Ask Your Question
0

Need to increase TWAMP MBZ integer to 2 Bytes

asked 2023-01-23 18:23:16 +0000

twamp.test.mbz1 MBZ Unsigned integer (1 byte)

Is there any way to edit this filter to support 2 byte field? Routers will insert values greater than 255.

edit retag flag offensive close merge delete

Comments

On Cisco routers, MBZ field is 16 bits

brebelo gravatar imagebrebelo ( 2023-01-23 20:35:33 +0000 )edit

"MBZ" stands for "Must Be Zero"; the only value an MBZ value can have is zero (which is less than 255...), so either this field is not an MBZ field, and its value may have some significance, or those routers have buggy firmware/oftware.

Guy Harris gravatar imageGuy Harris ( 2023-01-24 07:22:59 +0000 )edit

MBZ needs to be corrected and reworded to Session ID. I suppose this is an interpretation of Wireshark which is not correct.

brebelo gravatar imagebrebelo ( 2023-01-24 16:39:27 +0000 )edit

RFC 5357 shows the fields as MBZ.

Chuckc gravatar imageChuckc ( 2023-01-24 16:42:43 +0000 )edit

In Cisco's implementation, the MBZ field is the Session-ID. Without it, the control plane would not be able to differentiate between sessions. All TWAMP sessions originated in the router use the same UDP socket.

I can let the MIG BU know about this RFC discrepancy and get their feedback.

brebelo gravatar imagebrebelo ( 2023-01-24 17:09:31 +0000 )edit

I can let the MIG BU know about this RFC discrepancy and get their feedback.

If there's any chance that 1) the MBZ field in question gets assigned a use in a future RFC and 2) the Cisco device might send packets to, or receive packets from, a device that implements that future RFC, and the conflicting use of that field would cause a problem, they might want to think about this, including getting that field specified as for use by a session ID.

MBZ needs to be corrected and reworded to Session ID. I suppose this is an interpretation of Wireshark which is not correct.

No, it's an interpretation by Wireshark that follows the official specification rather than following a vendor's private extension of that specification.

Guy Harris gravatar imageGuy Harris ( 2023-01-25 00:16:15 +0000 )edit

I got a response for MIG BU. TWAMP packets sent over SRTE for liveness detection follow the RFC 8972 - Simple Two-Way Active Measurement Protocol Optional Extensions

In this RFC, TWAMP packets carry the Session ID - 16 bits. Would it make sense to create a separate decoder for these packets?

brebelo gravatar imagebrebelo ( 2023-01-26 20:35:48 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2023-01-24 02:22:34 +0000

Chuckc gravatar image

updated 2023-01-24 16:25:54 +0000

9592: twamp: test mbz fields are FT_UINT16

Update: this has been merged into the main/master branch.

To test on Windows or Mac, download an automated build or download the source and build on other platforms. (Wireshark-win64-4.1.0rc0-1553-g06fc6483b38f or newer build).

Example capture file is attached to 16264: TWAMP dissector not working.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2023-01-23 18:23:16 +0000

Seen: 307 times

Last updated: Jan 24