This wiki has been migrated to https://gitlab.com/wireshark/wireshark/-/wikis/home and is now deprecated. Please use that site instead.
Differences between revisions 9 and 10
Revision 9 as of 2006-10-26 22:42:16
Size: 1733
Editor: SakeBlok
Comment: Added IEEE 802.1Q link for MSTP
Revision 10 as of 2007-05-05 01:06:14
Size: 2250
Editor: ClintonWork
Comment: Add note on Cisco PVST+ STP BPDUs
Deletions are marked like this. Additions are marked like this.
Line 3: Line 3:
Line 7: Line 6:
Line 11: Line 9:

* ["LLC"]: Typically, STP uses [wiki:LLC 802.2 LLC] as its transport protocol, running on link-layer protocols in the LanProtocolFamily such as ["Ethernet"].
 * ["LLC"]: Typically, STP uses [:LLC:802.2 LLC] as its transport protocol, running on link-layer protocols in the LanProtocolFamily such as ["Ethernet"].
Line 15: Line 11:
Line 20: Line 15:
The STP dissector is (fully functional, partially functional, not existing, ... whatever the current state is). Also add info of additional Wireshark features where appropriate, like special statistics of this protocol. The STP dissector is fully functional and supports IEEE 802.1D BPDU, Rapid Spanning-Tree BPDUs, and MST/MSTI BPDUs. Also add info of additional Wireshark features where appropriate, like special statistics of this protocol.

Cisco has a custom TLV extension called Per Vlan Spanning Tree (PVST+). The extension is added to 802.1D and RST BPDUs sent on 802.1Q VLAN trunks. The extension at the end of the BPDU advertises the VLAN ID (PVID) that the BPDU was sent on. The extension has the following format. It should be noted that only 802.1D and not RST BPDUs include the one padding byte for alignment.
 * Even byte padding (802.1D only): 1 byte
 * Type (only PVID type 0x00 is supported): 2 bytes
 * Length: 2 bytes
 * Data: PVID is 2 bytes

Line 23: Line 26:
Line 27: Line 29:
Line 33: Line 34:
 Show only the STP based traffic: {{{  . Show only the STP based traffic:
{{{
Line 35: Line 37:
Line 37: Line 38:

Capture only the STP based traffic: {{{
 . Capture only the STP based traffic:
{{{
Line 40: Line 41:
Line 42: Line 42:
Line 45: Line 44:

Spanning Tree Protocol (STP)

XXX - add a brief STP description here

History

XXX - add a brief description of STP history

Protocol dependencies

  • ["LLC"]: Typically, STP uses [:LLC:802.2 LLC] as its transport protocol, running on link-layer protocols in the LanProtocolFamily such as ["Ethernet"].

Example traffic

XXX - Add example traffic here (as plain text or Wireshark screenshot).

Wireshark

The STP dissector is fully functional and supports IEEE 802.1D BPDU, Rapid Spanning-Tree BPDUs, and MST/MSTI BPDUs. Also add info of additional Wireshark features where appropriate, like special statistics of this protocol.

Cisco has a custom TLV extension called Per Vlan Spanning Tree (PVST+). The extension is added to 802.1D and RST BPDUs sent on 802.1Q VLAN trunks. The extension at the end of the BPDU advertises the VLAN ID (PVID) that the BPDU was sent on. The extension has the following format. It should be noted that only 802.1D and not RST BPDUs include the one padding byte for alignment.

  • Even byte padding (802.1D only): 1 byte
  • Type (only PVID type 0x00 is supported): 2 bytes
  • Length: 2 bytes
  • Data: PVID is 2 bytes

Preference Settings

There are no STP specific preference settings.

Example capture file

XXX - Add a simple example capture file to the SampleCaptures page and link from here. Keep it short, it's also a good idea to gzip it to make it even smaller, as Wireshark can open gzipped files automatically.

Display Filter

A complete list of STP display filter fields can be found in the [http://www.wireshark.org/docs/dfref/s/stp.html display filter reference]

  • Show only the STP based traffic:
     stp 

Capture Filter

  • Capture only the STP based traffic:
     stp 

Discussion

STP (last edited 2011-06-27 05:32:14 by WenchaoWang)