Spanning Tree Protocol (STP)
XXX - add a brief STP description here
XXX - add a brief description of STP history
["LLC"]: Typically, STP uses [:LLC:802.2 LLC] as its transport protocol, running on link-layer protocols in the LanProtocolFamily such as ["Ethernet"].
XXX - Add example traffic here (as plain text or Wireshark screenshot).
The STP dissector is fully functional and supports IEEE 802.1D BPDU, Rapid Spanning-Tree BPDUs, and MST/MSTI BPDUs. Also add info of additional Wireshark features where appropriate, like special statistics of this protocol.
Cisco has a custom TLV extension called Per Vlan Spanning Tree (PVST+). The extension is added to 802.1D and RST BPDUs sent on 802.1Q VLAN trunks. The extension at the end of the BPDU advertises the VLAN ID (PVID) that the BPDU was sent on. The extension has the following format. It should be noted that only 802.1D and not RST BPDUs include the one padding byte for alignment.
- Even byte padding (802.1D only): 1 byte
- Type (only PVID type 0x00 is supported): 2 bytes
- Length: 2 bytes
- Data: PVID is 2 bytes
There are no STP specific preference settings.
Example capture file
XXX - Add a simple example capture file to the SampleCaptures page and link from here. Keep it short, it's also a good idea to gzip it to make it even smaller, as Wireshark can open gzipped files automatically.
A complete list of STP display filter fields can be found in the [http://www.wireshark.org/docs/dfref/s/stp.html display filter reference]
- Show only the STP based traffic:
- Capture only the STP based traffic:
IEEE 802.1D: [http://standards.ieee.org/getieee802/download/802.1D-2004.pdf IEEE standard for local and metropolitan area networks--Media access control (MAC) Bridges] (for STP and RSTP).
IEEE 802.1Q: [http://standards.ieee.org/getieee802/download/802.1Q-2003.pdf IEEE Standards for local and metropolitan area networks-—Virtual Bridged Local Area Networks] (for MSTP).