[j-nsp] IP fragmented PIM Registers dropped

[Hannes Gredler]

Phil Mayers wrote:
> Steven Wong wrote:
>> Hi Phil,
>>
>>> I've also used a tap on the link facing the M7i to verify that both IP
>>> fragments are leaving the previous hop, so it does seem to be an issue
>>> at the juniper side. The "router protect" ACL on lo0 should not (does 
>>> not seem to) be hitting the traffic.
>> Do you have the pkt decode for these two fragments ?
> 
> The tap which can see both says (with "tcpdump -v -v -v"):
> 
> 16:45:50.644109 IP (tos 0x0, ttl 255, id 64377, offset 0, flags [+], 
> length: 1500) 155.198.1.2 > 155.198.0.254: pim v2 Register  IP 
> truncated-ip - 28 bytes missing! (tos 0x0, ttl   4, id 0, offset 0, 
> flags [DF], length: 1500) 155.198.52.25.32801 > 239.255.52.25.5002: [|udp]
> 
> 16:45:50.644129 IP (tos 0x0, ttl 255, id 64377, offset 1480, flags 
> [none], length: 48) 155.198.1.2 > 155.198.0.254: pim
> 

phil,

that display-bug is a tcpdump issue that has not yet materialized in
a tcpump release [we should release 3.9.5 soon]:

pls check
http://cvs.tcpdump.org/cgi-bin/cvsweb/tcpdump/print-pim.c
rev 1.49

tx,

/hannes