Ethereal-dev: Re: [Ethereal-dev] How to access low layer raw data when I decode the high laye

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Guy Harris" <gharris@xxxxxxxxx>
Date: Thu, 5 Aug 2004 14:20:06 -0700 (PDT)
Liu Chunfang-CCL083 said:
> Does anyone know if I can access low layer raw data when I decode the high
> layer protocol, for example, when I decode some protocols above TCP, I
> need to access ETHERNET address?

There is no broad guarantee that there *is* an Ethernet address when
you're decoding a protocol above TCP - TCP runs atop IP, which is a
routable protocol, so even if you happen to send it over Ethernet on the
first hop it might be routed over PPP, for example.

As such, I'm not sure why your dissector would *need* the Ethernet
address; what are you trying to do there?