From: Paul S. <Pau...@sy...> - 2011-11-30 02:39:52
|
Below is the dictionary content <typedefn type-name="Enumerated" type-parent="Unsigned32"/> <avp name="Reporting-Reason" code="872" mandatory="must" may-encrypt="no" protected="may" vendor-bit="mustnot"> <type type-name="Unsigned32"/> <enum name="THRESHOLD" code="0"/> <enum name="QHT" code="1"/> <enum name="FINAL" code="2"/> <enum name="QUOTA_EXHAUSTED" code="3"/> <enum name="VALIDITY_TIME" code="4"/> <enum name="OTHER_QUOTA_TYPE" code="5"/> <enum name="RATING_CONDITION_CHANGE" code="6"/> <enum name="FORCED_REAUTHORISATION" code="7"/> <enum name="POOL_EXHAUSTED" code="8"/> </avp> From: Paul Sun Sent: Wednesday, November 30, 2011 10:28 AM To: Ahmed habiba Cc: gul...@li... Subject: RE: [Seagull-users] How to configure AVP type=Enumerated? Hi Should I used "<type type-name="Unsigned32"/>" or "<typedefn type-name="Enumerated" type-parent="Unsigned32"/>"? - paul From: Ahmed habiba [mailto:ah...@gm...] Sent: Wednesday, November 30, 2011 10:31 AM To: Paul Sun Cc: gul...@li... Subject: Re: [Seagull-users] How to configure AVP type=Enumerated? Hi, are you sure that the blow line exist in your dictionary.xml of the wireshark? <typedefn type-name="Enumerated" type-parent="Unsigned32"/> Thanks and Best Regards, Ahmed Habiba. On Wed, Nov 30, 2011 at 4:21 AM, Paul Sun <Pau...@sy...> wrote: This one rite? <define name="Reporting-Reason" type="OctetString"> <setfield name="avp-code" value="872"></setfield> <setfield name="flags" value="64"></setfield> </define> - paul From: Ahmed habiba [mailto:ah...@gm...] Sent: Wednesday, November 30, 2011 10:23 AM To: Paul Sun Cc: gul...@li... Subject: Re: [Seagull-users] How to configure AVP type=Enumerated? Hi, could you send the definition of this AVP from the seagull dictionary? Thanks and Best Regards, Ahmed Habiba. On Wed, Nov 30, 2011 at 4:09 AM, Paul Sun <Pau...@sy...> wrote: Thanks Ahmed. The AVP name can be decoded, but the value is marked as "Bad Unsigned name", any advice? - paul From: Ahmed habiba [mailto:ah...@gm...] Sent: Wednesday, November 30, 2011 10:06 AM To: Paul Sun Cc: gul...@li... Subject: Re: [Seagull-users] How to configure AVP type=Enumerated? Hi Paul, the below is a sample of AVP defined as enum you should be able to map the below to your case, I'm using the below and it is working very fine. wireshark Dictionary: <avp name="CC-Request-Type" code="416" mandatory="must" may-encrypt="yes" protected="may" vendor-bit="mustnot"> <type type-name="Unsigned32"/> <enum name="INITIAL_REQUEST" code="1"/> <enum name="UPDATE_REQUEST" code="2"/> <enum name="TERMINATION_REQUEST" code="3"/> <enum name="EVENT_REQUEST" code="4"/> </avp> Seagull: <define name="CC-Request-Type" type="OctetString"> <setfield name="avp-code" value="416"></setfield> <setfield name="flags" value="64"></setfield> </define> Thanks, Ahmed Habiba. On Wed, Nov 30, 2011 at 3:53 AM, Paul Sun <Pau...@sy...> wrote: Hi I am facing a problem on one AVP. The AVP is Reporting-Reason (872), and I am failed to make it decoded in wireshark, in the specification and in the wireshark dictionary, the type for this AVP is "Enumerated". Is there a way to define this in Seagull? Or, what should I needed to change in wireshark dictionary? <avp name="Reporting-Reason" code="872" mandatory="must" may-encrypt="no" protected="mustnot" vendor-bit="must" vendor-id="TGPP"> <type type-name="Enumerated"/> <enum name="THRESHOLD" code="0"/> <enum name="QHT" code="1"/> <enum name="FINAL" code="2"/> <enum name="QUOTA_EXHAUSTED" code="3"/> <enum name="VALIDITY_TIME" code="4"/> <enum name="OTHER_QUOTA_TYPE" code="5"/> <enum name="RATING_CONDITION_CHANGE" code="6"/> <enum name="FORCED_REAUTHORISATION" code="7"/> <enum name="POOL_EXHAUSTED" code="8"/> </avp> Thanks - paul ------------------------------------------------------------------------ ------ All the data continuously generated in your IT infrastructure contains a definitive record of customers, application performance, security threats, fraudulent activity, and more. Splunk takes this data and makes sense of it. IT sense. And common sense. http://p.sf.net/sfu/splunk-novd2d _______________________________________________ Gull-users mailing list Gul...@li... https://lists.sourceforge.net/lists/listinfo/gull-users |