Ethereal-dev: Re: [Ethereal-dev] Ethereal support for Juniper ATM{1, 2} PIC DLT_ 135, 137

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxx>
Date: Thu, 20 Jan 2005 02:36:27 -0800
Hannes Gredler wrote:


attached a patch/dissector that adds support for
Juniper DLT_ type 135,137 that is used on our Routers
for taking captures on ATM PIC cards.


Checked in.

Current CVS tcpdump shows the packets in "atm_ether.pcap" as OAM F5
cells, but Ethereal doesn't - and at least some of the packets appear
*NOT* to be ATM cells 9e.g., packet 8, which is 76 bytes long, and has a
valid IP header checksum.  Is the tcpdump dissector out-of-date or
otherwise buggy?

Or...


the dissector is mainly a heuristic engine that tries
to guess the encapsulation format based on well-known
bit-patterns.


...does it have more heuristics, with one of them guessing incorrectly?