Wireshark · Ethereal-dev: Re: [Ethereal-dev] MSTP BPDU

[Guy Harris <guy@xxxxxxxxxxxx>]

On Thursday, August 28, 2003, at 4:31 AM, Arindam Roy wrote:

> Does anybody here have tested the Ethereal against a Cisco 2950A 
> bridge. The MSTP packets, given out by the Switch, are not being 
> properly decoded
> ( shown as malformed PDU) by Ethereal......

Either

	1) the bridge is sending out bad packets

or

	2) there's a bug in the Ethereal dissector.

I don't know which is the case; I'd have to have

	1) a capture file containing some of the offending packets;

	2) the appropriate 802.1q (or whatever) spec;

	3) time to look at this;

to figure out what the problem is.

You should probably generate 1) (do a capture, mark the offending 
packets, and then do a "Save As" and save only the marked packets, so 
that you don't send out other packets that might contain passwords or 
other information you don't want made public) and send the capture to 
the list, so that somebody who has time and the appropriate spec (I 
have it at home, I think, but I don't know when I'll have the time) can 
look at it.