ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 2671] ERF dissector defaults to RAW

Date: Tue, 1 Jul 2008 21:36:46 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2671





--- Comment #4 from Guy Harris <guy@xxxxxxxxxxxx>  2008-07-01 21:36:45 PDT ---
OK, from looking at the "ERF Types" document EDM11-01, version 6 (BTW, is there
a public - as in "you don't need to fill in a form to get access to it" -
specification for ERF available?), it appears that:

    ERF_TYPE_MC_ATM and ERF_TYPE_ATM contain a single ATM cell, and thus should
presumably always be dissected by dissect_atm_cell() in packet-atm.c, so either
we hand it to the ATM dissector with ATM_RAW_CELL set in atm.flags, or register
dissect_atm_cell() by name as an ATM cell dissector and use that;

    ERF_TYPE_MC_AAL5 and ERF_TYPE_AAL5 contain a reassembled ATM AAL5 PDU, and
should presumably always be dissected by dissect_reassembled_pdu(), again with
the appropriate ATM pseudo-header - and selecting a traffic type should perhaps
be done with heuristics or an ATM-layer preference setting (and ultimately with
a way of specifying per-VC traffic type);

    ERF_TYPE_MC_AAL2 and ERF_TYPE_AAL2 contain a reassembled ATM AAL2 PDU, so
presumably its payload should never be handed to a dissector for an
encapsulation used, as far as I know, only over AAL5, such as LLC
encapsulation;

so I'm not sure whether there should be an ERF preference for ATM (as opposed
to appropriate preferences, heuristics, etc. in the ATM dissector).


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.