ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-dev: Re: [Ethereal-dev] WTAP_ENCAP_FRELAY

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Fri, 2 Jul 2004 00:37:45 -0700
On Wed, Jun 30, 2004 at 10:47:03PM -0400, Nisbet, Tom wrote:
> It appears as though the traffic is really using a two octet address field
> but is setting the EA bits incorrectly.

Or it's Cisco HDLC traffic that was captured by a WanBook incorrectly
configured for Frame Relay rather than Cisco HDLC; the frames start with
0x0f 0x00, followed by an Ethernet type, and that looks like Cisco HDLC.