Wireshark · Ethereal-dev: Re: [Ethereal-dev] Wiretap patch to support reading from Endace ERF trace files

[Guy Harris <guy@xxxxxxxxxxxx>]

On Mon, Aug 04, 2003 at 05:08:43PM +1200, Jesper Peterson wrote:
> Attached is a wiretap ERF read patch for your consideration,

The ERF file doesn't indicate whether the checksum (CRC?) is 0, 2, or 4
bytes?

Also, if you use WTAP_ENCAP_ATM_PDUS rather than WTAP_ENCAP_ATM_RFC1483
for ATM packets, does the heuristic in "atm_guess_traffic_type()" get
the correct answer, or does there need to be a way to say "always assume
RFC 1483"? If so, perhaps we should have some mechanism in Ethereal for
forcing particular traffic types on particular ATM virtual circuits, if
"always assume RFC 1483" isn't good enough.