Re: Request for link-layer header type (XRA)

[Guy Harris <guy () alum mit edu>]

On Oct 13, 2017, at 1:30 AM, Bruno Verstuyft <bruno.verstuyft () excentis com> wrote:

> at Excentis we are developing a DOCSIS 3.1 RF sniffer (XRA-31). Packets are saved in pcap format with an XRA header. 
> This is a pseudo header that contains extra information on the sniffed DOCSIS packets, e.g. the MER (modulation error 
> rate), SID on which the packets was sniffed, ...
>
> Is it possible to obtain a link-layer header type for this pseudo-header?

Yes.

You will have to give a detailed and complete specification for the pseudo-header.  You can either provide a URL for 
it, or can provide a description that we can turn into a specification hosted on tcpdump.org, such as the ones here:

        http://www.tcpdump.org/linktypes/

Presumably what immediately follows the pseudo-header is a DOCSIS MAC frame, as described by the DOCSIS 3.1 MAC and 
Upper Layer Protocols Interface Specification (or whatever that specification is called for DOCSIS 3.1).

_______________________________________________
tcpdump-workers mailing list
tcpdump-workers () lists tcpdump org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers