Guy Harris wrote: >I made that fix manually and checked it in (a patch would've been >useful).
Thanks. I will try to send patches in the future. >Was the capture sent to the list, or did he just send you a copy, or did >you reconstruct it? I reconstructed it with text2pcap. I forgot to attach it to my mail. I verified the result by using another protocol analyzer (see result below). The result seems to be equivalent. The Ethereal output is more compact and easier to read, I think. ---- Protocol Independent Multicast ---- PIM Version/Type: 0x23 0010.... Version 2 ....0011 Join/Prune Message Reserved: 0 Checksum: 0x0408 (Not checked) Address Family: 1 (IP version 4) Encoding Type: 0 (Native Encoding of the Address Family) Encoded-Unicast-Upstream Neighbour Address: 2.205.250.2 Reserved: 0 Number of groups: 2 Hold Time: 3 Minutes 30 Seconds Address Family: 1 (IP version 4) Encoding Type: 0 (Native Encoding of the Address Family) Reserved: 0 Mask Length: 32 Encoded-Multicast Group address-[1]: 224.0.1.39 Number of joined sources: 1 Number of pruned sources: 0 Address Family: 1 (IP version 4) Encoding Type: 0 (Native Encoding of the Address Family) Reserved/S bit/W bit/R bit: 0x07 00000... Reserved .....1.. Sparse bit ......1. Join/Prune applies to (*,G) and (*,*,RP) .......1 Information is sent from the source towards RP Mask Length: 32 Encoded-Joined Source Address-[1]: 2.205.254.2 Address Family: 1 (IP version 4) Encoding Type: 0 (Native Encoding of the Address Family) Reserved: 0 Mask Length: 32 Encoded-Multicast Group address-[2]: 224.0.1.40 Number of joined sources: 1 Number of pruned sources: 2 Address Family: 1 (IP version 4) Encoding Type: 0 (Native Encoding of the Address Family) Reserved/S bit/W bit/R bit: 0x07 00000... Reserved .....1.. Sparse bit ......1. Join/Prune applies to (*,G) and (*,*,RP) .......1 Information is sent from the source towards RP Mask Length: 32 Encoded-Joined Source Address-[1]: 2.205.254.2 Address Family: 1 (IP version 4) Encoding Type: 0 (Native Encoding of the Address Family) Reserved/S bit/W bit/R bit: 0x04 00000... Reserved .....1.. Sparse bit ......0. Join/Prune applies to (S,G) .......0 Information is sent towards the source address Mask Length: 32 Encoded-Pruned Source Address-[1]: 2.205.250.2 Address Family: 1 (IP version 4) Encoding Type: 0 (Native Encoding of the Address Family) Reserved/S bit/W bit/R bit: 0x04 00000... Reserved .....1.. Sparse bit ......0. Join/Prune applies to (S,G) .......0 Information is sent towards the source address Mask Length: 32 Encoded-Pruned Source Address-[2]: 2.205.250.1 ---- Data/FCS ---- Data/Padding: [0 bytes] Frame Check Sequence: 0x89569C78 (Correct) There is another PIM capture (pim.cap) available on this web-page: http://www.atm.tut.fi/~hessu/ethereal/ However some frames seems to be strange as already indicated by Heikki. http://www.ethereal.com/lists/ethereal-dev/200105/msg00040.html The other protocol analyzer didn't seem to give so much better output when I did a quick comparation for certain frames. Regards, Martin
pim.pcap
Description: Binary data
