[Idr] Large BGP Communities debugging tools (tcpdump, wireshark)

Job Snijders <job@ntt.net> Wed, 12 October 2016 20:59 UTC

Return-Path: <job@ntt.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42E71129525 for <idr@ietfa.amsl.com>; Wed, 12 Oct 2016 13:59:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.931
X-Spam-Level:
X-Spam-Status: No, score=-4.931 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-2.996, SPF_SOFTFAIL=0.665] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bH55l7mlb8YX for <idr@ietfa.amsl.com>; Wed, 12 Oct 2016 13:59:24 -0700 (PDT)
Received: from mail3.dllstx09.us.to.gin.ntt.net (mail3.dllstx09.us.to.gin.ntt.net [IPv6:2001:418:3ff:5::26]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A030D12959C for <idr@ietf.org>; Wed, 12 Oct 2016 13:59:24 -0700 (PDT)
Received: by mail3.dllstx09.us.to.gin.ntt.net with esmtpsa (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256) (Exim 4.84_2) (envelope-from <job@ntt.net>) id 1buQcV-0002uD-AY (job@us.ntt.net); Wed, 12 Oct 2016 20:59:24 +0000
Date: Wed, 12 Oct 2016 22:59:20 +0200
From: Job Snijders <job@ntt.net>
To: idr@ietf.org
Message-ID: <20161012205920.GZ57491@Vurt.local>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
X-Clacks-Overhead: GNU Terry Pratchett
User-Agent: Mutt/1.7.0 (2016-08-17)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/vux8PXYDVOvdyWbwjY0CfdiYRqM>
Subject: [Idr] Large BGP Communities debugging tools (tcpdump, wireshark)
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 12 Oct 2016 20:59:26 -0000

Dear implementers, working group.

To ease debugging your implementation of Large BGP Communities, the
toolchain has now been upgraded. For various flavours of tcpdump and
wireshark patches have been made available.

tcpdump.org is the upstream vendor for some of the Linux and BSD
distributions out there, they have committed support for decoding Large
BGP Communities into their master branch:

    https://github.com/the-tcpdump-group/tcpdump/issues/543
    (this this thread contains PCAP data suitable for tool testing,
    kindly provided by Pier Carlo Chiodi)

    https://github.com/the-tcpdump-group/tcpdump/commit/bc700c426251f8d93049d71fd4c007d22b2a2aa0

Wireshark is a populair and detailed packet tracer (also famous for
their CLI tool 'tshark'). Arjen Zonneveld submitted a patch to the
wireshark project:
    
    https://code.wireshark.org/review/#/c/18172/

A patch for FreeBSD's tcpdump is available:

    https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=213423

A patch for OpenBSD's tcpdump is available:

    http://marc.info/?l=openbsd-tech&m=147629067413734&w=2

Please note: not all of these patches have (yet) been accepted into the
projects respective main branches or releases. For instance, the patch
might not be compliant with the project's style guide.

However, for development or early adaptor debugging purposes, these
tools beat reading the wire and decoding it in your head.

Kind regards,

Job