Ethereal-users: Re: [Ethereal-users] unsupported Ethernet type 10

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Thu, 5 Dec 2002 14:36:42 -0800
On Thu, Dec 05, 2002 at 01:19:03PM -0800, Guy Harris wrote:
> As I've not yet seen a Frame Relay capture from snoop or any snoop
> derivative, I will, for now, make Ethereal's capture-reading library
> interpret 10 as Ethernet

Unfortunately, there is one link-layer type value that snoop on
UNICOS/mp apparently uses one way (the DLPI way, I assume - it's
"software loopback", which has no standard interpretation but UNICOS/mp
apparently does it as raw IP with no link-layer headers) and
Shomiti-format tools use another way (the Shomiti way), so I checked in
code to have the snoop capture reader check the first record (if
present) to see how much padding it has and use that to tell whether the
file is a snoop file or a Shomiti file.

The next release should have that fix (unless Gerald started building it
before I checked in my changes).