Wireshark · Ethereal-users: Re: [ethereal-users] can I see PPP inside L2TP packets?

Ethereal-users: Re: [ethereal-users] can I see PPP inside L2TP packets?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Luca Risso" <Luca.Risso@xxxxxxxxxxx>

Date: Mon, 5 Jun 2000 13:25:30 +0200





Here is the sample trace file of a L2TP connection between two PCs.

LAC IP address is 172.16.175.110
LNS address is 172.16.246.176

The trace contain the following actions:
- LAC opens a new tunnel
- LAC opens a new call (PPP peers: 172.16.175.106 <---> 172.16.175.107)
- LAC sends a couple of ping over PPP connection (packets 60-61, 63-64)
- LAC closes the call
- LAC closes the tunnel

No PPP protocol info seems to be shown into the L2TP packet and also the data
parts of packet number 60 and 63 (ping) doesn't appear in bold font as usual.

Thanks for your help.

   Luca Risso

(See attached file: l2tp.log)






Gilbert Ramirez <gram@xxxxxxxxxx> on 02/06/2000 17.38.20
                                                                                
                                                                                
                                                                                


                                                              
                                                              
                                                              
 To:      Luca Risso/MAIN/MC1@MCMAIN                          
                                                              
 cc:      ethereal-users@xxxxxxxx                             
                                                              
                                                              
                                                              
 Subject: Re: [ethereal-users] can I see PPP inside L2TP      
          packets?                                            
                                                              








On Fri, Jun 02, 2000 at 09:44:44AM -0500, Luca Risso wrote:
>
>
>
>
> I trying to use Ethereal 0.8.8 for the first time and I'm testing it on a
> L2TP
> link over ethernet.
> I'm able to see L2TP headers, but it's seems that the ecapsulated PPP is
> not
> shown by the dissector on the screen.
> Is this the correct behaviour or I'm doing something wrong?
>
> Thanks
>
>      Luca

There may be a problem with Ethereal. Can you send a small sample trace file?

--gilbert

ÔÃ²¡ÿÿ¤c;9óÞ  yh´4àE@|¬¯n¬ö°¥¥~ Èv

localhost.localdomainAdtran, l2tpd	Eg
¤c;9¬ì¦¦´4àyhEÛ?|:¬ö°¬¯n¥¥ËÈ|Eg

!gexs318.it.marconicomms.comAdtran, l2tpd	Eg
¤c;9Pî>>yh´4àE0@|{¬¯n¬ö°¥¥f ÈEg¤c;9ò<<´4àyhE(Þ?|§¬ö°¬¯n¥¥æÂÈEg²c;9+ZZyh´4àEL@|\¬¯n¬ö°¥¥8È0Eg
Hs

²c;9ËNN´4àyhE@ß?|¬ö°¬¯n¥¥,ÕRÈ$EgHsHs
²c;9<<´4àyhE(à?|¥¬ö°¬¯n¥¥æÀÈEg²c;9²jjyh´4àE\@|K¬¯n¬ö°¥¥Hn¶È@EgHs



