First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

May I know when we would get the ISIS Flood reflector decoding capability (ISIS packet encapsulated in UDP) in wireshark?

UDP encapsulated Flood reflector packets are not decoded by wireshark. It shows the UDP header but rest of the packet is shown as data and it does not recode the ISIS packet portion.

amitt's avatar
1
amitt
asked 2023-02-17 06:09:12 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

2 Answers

0

UDP encapsulated Flood reflector packets are not decoded by wireshark.

Is there a specification for the form of encapsulation? Juniper has some documents that seem to indicate that they have something called "flexible tunnel interfaces" in which IPv4, IPv6, OSI, and other protocols can be encapsulated over UDP, which would support encapsulating IS-IS packets, but they don't document the form of encapsulation anywhere that I could find.

Without that specification, there's nothing we can do, other than try to reverse-engineer the format from a sample capture, which is why Jaap mentioned the sample capture.

Guy Harris's avatar
19.9k
Guy Harris
answered 2023-02-18 03:17:40 +0000
edit flag offensive 0 remove flag delete link

Comments

add a comment see more comments
0

Feature development, like this dissector extension, is driven by volunteer effort, so the answer is: whenever someone feels like it and can spend time on it. There's no set roadmap for it.

Still, there are various ways to help this development along:

  1. Develop the code contribution yourself
  2. Provide a sample capture file in an issue describing your request in as much detail as possible
Jaap's avatar
13.7k
Jaap
answered 2023-02-17 09:00:21 +0000
edit flag offensive 0 remove flag delete link

Comments

Option 3. Offer cash for someone else to develop the code. Note the code license though.

grahamb's avatar grahamb (2023-02-17 10:40:31 +0000) edit

He he, I see what you did there 😉

Jaap's avatar Jaap (2023-02-17 17:00:38 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer