CVE-2017-13026 (Other, published 2017-09-14T06:29Z)
Description: value: The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c, several functions.
Severity: HIGH (CVSS v3 base score: 9.8)
Weakness: CWE-125 \u2014 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
Repository: https://github.com/the-tcpdump-group/tcpdump
Files changed:
print-isoclns.c
tests/TESTLIST
tests/isis-extd-ipreach-oobr.out
tests/isis-seg-fault-2-v.out
tests/isis_stlv_asan-2.out
tests/isis_stlv_asan-3.out
tests/isis_stlv_asan-4.out
tests/isis_stlv_asan.out
tests/kday6.out
Commit message: CVE-2017-13026/IS-IS: Clean up processing of subTLVs.

Add bounds checks, do a common check to make sure we captured the entire
subTLV, add checks to make sure the subTLV fits within the TLV.

This fixes a buffer over-read discovered by Bhargava Shastry,
SecT/TU Berlin.

Add tests using the capture files supplied by the reporter(s), modified
so the capture files won't be rejected as an invalid capture.

Update existing tests for changes to IS-IS dissector.


Vulnerable code:
        ND_TCHECK2(*(tptr), ISIS_SUBTLV_SPB_MCID_MIN_LEN);
        tptr = tptr + sizeof(struct isis_subtlv_spb_mcid);
        len = len - sizeof(struct isis_subtlv_spb_mcid);
        ND_TCHECK2(*(tptr), ISIS_SUBTLV_SPB_DIGEST_MIN_LEN);
        ND_TCHECK2(*(tptr), stlv_len);

        while (len >= ISIS_SUBTLV_SPB_BVID_MIN_LEN)
          ND_TCHECK2(*(tptr), ISIS_SUBTLV_SPB_BVID_MIN_LEN);

          break;

          ND_TCHECK2(*tptr, ISIS_SUBTLV_SPB_INSTANCE_MIN_LEN);
            ND_TCHECK2(*tptr, ISIS_SUBTLV_SPB_INSTANCE_VLAN_TUPLE_LEN);

