Ethereal-dev: Re: [Ethereal-dev] Inserting a non-standard Ethernet dissector?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Peter J. Creath" <peter-ethereal@xxxxxxxxxx>
Date: Tue, 3 Feb 2004 17:39:34 -0500
we could add support for MAC-address-based dissector tables, to handle protocols that, like ISL, involve non-802.3 packets sent to particular MAC addresses

You're right: a MAC table is probably better (faster) for things like ISL, although ISL has a fair number of MAC addresses allocated to it -- a table might be a bit cumbersome.

The packets I'm examining use a large range of private MAC addresses. The range is large enough that a simple MAC table wouldn't work very well -- it's far easier to match programmatically.

And there's no guarantee _all_ the traffic will be non-standard, so the DOCSIS-style switch isn't so useful here. Inserting a heuristic test allows someone to interleave standard and non-standard 802.3 frames, assuming the heuristic dissectors are sufficiently conservative.

Should I formally re-submit my patch to the list (I realized I didn't use the usual "[Patch]" marker in the subject line), or do you not like the approach?

	-P