Ethereal-users: Re: [Ethereal-users] network type 13 unknown or unsupported

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <gharris@xxxxxxxxx>
Date: Thu, 19 Feb 2004 00:05:43 -0800
On Wed, Feb 18, 2004 at 10:30:43PM +0100, Martin Regner wrote:
> Maybe it is captured with some special Nokia tcpdump version.

Apparently so.

> If I remove the four first octets for each packet (by using text2pcap) and
> set linktype to 100 then I see LLC-SNAP/IP/GTP/IP/.. packets
> that looks reasonable,

And if I dissect them as something like an ATM pseudo-header, with the
0x80 bit in the first byte being a direction flag, and the VPI/VCI
following, they appear to be traffic for VPI 0, VCI 500.

I've checked in a change to interpret them as such.  I don't guarantee
that the direction flag or VPI/VCI is correct.