ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-dev: Re: [Wireshark-dev] Destination Embedded IPv4 address in IPv6 not correct in "Pa

From: Pascal Quantin <pascal@xxxxxxxxxxxxx>
Date: Thu, 3 Nov 2022 23:42:37 +0000 (GMT+00:00)
Hi Joel,

Could you please share a pcap exhibiting your issue?

Thanks and best regards,
Pascal.

3 nov. 2022 23:31:04 Joel Moxey <joelmoxey@xxxxxxxxx>:

In 4.0.1:

No.     Time               Delta time     Source                Src port Destination           Dst port Protocol Length RAT Type   TEID/GRE Key Sequence Number Layer 2 Tunneling Protocol Info
      5 18:42:33.216141    0.000130       2605:4580:0:a::1      2000     64:ff9b::330:1        80       TCP      74                                                                        2000 → 80 [SYN] Seq=1597636906 Win=32768 Len=0

Frame 5: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: IntelCor_be:7c:f8 (3c:fd:fe:be:7c:f8), Dst: Fortinet_06:27:80 (e0:23:ff:06:27:80)
Internet Protocol Version 6, Src: 2605:4580:0:a::1, Dst: 64:ff9b::330:1
    0110 .... = Version: 6
    .... 0000 0000 .... .... .... .... .... = Traffic Class: 0x00 (DSCP: CS0, ECN: Not-ECT)
    .... 0000 0000 0000 0000 0000 = Flow Label: 0x00000
    Payload Length: 20
    Next Header: TCP (6)
    Hop Limit: 64
    Source Address: 2605:4580:0:a::1
    Destination Address: 64:ff9b::330:1
    [Embedded IPv4 Prefix: 0064ff9b0000000000000000]
    [Destination Embedded IPv4: 0.0.0.10]
    [Embedded IPv4: 0.0.0.10]

Transmission Control Protocol, Src Port: 2000, Dst Port: 80, Seq: 1597636906, Len: 0

In 3.6.9:

No.     Time               Delta time     Source                Src port Destination           Dst port Protocol Length RAT Type   TEID/GRE Key Sequence Number Layer 2 Tunneling Protocol Info
      5 18:42:33.216141    0.000130       2605:4580:0:a::1      2000     64:ff9b::330:1        80       TCP      74                                                                        2000 → 80 [SYN] Seq=1597636906 Win=32768 Len=0

Frame 5: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: IntelCor_be:7c:f8 (3c:fd:fe:be:7c:f8), Dst: Fortinet_06:27:80 (e0:23:ff:06:27:80)
Internet Protocol Version 6, Src: 2605:4580:0:a::1, Dst: 64:ff9b::330:1
    0110 .... = Version: 6
    .... 0000 0000 .... .... .... .... .... = Traffic Class: 0x00 (DSCP: CS0, ECN: Not-ECT)
    .... 0000 0000 0000 0000 0000 = Flow Label: 0x00000
    Payload Length: 20
    Next Header: TCP (6)
    Hop Limit: 64
    Source Address: 2605:4580:0:a::1
    Destination Address: 64:ff9b::330:1
    [Destination Embedded IPv4: 3.48.0.1]
Transmission Control Protocol, Src Port: 2000, Dst Port: 80, Seq: 1597636906, Len: 0