9592: twamp: test mbz fields are FT_UINT16
Update: this has been merged into the main/master branch.
To test on Windows or Mac, download an automated build or download the source and build on other platforms. (Wireshark-win64-4.1.0rc0-1553-g06fc6483b38f or newer build).
Example capture file is attached to 16264: TWAMP dissector not working.
Asked: 2023-01-23 18:23:16 +0000
Seen: 347 times
Last updated: Jan 24 '23
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
On Cisco routers, MBZ field is 16 bits
"MBZ" stands for "Must Be Zero"; the only value an MBZ value can have is zero (which is less than 255...), so either this field is not an MBZ field, and its value may have some significance, or those routers have buggy firmware/oftware.
MBZ needs to be corrected and reworded to Session ID. I suppose this is an interpretation of Wireshark which is not correct.
RFC 5357 shows the fields as
MBZ.In Cisco's implementation, the MBZ field is the Session-ID. Without it, the control plane would not be able to differentiate between sessions. All TWAMP sessions originated in the router use the same UDP socket.
I can let the MIG BU know about this RFC discrepancy and get their feedback.