Wireshark-bugs: [Wireshark-bugs] [Bug 4396] New: HP ProCurve Encapsulated Remote Monitoring deco
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Wed, 13 Jan 2010 18:52:19 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4396

           Summary: HP ProCurve Encapsulated Remote Monitoring decode
           Product: Wireshark
           Version: unspecified
          Platform: x86
        OS/Version: Debian
            Status: NEW
          Severity: Enhancement
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: tdurack@xxxxxxxxx


Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
HP ProCurve switches (specifically 5400zl range) support an encapsulated remote
monitoring feature, much like Cisco ERSPAN. Would like to be able to decode the
udp encapsulated packets directly in Wireshark. See attached pcap for a sample
of such traffic.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.