["Martin Regner" <martin.regner@xxxxxxxxx>]

Guy Harris wrote:
>I made that fix manually and checked it in (a patch would've been
>useful).

Thanks. I will try to send patches in the future.

>Was the capture sent to the list, or did he just send you a copy, or did
>you reconstruct it?


I reconstructed it with text2pcap. I forgot to attach it to my mail.

I verified the result by using another protocol analyzer (see result below). The result seems to be
equivalent. The Ethereal output is more compact and easier to read, I think.

---- Protocol Independent Multicast ----
PIM Version/Type: 0x23   0010....  Version 2   ....0011   Join/Prune Message 
Reserved: 0 
Checksum: 0x0408 (Not checked) 
Address Family: 1 (IP version 4) 
Encoding Type: 0 (Native Encoding of the Address Family) 
Encoded-Unicast-Upstream Neighbour Address: 2.205.250.2 
Reserved: 0 
Number of groups: 2 
Hold Time: 3 Minutes 30 Seconds 
Address Family: 1 (IP version 4) 
Encoding Type: 0 (Native Encoding of the Address Family) 
Reserved: 0 
Mask Length: 32 
Encoded-Multicast Group address-[1]: 224.0.1.39 
Number of joined sources: 1 
Number of pruned sources: 0 
Address Family: 1 (IP version 4) 
Encoding Type: 0 (Native Encoding of the Address Family) 
Reserved/S bit/W bit/R bit: 0x07    00000...        Reserved    .....1..        Sparse bit    ......1.        Join/Prune applies to (*,G) and (*,*,RP)    .......1        Information is sent from the source towards RP 
Mask Length: 32 
Encoded-Joined Source Address-[1]: 2.205.254.2 
Address Family: 1 (IP version 4) 
Encoding Type: 0 (Native Encoding of the Address Family) 
Reserved: 0 
Mask Length: 32 
Encoded-Multicast Group address-[2]: 224.0.1.40 
Number of joined sources: 1 
Number of pruned sources: 2 
Address Family: 1 (IP version 4) 
Encoding Type: 0 (Native Encoding of the Address Family) 
Reserved/S bit/W bit/R bit: 0x07    00000...        Reserved    .....1..        Sparse bit    ......1.        Join/Prune applies to (*,G) and (*,*,RP)    .......1        Information is sent from the source towards RP 
Mask Length: 32 
Encoded-Joined Source Address-[1]: 2.205.254.2 
Address Family: 1 (IP version 4) 
Encoding Type: 0 (Native Encoding of the Address Family) 
Reserved/S bit/W bit/R bit: 0x04    00000...        Reserved    .....1..        Sparse bit    ......0.        Join/Prune applies to (S,G)    .......0        Information is sent towards the source address 
Mask Length: 32 
Encoded-Pruned Source Address-[1]: 2.205.250.2 
Address Family: 1 (IP version 4) 
Encoding Type: 0 (Native Encoding of the Address Family) 
Reserved/S bit/W bit/R bit: 0x04    00000...        Reserved    .....1..        Sparse bit    ......0.        Join/Prune applies to (S,G)    .......0        Information is sent towards the source address 
Mask Length: 32 
Encoded-Pruned Source Address-[2]: 2.205.250.1 
---- Data/FCS ----
Data/Padding: [0 bytes]  
Frame Check Sequence: 0x89569C78 (Correct) 

There is another PIM capture (pim.cap) available on this web-page:
http://www.atm.tut.fi/~hessu/ethereal/
However some frames seems to be strange as already indicated by Heikki.
http://www.ethereal.com/lists/ethereal-dev/200105/msg00040.html

The other protocol analyzer didn't seem to give so much better output when I did a quick comparation for certain frames.

Regards,
 Martin

Attachment: pim.pcap
Description: Binary data