&'²c;90÷<<´4àyhE(ê?|¬ö°¬¯n¥¥LÈEgHs³c;9ý!NN´4àyhE@ë?|¬ö°¬¯n¥¥,i°H$EgHsÿÀ!Ãí"³c;9lILLyh´4àE>@|h¬¯n¬ö°¥¥*©×EgHsÿÀ!Ãí"³c;9NDD´4àyhE6ì?|¬ö°¬¯n¥¥"ØÌHEgHsÿÀ!
VÈ'[³c;9®QBByh´4àE4@|q¬¯n¬ö°¥¥ êEgHsÿÀ!
VÈ'[³c;9ìVNN´4àyhE@í?|¬ö°¬¯n¥¥,geH$EgHsÿÀ!@nç³c;9ÛXLLyh´4àE>	@|f¬¯n¬ö°¥¥*§EgHsÿÀ!@nç³c;9ç]DD´4àyhE6î?|¬ö°¬¯n¥¥"SHEgHsÿÀ!
úèt³c;9¯_BByh´4àE4
@|o¬¯n¬ö°¥¥ «EgHsÿÀ!
úèt³c;9eNN´4àyhE@ï?|~¬ö°¬¯n¥¥,cH$EgHsÿÀ!Ã³c;9ëwLLyh´4àE>@|d¬¯n¬ö°¥¥*×EgHsÿÀ!Ã³c;9N}DD´4àyhE6ð?|¬ö°¬¯n¥¥"FOHEgHsÿÀ!
57Û_³c;9
BByh´4àE4@|m¬¯n¬ö°¥¥ lEgHsÿÀ!
57Û_³c;9_NN´4àyhE@ñ?||¬ö°¬¯n¥¥,ÐH$EgHsÿÀ!¥¢;³c;9DLLyh´4àE>
@|b¬¯n¬ö°¥¥*[÷EgHsÿÀ!¥¢;³c;9WDD´4àyhE6ò?|¬ö°¬¯n¥¥"":HEgHsÿÀ!
±
³c;9ÛBByh´4àE4@|k¬¯n¬ö°¥¥ bWEgHsÿÀ!
±
³c;9NN´4àyhE@ó?|z¬ö°¬¯n¥¥,öLH$EgHsÿÀ!¨N·³c;9ÅLLyh´4àE>@|`¬¯n¬ö°¥¥*6tEgHs	ÿÀ!¨N·³c;9rDD´4àyhE6ô?|¬ö°¬¯n¥¥"¤HEgHs		ÿÀ!
A¶³c;9ûBByh´4àE4@|i¬¯n¬ö°¥¥ RÁEgHs	
ÿÀ!
A¶³c;9Ê¡NN´4àyhE@õ?|x¬ö°¬¯n¥¥,öJH$EgHs

ÿÀ!ºH¢³c;9{£LLyh´4àE>@|^¬¯n¬ö°¥¥*6rEgHs
ÿÀ!ºH¢³c;9Ç¨DD´4àyhE6ö?|¬ö°¬¯n¥¥"¿WHEgHsÿÀ!
 ß³c;9LªBByh´4àE4@|g¬¯n¬ö°¥¥ ÿtEgHsÿÀ!
 ß³c;9À®NN´4àyhE@÷?|v¬ö°¬¯n¥¥,rBH$EgHsÿÀ!ð×ä³c;9n°LLyh´4àE>@|\¬¯n¬ö°¥¥*²iEgHs
ÿÀ!ð×ä³c;9µDD´4àyhE6ø?|¬ö°¬¯n¥¥",=HEgHs

