Wireshark version 1.8.0 or above does not decode MPLS over PPP.

Wireshark version 1.8.0 or above does not decode MPLS over PPP in the Packet Details Pane, however, Wireshark version 1.6.5 works well.

the screenshot of version 1.9.0

the screenshot of version 1.6.5

ppp mpls

asked 21 Oct '12, 17:58

mildblues
21●2●3●6
accept rate: 0%

edited 21 Oct '12, 18:06

2 Answers:

active answers oldest answers newest answers popular answers

This is bug 9492, which is fixed in the trunk, but was fixed after 1.11.2 was released. I have backported the fix to the 1.8 and 1.10 branches, so it should be fixed in the next 1.8.x and 1.10.x releases.

permanent link

answered 21 Feb '14, 16:25

Guy Harris ♦♦
17.4k●3●35●196
accept rate: 19%

edited 21 Feb '14, 16:33

Good job! Thank you.

(15 Apr '14, 20:43) mildblues

From the different GUI style, I assume these screenshots were taken from different machines. CAn you check whether all preferences (mainly the PPP and MPLS protocol preferences) are the same on both machines?

If the problem remains, could you upload the capture file to Cloudshark and post the link to it here?

permanent link

answered 21 Oct '12, 23:07

SYN-bit ♦♦
17.1k●9●57●245
accept rate: 20%

Yes, you are very careful.

Wireshark version 1.9.0 is installed on a Windows XP OS, and 1.6.5 on a Windows 2003 Server OS.

I have checked the MPLS preferences. I find the two versions have different GUIs.

And I have also uploaded the capture file to Cloudshark. Its URL is: https://www.cloudshark.org/captures/3593a49ed149

version 1.9.0: alt text

version 1.6.5 alt text

(22 Oct '12, 01:40) mildblues

The above problem remains unresolved on the latest version 1.11.2.

(21 Feb '14, 00:54) mildblues

Try 1.11.3 - it should have the fix.

(15 Apr '14, 21:39) Guy Harris ♦♦

Your answer

toggle preview

community wiki:

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

*italic* or _italic_
**bold** or __bold__
link:[text](http://url.com/ "title")
image?![alt text](/path/img.jpg "title")
numbered list: 1. Foo 2. Bar
to add a line break simply add two spaces to where you would like the new line to be.
basic HTML tags are also supported

learn more about Markdown

Question tags:

mpls ×25
ppp ×18

question asked: 21 Oct '12, 17:58

question was seen: 4,550 times

last updated: 15 Apr '14, 21:39

Wireshark version 1.8.0 or above does not decode MPLS over PPP.

Follow this question

You have a trillion packets.

You need to see four of them.

Don't have Wireshark?

Related questions