Wireshark-dev: [Wireshark-dev] [PATCH] ppp_hdlc in sll
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "Matt Addison" <maddison@xxxxxxxxxx>
Date: Wed, 2 May 2007 00:57:05 -0400
Problem:
The existing sll dissector does not handle ppp_hdlc packets (sll.ltype == 0x0007).
 
Resolution:
Alter packet-sll.c to call the ppp_hdlc dissector when a packet with sll.ltype=0x0007 is received.
 
Why:
Bringing up a T1 sniffer using a Digium Wildcat TE205P, stock wireshark would not recognize the packets as they are delivered as ppp_hdlc in sll, this is/has not been an issue for people using these cards to terminate ppp in the machine as they can sniff the pppX interface, but in a passive monitoring mode like I am trying to set up there is no pppX interface- only an hdlcX interface from the zaptel drivers.
 
Hardware:
Digium Wildcat TE205P, T1 spans in nethdlc mode in zaptel.conf, set to ppp mode using sethdlc then hdlcX interfaces manually brought up with ifconfig.
 
 
 
Patch developed against SVN revision 21635 and applies/compiles clean on both Linux (against the 0.99.4 sources used in Debian Etch) and Windows (VC2005).
I'm not subscribed to the -dev list so if you could unicast questions/comments to me as well as well as the list that'd be great.
 
~Matt

Attachment: sllppphdlc.patch
Description: sllppphdlc.patch