Ethereal-dev: Re: [Ethereal-dev] New dissector for TZSP

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxx>
Date: Tue, 22 Oct 2002 01:55:35 -0700
On Thu, Oct 10, 2002 at 03:28:26PM -0700, Chris Waters wrote:
> I have attached a dissector and a patch to wiretap for a new protocol. The
> Tazmen Sniffer Protocol is a proprietary protocol for encapsulating packets
> captured by remote packet sniffers.

Is it a *protocol* or a *file format*?

I.e., it sets itself up as a link-layer protocol, but what physical
networks implement it?

It appears to be a file format piggybacked atop libpcap format; perhaps
it'd be cleaner to define it as a new file format by itself, without
layering it atop Ethereal.

> I have arbitrarily assigned a pcap encapsulation number so that raw TZSP
> packets can be saved in libpcap files.

As Gilbert noted, you shouldn't do that - encapsulation number 124 is
already reserved.