[tcpdump-workers] Request for link-layer header type (XRA)
Hi, at Excentis we are developing a DOCSIS 3.1 RF sniffer (XRA-31). Packets are saved in pcap format with an XRA header. This is a pseudo header that contains extra information on the sniffed DOCSIS packets, e.g. the MER (modulation error rate), SID on which the packets was sniffed, ... Is it possible to obtain a link-layer header type for this pseudo-header? Code to dissect this header is already developed, and will be committed to wireshark when the link layer header type is obtained. Thanks in advance, Bruno Verstuyft Senior Testing and Software Engineer Excentis Gildestraat 8 9000 Gent - Belgium Tel: +32 9 269 22 91 ___ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers
[tcpdump-workers] Request for link-layer header type (XRA)
Hi, at Excentis we are developing a DOCSIS 3.1 RF sniffer (XRA-31). Packets are saved in pcap format with an XRA header. This is a pseudo header that contains extra information on the sniffed DOCSIS packets, e.g. the MER (modulation error rate), SID on which the packets was sniffed, ... Is it possible to obtain a link-layer header type for this pseudo-header? Code to dissect this header is already developed, and will be committed to wireshark when the link layer header type is obtained. Note: it is possible this request was already received from my other e-mail address (I got a bounce message back saying the sender failed the fraud detection tests). Thanks in advance, - Bruno Verstuyft Senior Testing and Software Engineer Excentis Gildestraat 8 9000 Gent - Belgium Tel: +32 9 269 22 91 ___ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers
Re: [tcpdump-workers] Request for link-layer header type (XRA)
On Oct 13, 2017, at 1:30 AM, Bruno Verstuyft wrote: > at Excentis we are developing a DOCSIS 3.1 RF sniffer (XRA-31). Packets are > saved in pcap format with an XRA header. This is a pseudo header that > contains extra information on the sniffed DOCSIS packets, e.g. the MER > (modulation error rate), SID on which the packets was sniffed, ... > > Is it possible to obtain a link-layer header type for this pseudo-header? Yes. You will have to give a detailed and complete specification for the pseudo-header. You can either provide a URL for it, or can provide a description that we can turn into a specification hosted on tcpdump.org, such as the ones here: http://www.tcpdump.org/linktypes/ Presumably what immediately follows the pseudo-header is a DOCSIS MAC frame, as described by the DOCSIS 3.1 MAC and Upper Layer Protocols Interface Specification (or whatever that specification is called for DOCSIS 3.1). ___ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers
