This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi,

I do not capture RIP packets from Wireshark.

It is very important for me to show RIP packet contents to our students.

Is there any solution to see RIP packets from Wireshark or Can I download some library?

Thank you so much.

asked 13 May '14, 00:11

Gokhan%20Akyol's gravatar image

Gokhan Akyol
11112
accept rate: 0%

edited 13 May '14, 01:41

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237


Is there any solution to see RIP packets from Wireshark or Can I download some library?

Well, Wireshark support RIP. So, yes you can show the content of RIP frames to your students.

You can download a RIP sample capture file from here:

http://wiki.wireshark.org/SampleCaptures?action=AttachFile&do=get&target=RIP_v1

Please save the file as RIP_v1.pcap and then open it in Wireshark.

Other sample capture files:

http://packetlife.net/captures/protocol/rip/
http://uluru.ee.unsw.edu.au/~tim/zoo/#RIP

++ UPDATE ++

BTW: Based on your tag "capture-filter RIP" I'm not quite sure, if you are having a problem capturing RIP frames or if you needed just a sample capture file.

Capture filter: udp port 520
Sample captures: see above

Please comment on my answer if you need something different.

Regards
Kurt

permanent link

answered 13 May '14, 01:40

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

edited 13 May '14, 01:46

Hi Kurt,

Thanks for quick response.

I have one more question. While packets are flowing in Wireshark, is there any chance to catch or capture RIP packets?

Thanks for interests

(13 May '14, 02:44) Gokhan Akyol

Wireshark will 'catch' whatever packets it sees while the capture is running. If you want to filter for only RIP, you can either use a capture filter of "udp port 520 or udp port 521" or you can use a display filter of "rip||ripng".

Consult the Wireshark user guide if you're not familiar with the terms "display filter" and "capture filter" here: http://www.wireshark.org/docs/wsug_html_chunked/

(13 May '14, 15:48) Quadratic
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×184
×4

question asked: 13 May '14, 00:11

question was seen: 6,936 times

last updated: 13 May '14, 15:48

p​o​w​e​r​e​d by O​S​Q​A