Ethereal-users: Re: [Ethereal-users] Capturing ISDN -- with text2pcap?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: James Mastros <james@xxxxxxxxxxx>
Date: Tue, 22 Jul 2003 14:42:21 +0200
On Tue, 22 Jul 2003 12:55:33 +0200, Martin Regner <martin.regner@xxxxxxxxx> wrote:


James Mastros wrote:
I'm attempting to debug an isdn4linux problem, and have started to look at the debug output, which is a bunch of syslog lines of the form "Jul 22 01:53:56 desert-island isdnlog: HEX: 00 91 01 05 ". I'm trying to transform this into a pcap capture file with the text2pcap tool, but I'm running into (at least, of course) two problems.

Maybe it would be good to request a LINK_LAYER_TYPE/DLT value for LAPD/ISDN from tcpdump-workers@xxxxxxxxxxx
I'm thinking about it...

One way I have transferred LAPB data into Ethereal is to use the Toshiba ISDN-router file format (a text based format). See attached sample file (hand-edited).
Thanks very much for the pointer. Attached is the script I'm using to convert from isdn4linux (isdnlog) syslog debug dump format to toshiba snoop format, which can be read by ethereal via wiretap. (In case you can't tell, I'm trying to work in keywords for future searches).

It's recived very limited testing, but it Works For Me.

	-=-James Mastros

Attachment: syslog-to-tosh.pl
Description: Binary data