Can Wireshark decode DIAMETER packets without the IP or transport layer?
I wonder if Wireshark can decode the diameter packet without the Transport and IP Layer.
I wonder if Wireshark can decode the diameter packet without the Transport and IP Layer.
Wireshark reads various file types like pcap. If you create a pcap file with a user dlt and the rest diameter packet data wireshark can dissect that. If you have diameter packet data in a hex dump txt2pcap can convert that to a pcap file readable by wireshark. The exported pdu format could also be used.
Per Wireshark's DIAMETER documentation, a port and TCP/STCP will be used. Thus Wireshark will be expecting the transport layer (and by extension, the underlying network layer).
Please start posting anonymously - your entry will be published after you log in or create a new account.
Asked: 2019-04-17 16:17:30 +0000
Seen: 2,261 times
Last updated: Apr 17 '19