tcpdump mailing list archives

Re: Request for a new DLT


From: Guy Harris <guy () alum mit edu>
Date: Tue, 17 Jul 2007 12:04:59 -0700

Fulko Hew wrote:

So in the end... I think I'd rather continue persuing this single DLT approach
where I can embed status/signalling stuff into a single dissector

IE.  Have a pcap with DLT_ACN_WAN and dissectors for:
  ACN_WAN (that handles signal/status info and then dispatches to:)
    Frame Relay (the existing one)
    LAPB/X.25  (the existing one)
    IPARS (one of my new ones)
    UTS (one of my new ones)

It might be possible to use DLT_PPI for this:

        http://www.cacetech.com/documents/PPI_Header_format_1.0.1.pdf

although PPI was originally introduced for 802.11 and might not be ideal for your purposes. If it's not, we'll just go with DLT_ACN_WAN.
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.


Current thread: