Ethereal-users: Re: [Ethereal-users] network type 13 unknown or unsupported

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Tue, 17 Feb 2004 21:23:27 -0800
On Mon, Feb 16, 2004 at 12:48:08PM +0100, diaz_d1@xxxxxx wrote:
> I'm trying to analize BGP session over ATM but I get "network type 13
> unknown".

On what OS did you run tcpdump?

A network capture type of 13 means different things on different OSes.

In FreeBSD and NetBSD, it means DLT_SLIP_BSDOS, which is a libpcap
encapsulation of SLIP that's used in BSD/OS - but FreeBSD and NetBSD
don't use that encapsulation and don't generate captures of that sort,
and DLT_SLIP_BSDOS is 15, not 13, in BSD/OS.

In BSD/OS, 13 is DLT_ATM_RFC1483, for traffic encapsulated over ATM AAL5
as per RFC 1483.

In OpenBSD, it's DLT_ENC, which I think is some sort of encapsulation
used for decrypted IPsec traffic.