Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 3453] Patch to add LLC dissection for HP Teaming heartbeat

Date: Fri, 8 May 2009 09:12:40 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3453





--- Comment #4 from Guy Harris <guy@xxxxxxxxxxxx>  2009-05-08 09:12:34 PDT ---
It appears that the HP document to which you're referring is

    http://www.hp.com/sbso/bus_protect/teaming.pdf

which says that "Heartbeat frames are LLC Test Frames with 63 bytes of data.
The destination address of all Heartbeat frames is a layer 2 multicast address
of 03-00-C7-00-00-EE. This is a HP registered multicast address and used only
for Heartbeat frames."

Do *all* HP Teaming heartbeat frames have the first 5 bytes of the
"Insignificant data" as 00 80 5F 00 02?  00-80-5F is an OUI belonging to HP. 
If they do, then the right way to handle this would be to treat them as normal
SNAP frames, add a dissector table for the HP OUI 00-80-5F, and register an HP
Teaming dissector in that dissector table for the PID 00-02.


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.