Wireshark-bugs: [Wireshark-bugs] [Bug 2671] ERF dissector defaults to RAW

From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Tue, 1 Jul 2008 20:00:23 -0700 (PDT)

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2671





--- Comment #2 from Guy Harris <guy@xxxxxxxxxxxx>  2008-07-01 20:00:22 PDT ---
> erf.erfatm=atm

Is "raw ATM", with pseudo-header information, the most likely case for ATM
traffic captured on a DAG card?

> erf.erfhdlc=chdlc

Why Cisco HDLC rather than, say, PPP?  Is Cisco HDLC more likely than PPP?

Should we have a "generic HDLC" dissector that uses heuristics to try to guess
what type of traffic is being encapsulated in the HDLC framing, if possible?

> erf.erfeth=ethfcs

Is the most likely case that the FCS is included in the frame?  If it's
sufficiently likely that the FCS isn't included, we could perhaps use the
"Ethernet and try to guess whether there's an FCS" dissector (which is the
default for DLT_EN10MB, as some machines - including the one on which I'm
typing this - include the FCS on incoming frames).


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.