Wireshark-bugs: [Wireshark-bugs] [Bug 5010] colorisation error: TTL 255 for multicast packets is
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 15 Jul 2010 04:26:58 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5010

--- Comment #2 from Frank Heydlauf <fh2010ws@xxxxxxxxxxx> 2010-07-15 04:26:55 PDT ---
( ! ip.dst == 224.0.0.0/4 && ip.ttl < 5 && !pim) ||
(ip.dst == 224.0.0.0/24 && ip.ttl != 1 && !vrrp)

works for me.


... and just found another exception: 

ip.dst==224.0.0.251
TTL=255
User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353)


http://www.ietf.org/id/draft-cheshire-dnsext-multicastdns-11.txt
OK, that's pretty new :)



Internet Protocol, Src: ***, Dst: 224.0.0.251 (224.0.0.251)
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 98
    Identification: 0xdedd (57053)
    Flags: 0x00
        0... = Reserved bit: Not set
        .0.. = Don't fragment: Not set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 255                   <-----------------------------
    Protocol: UDP (0x11)
    Header checksum: 0x6841 [correct]
        [Good: True]
        [Bad : False]
    Source: ***
    Destination: 224.0.0.251 (224.0.0.251)
User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353)
    Source port: mdns (5353)
    Destination port: mdns (5353)
    Length: 78
    Checksum: 0xdced [correct]
        [Good Checksum: True]
        [Bad Checksum: False]

-- 
Greets
Frank

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.