Correct packet format for pdd

[vitali.k...@gmail.com]

Looking at the packet bytes, I see correctly decoded ICMPv6 message

0000   60 00 00 00 00 28 3a fe fc b1 ab ab cd cd ef e0

0010   00 00 00 00 00 00 00 01 fc b1 ab ab cd cd ef e1

0020   cd 58 52 62 49 94 c4 a3 81 00 d9 cb 00 00 00 20

0030   61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70

0040   71 72 73 74 75 76 77 61 62 63 64 65 66 67 68 69

However, when I paste the same information in to ppd, the tool doesn't even recognize the [ Protocol in frame : ... icmpv6 ..] and instead only shows Protocols in frame: eth:data   The rest of the packet decoding is incorrect as well, I presume because protocol type has not been identified correctly.  Anything that needs to be added/modified from the original packet ( as pasted above) for pdd to properly decode it?

Thank you very much

[Srivats P]

You need to remove the offsets column from the dump. Also, assuming
this was the payload of an ICMPv6 packet, the packet would be an IPv6
packet without the ethernet header. When pdd decodes it assumes a link
layer is present, so just add a dummy ethernet header with the correct
protocol type - 86dd for IPv6.

So modifying your packet dump to

00 00 00 00 00 00 00 00 00 00 00 00 86 dd

60 00 00 00 00 28 3a fe fc b1 ab ab cd cd ef e0

00 00 00 00 00 00 00 01 fc b1 ab ab cd cd ef e1

cd 58 52 62 49 94 c4 a3 81 00 d9 cb 00 00 00 20

61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70

71 72 73 74 75 76 77 61 62 63 64 65 66 67 68 69

it gets decoded correctly by pdd.

Srivats

--
http://ostinato.org/
@ostinato