Wireshark-bugs: [Wireshark-bugs] [Bug 11628] New: Mac-In-Mac aka 802.1ah aka SPBm wrong Frame on

Date: Fri, 23 Oct 2015 10:53:22 +0000
Bug ID 11628
Summary Mac-In-Mac aka 802.1ah aka SPBm wrong Frame on the wire size
Product Wireshark
Version 1.12.8
Hardware x86
OS Windows 8.1
Status UNCONFIRMED
Severity Major
Priority Low
Component Dissection engine (libwireshark)
Assignee [email protected]
Reporter [email protected]

Created attachment 13932 [details]
SPBm Capture

Build Information:
Version 1.12.8 (v1.12.8-0-g5b6e543 from master-1.12)

Copyright 1998-2015 Gerald Combs <[email protected]> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GTK+ 2.24.23, with Cairo 1.10.2, with Pango 1.34.0, with
GLib 2.38.0, with WinPcap (4_1_3), with libz 1.2.5, with SMI 0.4.8, with c-ares
1.9.1, with Lua 5.2, without Python, with GnuTLS 3.2.15, with Gcrypt 1.6.2,
without Kerberos, with GeoIP, with PortAudio V19-devel (built Oct 14 2015),
with
AirPcap.

Running on 64-bit Windows 8.1, build 9600, with WinPcap version 4.1.3
(packet.dll version 4.1.0.2980), based on libpcap version 1.0 branch 1_0_rel0b
(20091008), GnuTLS 3.2.15, Gcrypt 1.6.2, without AirPcap.
Intel(R) Core(TM) i7-4702MQ CPU @ 2.20GHz, with 32648MB of physical memory.


Built using Microsoft Visual C++ 10.0 build 40219

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
In capturing Avaya Shortest Path Bridging Mac-in-Mac aka 802.1ah we see to
small frames on the wire.
We transfer FTP data from a FTP server to a FTP client and see frames on the
wire with maximum 1514 Bytes (See attached Capture)
When we capture SPBm Data via a mirror port we see maximum frames on the wire
of only 1252 Bytes.
This can not be true because SPBm adds a second MAC header so frame size on the
wire should be bigger not smaller.
Be aware or the fact that FTP data is transferred OK and we see frame size on
the wire on both sides with a maximum of 1514 Bytes.

Hope you can explain and/or fix the issue?

Kind regards,
Mark Severijnen
+31 6 515 411 58 (utc+1)


You are receiving this mail because:
  • You are watching all bug changes.