ÿÀ!
ª³c;9·BByh´4àE4@|e¬¯n¬ö°¥¥ lZEgHs
ÿÀ!
ª³c;9ª¼NN´4àyhE@ù?|t¬ö°¬¯n¥¥,N§H$EgHsÿÀ!Ïû(ú³c;9Z¾LLyh´4àE>@|Z¬¯n¬ö°¥¥*ÎEgHsÿÀ!Ïû(ú³c;9©ÃDD´4àyhE6ú?|}¬ö°¬¯n¥¥"ù<HEgHsÿÀ!
î¥nê³c;9-ÅBByh´4àE4@|c¬¯n¬ö°¥¥ 9ZEgHsÿÀ!
î¥nê³c;9ÊNN´4àyhE@û?|r¬ö°¬¯n¥¥,|H$EgHsÿÀ!	Jz³c;9ùËLLyh´4àE>@|X¬¯n¬ö°¥¥*¼»EgHsÿÀ!	Jz³c;9ÑDD´4àyhE6ü?|{¬ö°¬¯n¥¥"¢HEgHsÿÀ!	
9Ê\³c;9âLLyh´4àE>@|W¬¯n¬ö°¥¥*Q\EgHsÿÀ!ÜYä³c;9ENN´4àyhE@ý?|p¬ö°¬¯n¥¥,3H$EgHsÿÀ!ÜYä³c;9%544yh´4àE&@|n¬¯n¬ö°¥¥^>EgHs¶c;9ÕïNN´4àyhE@þ?|o¬ö°¬¯n¥¥,|H$EgHsÿÀ!	Jz¶c;9üòLLyh´4àE>@|U¬¯n¬ö°¥¥*»¶EgHsÿÀ!	Jz¶c;9ìóFFyh´4àE8@|Z¬¯n¬ö°¥¥$È«EgHs!-¶c;9m÷<<´4àyhE(ÿ?|¬ö°¬¯n¥¥+HEgHs¶c;9cùHH´4àyhE:?|s¬ö°¬¯n¥¥&-HEgHs!¬¯k-¶c;9£úBB´4àyhE4?|x¬ö°¬¯n¥¥ <XHEgHs!
¬¯j¶c;9ºû44yh´4àE&@|k¬¯n¬ö°¥¥^9EgHs¶c;9¢ýFFyh´4àE8@|X¬¯n¬ö°¥¥$l,EgHs!¬¯k-¶c;9þFFyh´4àE8@|W¬¯n¬ö°¥¥$m+EgHs!¬¯j-¶c;9_<<´4àyhE(?|¬ö°¬¯n¥¥'HEgHs¶c;9QHH´4àyhE:?|p¬ö°¬¯n¥¥&,HEgHs!¬¯j-¶c;9Ä®	44yh´4àE&@|h¬¯n¬ö°¥¥^6EgHsÁc;9#ôyh´4àE{!@|¬¯n¬ö°¥¥g<EgHs!ET @Ã¬¯j¬¯kküÁc;9øò	

 !"#$%&'()*+,-./01234567Ác;9Nù´4àyhE}?|+¬ö°¬¯n¥¥iü%HaEgHs!ETÿ®¬¯k¬¯jküÁc;9øò	

 !"#$%&'()*+,-./01234567Ác;9a·44yh´4àE&"@|e¬¯n¬ö°¥¥^4EgHsÂc;9ëïyh´4àE{$@|¬¯n¬ö°¥¥g<EgHs!ET#@Ã¬¯j¬¯koüÂc;9ï	

 !"#$%&'()*+,-./01234567Âc;9[ô´4àyhE}?|)¬ö°¬¯n¥¥iü#HaEgHs!ETÿ¬¬¯k¬¯joüÂc;9ï	

 !"#$%&'()*+,-./01234567Âc;9[·44yh´4àE&%@|b¬¯n¬ö°¥¥^2EgHsØc;9,çXXyh´4àEJ&@|=¬¯n¬ö°¥¥6VÃÈ.EgHsGoodbye!HsØc;9Jê<<´4àyhE(	?||¬ö°¬¯n¥¥KÈEgHsàc;93ß>>´4àyhE0?|q¬ö°¬¯n¥¥fÈEgàc;9Pà66yh´4àE('@|^¬¯n¬ö°¥¥æ½ÈEgàc;9(
>>yh´4àE0(@|U¬¯n¬ö°¥¥fÈEgàc;95<<´4àyhE(
?|x¬ö°¬¯n¥¥æ¼ÈEgïc;9µ/XXyh´4àEJ)@|:¬¯n¬ö°¥¥6¢NÈ.Eg	EgGoodbye!ïc;9Ü3<<´4àyhE(?|w¬ö°¬¯n¥¥æ»ÈEg

Follow-Ups:
- Re: [ethereal-users] can I see PPP inside L2TP packets?
  - From: Gilbert Ramirez

Prev by Date: [ethereal-users] undefined symbol when running ethereal
Next by Date: Re: [ethereal-users] filtres
Previous by thread: Re: [ethereal-users] can I see PPP inside L2TP packets?
Next by thread: Re: [ethereal-users] can I see PPP inside L2TP packets?
Index(es):
- Date
- Thread