Hello, I cannot decode ethernet traffic data which is encapsulated inside MPLS. How can I do to decode such encapsulated data ? I'm using version 3.0.6.
A text dump of the frame:
Frame 17: 136 bytes on wire (1088 bits), 136 bytes captured (1088 bits)
Encapsulation type: Ethernet (1)
Arrival Time: Sep 14, 2021 15:47:49.815135000 Europe de l’Ouest (heure d’été)
[Time shift for this packet: 0.000000000 seconds]
Epoch Time: 1631627269.815135000 seconds
[Time delta from previous captured frame: 0.026118000 seconds]
[Time delta from previous displayed frame: 0.026118000 seconds]
[Time since reference or first frame: 0.253569000 seconds]
Frame Number: 17
Frame Length: 136 bytes (1088 bits)
Capture Length: 136 bytes (1088 bits)
[Frame is marked: False]
[Frame is ignored: False]
[Protocols in frame: eth:ethertype:mpls:data]
Ethernet II, Src: RealtekU_10:e1:a7 (52:54:00:10:e1:a7), Dst: RealtekU_06:5a:1d (52:54:00:06:5a:1d)
Destination: RealtekU_06:5a:1d (52:54:00:06:5a:1d)
Source: RealtekU_10:e1:a7 (52:54:00:10:e1:a7)
Type: MPLS label switched packet (0x8847)
MultiProtocol Label Switching Header, Label: 202311, Exp: 0, S: 1, TTL: 248
0011 0001 0110 0100 0111 .... .... .... = MPLS Label: 202311
.... .... .... .... .... 000. .... .... = MPLS Experimental Bits: 0
.... .... .... .... .... ...1 .... .... = MPLS Bottom Of Label Stack: 1
.... .... .... .... .... .... 1111 1000 = MPLS TTL: 248
Data (118 bytes)
Data: 525400098014525400048014810000140800450000644ac5…
[Length: 118]
Have you tried using "Decode As..." on the packets to tell Wireshark what protocol that MPLS label refers to?
Hi thanks for your fast reply. Yes, I have tried "Decode As...", but the decoding is not working. Do you know what decoding option should I choose ? In my case, I'm trying to decode ethernet header information that are encapsulated inside MPLS. Most specifically, this is L2VPN traffic exchanged between 2 PE routers.
Not sure. Are you selecting "MPLS Protocol" in the "field "column and then setting the MPLS label value (202311) in the "Value" column and then selecting the target protocol (maybe "Ethernet PW (CW Heuristic)") in the "Current" column.