Re: Request for new DLT value for Wireshark Dissector

[Schemmel, Hans-Christoph <Hans-Christoph.Schemmel () cinterion com>]

Guy Harris <guy <at> alum.mit.edu> writes:

> The PPP chunks are indicated by the {Msg_ID, Freq_ID, Start_Pos, End_Pos,
Flag} quintuplets, where
> Start_Pos is the 1-origin index (i.e., the first byte of the MUX_Frame has an
index of 1, not 0), from the
> beginning of MUX_Frame, of the first byte of the chunk, and End_Pos is the
1-origin index, from the
> beginning of MUX_Frame, of the last byte of the chunk.
>
> All the chunks of a given PPP packet have the same Msg_ID value.

That´s correct.

> Is Freq_ID a sequence number for the chunks in a PPP packet?  I.e., is the
Freq_ID for the N+1st chunk equal to
> the Freq_ID for the Nth chunk plus 1?  If so, does the first chunk have a
Freq_ID of 0, or 1, or some other value?
>

Yes, Freq_ID is a sequence number for the PPP chunks. The first chunk has a
Freq_ID of 0 and the Freq_ID of the next chunk will be incremented.

> The last chunk of a given PPP packet has a Flag value of 1; the others have a
Flag value of 0.
>

That is correct. The Flag is set to 1 if this chunk is the last chunk of the PPP
packet.

Kind regards,
Christoph Schemmel

-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.