[Gilbert Ramirez <gram@xxxxxxxxxx>]

On Tue, Oct 17, 2000 at 09:50:27PM +0300, Paul Ionescu wrote:
> >
> 
> Yes, now it works. But the display filter "tr.rif" still does not work.
> Try my attachement, it has both RIF and non RIF frames.
> 
> Thanks.

This is a documentation problem. "tr.rif" is the string of ring-bridge pairs.
"tr.rif_bytes" is the portion of the routing control field (RCF) which indicates
how many bytes of routing information exists (which is the number of bytes
for the ring-bridge pairs, plus 2 bytes for the RCF itself).

In the sample packet capture you provided, packets 8, 10, and 13 have
routing control fields (tr.rif_bytes), but not ring-bridge pairs (tr.rif)
If your filter is "tr.rif_bytes", you'll see those 3 packets. You'll see that
tr.rif_bytes == 2, which means an RCF exists, but no ring-bridge pairs (tr.rif)
exist.

--gilbert