https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4943

Peter Wu <pe...@lekensteyn.nl> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CONFIRMED
          Component|GTK+ UI                     |Dissection engine
                   |                            |(libwireshark)
                 CC|                            |pe...@lekensteyn.nl
         Resolution|NOTOURBUG                   |---

--- Comment #12 from Peter Wu <pe...@lekensteyn.nl> ---
Previous mailing list link was dead, this is the right one:
https://www.wireshark.org/lists/ethereal-dev/200312/msg00702.html

> I am attaching a new dissector for ISMP (InterSwitch Message Protocol)
> in which EDP (Enterasys Discovery Protocol), formerly known as Cabletron
> Discovery Protocol resides on.  This dissector decodes Ethernet message
> types that match 0x81fd.

I cannot find any spec and the ether type is not listed at
https://www.iana.org/assignments/ieee-802-numbers/ieee-802-numbers.xhtml

Given the absence of information that suggests that the length should not cover
the four bytes (Type and Length), I am going to assume that it is needed. The
only two ISMP pcaps I could find would work with that:

Requires subtractions of four bytes to work properly (v6):
http://www.pcapr.net/view/tyson.key/2009/8/3/10/ISMP.pcap.html

Does not have any tuples (v4):
https://www.pcapr.net/view/tyson.key/2009/8/2/16/NFSCrash_00001_20021114102326.html

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.
___________________________________________________________________________
Sent via:    Wireshark-bugs mailing list <wireshark-bugs@wireshark.org>
Archives:    https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
             mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe

Reply via email to