Wireshark mailing list archives

Adding support for LINKTYPE_PPP_ETHER/DLT_PPP_ETHER?


From: Reinhard Speyerer <rspmn () arcor de>
Date: Mon, 27 Feb 2012 22:40:12 +0100

Hi,

I recently noticed that Wireshark does not seem to support pcap files
with DLT 51 (LINKTYPE_PPP_ETHER/DLT_PPP_ETHER) which is used by the
in-kernel PPPoE implementation (pppoe(4)) in NetBSD and OpenBSD:

$ tshark -r pppoe0-sample-2.pcap # TShark 1.6.5
...
tshark: The file "pppoe0-sample-2.pcap" is a capture for a network type that TShark doesn't support.
(pcap: network type 51 unknown or unsupported)

From looking at the format Wireshark should be able to handle this
DLT using the existing pppoes dissector.

Please advise whether I should add a corresponding enhancement request
for Wireshark. So far nobody else seems to have missed it and pppoepcap2pcap
works sufficiently well for me.

Regards,
Reinhard

Attachment: pppoe0-sample-2.pcap
Description:

Attachment: pppoepcap2pcap
Description:

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: