diff options
| author | Joerg Mayer <jmayer@loplof.de> | 2015-08-22 05:43:46 +0400 |
|---|---|---|
| committer | Jörg Mayer <jmayer@loplof.de> | 2015-08-22 01:50:26 +0000 |
| commit | 97014f6d6b1b3994f44421fc28ed2c151977f6a0 (patch) | |
| tree | 49e606bd1e490f0e736f9743db9060a830df3d08 /colorfilters | |
| parent | 74177d90d32b485adc3fb83c703e712af6e46663 (diff) | |
OSPF database packets and OSPF hellos in DC mode are unicast. At
least Cisco sends out these packets with a TTL of 1.
Change-Id: I9ef0cd486d200a768329cfb758b87e20e3456663
Reviewed-on: https://code.wireshark.org/review/10188
Reviewed-by: Jörg Mayer <jmayer@loplof.de>
Diffstat (limited to 'colorfilters')
| -rw-r--r-- | colorfilters | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/colorfilters b/colorfilters index 6a96752908..ca0e03f9c6 100644 --- a/colorfilters +++ b/colorfilters @@ -8,7 +8,7 @@ @ICMP@icmp || icmpv6@[64764,57568,65535][4718,10030,11796] @TCP RST@tcp.flags.reset eq 1@[42148,0,0][65535,64764,40092] @SCTP ABORT@sctp.chunk_type eq ABORT@[42148,0,0][65535,64764,40092] -@TTL low or unexpected@( ! ip.dst == 224.0.0.0/4 && ip.ttl < 5 && !pim) || (ip.dst == 224.0.0.0/24 && ip.dst != 224.0.0.251 && ip.ttl != 1 && !(vrrp || carp))@[42148,0,0][60652,61680,60395] +@TTL low or unexpected@( ! ip.dst == 224.0.0.0/4 && ip.ttl < 5 && !pim && !ospf) || (ip.dst == 224.0.0.0/24 && ip.dst != 224.0.0.251 && ip.ttl != 1 && !(vrrp || carp))@[42148,0,0][60652,61680,60395] @Checksum Errors@eth.fcs_bad==1 || ip.checksum_bad==1 || tcp.checksum_bad==1 || udp.checksum_bad==1 || sctp.checksum_bad==1 || mstp.checksum_bad==1 || cdp.checksum_bad==1 || edp.checksum_bad==1 || wlan.fcs_bad==1 || stt.checksum.bad==1@[4718,10030,11796][63479,34695,34695] @SMB@smb || nbss || nbns || nbipx || ipxsap || netbios@[65278,65535,53456][4718,10030,11796] @HTTP@http || tcp.port == 80 || http2@[58596,65535,51143][4718,10030,11796] |