cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
629
Views
0
Helpful
2
Replies

PTPv2 announce messages malformed

EVRick
Beginner
Beginner

Capturing the data traffic from an 'IE 4000' industrial switch, Wireshark shows that each announce message of the IEEE1588 precision time synchronization protocol (PTPv2), after the organization extension TLV, are regarded as malformed. What could be the issue?

 

Someone pointed out that at the end there is an Alternate time offset indicator TLV with length 56. Since there are no 56 bytes left in the packet from that point, the TLV seems malformed, as Wireshark reports. This could indicate a bug in the software that creates these PTP packets. Can someone confirm? If yes, how to mitigate?

 

pcap: https://drive.google.com/file/d/1H_YyeFKSZDgCpTkMTYqJgsPQzqmToP0-/view?usp=sharing 

2 Replies 2

johnbuetefuer
Beginner
Beginner

We have also seen the same - did you get any follow-up?

I have not yet received any follow-up. Furthermore, CISCO did not want to intervene without some maintenance contract.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers