Wireshark-dev: [Wireshark-dev] Parallel Redundancy Protocol (PRP) dissector
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "Meier Sven \(msv\)" <msv@xxxxxxxx>
Date: Mon, 2 Apr 2007 13:44:05 +0200

Hi all,

 

This is a dissector for the Parallel Redundancy Protocol (PRP) defined in chapter 6 of the IEC 62439.

PRP uses two independent networks in parallel and allows redundancy without switchovers.

The protocol is sending Mac multicast messages with Ethertype 0x88fb. In addition to that it adds to every Ethernet frame a 4 byte trailer before the FCS. The trailer is detected by checking a size field and an identifier which are part of the trailer. Therefore, if the last 4 bytes of a frame match a correct trailer they get interpreted as a trailer, although it was probably not a real one.

 

Best regards

            Sven Meier

 

 

 ///////  |||   |||  ///|||  ///        Sven Meier

///////   |||   ||| /// ||| ///         Dipl.Ing. FH Informationstechnologie

   ///          |||///  |||///          Entwicklungsingenieur IEEE 1588

  ///           ||///   ||///           Institute of Embedded Systems

 ///////  |||   |///    |///            Raum / Room InES TW 220

///////   |||   ///     ///             Postfach 805

                                        CH-8401 Winterthur

                                        Switzerland

 

Zuercher Hochschule Winterthur          Phone :    +41 (0)52 267 70 58

(University of Applied Sciences)        Fax   :    +41 (0)52 268 70 58

Mitglied der Zuercher Fachhochschule    msv@xxxxxxxx

 

Attachment: prp_frames.cap
Description: prp_frames.cap

Attachment: prp_patch.gz
Description: prp_patch.gz