          ND_TCHECK2(*tptr, 8);
	       unknown subTLV #69, length: 73
	       unknown subTLV #69, length: 69
	       unknown subTLV #69, length: 73
	       unknown subTLV #69, length: 69
	       unknown subTLV #69, length: 73
	       unknown subTLV #69, length: 69
	       unknown subTLV #69, length: 73
	       unknown subTLV #69, length: 69
	       unknown subTLV #69, length: 73
	       unknown subTLV #69, length: 69
	       unknown subTLV #69, length: 73
	       unknown subTLV #69, length: 69
	       unknown subTLV #69, length: 73
	       unknown subTLV #69, length: 69
	       unknown subTLV #69, length: 73
	       unknown subTLV #69, length: 69
	      unknown subTLV #73, length: 0
	      unknown subTLV #10, length: 132
	      unknown subTLV #4, length: 10
	      unknown subTLV #0, length: 10
	      unknown subTLV #0, length: 55
	      SPBM Service Identifier and Unicast Address subTLV #3, length: 0
	        BMAC: 00000606c201, RES: 2, VID: 2456
	      unknown subTLV #204, length: 83
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #82, length: 0
	      unknown subTLV #0, length: 86
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #37, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 37
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 108
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #37, length: 0
	      unknown subTLV #48, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #37, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #172, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #76, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 90
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 90
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #37, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 107
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #2, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #37, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 92
	      unknown subTLV #0, length: 0
	      unknown subTLV #113, length: 90
	      unknown subTLV #0, length: 230
	      unknown subTLV #0, length: 0
	      unknown subTLV #79, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #234, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #64, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #37, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #37, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #2, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #0, length: 0
	      unknown subTLV #18, length: 0
	      unknown subTLV #37, length: 144
	      unknown subTLV #137, length: 79
	      unknown subTLV #105, length: 8
	      unknown subTLV #0, length: 69
	      unknown subTLV #0, length: 0
	      unknown subTLV #52, length: 144
	      unknown subTLV #64, length: 64
	      SPB Instance subTLV #1, length: 64
	        CIST Root-ID: 06a516cc 09370acc, Path Cost: ffffff7f, Prio: 48090
	        RES: 1031, V: 1, SPSource-ID: 324444, No of Trees: 5
	         U:0, M:0, A:0, RES:22, ECT: 144a2d80, BVID: 256, SPVID: 1040
	         U:0, M:1, A:1, RES:14, ECT: 55000001, BVID: 16, SPVID: 2058
	         U:1, M:0, A:0, RES:12, ECT: f3ac2b26, BVID: 2499, SPVID: 185
	         U:1, M:0, A:1, RES:5, ECT: 68735440, BVID: 1216, SPVID: 3072
	         U:1, M:1, A:1, RES:23, ECT: 020000f7, BVID: 32, SPVID: 0
	      unknown subTLV #132, length: 181
	      unknown subTLV #156, length: 190
	      unknown subTLV #255, length: 255
	      unknown subTLV #255, length: 255
	      unknown subTLV #0, length: 64
	      unknown subTLV #6, length: 62
	      unknown subTLV #136, length: 204
	      unknown subTLV #9, length: 16
	      unknown subTLV #4, length: 16
	      unknown subTLV #5, length: 148
	      unknown subTLV #0, length: 0
	      SPB Instance subTLV #1, length: 1
	        CIST Root-ID: 080a26a6 318b8cf3, Path Cost: a5d38ec4, Prio: 31240
	        RES: 1864, V: 1, SPSource-ID: 133120, No of Trees: 45
	         U:0, M:0, A:0, RES:0, ECT: cc09370a, BVID: 3496, SPVID: 1
	         U:1, M:0, A:1, RES:27, ECT: 16274ce2, BVID: 3423, SPVID: 860
	         U:1, M:1, A:0, RES:10, ECT: 80100410, BVID: 89, SPVID: 1093
	         U:0, M:0, A:0, RES:16, ECT: 04106e55, BVID: 0, SPVID: 1
	         U:0, M:0, A:0, RES:1, ECT: 080a8cf3, BVID: 2754, SPVID: 2854
	         U:1, M:0, A:0, RES:28, ECT: 0e2d0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:27, ECT: 01001201, BVID: 2104, SPVID: 899
	         U:1, M:0, A:0, RES:3, ECT: 83838383, BVID: 2104, SPVID: 899
	         U:0, M:1, A:0, RES:15, ECT: 00600641, BVID: 2300, SPVID: 3081
	         U:0, M:0, A:0, RES:0, ECT: 2590894f, BVID: 1680, SPVID: 2281
	         U:0, M:0, A:0, RES:18, ECT: 0025e489, BVID: 1264, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3711
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0c0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e640e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e80ff, BVID: 3760, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e000003, BVID: 3720, SPVID: 14
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 560e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3675
	         U:1, M:0, A:0, RES:0, ECT: acaa4016, BVID: 380, SPVID: 494
	         U:1, M:1, A:0, RES:14, ECT: 1560b70f, BVID: 2993, SPVID: 1575
	         U:0, M:1, A:0, RES:12, ECT: e2d5f35c, BVID: 3240, SPVID: 16
	         U:0, M:0, A:0, RES:4, ECT: 10059445, BVID: 256, SPVID: 1040
	         U:0, M:1, A:1, RES:14, ECT: 55000001, BVID: 16, SPVID: 2058
	         U:1, M:0, A:0, RES:12, ECT: f3ac2b26, BVID: 2499, SPVID: 2745
	         U:1, M:0, A:1, RES:5, ECT: 68735440, BVID: 1216, SPVID: 3072
	         U:1, M:1, A:1, RES:23, ECT: 020000f7, BVID: 32, SPVID: 0
	         U:1, M:0, A:0, RES:4, ECT: b59cbe8c, BVID: 4095, SPVID: 4095
	         U:0, M:0, A:0, RES:0, ECT: 40ff3e88, BVID: 3264, SPVID: 2320
	         U:0, M:0, A:0, RES:4, ECT: 10059400, BVID: 0, SPVID: 257
	         U:0, M:0, A:0, RES:8, ECT: 0a269c31, BVID: 2232, SPVID: 3315
	         U:1, M:0, A:1, RES:12, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:0, ECT: 040e0e0e, BVID: 224, SPVID: 3598
	         U:1, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0b0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 224, SPVID: 3598
	         U:0, M:0, A:0, RES:14, ECT: 0e0e0e0e, BVID: 3, SPVID: 3616

Fixed code:
    ND_TCHECK2(*tptr, 2);
    /* Make sure the subTLV fits within the space left */
    if (len < stlv_len)
      goto trunc;
    /* Make sure the entire subTLV is in the captured data */
    ND_TCHECK2(*(tptr), stlv_len);

      	if (stlv_len < ISIS_SUBTLV_SPB_MCID_MIN_LEN)
      	  goto trunc;
        tptr = tptr + ISIS_SUBTLV_SPB_MCID_MIN_LEN;
        len = len - ISIS_SUBTLV_SPB_MCID_MIN_LEN;
        stlv_len = stlv_len - ISIS_SUBTLV_SPB_MCID_MIN_LEN;
        if (stlv_len < ISIS_SUBTLV_SPB_DIGEST_MIN_LEN)
          goto trunc;
        stlv_len = stlv_len - ISIS_SUBTLV_SPB_DIGEST_MIN_LEN;
        while (stlv_len >= ISIS_SUBTLV_SPB_BVID_MIN_LEN)
          stlv_len = stlv_len - ISIS_SUBTLV_SPB_BVID_MIN_LEN;
        break;
    tptr += stlv_len;
    len -= stlv_len;
    ND_TCHECK2(*tptr, 2);
    /* Make sure the subTLV fits within the space left */
    if (len < stlv_len)
      goto trunc;
    /* Make sure the entire subTLV is in the captured data */
    ND_TCHECK2(*(tptr), stlv_len);

          if (stlv_len < ISIS_SUBTLV_SPB_INSTANCE_MIN_LEN)
            goto trunc;
          stlv_len = stlv_len - ISIS_SUBTLV_SPB_INSTANCE_MIN_LEN;
            if (stlv_len < ISIS_SUBTLV_SPB_INSTANCE_VLAN_TUPLE_LEN)
              goto trunc;
            stlv_len = stlv_len - ISIS_SUBTLV_SPB_INSTANCE_VLAN_TUPLE_LEN;
          if (stlv_len < 8)
            goto trunc;
    tptr += stlv_len;
    len -= stlv_len;
isis_stlv_asan		isis_stlv_asan.pcap		isis_stlv_asan.out	-v
isis_stlv_asan-2	isis_stlv_asan-2.pcap		isis_stlv_asan-2.out	-v
isis_stlv_asan-3	isis_stlv_asan-3.pcap		isis_stlv_asan-3.out	-v
isis_stlv_asan-4	isis_stlv_asan-4.pcap		isis_stlv_asan-4.out	-v
		 [|isis]
	      unknown subTLV #132, length: 4
	      unknown subTLV #55, length: 3
	      unknown subTLV #6, length: 6
		 [|isis]
UI 22! IS-IS, length 469869187
	L2 Lan IIH, hlen: 27, v: 1, pdu-v: 1, sys-id-len: 6 (0), max-area: 224 (224)
	  source-id: fed0.f90f.58af,  holding time: 34047s, Flags: [unknown circuit type 0x00]
	  lan-id:    0100.0088.a201.1c, Priority: 65, PDU length: 4096
	    unknown TLV #0, length: 12
		0x0000:  0722 0583 1b01 0010 0505 0505
	    Area address(es) TLV #1, length: 157
	    IS Reachability TLV #2, length: 2
	      bogus virtual flag 0x02
	    IS Reachability TLV #2, length: 2
	      bogus virtual flag 0x02
	    IS Reachability TLV #2, length: 2
	      bogus virtual flag 0x90
	    Multi-Topology Capability TLV #144, length: 144
	      O: 1, RES: 1, MTID(s): 144
	      unknown subTLV #144, length: 2
	      unknown subTLV #2, length: 0
	      unknown subTLV #16, length: 1
	      unknown subTLV #224, length: 0
	      unknown subTLV #59, length: 0
	      unknown subTLV #5, length: 166
		 [|isis] [|isis]
UI 22! IS-IS, length 469869187
	L2 Lan IIH, hlen: 27, v: 1, pdu-v: 1, sys-id-len: 6 (0), max-area: 224 (224)
	  source-id: fed0.f90f.58af,  holding time: 34047s, Flags: [unknown circuit type 0x00]
	  lan-id:    0100.0088.a201.1c, Priority: 65, PDU length: 4096
	    unknown TLV #0, length: 12
		0x0000:  0722 0583 1b01 0010 019d e000
	    unknown TLV #254, length: 0
	    Prefix Neighbors TLV #5, length: 146
	      Metric Block, Default Metric: 32, Internal
		  Expense Metric: 0, Internal
		  Error Metric: 0, Internal
		Address: 88.99ff.ffff.7fb5.0000/76
		Address: isonsap_string: illegal length/948
		Address: 95/8
		Address: 02/8
		Address: 02/8
		Address: 02/8
		Address: 90/8
	    Multi-Topology Capability TLV #144, length: 144
	      O: 1, RES: 1, MTID(s): 0
	      unknown subTLV #107, length: 0
	      unknown subTLV #0, length: 208
		 [|isis] [|isis]
UI 22! Pad! IS-IS, length 1644274306
	L2 Lan IIH, hlen: 27, v: 1, pdu-v: 1, sys-id-len: 6 (0), max-area: 224 (224)
	  source-id: fe02.0000.d0f9,  holding time: 3928s, Flags: [unknown circuit type 0x00]
	  lan-id:    1000.4101.0000.88, Priority: 127, PDU length: 44959
	    unknown TLV #162, length: 1
		0x0000:  e2
	    IS Reachability TLV #2, length: 12
	      bogus virtual flag 0x07
	      IS Neighbor: 0100.1001.9de0.00, Default Metric: 34, Internal
		  Delay Metric: 5, Internal
		  Error Metric: 27, Internal
	    Authentication TLV #10, length: 1
	      unknown Authentication type 0x05: 
	    unknown TLV #146, length: 32
		0x0000:  2020 2020 2020 2020 2020 2020 2020 2020
		0x0010:  2020 2020 2020 2020 2020 2220 2020 2020
	    unknown TLV #32, length: 32
		0x0000:  2000 0001 0020 2020 2020 2020 207f 0020
		0x0010:  2020 2020 2020 2020 2020 2e20 2020 20c9
	    unknown TLV #32, length: 32
		0x0000:  2020 2010 0020 2020 2020 0b20 2020 2020
		0x0010:  2020 2020 2020 8181 7281 8181 8181 8181
	    Multi-Topology-Aware Port Capability TLV #143, length: 129
	       RES: 8, MTID(s): 385
	       unknown subTLV #129, length: 68
	       unknown subTLV #32, length: 32
	       unknown subTLV #129, length: 129
		 [|isis] [|isis]
UI 22! IS-IS, length 469869187
	L2 Lan IIH, hlen: 27, v: 1, pdu-v: 1, sys-id-len: 6 (0), max-area: 224 (224)
	  source-id: fed0.f90f.58af,  holding time: 34047s, Flags: [unknown circuit type 0x00]
	  lan-id:    0105.0088.a201.00, Priority: 65, PDU length: 4096
	    IS Reachability TLV #2, length: 12
	      bogus virtual flag 0x07
	      IS Neighbor: 0100.1001.9de0.00, Default Metric: 34, Internal
		  Delay Metric: 5, Internal
		  Error Metric: 27, Internal
	    unknown TLV #254, length: 3
		0x0000:  05f5 20
	    unknown TLV #32, length: 32
		0x0000:  2020 2020 2020 2020 2020 202d 2020 2020
		0x0010:  2020 2020 2020 2020 2020 03e8 2020 2020
	    unknown TLV #32, length: 32
		0x0000:  2020 2020 2020 2020 2020 207f 0020 2020
		0x0010:  2026 2020 2020 2020 2020 2020 2020 8f8f
	    Multi-Topology-Aware Port Capability TLV #143, length: 143
	       RES: 8, MTID(s): 3983
	       unknown subTLV #143, length: 143
		 [|isis]
	    Multi-Topology-Aware Port Capability TLV #143, length: 143
	       RES: 8, MTID(s): 3983
	       unknown subTLV #143, length: 143
		 [|isis] [|isis]
		 [|isis]