BLOG     |     FORUM
Welcome, Guest
Username: Password: Remember me
All your questions answered real quick by Unleash Networks Engineers.
  • Page:
  • 1
  • 2

TOPIC: GRE Support?

Re:Cannot decode encapsulated protocols? 16 years 1 month ago #175

  • jwidhalm
  • jwidhalm's Avatar
Thanks again Vivek - that did work. However ... :)

Although GRE was decoded the encapsulated protocols were not. GRE is encapsulating PPP, IP, UDP, and RTP.

Is it possible to see the GRE encapsualted protocols decoded? I've attached a frame for your reference.


The WireShark breakdown looks like this:
Ethernet II
Internet Protocol
Generic Routing Encapsulation
PPP In HDLC-Like Framing
Point-to-Point Protocol
Internet Protocol
User Datagram Protocol
Real-Time Transport Protocol


Thanks Again for all your help

-John
The administrator has disabled public write access.

Re:Cannot decode encapsulated protocols? 16 years 1 month ago #176

sample file did not attach with last post. Placing packet sample here:

Packet ID 50372, Length 117 bytes, Captured Length 117 bytes
0000 00 05 47 02 1C F1 00 04 38 7D 52 07 08 00 45 00
0010 00 67 F5 DC 00 00 40 2F C9 E7 C0 A8 1C 21 C0 A8
0020 1D 32 20 00 88 81 24 76 00 7D 1E CA DC 80 64 00
0030 01 00 00 01 40 48 1F C6 BC F3 2D 6C 00 00 00 00
0040 00 00 00 2B D7 7E 7E 21 45 B8 00 2A A5 00 00 00
0050 FF 11 57 A4 2F 87 AF AB 2F 87 AF AC C3 64 C3 5A
0060 00 16 AA 79 80 64 00 02 00 00 01 E0 48 1F C6 BC
0070 7F 00 E5 80 7E
The administrator has disabled public write access.

Re:Cannot decode encapsulated protocols? 16 years 1 month ago #177

  • netscript
  • netscript's Avatar
The tunneled PPP protocol is not the usual 0x880B but 0x8881.

Wireshark decodes it as a normal PPP framed inside HDLC. We can get to that level in the next build.

A potential problem : Since we are not familiar with the usage scenario of HDLC-PPP inside a GRE, we may have situations where a single PPP packet overflows multiple GRE. If you encounter this behavior then we may have to reassemble PPP separately.

I will update you via email or the forum in the next day or so.

Regards,
Vivek
The administrator has disabled public write access.
  • Page:
  • 1
  • 2
Moderators: vivek [unleash]
Time to create page: 0.040 seconds