Re: [tcpdump-workers] DLT request for EBHSCR

2019-01-21 Thread Ebermann , Günter
From: Guy Harris [mailto:ghar...@sonic.net] > > On Sep 25, 2018, at 6:16 AM, guenter.eberm...@elektrobit.com wrote: > > > I have updated http://www.elektrobit.com/ebhscr > > So what is the origin of the scale for the time stamps? > > For BroadR-Reach, I'm guessing, from > > The timestamp

Re: [tcpdump-workers] DLT request for EBHSCR

2018-12-21 Thread Guy Harris
On Sep 25, 2018, at 6:16 AM, guenter.eberm...@elektrobit.com wrote: > I have updated http://www.elektrobit.com/ebhscr So what is the origin of the scale for the time stamps? For BroadR-Reach, I'm guessing, from The timestamp is taken after the end of the SFD (Start of Frame Delimiter)

Re: [tcpdump-workers] DLT request for EBHSCR

2018-10-17 Thread Michael Richardson
I'll get you a DLT value by Friday! ___ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers

Re: [tcpdump-workers] DLT request for EBHSCR

2018-10-12 Thread Ebermann , Günter
> Guy Harris wrote: > > > On Sep 24, 2018, at 11:22 AM, wrote: > > > > > The "Major number specific header" is fixed-length. > > > It is 8 bytes long. > > > > Please update the specification page to note that. > > I have updated http://www.elektrobit.com/ebhscr We have finished programming t

Re: [tcpdump-workers] DLT request for EBHSCR

2018-09-25 Thread Guenter.Ebermann
Guy Harris wrote: > On Sep 24, 2018, at 11:22 AM, wrote: > > > The "Major number specific header" is fixed-length. > > It is 8 bytes long. > > Please update the specification page to note that. I have updated http://www.elektrobit.com/ebhscr ___ t

Re: [tcpdump-workers] DLT request for EBHSCR

2018-09-24 Thread Guy Harris
On Sep 24, 2018, at 11:22 AM, wrote: > The "Major number specific header" is fixed-length. > It is 8 bytes long. Please update the specification page to note that. ___ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sand

Re: [tcpdump-workers] DLT request for EBHSCR

2018-09-24 Thread Guenter.Ebermann
> Guy Harris wrote: > > On Sep 24, 2018, at 1:46 AM, guenter.eberm...@elektrobit.com wrote: > > > Thanks for the suggestions! > > I have updated the description accordingly. Please find it here: > > http://www.elektrobit.com/ebhscr > > > > Do you need any more information? > > Is the "Major num

Re: [tcpdump-workers] DLT request for EBHSCR

2018-09-24 Thread Guy Harris
On Sep 24, 2018, at 1:46 AM, guenter.eberm...@elektrobit.com wrote: > Thanks for the suggestions! > I have updated the description accordingly. Please find it here: > http://www.elektrobit.com/ebhscr > > Do you need any more information? Is the "Major number specific header" fixed-length or is i

Re: [tcpdump-workers] DLT request for EBHSCR

2018-09-24 Thread Guenter.Ebermann
> From: Guy Harris wrote: > > On Aug 8, 2018, at 8:23 AM, Michael Richardson wrote: > > > wrote: > >> After the header comes a captured frame-payload. Its content depends on the > >> major number in the header. > > > >> Do you need any more information? > > > > it would be great to point to a

Re: [tcpdump-workers] DLT request for EBHSCR

2018-08-08 Thread Guy Harris
On Aug 8, 2018, at 8:23 AM, Michael Richardson wrote: > wrote: >> After the header comes a captured frame-payload. Its content depends on the >> major number in the header. > >> Do you need any more information? > > it would be great to point to a web site for this info. ...especially if the

Re: [tcpdump-workers] DLT request for EBHSCR

2018-08-08 Thread Michael Richardson
wrote: > After the header comes a captured frame-payload. Its content depends on the > major number in the header. > Do you need any more information? it would be great to point to a web site for this info. Do you want us to point to www.elektrobit.com, or is there a more specific U

[tcpdump-workers] DLT request for EBHSCR

2018-08-08 Thread Guenter.Ebermann
Hi, The Elektrobit High Speed Capture and Replay (EBHSCR) protocol is produced by a PCIe Card for interfacing high speed automotive interfaces. We write the captured data into a pcap file, using a user specific DLT. But we want to upstream our dissector, thus I want to request an official DLT. P

Re: [tcpdump-workers] DLT request for SDLC (BITBUS)

2017-01-18 Thread Becker (ELZET80)
Hi Guy, > > So by "tracer" do you mean that it actually dissects and displays packets, or do you mean it captures packets and feeds them to Wireshark or some other program to dissect? > It's an USB device that captures packets on the bus and feeds it to Wireshark as a byte array starting wit

Re: [tcpdump-workers] DLT request for SDLC (BITBUS)

2017-01-17 Thread Guy Harris
On Jan 17, 2017, at 5:25 AM, Becker (ELZET80) wrote: > I think my request was a bit misleading and wrong formulated. I told you we > are working on a BITBUS tracer which in reality is a SDLC tracer that can > trace BITBUS too. So by "tracer" do you mean that it actually dissects and displays p

Re: [tcpdump-workers] DLT request for SDLC (BITBUS)

2017-01-17 Thread Becker (ELZET80)
Hi Guy, thank you for your response. I think my request was a bit misleading and wrong formulated. I told you we are working on a BITBUS tracer which in reality is a SDLC tracer that can trace BITBUS too. >> Is there a way to use the SDLC dissector as a DLT already? > No, and if you were to

Re: [tcpdump-workers] DLT request for SDLC (BITBUS)

2017-01-16 Thread Guy Harris
On Jan 16, 2017, at 4:06 AM, Becker (ELZET80) wrote: > we are currently working on an USB tracer which captures messages from BITBUS > connected devices. > BITBUS is based on the SDLC protocol by IBM (see: > https://en.wikipedia.org/wiki/Synchronous_Data_Link_Control) Several protocols, includ

[tcpdump-workers] DLT request for SDLC (BITBUS)

2017-01-16 Thread Becker (ELZET80)
Hello, we are currently working on an USB tracer which captures messages from BITBUS connected devices. BITBUS is based on the SDLC protocol by IBM (see: https://en.wikipedia.org/wiki/Synchronous_Data_Link_Control) We have already seen that there is a SDLC dissector implemented in Wireshark

Re: [tcpdump-workers] DLT Request for Radio Data System (RDS)

2016-09-15 Thread Jonathan Brucker
On Thu, Sep 15, 2016 at 2:16 AM, Guy Harris wrote: > On Sep 14, 2016, at 7:13 AM, Jonathan Brucker > wrote: >> Does it make more sense to define an enum (0..7) instead of ASCII symbols? > So I'm OK with changing it - but let's do it quickly. It's not on the > tcpdump.org site yet, so it's not

Re: [tcpdump-workers] DLT Request for Radio Data System (RDS)

2016-09-14 Thread Guy Harris
On Sep 14, 2016, at 7:13 AM, Jonathan Brucker wrote: > Actually, I have a small dilemma regarding the offset words (the last 4 > bytes): > > Does it make more sense to define an enum (0..7) instead of ASCII symbols? Either one would work. A switch statement switching on the offset word value

Re: [tcpdump-workers] DLT Request for Radio Data System (RDS)

2016-09-14 Thread Jonathan Brucker
Actually, I have a small dilemma regarding the offset words (the last 4 bytes): Does it make more sense to define an enum (0..7) instead of ASCII symbols? I noticed that VLC project defines RDS blocks (internally) using an enum, starting from 0: #define V4L2_RDS_BLOCK_A 0 #define V4L2_RDS_BLOCK_

Re: [tcpdump-workers] DLT Request for Radio Data System (RDS)

2016-09-13 Thread Guy Harris
On Sep 4, 2016, at 6:43 AM, Jonathan Brucker wrote: > I am posting to request a value for DLT_RDS and LINKTYPE_RDS. > > Radio Data System (RDS) is a communications protocol standard > published in 1992 for embedding small amounts of digital information > in conventional FM radio broadcasts. > >

[tcpdump-workers] DLT Request for Radio Data System (RDS)

2016-09-13 Thread Jonathan Brucker
I am posting to request a value for DLT_RDS and LINKTYPE_RDS. Radio Data System (RDS) is a communications protocol standard published in 1992 for embedding small amounts of digital information in conventional FM radio broadcasts. The standard is also known as Radio Broadcast Data System (RBDS) in

[tcpdump-workers] DLT Request

2009-04-30 Thread Tobias Witek
Hello, I would like to request a DLT Value for a protocol called 'Metadata', which we developed during one of our projects. The protocol is used to attach arbitrary items of information to a packet. An example of this would be the direction of the packet (inbound, outbound) or whether the packet

Re: [tcpdump-workers] DLT Request

2007-08-13 Thread Guy Harris
Phil Mulholland wrote: Sure. The header is used to multiplex PCI frames and Ethernet frames onto a custom processor interface. Our libpcap patch captures from this interface. It looks like: OK, that's a bit specialized, so it probably won't provoke any major pcap-NG, tcpdump, Wireshark, etc.

Re: [tcpdump-workers] DLT Request

2007-08-13 Thread Phil Mulholland
Hi Guy, Guy Harris wrote: On Jul 31, 2007, at 7:43 PM, Phil Mulholland wrote: I'd like to request a new DLT value for our internal header format. We have a patched version of libpcap that can capture packets from our custom board. The board can optionally attach it's own header to the packe

Re: [tcpdump-workers] DLT Request

2007-08-07 Thread Guy Harris
On Jul 31, 2007, at 7:43 PM, Phil Mulholland wrote: I'd like to request a new DLT value for our internal header format. We have a patched version of libpcap that can capture packets from our custom board. The board can optionally attach it's own header to the packets, before the Ethernet h

[tcpdump-workers] DLT Request

2007-07-31 Thread Phil Mulholland
Hi, I'd like to request a new DLT value for our internal header format. We have a patched version of libpcap that can capture packets from our custom board. The board can optionally attach it's own header to the packets, before the Ethernet header. We call it an RAIF1 header so something like

Re: [tcpdump-workers] DLT request

2005-04-09 Thread Guy Harris
Daniele Orlandi wrote: Yes, I agree, in facts I forgot that I was already using DLT_LINUX_LAPD. I would go with DLT_LINUX_LAPD, OK, I've checked in a change to make it DLT_LINUX_LAPD. Presumably the theory is that either 1) vISDN will be the only ISDN-for-Linux that supports D-channel packet c

Re: [tcpdump-workers] DLT request

2005-04-07 Thread Daniele Orlandi
On Friday 8 April 2005 00:38, Guy Harris wrote: > > Then perhaps it should be called DLT_LINUX_LAPD or DLT_VISDN_LAPD or > something such as that. Yes, I agree, in facts I forgot that I was already using DLT_LINUX_LAPD. I would go with DLT_LINUX_LAPD, Thank you, Bye, -- Daniele Orlandi - This

Re: [tcpdump-workers] DLT request

2005-04-07 Thread Guy Harris
On Apr 7, 2005, at 3:01 PM, Daniele Orlandi wrote: It depends on what you mean with "no extra stuff". The payload is raw-LAPD but the capture includes the sockaddr_ll header because the dissector needs to know the interface's role in order to correctly interpret the C/R flag. Specifically, b

Re: [tcpdump-workers] DLT request

2005-04-07 Thread Daniele Orlandi
Duh, are you seeing a bad PGP signature? It seems that majordomo rewrote the signature separation string: =2D-=20 Daniele Orlandi --=20 Daniele Orlandi Dunno it it's my fault or majordomo's, anyway it was really me :) I'll indagate :) Sorry, Bye, -- Daniele Orlandi - This is the tcpdum

Re: [tcpdump-workers] DLT request

2005-04-07 Thread Daniele Orlandi
On Thursday 7 April 2005 22:37, Guy Harris wrote: > > So this is D-channel only, i.e. a DLT_{whatever} capture wouldn't have > any B-channel traffic? Yes, correct. > And the packet content is just a raw LAPD packet, with no extra stuff > added or removed? It depends on what you mean with "no ext

Re: [tcpdump-workers] DLT request

2005-04-07 Thread Guy Harris
Daniele Orlandi wrote: I would like to request a DLT_ number for raw LAPD (q.921) frames captured thru vISDN, an ISDN architecture I'm developing for Linux. Some draft documentation may be found at http://www.orlandi.com/visdn/ So this is D-channel only, i.e. a DLT_{whatever} capture wouldn't hav

[tcpdump-workers] DLT request

2005-04-07 Thread Daniele Orlandi
Hello, I would like to request a DLT_ number for raw LAPD (q.921) frames captured thru vISDN, an ISDN architecture I'm developing for Linux. Some draft documentation may be found at http://www.orlandi.com/visdn/ Possible names could be DLT_LAPD or DLT_Q921, I would chose the former as it is t

Re: [tcpdump-workers] DLT-request

2005-04-03 Thread Guy Harris
gilbert HOYEK wrote: hi i would like to request a new DLT_SEPTEL for Intel/Septel cards used in ss7 messages transfer . DLT_SEPTEL, or DLT_MTP2/DLT_MTP3/whatever? Unless there's some extra header on the packet that includes information from the Septel cards, the DLT_ name probably shouldn't m

[tcpdump-workers] DLT-request

2005-04-03 Thread gilbert HOYEK
hi i would like to request a new DLT_SEPTEL for Intel/Septel cards used in ss7 messages transfer . i think it's one of 139 140 140 142 as it is mentioned in the bpf.h header file so plz tell me which one i choose ... Next i would like to know how to impement it ...it means what chang