Use the "no FCS" version of the Ethernet dissector.
authorGuy Harris <guy@alum.mit.edu>
Sun, 17 Jan 2016 02:56:45 +0000 (18:56 -0800)
committerGuy Harris <guy@alum.mit.edu>
Sun, 17 Jan 2016 02:57:25 +0000 (02:57 +0000)
RFC 6325, section 4.1.4 "Frame Check Sequence (FCS)", says

"Thus, when a frame is encapsulated, the original FCS is not
included but is discarded."

meaning that the inner Ethernet frame does *not* include an FCS.

Change-Id: Ie764ceb66dd43b951da015870e3e652ccfc651b5
Ping-Bug: 9933
Reviewed-on: https://code.wireshark.org/review/13347
Reviewed-by: Guy Harris <guy@alum.mit.edu>
epan/dissectors/packet-trill.c

index 4ef4b14415ad287e2de536c9ada596ab7540cc30..cd40c0fc002b34741b35bde3f5382c2de3291e9e 100644 (file)
@@ -203,7 +203,16 @@ proto_reg_handoff_trill(void)
   trill_handle = create_dissector_handle(dissect_trill, proto_trill);
   dissector_add_uint("ethertype", ETHERTYPE_TRILL, trill_handle);
 
-  eth_dissector = find_dissector( "eth" ) ;
+  /*
+   * RFC 6325, section 4.1.4 "Frame Check Sequence (FCS)", says
+   *
+   * "Thus, when a frame is encapsulated, the original FCS is not
+   * included but is discarded."
+   *
+   * meaning that the inner Ethernet frame does *not* include an
+   * FCS.
+   */
+  eth_dissector = find_dissector( "eth_withoutfcs" ) ;
 }
 
 /*