tcpdump mailing list archives

Re: Request for new DLT value for Wireshark Dissector


From: Guy Harris <guy () alum mit edu>
Date: Mon, 17 Jan 2011 14:36:12 -0800


On Jan 17, 2011, at 5:52 AM, Schemmel, Hans-Christoph wrote:

Concerning dissecting: The communication between GSM modem and the host is
captured with an USB Tracer. The tracer uses a proprietary format for the trace
files, but the data of these files can be exported, e.g. as csv file. I´ve
written a parser to process the files and to write the data in a pcap file. In
front of a captured multiplexer packet the parser writes an additional header of
variable size. This header contains information about the frame direction and
(optional) splitted packets inside of the multiplexer frames, e.g. splitted PPP
packets in the payload. This information is needed to reassemble splitted
packets in the dissector.

OK, so it sounds as if this isn't raw standard 27.010 traffic.  Is MUX27010 likely to be used as a name for that 
traffic?  If not, we could call it DLT_MUX27010/LINKTYPE_MUX27010.

What is the format of the additional header?-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.


Current thread: