Hello, I am doing some troubleshooting for a diameter integration but AVP 873 appears as unkown with the following message: "if you know what this is you can add it to dictionary.xml" Is there any new dictionary that already has this AVP defined that i can use? asked 03 Sep '14, 12:45  AMM91249 edited 04 Sep '14, 06:31  JeffMorriss ♦ |
One Answer:
Wireshark 1.12.0 decodes this as 3GPP's Service-Information AVP provided that the Vendor ID field for the AVP is 10415 and that the Vendor-Specific bit is set. For example, this is a hexadecimal stream of an AVP I just correctly decoded this way: 00000369 c000000c000028af I bolded the AVP code, AVP flags and Vendor ID fields containing those values respectively. answered 04 Sep '14, 15:51  Quadratic |
Is this a 3GPP AVP (is the V-bit set with a Vendor-ID of 3GPP)?
What version are you using?
AVP code 873 for Vendor-ID of 3GPP has been in Wireshark for quite a while. (OTOH AVP code of 873 for other vendor IDs--including no vendor-ID--isn't supported any version.)\
If in doubt can you post the capture somewhere (e.g., cloudshark.org)?