Wireshark · Wireshark-commits: [Wireshark-commits] rev 24493: /trunk/epan/ /trunk/epan/dissectors/: Makefile.common packet-ethertyp

[morriss@xxxxxxxxxxxxx]

http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=24493

User: morriss
Date: 2008/02/27 09:52 PM

Log:
 From Sven Meier (on -dev in 6/2007):
 
 This is a dissector for the Parallel Redundancy Protocol (PRP) defined in chapter
 6 of the IEC 62439.
 
 PRP uses two independent networks in parallel and allows redundancy without
 switchovers.
 
 The protocol is sending Mac multicast messages with Ethertype 0x88fb. In
 addition to that it adds to every Ethernet frame a 4 byte trailer before
 the FCS. The trailer is detected by checking a size field and an identifier
 which are part of the trailer. Therefore, if the last 4 bytes of a frame
 match a correct trailer they get interpreted as a trailer, although it was
 probably not a real one.
 
 Note:
 
 This is a post-dissector which means it gets called for every frame.  So as
 to not cause a performance hit for every Wireshark user (who may not even be
 looking at Ethernet frames) it currently disables itself every time Wireshark
 starts up.  (There should be a better way to do this--maybe different Profiles
 (as discussed on -dev recently) is the way to go.)
 
 From me:
 
 Put ETHERTYPE_PRP (not IANA registered) in etypes.h and packet-ethertype.c

Directory: /trunk/epan/dissectors/
  Changes    Path                  Action
  +1 -0      Makefile.common       Modified
  +29 -28    packet-ethertype.c    Modified
  +304 -0    packet-prp.c          Added

Directory: /trunk/epan/
  Changes    Path          Action
  +23 -19    etypes.h      Modified