Re: [tcpdump-workers] problem with parsing Leipzig-I trace

2005-07-10 Thread Stephen Donnelly
Hi Zhen, Well, 0x21 is the IANA PPP DLL protocol number for Internet Protocol version 4, so perhaps the link in question is RFC2615 PPP over SONET rather than PoS/Cisco HDLC. You could try changing DLT_CHDLC to DLT_PPP_SERIAL in dagbpf.c and recompiling. Alternatively contact NLANR PMA via t

Re: [tcpdump-workers] problem with parsing Leipzig-I trace

2005-07-10 Thread Zhen Wu
Yes. I tried different flags. Here is what I got by trying "dagbpf -p". - $ zcat 20021125-14-0.gz | /usr/local/dagtools-0.8.1/pcap/dagbpf -p | /usr/local/sbin/tcpdump -n -tt -r -| more reading from file -, link-type C_HDLC (Cisco HDLC) 1038229200.000249 unknown CHDLC

Re: [tcpdump-workers] problem with parsing Leipzig-I trace

2005-07-10 Thread Stephen Donnelly
From the web pages you mentioned, the Leipzig-I trace page says that it was taken from a Packet over SONET link. Did you try the "dagbpf -p" flag for PoS? Regards, Stephen. Zhen Wu wrote: Hello, everyone: I am using dagtools and tcpdump to parse the Leipzig-I trace. The output is NOT what I

[tcpdump-workers] problem with parsing Leipzig-I trace

2005-07-08 Thread Zhen Wu
Hello, everyone: I am using dagtools and tcpdump to parse the Leipzig-I trace. The output is NOT what I expected. Using the same command, I can successfully parse the Auckland-IV trace. Anyone can help me??? Thanks a lot! Zhen output from parsing Leipzig-I trace, from "http://pma.nlanr.ne