ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 10462] 6LoWPAN Mesh headers not treated as encapsulating a

Date: Wed, 17 Sep 2014 22:26:39 +0000

Comment # 5 on bug 10462 from
I'm a bit wary of mis-stating the specs here, and not sure I can do a better
job.

When SAM and/or DAM are 3, the base address for the source and/or destination
address is derived from the encapsulating header, rather than being inline
bytes. And the prefix context is overlaid on that, same as for the inline
bytes. (Context takes priority if they overlap and differ - not that I've seen
anyone ever do that).

The encapsulating header for an IPHC header will be one of:

* A previous IPHC header, in which case you copy its src/dst IP address
* A Mesh header, in which case you convert its src/dst MAC address to a 64-bit
IID (flip the U/L bit for 64-bit MAC; add ::ff:fe00: for 16-bit)
* The MAC header, in which case you convert its src/dst MAC address to a 64-bit
IID

Wireshark handles the first and third case there, not the second.

Both source and destination address follow this rule. I'm afraid that trace has
equal MAC and Mesh source address, so you can't see the error for the SAM=3
case there.


You are receiving this mail because:
  • You are watching all bug changes.