Wireshark-bugs: [Wireshark-bugs] [Bug 3453] Patch to add LLC dissection for HP Teaming heartbeat
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3453
--- Comment #5 from Nathan Hartwell <nhartwell@xxxxxxxxx> 2009-05-12 11:25:17 PDT ---
Guy,
Thank you for your comments as I am still working to get the hang of
Wireshark's structure but I am catching on quickly.
I did confirm that the first 5 bytes of the frames are coded to be 00 80 5F 00
02.
Would it be necessary to register and create a new dissector for the teaming
frames or could I locate my code within the dissect_snap function? I am
confused if a whole new dissector is needed as I am essentially looking to
modify the contents of the Info display field. The rest of the data past the
SNAP frame data is "interesting data" which for the most part cannot be
dissected anyways.
I have added a new OUI for HP to epan\oui.h as you suggested so that 00-80-5F
is recognized and then I can proceed with modifying the Info display field
within the case OUI_HP_2 in dissect_snap with my currently existing code. This
modification allows for all SNAP frames to be dissected without having to go
through the existing MAC address check as I do now.
If a full dissector is needed then I can proceed with that route.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
