Wireshark-bugs: [Wireshark-bugs] [Bug 1494] New: Diameter dissector : the applicationID isn't ta
Date: Tue, 27 Mar 2007 13:47:58 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1494

           Summary: Diameter dissector : the applicationID isn't taken into
                    account when decoding an AVP
           Product: Wireshark
           Version: 0.99.5
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: Major
          Priority: Medium
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: xameziane@xxxxxxxx


Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
Hello

I believe that "ApplicationID" isn't taken into account when Wireshark decodes
an AVP.

Example : 
- in 3GPP CX/DX Application(ID=16777216, 3GPP TS 29.228 and 29.229), the AVP
code 1 is "Visited-Network-Identifier". The vendor-Id for this AVP is TGPP
(10415)
- in 3GPP Gmb Application (ID=16777223, 3GPP TS 29.061), the AVP code 1 is
"3GPP-IMSI". The vendor-Id for this AVP is also TGPP (10415)

I created my own dictionnary for 3GPP Gmb Application and, normally,
Wireshark should display the right name according to the "ApplicationID" but
it isn't the case... Wireshark always displays me the value in
3GPP Gmb dictionnary. If I erase the AVP code 1 from my "3GPP Gmb"
dictionnary, it displays the AVP name contained in the "3GPP CD/DX"
dictionnary...as if it doesn't take into account the ApplicationID...

I looked a little bit at the code of the Diameter dissector and it seems me
that the ApplicationID isn't taken into account in your structure arrays (ex:
in file "packet-diameter-defs.h", the array which name is
"ThreeGPP_vendor_diameter_avps" doesn't have a field which can do the
difference between the AVP 1 in Gmb application and the AVP 1 in CX/DX
application.)

I hope that my explanation was clear.

Thanks by advance

Xavier


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.