https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7314
--- Comment #5 from Guy Harris <guy@xxxxxxxxxxxx> 2012-06-06 03:33:09 PDT ---
According to my copy of Endace's "ERF Types" document (EDM11-01v10),
TYPE_RAW_LINK records in an ERF file (or, presumably, packets in a LINKTYPE_ERF
pcap file or for a LINKTYPE_ERF interface in a pcap-ng file) appear to include
an Extension Header 5; that extension header includes:
a "start of frame"/"more fragmentation" bit;
a sequence number field;
an encoding of the rate (OC-3, OC-12, OC-48, or OC-192);
an indication of whether this is SONET or SDH.
Presumably if that header is present the preference for the rate isn't
necessary. Will a subsequent patch export the data in the Extension Header 5
from the ERF dissector, e.g. using a pseudo-header?
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.