Hi,
I'm developing a PTP software (IEEE 1588)and I was so surprised when I saw the definitions of the data type used in WhireShark's filter for the PTP standard v2. At the beginning I was freaking out because no one of my PTP packets machted with the information in Wireshark.
This is the definition of PTP fileds in whireshark:
http://www.wireshark.org/docs/dfref/p/ptp.htmland for example the the data type for the PTP msg header, according to the spec is:
uint4_t messageType;
uint4_t transportSpecific;
uint4_t versionPTP;
uint4_t reserved1;
uint16_t messageLength;
uint8_t domainNumber;
uint8_t reserved2;
octet flagField[2];
int64_t correctionField;
uint8_t reserved3;
portIdentity sourcePortId;
uint16_t sequenceId;
uint8_t controlfield;
int8_t logMessageInterval;
So we have for instance in the spec
messageType --> 4 bits
WhireShark
messageType --> Unsigned 8-bit integer
does anybody tell why??
I mean it's a stadard we should follow the spec literally...
Thank you,
Cesar