ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-dev: RE: [Ethereal-dev] WTAP_ENCAP_FRELAY

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Nisbet, Tom" <Tnisbet@xxxxxxxxxxxxxxxxxx>
Date: Thu, 1 Jul 2004 10:22:34 -0400
> On Wed, Jun 30, 2004 at 10:47:03PM -0400, Nisbet, Tom wrote:
> > Someone at the frame relay forum eventually noticed that 
> there is no such
> > thing as a one octet frame relay address field, so they 
> stole this bit
> > in the first octet to indicate frame relay fragmentation, as defined
> > in FRF.12.  The Sniffer is trying to decode this.
> 
> ...and Ethereal, unfortunately, isn't.  That should probably 
> be changed.

I can add support for FRF.12 when I get my Ethereal build environment
working again.  It won't help in this case because the frames aren't really
FRF.12.  They just look like two octet headers with bad EA bits.

Tom