Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 3405] New: Wrong display of fields in IEEE1588v2 announce

Date: Fri, 10 Apr 2009 00:14:26 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3405

           Summary: Wrong display of fields in IEEE1588v2 announce messages
           Product: Wireshark
           Version: 1.0.6
          Platform: Other
        OS/Version: Windows XP
            Status: NEW
          Severity: Normal
          Priority: Medium
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: c.huntley@xxxxxxxx
        Depends on: 1


Build Information:
Version 1.0.6 (SVN Rev 27387)

Copyright 1998-2009 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.12.8, with GLib 2.14.6, with WinPcap (version unknown),
with libz 1.2.3, without POSIX capabilities, with libpcre 7.0, with SMI 0.4.8,
with ADNS, with Lua 5.1, with GnuTLS 2.6.3, with Gcrypt 1.4.3, with MIT
Kerberos, with PortAudio V19-devel, with AirPcap.

Running on Windows XP Service Pack 2, build 2600, with WinPcap version 4.0.2
(packet.dll version 4.0.0.1040), based on libpcap version 0.9.5, without
AirPcap.

Built using Microsoft Visual C++ 6.0 build 8804

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
After capturing an IEEE1588v2 "Announce" Ethernet frame, Wireshark's display of
the 1588v2 fields after the "originCurrentUTCOffset" field are wrong.
The attached shows this field highlighted (bytes are $4567 = 17767d)

Per the IEEE1588v2 spec (Clause 13.5.1, Table 25), after skipping one reserved
byte one gets the "timeSource" byte; however this byte ($20) is displayed as
the "priority1" byte (32d).
There are 5 more fields after this, all also wrong.

FYI, the IEEE1588v2 "Sync" Ethernet frames are displayed correctly.

Thanks,
Chris


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.