This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

6LoWPAN Source Address Depacking

0

Hi!

I am working with 6LoWPAN protocol, and I am dissecting some packets to understand it correctly. When I have started sniffing my own packets I set the address: fe80::0011:22ff:fe33:4455/64.

When wireshark extract the information of this packets, the generated address is: 2002:db8::0011:22ff:fe33:4455

Why not FE80::...? As I've read in the RFC...?

I am reading the internet-draft for 6lowpan comrpession of IPv6 datagrams of February 2011.

Thanks in Advance

asked 03 May '11, 01:43

Cesar%20Bernardini's gravatar image

Cesar Bernar...
1111
accept rate: 0%

edited 04 May '11, 07:36

Gerald%20Combs's gravatar image

Gerald Combs ♦♦
3.3k92258


One Answer:

1

Check your protocol preferences, for the expansion of address it needs to have a context.

answered 03 May '11, 23:42

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

I don't fully understood your answer!

Where are the protocol preferences? Is there something I didnt read in the specification? Something from the operative system implementing the protocol? If this is in Linux and you know where it's the information, let me know :)

Thanks in advance. Cesar

(04 May '11, 07:18) Cesar Bernar...
1

Jaap is referring to Wireshark's 6LoWPAN protocol prefrences. You can change the preferences by right-clicking on "6LoWPAN" in the packet detail (middle pane) or by selecting Edit→Preferences→Protocols→6LoWPAN from the main menu.

(I've also converted your answer to a comment.)

(04 May '11, 07:35) Gerald Combs ♦♦