Hello For some reason wire shark expects announce PTPoE packet to contain an additional TLV. It is not expected in PTPoIP packet. I'd appreciate if you looked into it. Yossi Fridman asked 22 Oct '14, 07:34  YossiFr |
One Answer:
there are 4 more bytes in the frame than the dissector expects. Please file a bug report at https://bugs.wireshark.org and add as much information as you can, including the sample capture file. Thank you! Regards answered 22 Oct '14, 07:58  Kurt Knochner ♦ OK, thanks, I will. Does this mean my packet is good? (22 Oct '14, 08:00) YossiFr Sorry, but I have no idea. Somebody will have to check the PTPv2 specs to figure out if the packet is O.K. or not. (22 Oct '14, 08:09) Kurt Knochner ♦ |
can you provide a sample capture file that shows the "problem"? If so, please upload it somewhere (google drive, dropbox, box.com or appliance.cloudshark.org/upload/) and post the link here.
Thanks Kurt Here is the link. You can find the malformed announce packet there.
https://drive.google.com/file/d/0BzEOuYj_hS_GdTJzeEtxSmpGc00/view?usp=sharing