Wireshark-bugs: [Wireshark-bugs] [Bug 7483] New: Enhancements to the HP ERM protocol dissector
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Mon, 16 Jul 2012 05:29:17 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7483

           Summary: Enhancements to the HP ERM protocol dissector
           Product: Wireshark
           Version: SVN
          Platform: x86
        OS/Version: All
            Status: NEW
          Severity: Enhancement
          Priority: Low
         Component: Dissection engine (libwireshark)
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: z.velinov@xxxxxxxx


Build Information:
wireshark 1.9.0 (SVN Rev 43744 from /trunk)

Copyright 1998-2012 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (32-bit) with GTK+ 2.24.10, with Cairo 1.10.2, with Pango 1.29.4, with
GLib 2.30.3, with libpcap, with libz 1.2.5.1, with POSIX capabilities (Linux),
with libnl 1, without SMI, without c-ares, without ADNS, with Lua 5.1, without
Python, with GnuTLS 2.12.18, with Gcrypt 1.5.0, without Kerberos, with GeoIP,
without PortAudio, without AirPcap.

Running on Linux 3.2.12-gentoo, with locale C, with libpcap version 1.1.1, with
libz 1.2.5.1, GnuTLS 2.12.18, Gcrypt 1.5.0.

Built using gcc 4.5.3.

--
Hello,

I have done some reverse engineering of the HP ERM protocol. I had injected
some 802.1Q frames on a network that contained a HP ProCurve 5406zl switch,
then I examined the resulting encapsulated traffic. It was quite easy to spot
the VLAN identifier and the priority field because part of the header closely
resembled the 802.1Q header. There were just some minor differences in the
priority numbering between 802.1Q and HP ERM.

I have attached the patch that implements all of the changes to this bug
report.

Best Regards,
Zdravko Velinov.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.