Title: HSRP Undocumented Opcode
The following trace shows an HSRP packet that is being sent from a Cisco router every 30ish seconds
Ethereal reports this as a malformed packet
rfc2281 describes the HSRP Opcode as follows
Op Code: 1 octet
The Op Code describes the type of message contained in this
packet. Possible values are:
0 - Hello
1 - Coup
2 - Resign
In the trace the Opcode is 3
Serching the Web found the following
http://www.atm.tut.fi/list-archive/cisco-nsp/msg08882.html
So this has been going on for some time
Could the "Malformed Packet" be replaced by "Undocumented Opcode"
Regards
Nick
################### Trace ####################
No. Time Source Destination Protocol Info
190 20:07:04.430509 10.28.170.252 224.0.0.2 HSRP Unknown (state Initial)[Malformed Packet]
Frame 190 (64 bytes on wire, 64 bytes captured)
Ethernet II, Src: Cisco_ba:1f:02 (00:12:7f:ba:1f:02), Dst: 01:00:5e:00:00:02 (01:00:5e:00:00:02)
802.1Q Virtual LAN
Internet Protocol, Src: 10.28.170.252 (10.28.170.252), Dst: 224.0.0.2 (224.0.0.2)
User Datagram Protocol, Src Port: 1985 (1985), Dst Port: 1985 (1985)
Cisco Hot Standby Router Protocol
Version: 0
Op Code: Unknown (3)
State: Initial (0)
Hellotime: Non-Default (1)
Holdtime: Non-Default (0)
Priority: 14
Group: 2
Reserved: 0
Authentication Data: Non-Default ()
[Malformed Packet: HSRP]
0000 01 00 5e 00 00 02 00 12 7f ba 1f 02 81 00 00 0c ..^.............
0010 08 00 45 c0 00 2c 00 00 00 00 01 11 23 e7 0a 1c ..E..,......#...
0020 aa fc e0 00 00 02 07 c1 07 c1 00 18 59 0e 00 03 ............Y...
0030 00 01 00 0e 02 00 00 00 00 01 00 00 00 00 00 00 ................
**********************************************************************
Registered Office:
Marks and Spencer plc
Waterside House
35 North Wharf Road
London
W2 1NW
Registered No. 214436 in England and Wales.
Telephone (020) 7935 4422
Facsimile (020) 7487 2670
<<www.marksandspencer.com>>
Please note that electronic mail may be monitored.
This e-mail is confidential. If you received it by mistake, please let us know and then delete it from your system; you should not copy, disclose, or distribute its contents to anyone nor act in reliance on this e-mail, as this is prohibited and may be unlawful.
