On Feb 11, 2004, at 11:40 AM, Palmer Thomas J Civ HQ SSG/ENEM wrote:
What do the following errors mean???
They mean that your capture has traffic to and/or from TCP or SCTP port
1812, but it's not Diameter traffic, and the Diameter dissector is
noisy.
You probably don't want to change the first of those, even if you can
change it. There's nothing you can do to change the second of those.
However, the third of them should arguably be changed - the Diameter
dissector should probably, at minimum, either
1) keep quiet about the "Unable to find name for command code" and
"Bad Flags ... or Version" errors, and possibly the "unable to open
dictionary" errors
or
2) just reject packets with an unknown command code, bad flags, or bad
version, and not even try to open the dictionary until it sees a *real*
Diameter packet.
(The second of those wasn't possible when the Diameter dissector was
originally written; there's now a way for dissectors to reject packets
as not being for them.)
Unless somebody can come up with a good reason not to do either of
those, I'll probably do the second of them.