https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7314
--- Comment #6 from andrew.kampjes@xxxxxxxxxx 2012-06-07 18:38:17 PDT ---
(In reply to comment #5)
> According to my copy of Endace's "ERF Types" document (EDM11-01v10),
> TYPE_RAW_LINK records in an ERF file (or, presumably, packets in a LINKTYPE_ERF
> pcap file or for a LINKTYPE_ERF interface in a pcap-ng file) appear to include
> an Extension Header 5; that extension header includes:
>
> a "start of frame"/"more fragmentation" bit;
>
> a sequence number field;
>
> an encoding of the rate (OC-3, OC-12, OC-48, or OC-192);
>
> an indication of whether this is SONET or SDH.
>
> Presumably if that header is present the preference for the rate isn't
> necessary. Will a subsequent patch export the data in the Extension Header 5
> from the ERF dissector, e.g. using a pseudo-header?
Hmmm, thanks for that. Yes that's correct. I was going to pretend that someone
with may want to read SONET/SDH from a pcap file, so when I started
implementing the dissector I didn't want to utilise anything ERF specific. I'm
doubtful as to ever finding a pcap file with SONET traffic though so I'll
probably include your proposed change in the next patch anyway.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.