This is our old Q&A Site. Please post any new questions and answers at


I have tried following options but the Cisco vendor specific AVPs are not decoded in wireshark for Mac.

->Add the new AVPs in Cisco.xml(vendor-id="Cisco") which is located at /Applications/ directory and relaunch the wireshark.

->Add the new AVPs in dictionary.xml(vendor-id="Cisco") which is located at /Applications/ directory and relaunch the wireshark.

->Add the new AVPs in dictionary.xml(vendor-id="TGPP") which is located at /Applications/ directory and relaunch the wireshark.

Can someone please help out in resolving this problem?

Regards Sushil

asked 13 Nov '14, 14:29

SSushilK's gravatar image

accept rate: 0%

edited 14 Nov '14, 20:29

Guy%20Harris's gravatar image

Guy Harris ♦♦

Either of the first two should work.

That assumes, of course, that

  1. the AVPs in your message actually have the V bit set
  2. (and) the Vendor-ID in the AVP is 5771

I would also encourage you to submit your changes and a sample capture to the bug database so those AVPs could be added to future versions of Wireshark. (If it still doesn't work for you then someone could also help figure out what's going wrong.)

permanent link

answered 13 Nov '14, 17:44

JeffMorriss's gravatar image

JeffMorriss ♦
accept rate: 27%

Thanks Jeff for the quick response. Actually, the message has the Cisco specific AVPs with V bit set and Vendor-Id set to 9. If the Vendor-Id is expected to be 5771, how do we add the rule in the xml file to process the AVPs with Vendor-Id set to 9 since the format in xml is like vendor-id="Cisco"? Thanks in Advance!

(13 Nov '14, 20:44) SSushilK

In dictionary.xml, add vendor id for cisco-systems with the value of 9 and name cisco-systems then add the AVP to cisco.xml with the vendoriset to cisco-systems.

(13 Nov '14, 21:16) Anders ♦

Thanks Anders. It worked after making the suggested changes.

(14 Nov '14, 07:40) SSushilK
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 13 Nov '14, 14:29

question was seen: 3,904 times

last updated: 14 Nov '14, 20:29

p​o​w​e​r​e​d by O​S​Q​A