BGP EVPN - Type-8 route not correctly read after addition of Max. Response Time field
Summary
It appears that EVPN Type-8 (IGMP Leave-Synch) routes are not correctly read in Wireshark since the addition of the Max. Response Time (1 octet) field. RFC 9251 provides guidance on how an EVPN Type-8 route is constructed. After the originating router address (which is variable, depending on value of originating router length field - which can be 32 for IPv4 or 128 for IPv6), there is a reserved field (4 octets), then a Maximum Response Time field (1 octet) and then the flags field (1 octet). Wireshark incorrectly reads the first octet after the originating router address as the flags field and is unable to read any other fields after that.
Steps to reproduce
Capture EVPN Type-8 packet (when an IGMP leave is sent to VTEP enabled with RFC 9251 functionality). Sample capture is attached to this issue as well.
What is the current bug behavior?
Wireshark is unable to read fields after originating router address correctly and cannot display the Max Response Time value nor does it correctly display the flags field (since it is reading it incorrectly).
What is the expected correct behavior?
EVPN Type-8 route should be properly process with correct flags field and Max Response Time value.
Sample capture file
Relevant logs and/or screenshots
In this image, originating router address is highlighted. Wireshark reads next octect as flags field which is wrong.
The correct way to read this is as follows:
Build information
Version 4.4.5 (v4.4.5-0-g47253bcf3773).
Compiled (64-bit) using Clang 14.0.3 (clang-1403.0.22.14.1), with GLib 2.80.3,
with Qt 6.5.3, with libpcap, without POSIX capabilities, with zlib 1.2.11, with
zlib-ng 2.1.6, with PCRE2, with Lua 5.4.6, with GnuTLS 3.8.4 and PKCS #11
support, with Gcrypt 1.10.2, with Kerberos (MIT), with MaxMind, with nghttp2
1.62.1, with nghttp3 1.1.0, with brotli, with LZ4, with Zstandard, with Snappy,
with libxml2 2.11.9, with libsmi 0.4.8, with Minizip 1.3.0, with QtMultimedia,
with automatic updates using Sparkle, with binary plugins.
Running on macOS 15.3.1, build 24D70 (Darwin 24.3.0), with Apple M1 Pro, with
16384 MB of physical memory, with GLib 2.80.3, with Qt 6.5.3, with libpcap
1.10.1, with zlib 1.2.12, with PCRE2 10.39 2021-10-29, with c-ares 1.31.0, with
GnuTLS 3.8.4, with Gcrypt 1.10.2, with nghttp2 1.62.1, with nghttp3 1.1.0, with
brotli 1.0.9, with LZ4 1.10.0, with Zstandard 1.5.6, with libsmi 0.4.8, with
light display mode, with HiDPI, with QPA plugin "cocoa", with LC_TYPE=UTF-8,
binary plugins supported.