PI69339: SYSTCPOPT WITH OPTION TCPDUMP REPORTS IPV4 TOTAL LENGTH EXCEEDS PACKET LENGTH

APAR status

• Closed as fixed if next.

Error description

• OSAENTA SYSTCPOT CTRACE with option TCPDUMP reports message
  IPv4 total length exceeds packet length when trace is formatted
  (ex in Wireshark).
  CTRACE COMP(SYSTCPOT) SUB((TCPIP)) -
        OPT(SNIFFER(xxx TCPDUMP))
  

Local fix

• TCPDUMP OSAENTA SNIFFER
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All users of the IBM Communications Server                   *
  * for z/OS Version 2 Release 1 and Release 2 IP:               *
  * OSAENTA trace converted to sniffer (TCPDUMP) trace.          *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * An OSAENTA converted sniffer trace with the TCPDUMP option   *
  *                                                              *
  * contains an invalid frame size for the packet.               *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * FIN                                                          *
  ****************************************************************
  The converted sniffer trace with the TCPDUMP option for an
  OSAENTA trace contains an
  invalid packet frame size (SNDTSIZE - True size).
  The frame size is missing the length
  of the MAC header (14 bytes). This causes formatting problems
  when analyzing the sniffer trace.
  

Problem conclusion

Temporary fix

Comments

• The solution for this APAR is included in CS for zOS Version 2
  Release 3.
  
  This APAR is being closed FIN (Fixed If Next) with concurrence
  from the submitting customer. This means that a fix to this APAR
  is expected to be delivered from IBM in a release (if any) to be
  available within the next 36 months.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels

• R1D0 PSN

     UP

• R210 PSN

     UP

• R220 PSN

     UP