This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

AVPs shown in Diameter dictionary aren’t decoded

0

Hello, I have some AVPs missing (unknown) on Wireshark (Windows). I downloaded from there: http://code.metager.de/source/xref/wireshark/diameter/dictionary.xml/?r=9b7aab935cbfde5d93309d5543df5a077d240a21 The dictionary.xml file contains the AVP I need (1074, 1075, 1081, 1082), overwrite the old one, but still wireshark show me these AVPs as unknown. Do I miss something?

Thanks Lucas

asked 12 Feb '16, 03:01

Lucas%20Rey's gravatar image

Lucas Rey
6112
accept rate: 0%

edited 12 Feb '16, 06:14

JeffMorriss's gravatar image

JeffMorriss ♦
6.2k572

Adding what I seen on wireshark: http://i.imgur.com/MMHfonA.png

(12 Feb '16, 03:22) Lucas Rey

One Answer:

1

Hi, I'm not sure what you mean by "The dictionary.xml file contains the AVP I need" if I look at the file you refere to AVP 1082 is for 3GPP where as the screenshot shows an Ericsson AVP so that XML file will not translate an Ericsson AVP. If you know the the format of Ericsson AVP 1082 you should add it in the file Ericsson.xml with vendor id Ericsson.

answered 12 Feb '16, 05:51

Anders's gravatar image

Anders ♦
4.6k952
accept rate: 17%

I'd also suggest that if you do know the format of the AVPs you should also submit them to Wireshark for inclusion. That way you won't have to re-add them to the XML file every time you upgrade Wireshark.

If git and Gerrit look too daunting you could always just attach your patch (changes) to a bug report.

(12 Feb '16, 06:14) JeffMorriss ♦