On 8/17/07, Guy Harris <[EMAIL PROTECTED]> wrote:
>
> [EMAIL PROTECTED] wrote:
>
> > Here is possible solution to resolve DCE/DTE origin of a LAPB packet.
> >
> > Wireshark libpcap.h has the struct pcaprec_ss990915_hdr, which has
> > ifindex field ( the interface on which packet came in ). During
[EMAIL PROTECTED] wrote:
Here is possible solution to resolve DCE/DTE origin of a LAPB packet.
Wireshark libpcap.h has the struct pcaprec_ss990915_hdr, which has
ifindex field ( the interface on which packet came in ). During
capturing phase FROM_DCE or FROM_DTE will be stored into ifindex fie
indicate DCE->DTE or DTE->DCE
packet.
Regards
Mirko Karanovic
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Guy Harris
Sent: August 15, 2007 2:11 PM
To: tcpdump-workers@lists.tcpdump.org
Subject: Re: [tcpdump-workers] DLT_LAPB value assignment
[EMAIL PROTECTED] wrote:
2Q: Or would it also contain an extra flag to
indicate whether the packet is a DTE->DCE or DCE->DTE packet?
2A: LAPB contains direction ( DCE to DTE or vice versa) encoded in the
Address byte.
Actually, what X.25 (10/96) says is:
Frames containing commands transf
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Guy Harris
Sent: August 13, 2007 1:12 PM
To: tcpdump-workers@lists.tcpdump.org
Subject: Re: [tcpdump-workers] DLT_LAPB value assignment
[EMAIL PROTECTED] wrote:
> There is need to assign DLT_L
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Guy Harris
Sent: August 13, 2007 1:12 PM
To: tcpdump-workers@lists.tcpdump.org
Subject: Re: [tcpdump-workers] DLT_LAPB value assignment
[EMAIL PROTECTED] wrote:
> There is need to assign DLT_L
[EMAIL PROTECTED] wrote:
There is need to assign DLT_LAPB value for capturing of the X.25 LAPB
traffic and decoding it in the WireShark Protocol Analyzer.
So would the packet data in a DLT_LAPB capture start with the address
field of the LAPB header, followed by the Control field, followed by
There is need to assign DLT_LAPB value for capturing of the X.25 LAPB
traffic and decoding it in the WireShark Protocol Analyzer.
Best Regards
Mirko Karanovic
Toronto Transit Commission
The information transmitted is intended only for the person or entity to which
it is addressed and
