Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 11672] New: Required dissector for diameter AVP code 1082

Date: Tue, 03 Nov 2015 10:25:41 +0000
Bug ID 11672
Summary Required dissector for diameter AVP code 1082
Product Wireshark
Version 1.99.x (Experimental)
Hardware x86-64
OS All
Status UNCONFIRMED
Severity Normal
Priority Low
Component Dissection engine (libwireshark)
Assignee [email protected]
Reporter [email protected]

Created attachment 13968 [details]
Sample with problematic packet.

Build Information:
Version 1.12.8 (fe235fd from master)

Copyright 1998-2015 Gerald Combs <[email protected]> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GTK+ 3.12.2, with Cairo 1.14.0, with Pango 1.36.8, with
GLib 2.44.1, with libpcap, with libz 1.2.3, without POSIX capabilities, without
libnl, without SMI, without c-ares, without ADNS, without Lua, without Python,
without GnuTLS, without Gcrypt, with MIT Kerberos, without GeoIP, with
PortAudio
V19-devel (built Oct 30 2015 15:07:28), with AirPcap.

Running on Linux 2.6.32-220.7.1.el6.x86_64, with locale en_US.UTF-8, with
libpcap version 1.7.2, with libz 1.2.3, without AirPcap.
Intel(R) Xeon(R) CPU           X3440  @ 2.53GHz

Built using gcc 4.4.7 20120313 (Red Hat 4.4.7-11).

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
Diameter AVP code 1082 is not recognized by dictionary.xml. I've added it
myself but I don't quite understand how the dissectors are made - for
dissecting the unsigned32 bit map. Full info can be found int he 3GPP TS
29.212, 5.3.102 Credit-Management-Status AVP.
Also, the AVP code 1082 in the current Wireshark is incorrect. Possibly a few
more (1083, 1084...) as they are unspecified in the 3GPP specification.

Adding a sample pcap.

Thanks ahead for the assistance.


You are receiving this mail because:
  • You are watching all bug changes.