tcpdump mailing list archives

Re: Request for new Link-layer header type


From: <HPfrommer () hilscher com>
Date: Wed, 31 Aug 2011 13:03:48 +0200

Unfortunately there is no document online, but the structure is quite simple, it's just a 32-bit value containing some 
bit fields:

typedef struct
{
        uint32_t        uiErrorCode   : 8;
        uint32_t        uiGpio        : 1;
        uint32_t        uiTransparent : 1;
        uint32_t        uiHeaVersion  : 4;
        uint32_t        uiPort        : 2;
        uint32_t        uiLength      : 12;
        uint32_t        uiReserved    : 4;
} NETANA_HEADER_BIT_T;

typedef union
{
        uint32_t                        val;
        NETANA_HEADER_BIT_T     bf;
} NETANA_HEADER_T;


uiErrorCode is a bit-field containing following bits:
0: MII RX_ER present
1: Alignment error present
2: FCS error present
3: Frame too long
4: SFD error present
5: Frame shorter than 64 bytes
6: Preamble shorter than 7 bytes
7: Preamble longer than 7 bytes

uiGpio:
0: comes for Ethernet port
1: comes for GPIO port

uiTransparent:
0: normal Ethernet mode
1: transparent capture mode

uiHeaVersion:
version info, always decimal 1

uiPort:
capture port/GPIO number 0..3

uiLength:
real frame length in bytes

uiReserved:
reserved for future use



Everything little-endian representation.





-----Ursprüngliche Nachricht-----
Von: tcpdump-workers-owner () lists tcpdump org [mailto:tcpdump-workers-owner () lists tcpdump org] Im Auftrag von Guy 
Harris
Gesendet: Dienstag, 30. August 2011 18:48
An: tcpdump-workers () lists tcpdump org
Betreff: Re: [tcpdump-workers] Request for new Link-layer header type


On Aug 30, 2011, at 7:29 AM, <HPfrommer () hilscher com> wrote:

for our analysis product netANALYZER I would like to request a new
link-layer header type value:

LINKTYPE_NETANALYZER

DLT_NETANALYZER

Description: "Hilscher netANALYZER link-layer type to provide additional
information for encapsulated Ethernet frames."

Is there a document online that describes where the additional information appears and what form it has, so that we can 
link to it from the entry in

        http://www.tcpdump.org/linktypes.html

If not, could you supply that information, so we can create our own page to describe it and link to it from that entry?-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.


Hilscher Gesellschaft für Systemautomation mbH
Rheinstr. 15, 65795 Hattersheim
Sitz der Gesellschaft: Hattersheim
Geschäftsführer: Hans-Jürgen Hilscher
Registergericht: Amtsgericht Frankfurt/Main
Handelsregister: Frankfurt B 26873
www.hilscher.com

-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.


Current thread: