Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 2671] ERF dissector defaults to RAW

Date: Fri, 11 Jul 2008 19:45:56 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2671





--- Comment #6 from Guy Harris <guy@xxxxxxxxxxxx>  2008-07-11 19:45:55 PDT ---
I've replaced the "erf.eth" preference with an "erf.ethfcs" preference, which
has "present", "not present", and "maybe present" options; it defaults to
"maybe present", and that value causes the regular Ethernet dissector, which
tries to figure out whether there's an FCS present or not, to be called.  It
doesn't always get the right answer, so "present" and "not present" are still
useful.

NOTE: if the capturing hardware and software know whether the FCS is present,
there should be a flag somewhere in the ERF header to indicate whether it's
present, so you don't have to tell software reading a capture whether it's
present or not.

If you have any captures with AAL2 packets in them, could you either add them
as attachments or send them to me, so I can try to get the ATM dissector to
handle them?  Then we'd have dissectors capable of handling ERF_TYPE_ATM,
ERF_TYPE_AAL2, and ERF_TYPE_AAL5, and can set the ERF dissector up to call
them.


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.