https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5010
--- Comment #2 from Frank Heydlauf <fh2010ws@xxxxxxxxxxx> 2010-07-15 04:26:55 PDT ---
( ! ip.dst == 224.0.0.0/4 && ip.ttl < 5 && !pim) ||
(ip.dst == 224.0.0.0/24 && ip.ttl != 1 && !vrrp)
works for me.
... and just found another exception:
ip.dst==224.0.0.251
TTL=255
User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353)
http://www.ietf.org/id/draft-cheshire-dnsext-multicastdns-11.txt
OK, that's pretty new :)
Internet Protocol, Src: ***, Dst: 224.0.0.251 (224.0.0.251)
Version: 4
Header length: 20 bytes
Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
0000 00.. = Differentiated Services Codepoint: Default (0x00)
.... ..0. = ECN-Capable Transport (ECT): 0
.... ...0 = ECN-CE: 0
Total Length: 98
Identification: 0xdedd (57053)
Flags: 0x00
0... = Reserved bit: Not set
.0.. = Don't fragment: Not set
..0. = More fragments: Not set
Fragment offset: 0
Time to live: 255 <-----------------------------
Protocol: UDP (0x11)
Header checksum: 0x6841 [correct]
[Good: True]
[Bad : False]
Source: ***
Destination: 224.0.0.251 (224.0.0.251)
User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353)
Source port: mdns (5353)
Destination port: mdns (5353)
Length: 78
Checksum: 0xdced [correct]
[Good Checksum: True]
[Bad Checksum: False]
--
Greets
Frank
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
