Ethereal-users: [Ethereal-users] Re: network type 13 unknown or unsupported

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date: Thu, 19 Feb 2004 08:09:59 +0100
Hello and thanks in advanced,

about OS we use a Nokia operating system called IPSO, if you want to know
more about it, there is a brief information about IPSO in
http://www.nokia.com/nokia/0,,46230,00.html .


Regards

      Daniel

Guy Harris
> On Mon, Feb 16, 2004 at 12:48:08PM +0100, diaz_d1@xxxxxx wrote:
> > I'm trying to analize BGP session over ATM but I get "network type 13
> > unknown".
>
> On what OS did you run tcpdump?
>
> A network capture type of 13 means different things on different OSes.
>
> In FreeBSD and NetBSD, it means DLT_SLIP_BSDOS, which is a libpcap
> encapsulation of SLIP that's used in BSD/OS - but FreeBSD and NetBSD
> don't use that encapsulation and don't generate captures of that sort,
> and DLT_SLIP_BSDOS is 15, not 13, in BSD/OS.
>
> In BSD/OS, 13 is DLT_ATM_RFC1483, for traffic encapsulated over ATM AAL5
> as per RFC 1483.
>
> In OpenBSD, it's DLT_ENC, which I think is some sort of encapsulation
> used for decrypted IPsec traffic.
>

diaz_d1 enclosed a sample capture with his mail.

I think it looked like LLC header AA-AA-03 (i.e. SNAP header), but with
four
bytes before the LLC header.

I guess that it is DLT_ATM_RFC1483 but with four extra bytes first.