It may be sometimes needed to create a user defined dictionary value in wireshark and use it using tshark command in Linux . While implementing , one of the common errors faced may be the Dictionary: No Vendor . Root cause for this error indicates tshark is not able to find the vendor ID definition for a diameter AVP from the dictionary file
In Linux , wireshark diameter protocol dictionary is stored by default in
Directory : /usr/share/wireshark/diameter/
Dictionary file : dictionary.xml
Error Dictionary: No Vendor is observed if tshark is unable to fund the vendor ID definition in the tags defined above the typedefn tag in dictionary.xml file. Adding the vendor ID above this tag solves the issue
<!-- ************************************************************** -->
<!-- ********************** End Commands ************************** -->
<!-- ************************************************************** -->
<vendor vendor-id="None" code="0" name="None"/>
<vendor vendor-id="HP" code="11" name="Hewlett Packard"/>
<vendor vendor-id="Sun" code="42" name="Sun Microsystems, Inc."/>
<vendor vendor-id="Merit" code="61" name="Merit Networks"/>
<vendor vendor-id="Nokia" code="94" name="Nokia"/>
<vendor vendor-id="NokiaSiemensNetworks" code="28458" name="Nokia Siemens Networks"/>
<vendor vendor-id="Ericsson" code="193" name="Ericsson"/>
<vendor vendor-id="USR" code="429" name="US Robotics Corp."/>
<vendor vendor-id="ALU" code="637" name="ALU Network"/>
<vendor vendor-id="Huawei" code="2011" name="Huawei"/>
<vendor vendor-id="Deutsche_Telekom_AG" code="2937" name="Deutsche Telekom AG"/>
<vendor vendor-id="TGPP2" code="5535" name="3GPP2"/>
<vendor vendor-id="Cisco" code="5771" name="Cisco"/>
<vendor vendor-id="SKT" code="5806" name="SK Telecom"/>
<vendor vendor-id="TGPP" code="10415" name="3GPP"/>
<vendor vendor-id="Vodafone" code="12645" name="Vodafone"/>
<vendor vendor-id="VerizonWireless" code="12951" name="Verizon Wireless"/>
<vendor vendor-id="ETSI" code="13019" name="ETSI"/>
<vendor vendor-id="Tango" code="13421" name="Tango Telecom Limited"/>
<vendor vendor-id="ChinaTelecom" code="81000" name="China Telecom"/>
<vendor vendor-id="TGPPCX" code="16777216" name="3GPP CX/DX"/>
<!-- ************************************************************** -->
<!-- ************************ typedefn's ************************** -->
<!-- ************************************************************** -->
<typedefn type-name="OctetString"/>