Ask Your Question

May I know when we would get the ISIS Flood reflector decoding capability (ISIS packet encapsulated in UDP) in wireshark?

asked 2023-02-17 06:09:12 +0000

amitt gravatar image

UDP encapsulated Flood reflector packets are not decoded by wireshark. It shows the UDP header but rest of the packet is shown as data and it does not recode the ISIS packet portion.

edit retag flag offensive close merge delete

2 Answers

Sort by ยป oldest newest most voted

answered 2023-02-18 03:17:40 +0000

Guy Harris gravatar image

UDP encapsulated Flood reflector packets are not decoded by wireshark.

Is there a specification for the form of encapsulation? Juniper has some documents that seem to indicate that they have something called "flexible tunnel interfaces" in which IPv4, IPv6, OSI, and other protocols can be encapsulated over UDP, which would support encapsulating IS-IS packets, but they don't document the form of encapsulation anywhere that I could find.

Without that specification, there's nothing we can do, other than try to reverse-engineer the format from a sample capture, which is why Jaap mentioned the sample capture.

edit flag offensive delete link more

answered 2023-02-17 09:00:21 +0000

Jaap gravatar image

Feature development, like this dissector extension, is driven by volunteer effort, so the answer is: whenever someone feels like it and can spend time on it. There's no set roadmap for it.

Still, there are various ways to help this development along:

  1. Develop the code contribution yourself
  2. Provide a sample capture file in an issue describing your request in as much detail as possible
edit flag offensive delete link more


Option 3. Offer cash for someone else to develop the code. Note the code license though.

grahamb gravatar imagegrahamb ( 2023-02-17 10:40:31 +0000 )edit

He he, I see what you did there ๐Ÿ˜‰

Jaap gravatar imageJaap ( 2023-02-17 17:00:38 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2023-02-17 06:09:12 +0000

Seen: 82 times

Last updated: Feb 18 '23