Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    CARP / VRRP questions

    Scheduled Pinned Locked Moved General pfSense Questions
    6 Posts 3 Posters 2.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T Offline
      tomli
      last edited by

      Hi all,

      I configured my pfsense to use CARP in Wan. I see a lot of VRRP protocol in my wireshark which I captured it from WAN. Also I saw some IPs which I did not configure it in my pfsense configuration. (Please refere to my attachment). Why my pfsense use this IP in  VRRP protocol. Please advise.

      Thanks.

      pfsense_vrrp.jpg
      pfsense_vrrp.jpg_thumb

      1 Reply Last reply Reply Quote 0
      • C Offline
        cmb
        last edited by

        Wireshark mis-identifies CARP traffic as VRRP (as it uses the same protocol number), and doesn't understand CARP. The decoding's just not right, those IPs aren't actually being used.

        1 Reply Last reply Reply Quote 0
        • awebsterA Offline
          awebster
          last edited by

          @cmb:

          Wireshark mis-identifies CARP traffic as VRRP (as it uses the same protocol number), and doesn't understand CARP. The decoding's just not right, those IPs aren't actually being used.

          Latest vesions of wireshark handle CARP just fine, but because both CARP and VRRP use the same protocol number, you have to tell wireshark that you want it to decode CARP packets instead.

          Simply select the packet, right click, and choose Decode As… then choose CARP in the list.

          This is working on Wireshark 1.12.7.

          --A.

          –A.

          1 Reply Last reply Reply Quote 1
          • C Offline
            cmb
            last edited by

            @awebster:

            Latest vesions of wireshark handle CARP just fine, but because both CARP and VRRP use the same protocol number, you have to tell wireshark that you want it to decode CARP packets instead.

            Simply select the packet, right click, and choose Decode As… then choose CARP in the list.

            Thanks, I should have clarified that.

            1 Reply Last reply Reply Quote 0
            • T Offline
              tomli
              last edited by

              Hi all,

              Thank you very much for your information

              1 Reply Last reply Reply Quote 0
              • T Offline
                tomli
                last edited by

                Sorry,

                one more question. Can we set the time interval for CARP? I mean pfsense send the CARP  message to another pfsense.

                Please advise.

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.