diff options
| author | Joerg Mayer <jmayer@loplof.de> | 2015-08-22 05:43:46 +0400 |
|---|---|---|
| committer | Jörg Mayer <jmayer@loplof.de> | 2015-08-22 01:50:26 +0000 |
| commit | 97014f6d6b1b3994f44421fc28ed2c151977f6a0 (patch) | |
| tree | 49e606bd1e490f0e736f9743db9060a830df3d08 /epan/dissectors/packet-ip.c | |
| parent | 74177d90d32b485adc3fb83c703e712af6e46663 (diff) | |
OSPF database packets and OSPF hellos in DC mode are unicast. At
least Cisco sends out these packets with a TTL of 1.
Change-Id: I9ef0cd486d200a768329cfb758b87e20e3456663
Reviewed-on: https://code.wireshark.org/review/10188
Reviewed-by: Jörg Mayer <jmayer@loplof.de>
Diffstat (limited to 'epan/dissectors/packet-ip.c')
| -rw-r--r-- | epan/dissectors/packet-ip.c | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/epan/dissectors/packet-ip.c b/epan/dissectors/packet-ip.c index 46965ba8dc..b6b8ab85f7 100644 --- a/epan/dissectors/packet-ip.c +++ b/epan/dissectors/packet-ip.c @@ -2311,8 +2311,11 @@ dissect_ip_v4(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree) "Local Network Control Block (see RFC 3171)", ttl); } - } else if (!is_a_multicast_addr(dst32) && iph->ip_ttl < 5 && - (iph->ip_p != IP_PROTO_PIM)) { + } else if (!is_a_multicast_addr(dst32) && + /* At least BGP should appear here as well */ + iph->ip_ttl < 5 && + iph->ip_p != IP_PROTO_PIM && + iph->ip_p != IP_PROTO_OSPF) { expert_add_info_format(pinfo, ttl_item, &ei_ip_ttl_too_small, "\"Time To Live\" only %u", iph->ip_ttl); } |