[clay wispell <clay.wispell@xxxxxxxxxxxxxxx>]

hello guy,

the data into ethereal (0.10.2) is just the raw output from the omniber; 
 lapd frames (the flags are suppressed). i don't know if that answers 
your question. here is how i set things up (fedora core 1, kernel 2.4.25):


load modules for synclink: (dosyncppp creates mgsl0 network interface)
"modprobe synclink dosyncppp=1"

setup card parameters:
"mgslutil /dev/ttySL0 hdlc nrz rs422 -loopback crcnone preflag idleflag 
rxc txc -autocts -autodcd -autorts clock 0 addr ff +cisco"

start network interface
"ifconfig mgsl0 up"

here is the ifconfig data:

mgsl0     Link encap:(Cisco)-HDLC
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:19859 errors:0 dropped:0 overruns:0 frame:0
          TX packets:61 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:10
          RX bytes:1723550 (1.6 Mb)  TX bytes:854 (854.0 b)
          Interrupt:5 Base address:0xcc00


and again a captured frame:

0000  fa 01 01 86 61 f5                                  ....a.


i have tried various dissector_add in packet-chdlc.c with no luck:

dissector_add("wtap_encap", WTAP_ENCAP_ISDN, chdlc_handle);



thanks again,

clay





Guy Harris wrote:
> On Mon, Mar 22, 2004 at 07:57:00AM -0600, clay wispell wrote:
>
> > i am receiving data from an agilent omniber (on network device mgsl0) 
> > that i would like to decode as lapd. ethereal thinks it is cisco-hdlc 
>
>
> In what format are you writing the data out to allow Ethereal to read
> it?
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users