoutVendorSpecificExtension" code="4"/> <enum name="MaximumWithoutVendorSpecificExtension" code="5"/> </avp> <avp name="Trace-NE-Type-List" code="1463" mandatory="must" vendor-bit="must" may-encrypt="no" vendor-id="TGPP"> <type type-name="OctetString"/> </avp> <avp name="Trace-Interface-List" code="1464" mandatory="must" vendor-bit="must" may-encrypt="no" vendor-id="TGPP"> <type type-name="OctetString"/> </avp> <avp name="Trace-Event-List" code="1465" mandatory="must" vendor-bit="must" may-encrypt="no" vendor-id="TGPP"> <type type-name="OctetString"/> </avp> <avp name="OMC-Id" code="1466" mandatory="must" vendor-bit="must" may-encrypt="no" vendor-id="TGPP"> <type type-name="OctetString"/> </avp> <avp name="Trace-Collection-Entity" code="1452" mandatory="must" vendor-bit="must" may-encrypt="no" vendor-id="TGPP"> <type type-name="IPAddress"/> </avp> And if not add them.

permanent link

answered 26 Aug '13, 08:29

Anders's gravatar image

Anders ♦
4.6k952
accept rate: 17%

In dictionary.xml,the information about Trace Data AVP was already mentioned. I also set the vendor bit and assigned the vendor ID as 3GPP but still it is showing 1458 Unknown AVP.

(28 Aug '13, 06:00) Mrinal

If you can share a trace file thrugh bugzilla or some other means we might be able to figure out what the problem is.

(28 Aug '13, 06:14) Anders ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×36
×29
×11

question asked: 26 Aug '13, 08:16

question was seen: 3,897 times

last updated: 28 Aug '13, 06:14

p​o​w​e​r​e​d by O​S​Q​A