Wireshark-bugs: [Wireshark-bugs] [Bug 11672] New: Required dissector for diameter AVP code 1082
| Bug ID |
11672
|
| Summary |
Required dissector for diameter AVP code 1082
|
| Product |
Wireshark
|
| Version |
1.99.x (Experimental)
|
| Hardware |
x86-64
|
| OS |
All
|
| Status |
UNCONFIRMED
|
| Severity |
Normal
|
| Priority |
Low
|
| Component |
Dissection engine (libwireshark)
|
| Assignee |
bugzilla-admin@wireshark.org
|
| Reporter |
branislav.makan1994@gmail.com
|
Created attachment 13968 [details]
Sample with problematic packet.
Build Information:
Version 1.12.8 (fe235fd from master)
Copyright 1998-2015 Gerald Combs <gerald@wireshark.org> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (64-bit) with GTK+ 3.12.2, with Cairo 1.14.0, with Pango 1.36.8, with
GLib 2.44.1, with libpcap, with libz 1.2.3, without POSIX capabilities, without
libnl, without SMI, without c-ares, without ADNS, without Lua, without Python,
without GnuTLS, without Gcrypt, with MIT Kerberos, without GeoIP, with
PortAudio
V19-devel (built Oct 30 2015 15:07:28), with AirPcap.
Running on Linux 2.6.32-220.7.1.el6.x86_64, with locale en_US.UTF-8, with
libpcap version 1.7.2, with libz 1.2.3, without AirPcap.
Intel(R) Xeon(R) CPU X3440 @ 2.53GHz
Built using gcc 4.4.7 20120313 (Red Hat 4.4.7-11).
Wireshark is Open Source Software released under the GNU General Public
License.
Check the man page and http://www.wireshark.org for more information.
--
Diameter AVP code 1082 is not recognized by dictionary.xml. I've added it
myself but I don't quite understand how the dissectors are made - for
dissecting the unsigned32 bit map. Full info can be found int he 3GPP TS
29.212, 5.3.102 Credit-Management-Status AVP.
Also, the AVP code 1082 in the current Wireshark is incorrect. Possibly a few
more (1083, 1084...) as they are unspecified in the 3GPP specification.
Adding a sample pcap.
Thanks ahead for the assistance.
You are receiving this mail because:
- You are watching all bug changes.
