Wireshark-bugs: [Wireshark-bugs] [Bug 8692] Wireshark combines two diameter messages (RAA & CCR-
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Fri, 17 May 2013 13:54:25 +0000

Comment # 3 on bug 8692 from 
(In reply to comment #2)
> Hi,
> 
> These are two different diameter messages and if there is a delay between
> them they are displayed as they should, in two different frames.

In packet 566 there is one TCP message with two Diameter PDU:s inside
all of this is in one Ethernet frame, Wireshark is built to present this as one
frame.

Presumably when you say there is a delay there is two differen TCP messages
eatch in one Etherent frame and two frames will be displayed.
> 
> I am trying to understand what you describe as a possible solution...

Currently the info column holds
566    117.726421    10.95.42.38    10.58.253.216    DIAMETER    1146   
cmd=Credit-Control Request(272) flags=RP-- appl=Diameter Credit Control
Application(4) h2h=6668d5da e2e=a737c23f 

With the Diameter information comming from Diameter packet 2, this could be
changed to
566    117.726421    10.95.42.38    10.58.253.216    DIAMETER    1146   
cmd=Re-Auth Answer(258) flags=-P-- appl=Diameter Credit Control Application(4)
h2h=51910a73 e2e=2e60000b | cmd=Credit-Control Request(272) flags=RP--
appl=Diameter Credit Control Application(4) h2h=6668d5da e2e=a737c23f | 

With "|" being the separator between info from the two diameter packets.

You are receiving this mail because:
  • You are watching all bug changes.