Ethereal-users: Re: [Ethereal-users] Bad Packets

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Mon, 16 Sep 2002 13:45:51 -0700
On Mon, Sep 16, 2002 at 09:54:38AM -0500, Evers, John E. wrote:
> I am monitoring all traffic to and from one IP address and the following
> errors show up in the DOS window.
> 
> Any assistance in determining the meaning of these errors would be
> appreciated.
> 
> XMLStub: Unable to open module libxml2.dll

That message means that you don't have libxml2 installed.  I don't know
whether versions exist for Windows, or how to find them, or how to build
them; I'll leave that to David Frascone, the person who added support
for an XML description of Diameter attributes and values, to answer.

> Diameter: Using static dictionary! (Unable to use XML)

That message means that, because you don't have libxml2 installed, the
Diameter dissector is falling back on a built-in static table of
attributes and values.

> Diameter: Unable to find name for command code 0x002f7363, Vendor
> "1919512692"!
> Diameter: Bad packet: Bad Flags(0x20) or Version(80)

That message probably means that you have TCP traffic on port 1812,
which is the port that the Diameter dissector defaults to using, but
it's not Diameter traffic.

If you want, you can disable Diameter dissection by selecting the
"Preferences" item under the "Edit" menu, opening up the list of
protocols by clicking on the [+] to the left of "Protocols" in the list
on the left of the dialog box that pops up, selecting "Diameter" from
the list of protocols, setting "Diameter TCP Port" to 0, clicking "Save"
(so that you don't have to do this every time you run Ethereal), and
clicking "OK".