ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 4943] ISMP.EDP "Tuples" dissected incorrectly: revert SVN

Date: Fri, 21 Jan 2011 07:07:43 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4943

--- Comment #8 from Bill Meier <wmeier@xxxxxxxxxxx> 2011-01-21 10:07:40 EST ---
(In reply to comment #7)

Some comments after doing a bit more research (see inline comments).

> 
> That being said & following up on the info Chris provided I'm guessing that
> ISMP messages (and their possible payloads) are obsolete[1] and thus further
> resolving this issue is not necessary or useful.

Looking at the specs for several of the current Entersys switch products
(www.enterasys.com) I see that several of the switches support "Cabletron
Discovery Protocol". So: I guess the protocol is not actually obsolete.

> 
> [1] For example: besides the spec Chris found for an ISMP "type 2" message I
> found another spec [RFC] for what appears to be a different format message
> with the same type.

The above is incorrect; I mis-interpreted RFC 2642.

-------

Also: The VLAN Hello (Version 4) message described in RFC 2641 appears to be
quite similar to the "Enterasys Discovery Protocol" message dissected by 
packet-ismp.c (with different names for several of the fields and without the
"tuples").

In the attached capture the discovery protocol message has a version of 6.

There are references in Entersys Release Note documents to Cabletron Discovery
Protocol Version 6 but I was unable to find any specification of V6 of the
protocol.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.