Wireshark-bugs: [Wireshark-bugs] [Bug 8633] New Dissector for Common Address Redundancy Protocol

Date: Wed, 22 May 2013 08:44:33 +0000

changed bug 8633

What Removed Added
Attachment #10727 is obsolete   1
Attachment #10823 Flags   review_for_checkin?

Comment # 5 on bug 8633 from
Created attachment 10823 [details]
CARP dissector patch

Thanks Martin and Alexis for your comments.
@Martin: Writing the dissector was inspired by your GUUG workshop. Thanks for
that.

I changed the things Martin mentioned.
To check if the packet is really CARP I used the length and the Auth len field.
Unfortunately a VRRP packet may also have an address count of 7 and can also
have more than 36 bytes. So the check is not safe.
At least the sample VRRP packet is not dissected with this implementation.

As Alexis said VRRP and CARP are quite similar. I have no idea for a safe
check.


You are receiving this mail because:
  • You are watching all bug changes.