[Guy Harris <gharris@xxxxxxxxxxxx>]

On Mon, Jan 15, 2001 at 03:38:58PM -0600, Jeff Foster wrote:
> I have determined the following values 
> 
> 	00 = SDLC
> 	01 = HDLC
> 	02 = Frame Relay
> 	03 = Router
> 	04 = PPP
> 	05 = SMDS (Switched Multimegabit Data Service)
> 
> Please verify this information, if you have Sniffer files available

I have a PPP Sniffer capture with no type 7 record in it, so looking for
a type 7 record isn't sufficient.

I also have an X.25 capture with a type 7 record in it, and the type is,
not surprisingly, 1 for HDLC, but LAPD for ISDN could conceivably be
HDLC as well - if so, it'd need to look at some other field.

I'll check in a change to detect Frame Relay and PPP, but leave in the
existing heuristics for now (they won't be used if a type 7 record
determines the type, but if there isn't a type 7, or if the type 7 only
recognizes it as HDLC, they'll still be used).