Wireshark · Wireshark-users: [Wireshark-users] Diameter AVP decoding : Same AVP codes with different names

[Xavier Ameziane <xameziane@xxxxxxxx>]

Hello

 

First, sorry for my bad english... :-)

 

I have a general question about the way Wireshark decodes Diameter AVP. Is the "ApplicationID" taken into account when Wireshark decodes an AVP ?

 

Example :

- in 3GPP CX/DX Application(ID=16777216, 3GPP TS 29.228 and 29.229), the AVP code 1 is "Visited-Network-Identifier". The vendor-Id for this AVP is TGPP (10415)

- in 3GPP Gmb Application (ID=16777223, 3GPP TS 29.061), the AVP code 1 is "3GPP-IMSI". The vendor-Id for this AVP is also TGPP (10415)

 

I created my own dictionnary for 3GPP Gmb Application and, normally, Wireshark should display the right name according to the "ApplicationID" but I don't think it is the case... Wireshark always displays me the value in 3GPP Gmb dictionnary. If I erase the AVP code 1 from my "3GPP Gmb" dictionnary, it displays the AVP name contained in the "3GPP CD/DX" dictionnary...as if it doesn't take into account the ApplicationID...

 

Is it normal ? Do I make a mistake somewhere in my understanding ?

 

Thanks by advance

 

Xavier

---

Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! 
Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses.