Review your favorite Linux distribution.
Go Back > Forums > Linux Forums > Linux - Newbie
User Name
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!


  Search this Thread
Old 11-07-2017, 10:07 PM   #1
LQ Newbie
Registered: Jun 2012
Posts: 2

Rep: Reputation: Disabled
Reception of Frames with Destination MAC ALL ZERO

Hello All,

We are trying to implement GOOSE message(a multicast message, Generic Object Oriented Substation Event, part of IEC61850 protocol standard.) subscription Module. In almost all cases, we are able to read GOOSE messages without any delay. But intermittently, GOOSE messages are reaching in application after a delay of 3 sec. When analysed the pcap(PCAP file) file, captured during the error situation , it is noted that the GOOSE message is reaching upto the device Network layer without any delay.

We are using 'recvfrom' call to fetch the messages from sublayer.

Linux Version : linux-3.8.13

Receive call is as follows :

*unsigned char etherFrameRx[1518];

recvLen = recvfrom (hPktSock, etherFrameRx, sizeof(etherFrameRx),

Socket initialization is as follows:

*hPktSock = socket (PF_PACKET, SOCK_RAW, htons(ETH_P_ALL);

arg |= O_NONBLOCK;

ret = fcntl (hPktSock, F_SETFL, arg)*

While the delay is noticed, (Time between the message reception at device MAC layer and message reception at application), the application is continuously receiving frames with destination MAC 'ALL ZERO' (0:0:0:0:0:0). And in Wireshark log we couldn't notice such messages.These continuous abnormal messages from kernel delays the GOOSE reception.

The probability of the issue occurrence is high after a time synchronization of the device. SNTP is the mechanism used for **Time Synchronization**.

The .pcap file captured using Wireshark (Installed on the device Subscribing the GOOSE) during error situation is shared at following path.


In the log, the GOOSE message is received at 12:36:11.636989. But the same is updated on Application at 12:36:14.8012

Why linux kernel is returning frames with Destination MAC of 0?


linux kernels, loopback

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] match source pattern in destination and substitute in destination usin AWK 123raajesh Linux - Software 7 11-13-2013 04:22 AM
ebtables : Changing destination MAC address using kernel modules digvijay91 Linux - Networking 4 04-01-2012 01:23 PM
destination unavailable W/ vpn. All other net destination o.k. MikeOfAustin Linux - Networking 1 04-07-2007 04:42 PM
MAC Destination Spoofing outspoken Linux - Networking 4 04-06-2005 10:47 AM
Possible to create a frames effect in an HTML page without using frames? furfurdemon666 General 10 12-12-2004 06:52 AM > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 08:30 PM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration