ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-dev: Re: [Ethereal-dev] Fibre Channel decoding question

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Dinesh G Dutt <ddutt@xxxxxxxxx>
Date: Fri, 2 Jul 2004 20:49:18 -0700
Multiple ways:
         - FCIP
         - Cisco Port Analyzer Adapter Format (see packet-brdwlk.c)
           - This encaps an FC frame into Ethernet
         - Internal Cisco switch format (packet-mdshdr.c)

Dinesh
Rydeen, Mike writes:
 > I posted this to the users mailing list originally, but believe that it
 > should have been posted to this group instead... 
 >  
 > Hopefully this will be a quick question/answer, but you never know.  Looking
 > through the Ethereal supported protocols it appears that you support a large
 > part of the Fibre Channel standard protocols (FC, FC-dns, FC-FCS, etc).
 > After decoding the libpcap file format, I was able to create a supported
 > Ethereal file out of a series of raw Fibre Channel frames.  Currently I am
 > using the IP over FC (122 - 0x7a) as my link layer type, but it appears that
 > this LL does not decode the Common Transport layer, it is only looking for
 > the payload IP contents from the Network Header, SNAP and down the list. 
 >  
 > Looking through the libpcap/tcpdump code I did not really see any other LL
 > type.  If there is not a supported type, how will Ethereal know how to
 > decode the file?  Is there a different file type that Ethereal is looking
 > for?  Or is this a "in the works" item? 
 >  
-- 
Become the change you want to see in the world - Gandhi