Hi all,
This is a dissector for the Parallel Redundancy Protocol (PRP) defined
in chapter 6 of the IEC 62439.
PRP uses two independent networks in parallel and allows redundancy
without switchovers.
The protocol is sending Mac multicast messages with Ethertype 0x88fb. In
addition to that it adds to every Ethernet frame a 4 byte trailer before
the FCS. The trailer is detected by checking a size field and an
identifier which are part of the trailer. Therefore, if the last 4 bytes
of a frame match a correct trailer they get interpreted as a trailer,
although it was probably not a real one.
Best regards
Sven Meier
/////// ||| ||| ///||| /// Sven Meier
/////// ||| ||| /// ||| /// Dipl.Ing. FH
Informationstechnologie
/// |||/// |||/// Entwicklungsingenieur IEEE 1588
/// ||/// ||/// Institute of Embedded Systems
/////// ||| |/// |/// Raum / Room InES TW 220
/////// ||| /// /// Postfach 805
CH-8401 Winterthur
Switzerland
Zuercher Hochschule Winterthur Phone : +41 (0)52 267 70 58
(University of Applied Sciences) Fax : +41 (0)52 268 70 58
Mitglied der Zuercher Fachhochschule [EMAIL PROTECTED]
prp_frames.cap
Description: prp_frames.cap
prp_patch.gz
Description: prp_patch.gz
_______________________________________________ Wireshark-dev mailing list [email protected] http://www.wireshark.org/mailman/listinfo/wireshark-dev
