This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

how to decode Vodafone Diameter specific AVP 260 & 261 using wireshark.

0

Hi,

I wanted to decode my wireshark to decode the Vodafone Diameter specific AVPs 260 & 261. My wireshark is installed on my Linux Box running with CentOS.

I can see the following lie is already added in dictionary.xml [path: /usr/share/wireshark/diameter]

<vendor vendor-id="Vodafone" code="12645" name="Vodafone"/>

And I have added following in the dictionary.xml:

           <avp name="Radio-Access-Technology" code="260" vendor-bit="Vodafone">
                    <type type-name="Enumerated"/>
                    <enum name="UTRAN" code="1"/>
                    <enum name="GERAN" code="2"/>
                    <enum name="WLAN" code="3"/>
                    <enum name="GAN" code="4"/>
                    <enum name="HSPA Evolution" code="5"/>
                    <enum name="EUTRAN" code="6"/>
            </avp>
        &lt;avp name=&quot;Reporting-Reason&quot; code=&quot;261&quot; vendor-bit=&quot;Vodafone&quot;&gt;
                &lt;type type-name=&quot;Enumerated&quot;/&gt;
                &lt;enum name=&quot;THRESHOLD&quot; code=&quot;0&quot;/&gt;
                &lt;enum name=&quot;FINAL&quot; code=&quot;2&quot;/&gt;
                &lt;enum name=&quot;QUOTA_EXHAUSTED&quot; code=&quot;3&quot;/&gt;
                &lt;enum name=&quot;VALIDITY_TIME&quot; code=&quot;4&quot;/&gt;
                &lt;enum name=&quot;OTHER_QUOTA_TYPE&quot; code=&quot;5&quot;/&gt;
                &lt;enum name=&quot;RATING_CONDITION_CHANGE&quot; code=&quot;6&quot;/&gt;
                &lt;enum name=&quot;FORCED_REAUTHORISATION&quot; code=&quot;7&quot;/&gt;
        &lt;/avp&gt;</code></pre><p>Still these AVPs are not decoded. Please let me know what is missed here.</p></div><div id="question-tags" class="tags-container tags"><span class="post-tag tag-link-diameter" rel="tag" title="see questions tagged &#39;diameter&#39;">diameter</span> <span class="post-tag tag-link-avp" rel="tag" title="see questions tagged &#39;avp&#39;">avp</span> <span class="post-tag tag-link-vodafone" rel="tag" title="see questions tagged &#39;vodafone&#39;">vodafone</span></div><div id="question-controls" class="post-controls"></div><div class="post-update-info-container"><div class="post-update-info post-update-info-user"><p>asked <strong>19 Apr '11, 15:44</strong></p><img src="https://secure.gravatar.com/avatar/5edcb417f6ec8bf11e63a8f619d51ebe?s=32&amp;d=identicon&amp;r=g" class="gravatar" width="32" height="32" alt="sunil&#39;s gravatar image" /><p><span>sunil</span><br />

11223
accept rate: 0%

edited 26 Feb ‘12, 22:34

cmaynard's gravatar image

cmaynard ♦♦
9.4k1038142


One Answer:

2

Try this format instead(Note the part vendor-id="TGPP"): <avp name="GBA-UserSecSettings" code="400" vendor-bit="must" may-encrypt="no" vendor-id="TGPP"> <type type-name="OctetString"/> </avp>

There are other examples in the file. Regards Anders

answered 20 Apr '11, 12:36

Anders's gravatar image

Anders ♦
4.6k952
accept rate: 17%

Thanks a lot Anders. it works.

(20 Apr '11, 14:00) sunil
1

Since Anders' suggestion works, you should accept his answer, since that will remove this question from the list of "unanswered" questions.

(20 Apr '11, 15:25) cmaynard ♦♦