Ethereal-users: Re: [ethereal-users] Monitoring Linux-X.25

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Wed, 12 Jan 2000 11:50:09 -0800 (PST)
> I'm playing with Linux X.25-implementation and would like to monitor the X.25
> traffic on the ethernet. Although there seems to be an implementation of X.25
> in ethereal I get no resolution of the X.25 protocol. I've recompiled the 
> lapbether module to use packet type 0x0805 (the original implementation uses
> DEC type 0x6000), but that does not help.
> 
> Has anyone an idea how
> 
> either:
> to get ethereal resolving the X.25 protocol under Linux

It resolves X.25, but not over Ethernet.

To get it to handle X.25-over-Ethernet:

	1) Add to "etypes.h" the line

#define	ETHERTYPE_X25L3	0x0805

	   before the

#ifndef ETHERTYPE_ARP
#define ETHERTYPE_ARP 0x0806
#endif

	   stuff.

	2) Add to the "etype_vals" array in "ethertype.c" the line

    {ETHERTYPE_X25L3,  "X.25 Layer 3"  },

	   before the

    {ETHERTYPE_ARP,    "ARP"            },

	   line.

	3) Add to the "switch" statement in "ethertype()" in
	   "ethertype.c" the lines

    case ETHERTYPE_X25L3:
      dissect_x25(pd, offset, fd, tree);
      break;

	   before the lines

    case ETHERTYPE_ARP:
      dissect_arp(pd, offset, fd, tree);
      break;

	4) Recompile Ethereal.

	5) Debug as necessary.

	6) Send the results, as a patch, to "ethereal-dev@xxxxxxxx" so
	   we can check them into the code base.