tcpdump mailing list archives

Re: Request for new DLT value for Wireshark Dissector


From: Guy Harris <guy () alum mit edu>
Date: Wed, 12 Jan 2011 13:47:41 -0800


On Jan 12, 2011, at 4:59 AM, Schemmel, Hans-Christoph wrote:

A packet begins with a flag (octet 0xF9, section 5.2.1.1), followed by address
and control field.

Is this DLT value only for the Basic Option, or is it also used for the Advanced Option?  If it's also for the Advanced 
Option:

        1) Is the flag octet 0x7E if the Advanced Option is being used?

        2) If the Advanced Option is being used, do the packet contents include escape octets, or has de-escaping 
already been done?

Do frames include the FCS?

The dissector is based upon the specification but there are slight deviations to
meet the actual implementation of Cinterion and Siemens modules, e.g. no I frame
support,

Presumably I-frame support could be added without breaking dissection of other captures?

but an additional UIH_E frame.

Does the control field for those frames have a value that doesn't collide with any values specified in TS 27.010, so 
that dissecting UIH_E frames won't break dissection of any frames that conform to TS 27.010?-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.


Current thread: