Re: [tcpdump-workers] print_llc code question

2009-09-07 Thread Jean-Louis Charton
Guy Harris alum.mit.edu> writes: > > So I don't know who actually *used* an 802.2 header without a SNAP > header when sending IP datagrams. > I agree that IP + LLC without SNAP is probably very unusual. Michael Richardson suggested me that the extra byte could be there to make the IP datagra

Re: [tcpdump-workers] print_llc code question

2009-09-06 Thread Alexander Dupuy
Guy Harris writes: > s for non-Ethernet networks using 802.2, RFC 1042, "Standard for the > transmission of IP datagrams over IEEE 802 networks" replaced that > scheme with a scheme using SNAP headers with the standard Ethertype > for IP. > > So I don't know who actually *used* an 802.2 head

Re: [tcpdump-workers] print_llc code question

2009-09-01 Thread Guy Harris
On Sep 1, 2009, at 6:55 AM, Jean-Louis CHARTON wrote: Maybe the following question is pretty obvious but since I'm not an 802.2/LLC expert, I can't find a response for it. I was reading print_llc.c code and in llc_print() function, I found something that I don't really understand. At lines 247

[tcpdump-workers] print_llc code question

2009-09-01 Thread Jean-Louis CHARTON
Hi, Maybe the following question is pretty obvious but since I'm not an 802.2/LLC expert, I can't find a response for it. I was reading print_llc.c code and in llc_print() function, I found something that I don't really understand. At lines 247 to 251, one has : if (ssap == LLCSAP_IP && dsa