Ethereal-dev: Re: [ethereal-dev] PPP decode problem (fwd)

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Ton Van Der Doelen" <Ton_Van_Der_Doelen@xxxxxxxxxxxx>
Date: Sun, 28 Nov 1999 08:56:20 +0100

Guy,

That is exactly what the trace should be ....

Rgds,

Ton





Guy Harris <gharris@xxxxxxxxxxxx> on 11/27/99 09:47:57 PM

Sent by:  Guy Harris <gharris@xxxxxxxxxxxx>


To:   Guy Harris <gharris@xxxxxxxxxxxx>
cc:   Gerald Combs <gerald@xxxxxxxx>, ethereal-dev@xxxxxxxx, Ton Van Der
      Doelen/NL/3Com@3Com
Subject:  Re: [ethereal-dev] PPP decode problem (fwd)




> LAPB headers start with 0x01 or 0x03, and PPP headers start with 0xFF,
> so we could probably distinguish between those two flavors of
> "Internetwork analyzer" by looking at the first byte of the first frame
> - if it's 0xFF, assume it's PPP, otherwise assume it's LAPB (at least
> until we find out that some *other* type of trace is written out as an
> "Internetwork analyzer" trace).
>
> I'll look at doing that.

Well, I checked in a change to do that, and Ton's capture now shows up
as a pile of PPP LCP echo requests and replies; Olivier, could you check
to make sure it still correctly reads Sniffer X.25/LAPB captures?