https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15700

            Bug ID: 15700
           Summary: Wireshark fail to decode Diameter AVP code 3175
           Product: Wireshark
           Version: 3.0.1
          Hardware: x86
                OS: Windows 10
            Status: UNCONFIRMED
          Severity: Major
          Priority: Low
         Component: Dissection engine (libwireshark)
          Assignee: bugzilla-ad...@wireshark.org
          Reporter: jeff2008...@hotmail.com
  Target Milestone: ---

Created attachment 17056
  --> https://bugs.wireshark.org/bugzilla/attachment.cgi?id=17056&action=edit
pcap traffic, spec and decode snapshot

Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
1. 3GPP TS 29.336 R15 V15.5.0, section 8.4.1:
Reporting-Time-Stamp    3175    8.4.71  Time    V                       M      
No
NIA-Flags       3176    8.4.72  Unsigned32      V                       M      
No
Group-User-Identifier   3177    8.4.73  Grouped V                       M      
No

2. Wireshark 3.0.1 code:

git/wireshark/diameter ((wireshark-3.0.1))
$ grep -e 3174 -e 3175 dictionary.xml
                <avp name="NIR-Flags" code="3174" mandatory="mustnot"
may-encrypt="no" vendor-bit="must" vendor-id="TGPP">
$

3. Wireshark 3.0.1 decode 

                    AVP: Unknown(3175) l=16 f=V-- vnd=TGPP val=ee000102
                        AVP Code: 3175 Unknown
                            Unknown AVP 3175 (vendor=3GPP), if you know what
this is you can add it to dictionary.xml
                                [Expert Info (Warning/Undecoded): Unknown AVP
3175 (vendor=3GPP), if you know what this is you can add it to dictionary.xml]
                                    [Unknown AVP 3175 (vendor=3GPP), if you
know what this is you can add it to dictionary.xml]
                                    [Severity level: Warning]
                                    [Group: Undecoded]
                        AVP Flags: 0x80, Vendor-Specific: Set
                        AVP Length: 16
                        AVP Vendor Id: 3GPP (10415)
                        Value: ee000102


4. See attached pcap and snapshots.

-- 
You are receiving this mail because:
You are watching all bug changes.
___________________________________________________________________________
Sent via:    Wireshark-bugs mailing list <wireshark-bugs@wireshark.org>
Archives:    https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
             mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

Reply via email to