Wireshark-bugs: [Wireshark-bugs] [Bug 5390] New: 802.3 Jumbo frames not decoded (ISIS hello with
Date: Fri, 12 Nov 2010 10:23:58 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5390

           Summary: 802.3 Jumbo frames not decoded (ISIS hello with large
                    MTU)
           Product: Wireshark
           Version: 1.5.x (Experimental)
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Minor
          Priority: Low
         Component: TShark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: olivier.montanuy@xxxxxxxxxxxxxxxxxx


Created an attachment (id=5454)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=5454)
Frame with Ether Type 8870 containing an ISIS Hello for MTU 4470

Build Information:
Code trunk/epan/dissectors/packet-ethertype.c
SVN revision 34838 Modified Wed Nov 10 22:37:30 2010 UTC 
--
The Jumbo LLC frames are not currently decoded by wireshark.

They can be used for any 802.3 frame of size above 1500,
especially IS-IS Hello on links with a MTU greater than 1500.
This is implemented on Cisco IOS-XR.

trunk/epan/dissectors/packet-ethertype.c 
was modified in revision 34748 to document Jumbo LLC frames,
but the Jumbo frames are not handled by the function "capture_ethertype".

Maybe a bit of code like this would do the trick:

void
capture_ethertype(guint16 etype, const guchar *pd, int offset, int len,
          packet_counts *ld) 
{
  switch (etype) {
    ...
  case ETHERTYPE_JUMBO_LLC:
    capture_llc(pd, offset, len, ld); 
    break;
    ...
  }
}

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.