tcpdump mailing list archives

Re: decode MPLS-contained packets?


From: Gert Doering via tcpdump-workers <tcpdump-workers () lists tcpdump org>
Date: Thu, 7 May 2020 03:13:36 -0400 (EDT)

--- Begin Message --- From: Gert Doering <gert () greenie muc de>
Date: Thu, 7 May 2020 09:15:26 +0200
Hi,

On Wed, May 06, 2020 at 11:54:55PM -0700, Guy Harris wrote:
OK, so what *shark's MPLS dissector does is:
[..]
"Looks like a valid Ethernet address" is defined as "the first three octets appear in Wireshark's file giving 
manufacturer names for OUIs".  Tcpdump *currently* doesn't have such a file.

So, how do we/you want to handle this in tcpdump then?  "-T mplsnocw"
for "mpls, ethernet, no control word" and "0 means control word", as
proposed by Francois-Xavier?

(Of course this would need a man page patch as well :) )

gert

-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             gert () greenie muc de

--- End Message ---
_______________________________________________
tcpdump-workers mailing list
tcpdump-workers () lists tcpdump org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers

Current thread: