Wireshark-bugs: [Wireshark-bugs] [Bug 8633] New Dissector for Common Address Redundancy Protocol
Date: Wed, 22 May 2013 08:56:54 +0000

Comment # 6 on bug 8633 from
(In reply to comment #5)
> Created attachment 10823 [details]
> CARP dissector patch
> 
> Thanks Martin and Alexis for your comments.
> @Martin: Writing the dissector was inspired by your GUUG workshop. Thanks
> for that.
> 
> I changed the things Martin mentioned.
> To check if the packet is really CARP I used the length and the Auth len
> field.
> Unfortunately a VRRP packet may also have an address count of 7 and can also
> have more than 36 bytes. So the check is not safe.
Do you see often a VRRP with 7 IP Address ?

> At least the sample VRRP packet is not dissected with this implementation.
> 
> As Alexis said VRRP and CARP are quite similar. I have no idea for a safe
> check.
May be add a pref to disable CARP...


You are receiving this mail because:
  • You are watching all bug changes.