Capturing the data traffic from an 'IE 4000' industrial switch, Wireshark shows that each announce message of the IEEE1588 precision time synchronization protocol (PTPv2), after the organization extension TLV, are regarded as malformed. What could be the issue?
Someone pointed out that at the end there is an Alternate time offset indicator TLV with length 56. Since there are no 56 bytes left in the packet from that point, the TLV seems malformed, as Wireshark reports. This could indicate a bug in the software that creates these PTP packets. Can someone confirm? If yes, how to mitigate?
pcap: https://drive.google.com/file/d/1H_YyeFKSZDgCpTkMTYqJgsPQzqmToP0-/view?usp=sharing
