This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Dissector for Cisco TimeTag

0

The Cisco Nexus 3548 has ability to add a ptp clocked time tag to each ingress packet on egress. Has anyone build a dissector to parse this?
bytes 13/14 Ethertype 0xBB85
bytes 15-20 6 byte time tick in NS
bytes 21/22 actual ethertype (0x0800 for IP or 8100 for dotQ tag).

Steve

asked 13 Jun '16, 08:29

steve_merc's gravatar image

steve_merc
6●4●4●6
accept rate: 0%

edited 13 Jun '16, 08:31

sindy's gravatar image

sindy
6.0k●4●8●51

One Answer:

1

Please raise an enhancement request on bugzilla with a sample trace file.

answered 13 Jun '16, 10:11

Anders's gravatar image

Anders ♦
4.6k●9●52
accept rate: 17%

Thank you for info. I will do.

Steve

Bug 12518

(13 Jun '16, 11:23) steve_merc

(I converted Ander's comment to an answer since it answers the question: no, Wireshark doesn't support this today.)

(13 Jun '16, 12:18) JeffMorriss ♦

And if you cannot wait, you may use Lua to cover the time until someone picks up your enhancement request. From the description the dissection of the header doesn't seem to be a complex task.

(14 Jun '16, 00:55) sindy