Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-bugs: [Wireshark-bugs] [Bug 3453] Patch to add LLC dissection for HP Teaming heartbeat frames

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Tue, 12 May 2009 11:25:19 -0700 (PDT)

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3453





--- Comment #5 from Nathan Hartwell <nhartwell@xxxxxxxxx>  2009-05-12 11:25:17 PDT ---
Guy,
Thank you for your comments as I am still working to get the hang of
Wireshark's structure but I am catching on quickly. 

I did confirm that the first 5 bytes of the frames are coded to be  00 80 5F 00
02.

Would it be necessary to register and create a new dissector for the teaming
frames or could I locate my code within the dissect_snap function? I am
confused if a whole new dissector is needed as I am essentially looking to
modify the contents of the Info display field. The rest of the data past the
SNAP frame data is "interesting data" which for the most part cannot be
dissected anyways.

I have added a new OUI for HP to epan\oui.h as you suggested so that 00-80-5F
is recognized and then I can proceed with modifying the Info display field
within the case OUI_HP_2 in dissect_snap with my currently existing code. This
modification allows for all SNAP frames to be dissected without having to go
through the existing MAC address check as I do now.

If a full dissector is needed then I can proceed with that route.


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

  • References:
    • [Wireshark-bugs] [Bug 3453] New: Patch to add LLC dissection for HP Teaming heartbeat frames
      • From: bugzilla-daemon
  • Prev by Date: [Wireshark-bugs] [Bug 3458] can not decode RANAP message
  • Next by Date: [Wireshark-bugs] [Bug 3455] Huge ack number found when capture.
  • Previous by thread: [Wireshark-bugs] [Bug 3453] Patch to add LLC dissection for HP Teaming heartbeat frames
  • Next by thread: [Wireshark-bugs] [Bug 3454] New: Feature Request: Add protocol sub-field to the bootp dissector (Option 12 Hostname)
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation