First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

Decoding AVTP Control frames

  • retag add tags

I see that AVTP control frames are not being decoded even-though cd bit in the header field is 1. Wire shark always decodes AVTP packet with ether-type = 0x22F0 and cd = 1 as AVTP data frames. Is this expected behavior in wire shark?

I am using wireshark Version: 1.12.2

anonymous user
asked 2018-02-27 20:33:00 +0000
edit flag offensive 0 remove flag close merge delete

Comments

On further analysis i see that wireshark takes the subtype field of AVTP packet as 8 bits, but as per IEEE1722 spec it is 7 bits. CD bit is getting merged in to subtype field in wireshark, hence control frames are not decoded.

Note:I tried this on the latest version of wireshark:Version 2.4.5

pkn876's avatar pkn876 (2018-02-27 23:32:58 +0000) edit
more
  • delete
add a comment see more comments

1 Answer

0

If the latest version of Wireshark is incorrectly dissecting AVTP frames, please file a bug on the Wireshark Bugzilla, and, if possible, attach a sample capture that shows the problem.

Guy Harris's avatar
19.9k
Guy Harris
answered 2018-02-28 05:29:42 +0000
edit flag offensive 0 remove flag delete link
more

Comments

Bug#14474 filed on this with the capture for AVTP control frame.

pkn876's avatar pkn876 (2018-03-02 19:48:30 +0000) edit
more
  • delete
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer