tcpdump mailing list archives

Re: Request for new DLT value for Wireshark Dissector


From: Guy Harris <guy () alum mit edu>
Date: Thu, 10 Feb 2011 10:56:52 -0800


On Feb 4, 2011, at 1:59 AM, Schemmel, Hans-Christoph wrote:

Guy Harris <guy <at> alum.mit.edu> writes:


OK, so it's:

     Header_Size: 1 octet

     A sequence of zero or more instances of:

             Msg_ID: 2 octets

             Freq_ID: 2 octets

             Start_Pos: 1 octet

             End_Pos: 1 octet

             Flag: 1 octet

     Direction: 1 octet

     MUX_Frame: the rest of the packet


Yes, that´s correct.

Start_Pos and End_Pos are relative to the beginning of MUX_Frame, right?  I.e., a 4-byte chunk starting at the 
beginning of MUX_Frame would have a Start_POS of 0?  Would End_POS be 3 (meaning that it's the offset of the last byte 
of the chunk) or 4 (meaning that it's the offset one byte *after* the last byte of the chunk)?
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.


Current thread: