[Nfd-dev] additional data between ethernet header and ndn header

[Salvatore Signorello]

Hi Junxiao,

sorry to come back to you on this thing again, I know that I should 
simply update my software which is outdated.

Now I see a Data packet generated by ndnpoke (some software versions and 
OS listed in the previous mail) that contains the following:

50:fd:01:83:51:08:00:00:00:00:00:00:00:00:54:fd:01:75:06:fd:01:71:07:22

which, according to your previous hypothesis, could be decoded like:

50 fd     // NdnlpData
     01 83     // ????
     51 08     // NdnlpSequence
00 00 00 00 00 00 00 00
     54 fd     // NdnlpPayload
     01 75     // again ????
         06 fd    // Data
             01 71 // ibid
             07 22 // name

In addition, as you can see the 'fd' length value is never 
decremented...this sound a bit weird. Any idea?

Best,
Salvatore

On 12/15/2015 04:37 PM, Junxiao Shi wrote:
> Hi Salvatore
>
> The payload of the first packet in the pcap 
> is 50:37:51:08:00:00:00:00:00:00:00:11:54:2b:05:29:07:21:08:10:70:34:73:6f:66:74:77:61:72:65:73:77:69:74:63:68:08:0d:73:61:79:68:65:6c:6c:6f:77:6f:72:6c:64:0a:04:10:f2:e0:8f.
> This appears to be NDNLPv1-TLV 
> <http://redmine.named-data.net/projects/nfd/wiki/NDNLP-TLV> protocol, 
> and can be interpreted as:
>
> 50 37 // NdnlpData
>    51 08 // NdnlpSequence
>       00 00 00 00 00 00 00 11
>    54 2b // NdnlpPayload
>       05 29 // Interest
>          07 21 // Name
>             08 10 // NameComponent
>                70 34 73 6f 66 74 77 61 72 65 73 77 69 74 63 68
>             08 0d // NameComponent
>                73 61 79 68 65 6c 6c 6f 77 6f 72 6c 64
>          0a 04 // Nonce
>             10 f2 e0 8f
>
> Neither ndndump nor NDN dissector for Wireshark supports NDNLPv1-TLV.
> In latest NFD, NDNLPv1-TLV is deprecated and replaced by NDNLPv2 
> <http://redmine.named-data.net/projects/nfd/wiki/NDNLPv2>, which will 
> be supported by NDN dissector for Wireshark in #3197 
> <http://redmine.named-data.net/issues/3197>.
>
> Yours, Junxiao
>
> On Mon, Dec 14, 2015 at 3:52 PM, Salvatore Signorello 
> <salvatore.signorello at uni.lu <mailto:salvatore.signorello at uni.lu>> wrote:
>
>     Hi Alex,
>
>     the pcap is in attach. I'm not using the latest version of the
>     software tools and daemon, so if you either don't see the issue or
>     are not able to reproduce it. I'll likely update the ndn software
>     suite before asking you for more support.
>
>     Thanks,
>     Salvatore
>

-- 
Salvatore Signorello
PhD student @ SecanLab

Interdisciplinary Centre for Security, Reliability and Trust
SnT, University of Luxembourg
http://wwwen.uni.lu/snt/people/salvatore_signorello

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.lists.cs.ucla.edu/pipermail/nfd-dev/attachments/20160105/1fd8dbb0/attachment.html>