Opened 14 years ago

Last modified 13 years ago

#239 new defect

int: format can't read from openvpn tunnels

Reported by: daniel@… Owned by: perry
Priority: minor Milestone: libtrace3
Component: libtrace-library Version: 3.0
Keywords: int_format Cc:

Description

When using the int: format you cannot read from openvpn tunnels. pcapint: works fine (reads as LINUX_SLL. tracedump int:openvpntunnel

Wed Dec 20 17:40:39 2006 unknown Linux ARPHRD type 0xfffe Don't understand link layer type -1 in trace_get_payload_from_link()

Unknown Protocol: 65535

45 b8 00 2d 00 00 40 00 3f 11 b8 a1 c0 a8 01 0c E..-..@.?....... c0 a8 00 0a 09 fc 09 fc 00 19 8e 56 07 00 10 00 ...........V.... c0 a8 00 0a 02 01 01 53 00 00 00 00 00 .......S.....

tracedump -c 1 pcapint:openvpntunnel

Wed Dec 20 17:42:43 2006

Linux SLL: Packet Type = OUTGOING Linux SLL: Hardware Address Type = 0xfffe Linux SLL: Hardware Address Length = 0 Linux SLL: Hardware Address = 00:00:00:00:00:00 Linux SLL: Protocol = 0x0800

Attachments (1)

openvpn.pcap (996 bytes) - added by Daniel Lawson 13 years ago.
tcpdump -w openvpn.pcap -i kakanui -c 10 port 3389

Download all attachments as: .zip

Change History (3)

comment:1 Changed 13 years ago by anonymous

probably fixed in r1350, needs testing.

comment:2 Changed 13 years ago by Daniel Lawson

testing against r1350:

# tracedump -c 1 int:kakanui 

Mon May  5 13:29:49 2008
 Capture: Packet Length: 68/68 Direction Value: 0
 IP: Header Len 20 Ver 5 DSCP 3f ECN 0 Total Length 0
 IP: Id 257 Fragoff 2058
 IP: TTL 0 Proto 30 Checksum 29151
 IP: Source 16.126.132.233 Destination 128.16.135.149
unknown protocol ip/30
 Unknown Protocol: 30
  f7 2d 5b da 80 92 1b 15 48 5c 01 eb 00 00 00 00    .-[.....H\......
  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    ................
  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    ................

# tracedump -c 1 pcapint:kakanui 

Mon May  5 13:29:55 2008
 Capture: Packet Length: 84/84 Direction Value: 1
 Linux SLL: Packet Type = OUTGOING
 Linux SLL: Hardware Address Type = 0xfffe
 Linux SLL: Hardware Address Length = 0
 Linux SLL: Hardware Address = 00:00:00:00:00:00
 Linux SLL: Protocol = 0x0800
Unknown ARPHRD 0000fffe
 IP: Header Len 20 Ver 4 DSCP 00 ECN 0 Total Length 68
 IP: Id 27677 Fragoff 0
 IP: TTL 127 Proto 6 (tcp) Checksum 48719
 IP: Source 10.55.70.2 Destination 172.16.20.254
 TCP: Source 3389 Dest 64873
 TCP: Seq 2960397378
 TCP: Ack 3671399931
 TCP: DOFF 8 Flags: PSH ACK Window 65423
 TCP: Checksum 18448 Urgent 0
 TCP: NOP
 TCP: NOP
 TCP: Timestamp 1995292 276727077
unknown protocol tcp/3389
 Unknown Protocol: 3389
  80 10 87 95 f7 2d 5b da 80 92 25 83 8e 8f be 5d    .....-[...%....]

Changed 13 years ago by Daniel Lawson

tcpdump -w openvpn.pcap -i kakanui -c 10 port 3389

Note: See TracTickets for help on using tickets.