Ethereal-dev: Re: [Ethereal-dev] Ethereal support for Juniper ATM{1, 2} PIC DLT_ 135, 137

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <gharris@xxxxxxxxx>
Date: Thu, 20 Jan 2005 02:36:27 -0800
Hannes Gredler wrote:


attached a patch/dissector that adds support for
Juniper DLT_ type 135,137 that is used on our Routers
for taking captures on ATM PIC cards.


Checked in.

Current CVS tcpdump shows the packets in "atm_ether.pcap" as OAM F5
cells, but Ethereal doesn't - and at least some of the packets appear
*NOT* to be ATM cells 9e.g., packet 8, which is 76 bytes long, and has a
valid IP header checksum.  Is the tcpdump dissector out-of-date or
otherwise buggy?

Or...


the dissector is mainly a heuristic engine that tries
to guess the encapsulation format based on well-known
bit-patterns.


...does it have more heuristics, with one of them guessing incorrectly?