[tcpdump-workers] Pcap link type of InfiniBand

2016-07-06 Thread Tal Attaly 
Hi,
I would be happy if someone could help - Pcap link type of InfiniBand
http://stackoverflow.com/questions/37936754/pcap-link-type-of-infiniband

Thanks a lot,
Tal
___
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers

Re: [tcpdump-workers] Pcap link type of InfiniBand

2016-07-06 Thread Tal Attaly 
I understand that LINKTYPE_ value just saves an id for the link type, but 
parsing code for InfiniBand is exist in wireshark - under ERF link type 
(Extensible Record File), so I wonder why not using the actual link type of 
InfiniBand.

Thanks,
Tal.

-Original Message-
From: Guy Harris [mailto:g...@alum.mit.edu] 
Sent: Thursday, July 07, 2016 12:11 AM
To: Tal Attaly 
Cc: tcpdump-workers@lists.tcpdump.org
Subject: Re: [tcpdump-workers] Pcap link type of InfiniBand

On Jul 6, 2016, at 12:50 PM, Guy Harris  wrote:

> Currently, Wireshark includes no code to process those frames, so it cannot 
> handle LINKTYPE_INFINIBAND pcap files or packets for LINKTYPE_INFINIBAND 
> interfaces in pcapng files.

tcpdump doesn't have any code to process them, either.  The existence of a 
LINKTYPE_ value does not, in and of itself, indicate that any code exists, in 
any protocol analyzer, to handle it.

___
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers

Re: [tcpdump-workers] Pcap link type of InfiniBand

2016-07-06 Thread Tal Attaly 
Buy the way, for the user it looks like wireshark does support InfiniBand -
View -> Internals -> Supported Protocols:  IB - InfiniBand
ACK Extended Transport Header   infiniband.aeth 
Sequence of bytes
Acknowledge Request infiniband.bth.a
Boolean
ActCountinfiniband.sminfo.actcount  
Unsigned integer, 4 bytes
Additional Reject Information (ARI) infiniband.cm.rej.ari   
Sequence of bytes
...


-Original Message-
From: Guy Harris [mailto:g...@alum.mit.edu] 
Sent: Wednesday, July 06, 2016 10:51 PM
To: Tal Attaly 
Cc: tcpdump-workers@lists.tcpdump.org
Subject: Re: [tcpdump-workers] Pcap link type of InfiniBand

On Jun 25, 2016, at 11:20 PM, Tal Attaly  wrote:

> I would be happy if someone could help - Pcap link type of InfiniBand 
> http://stackoverflow.com/questions/37936754/pcap-link-type-of-infiniba
> nd

The help that would be needed here would be code for Wireshark to interpret 
LINKTYPE_INFINIBAND, which, according to

http://www.tcpdump.org/linktypes.html

is

Raw InfiniBand frames, starting with the Local Routing Header, as 
specified in Chapter 5 "Data packet format" of InfiniBand™ Architectural 
Specification Release 1.2.1 Volume 1 - General Specifications.

Currently, Wireshark includes no code to process those frames, so it cannot 
handle LINKTYPE_INFINIBAND pcap files or packets for LINKTYPE_INFINIBAND 
interfaces in pcapng files.
___
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers